The UK Financial Conduct Authority opens its cryptoasset authorization gateway on September 30, 2026 — three days from publication — marking the first time trading platforms, custodians, stablecoin issuers, and staking intermediaries will fall under full-scope FCA regulation. The five-month appli...
"This is a significant moment for crypto regulation in the UK. We've created a framework that doesn't force firms to choose between regulatory certainty and room to innovate – this regime means they can have both in a stable, competitive home to build and grow. For consumers, it means firms will be held to similar standards to other financial providers, though we can't regulate away risk." — David Geale, Executive Director of Payments and Digital Finance, FCA
The UK Financial Conduct Authority opens its cryptoasset authorization gateway on September 30, 2026 — three days from publication — marking the first time trading platforms, custodians, stablecoin issuers, and staking intermediaries will fall under full-scope FCA regulation. The five-month application window runs through February 28, 2027, with the mandatory regime commencing October 25, 2027. An estimated 4.2 million UK adults hold crypto assets. The firms that serve them have, until now, operated under limited anti-money laundering registration and financial promotion rules. That changes.
The FCA's regulatory package comprises six policy statements (PS26/9 through PS26/13, plus PS26/18) covering admissions and disclosures, stablecoin issuance, regulated activities, prudential requirements, handbook application, and perimeter guidance. Permanent minimum capital requirements range from £75,000 to £750,000 depending on activity type. Stablecoin issuers must hold backing assets equal to the sum of their on-demand deposit requirement and core backing asset requirement, with a minimum 5% held as on-demand bank deposits. Post-trade transparency reports must be filed within one minute of execution.
The regime's historical conversion data signals what lies ahead: of 391 money laundering registration cases completed by August 2026, the FCA approved 17% and rejected or refused 16%. Two-thirds of applicants withdrew voluntarily. The authorization gateway will filter the UK crypto market from its current loosely supervised state into a tier of firms prepared to meet financial resilience, market integrity, and consumer protection standards comparable to those imposed on traditional financial services.
The authorization window operates on a fixed schedule enacted by HM Treasury under Statutory Instrument 2026/102 (the Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026), published February 4, 2026:
| Milestone | Date | |---|---| | HM Treasury enacts SI 2026/102 | February 4, 2026 | | FCA publishes final rules (PS26/9–PS26/13) | June 30, 2026 | | Pre-application support meetings available | July 2026 onward | | PS26/18 perimeter guidance issued | September 16, 2026 | | Authorization gateway opens | September 30, 2026 | | Application window closes | February 28, 2027 | | MLR applications final deadline | July 31, 2027 | | Regime takes full effect | October 25, 2027 |
Firms already operating under Money Laundering Regulations (MLR) registration — such as Blockchain.com and Avian Labs — receive no automatic conversion. They must submit fresh FSMA authorization applications during the window. Firms that apply within the window can rely on saving provisions to continue operating while the FCA processes their applications.
After October 25, 2027, operating without authorization becomes unlawful.
The FCA defines nine specific cryptoasset activities that require authorization:
Each activity carries distinct prudential and conduct obligations. Firms performing multiple activities face additive capital requirements calculated through K-factor models.
PS26/12 establishes the capital adequacy regime. Own funds requirements are the higher of three measures: a permanent minimum requirement (PMR), a fixed overheads requirement, and an activity-based K-factor requirement.
Permanent Minimum Requirements by activity type:
| Activity | PMR | |---|---| | Entry-level activities | £75,000 | | Mid-tier (trading, custody) | £150,000–£300,000 | | Stablecoin issuance | £750,000 |
Key K-factors:
The settlement float under CASS 17 is set at 2% per client, per cryptoasset class — doubled from the initially proposed 1%.
Enhanced Senior Managers Regime triggers:
PS26/10 imposes specific requirements on qualifying stablecoin issuers operating from a UK establishment. Non-UK issuers whose stablecoins trade on secondary markets do not trigger authorization solely from that trading activity.
Backing asset rules:
Redemption:
Disclosure:
The Bank of England retains joint regulatory authority over systemic stablecoin issuers, according to a separate Bank of England paper published in 2026.
PS26/9 establishes admissions, disclosure, and market abuse rules:
Pre-trade transparency: Required only for large platform operators — those with £10 million or more in average annual revenue. Principal dealers are exempt.
Post-trade transparency: All platforms and principal dealers must publish trade data within one minute of execution.
Qualifying Cryptoasset Disclosure Documents (QCDDs): The FCA removed the fungibility exception from its consultation draft, resulting in an estimated 200% increase in required documents. The regulator projects approximately 250 QCDDs initially, rising to 750 total, with roughly 50 to 150 new filings annually.
Digital Token Identifiers: All QCDDs must carry a mandatory ISO 24165 code.
Retail lending: Mandatory over-collateralization is required. Firms may supplement collateral up to 50% of original market value without additional customer consent. Retail clients may independently top up beyond that 50% threshold.
The regime applies extraterritorially. Non-UK firms require authorization when dealing "directly or indirectly with UK consumers," regardless of where the firm is established. An exemption exists for institutions serving only institutional clients.
This approach diverges from the EU's Markets in Crypto-Assets Regulation (MiCA) in several structural ways:
| Feature | UK FCA Regime | EU MiCA | |---|---|---| | Authorization model | Activity-based territorial test | Member state authorization with passport rights | | Stablecoin classification | Separate from electronic money | E-money tokens integrated into MiCA | | Capital framework | K-factor model with PMRs £75K–£750K | Tiered own-funds requirements | | Cross-border mechanism | No passport; direct UK consumer test | EU-wide passporting |
The absence of passporting means firms authorized by the FCA gain no automatic access to EU markets, and vice versa. Firms operating across both jurisdictions face parallel compliance obligations.
The FCA's historical data on Money Laundering Regulations crypto registrations provides a proxy for what the authorization gateway may produce. Of 391 total MLR cryptoasset cases completed by August 1, 2026:
The 17% approval rate — combined with the 67% withdrawal rate — suggests that a significant majority of firms either could not or chose not to meet even the lower MLR threshold. The FSMA authorization bar is materially higher, incorporating capital adequacy, conduct, governance, and consumer protection requirements that MLR registration did not impose.
The FCA has issued 1,702 consumer alerts and removed over 900 scam websites related to crypto. Investment fraud involving crypto accounted for 66% of total investment fraud reports in 2024, with £649 million in losses, according to FCA enforcement data.
The FCA's September 30 gateway represents the UK's transition from a registration-based anti-money-laundering overlay to a comprehensive regulatory regime for crypto. The framework imposes capital requirements, conduct standards, and transparency obligations that parallel traditional financial services regulation. The historical 17% MLR approval rate, combined with materially higher FSMA authorization standards, implies a contraction in the number of authorized operators. Firms that clear the bar will hold licenses comparable in weight to those of investment firms and payment institutions. Those that do not will lose legal access to UK consumers after October 2027. The economic consequence is a market that trades breadth of participation for depth of regulatory certainty — a structural choice the UK is making three years after the EU reached a similar conclusion with MiCA.