The UK Financial Conduct Authority published five policy statements (PS26/9 through PS26/13) on June 30, 2026, finalizing the most comprehensive cryptoasset regulatory framework in British financial history. The regime, built on the Financial Services and Markets Act 2000 (Cryptoassets) Regulatio...
"This is the culmination of an extensive series of consultations that have enabled the industry to help shape the incoming regulatory regime to ensure it's fit for purpose — and the FCA deserves a lot of credit for adopting such a collaborative approach." — Nick Jones, CEO, Zumo
The UK Financial Conduct Authority published five policy statements (PS26/9 through PS26/13) on June 30, 2026, finalizing the most comprehensive cryptoasset regulatory framework in British financial history. The regime, built on the Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026 — passed by Parliament on February 4, 2026 — brings exchanges, custodians, stablecoin issuers, lending platforms, staking providers, and select DeFi operators under a single licensing system for the first time.
The authorization gateway opens September 30, 2026. Firms have until February 28, 2027, to submit applications. The regime takes full effect October 25, 2027. Existing Money Laundering Regulations (MLR) registrations do not transfer. Every firm must reapply from scratch.
The FCA's historical rejection rate on crypto AML registrations exceeds 85%. Whether the regulator can process what is expected to be a significantly larger volume of applications under expanded requirements — within a five-month window — remains an open question.
The June 30 package comprises five documents, each addressing a distinct regulatory layer:
PS26/9 — Admissions, Disclosures, and Market Abuse: Establishes trading venue admission standards, issuer disclosure obligations, a digital token identifier standard, and a dedicated market abuse regime for qualifying cryptoassets. Withdrawal rights notifications were strengthened relative to the consultation draft.
PS26/10 — Stablecoin Issuance: Finalizes reserve composition, redemption timelines, and capital requirements for fiat-backed stablecoin issuers. The capital requirement was reduced from 2% to 1% of issued value after industry feedback. Backing asset composition requirements were simplified by removing the obligation to estimate redemption forecasts. Intragroup custody is permitted subject to safeguards.
PS26/11 — Regulated Cryptoasset Activities: Sets conduct-of-business obligations, client asset protections, operational resilience requirements, and activity-specific rules for trading platforms, intermediaries, lending and borrowing services, custodians, and staking providers.
PS26/12 — Prudential Regime: Introduces capital, liquidity, and risk management requirements through two new FCA Handbook sourcebooks (COREPRU and CRYPTOPRU). Adopts a K-factor framework with the K-SII coefficient fixed at 1%, down from the proposed 2%.
PS26/13 — FCA Handbook Application: Maps existing cross-cutting obligations — including the Consumer Duty, COBS, SM&CR, and regulatory reporting — onto cryptoasset firms.
The regime covers exchanges, custodians, stablecoin issuers, staking firms, lending and borrowing providers, and certain decentralized finance operators. DeFi-specific rules remain under development; the FCA has indicated further consultation.
The regulatory calendar is fixed:
| Date | Milestone | |------|-----------| | May 11, 2026 | Pre-application meeting requests open | | July 2026 | Pre-Application Support Service (PASS) meetings begin | | September 30, 2026 | Authorization gateway opens | | February 28, 2027 | Gateway closes | | October 25, 2027 | Regime takes full effect |
PASS meetings are free and optional. Firms present business models, receive feedback on regulatory expectations, and can seek guidance before formal submission. The FCA case officer assigned to a PASS meeting will outline requirements and signpost relevant guidance.
Existing MLR-registered firms receive no automatic conversion. Every cryptoasset firm operating in the UK must submit an entirely new application or amend existing financial services permissions. There is no grandfather clause.
The FCA's track record on crypto applications is restrictive. Since the MLR registration requirement took effect in January 2020, the regulator has rejected or withdrawn over 85% of applications, according to CoinDesk. Approvals did accelerate in the year to April 2026 — 13 registrations were granted, more than double the 2024 figure — while rejections fell from nine to one. Total applications also declined, from 27 to 22, suggesting a deterrent effect from historical attrition rates.
The stablecoin regime operates on a two-tier basis. The FCA supervises all qualifying stablecoin issuers operating from UK establishments. If HM Treasury designates an issuer as "systemic," the Bank of England assumes joint regulatory oversight.
The Bank of England and FCA published their joint supervision framework on June 30, 2026. The Bank's rules target financial stability risks arising from stablecoins used at scale in retail and corporate payments. Sterling-denominated systemic stablecoins face additional Bank of England requirements, with a draft Code of Practice open for comment until September 22, 2026. Final rules are expected by end-2026.
Key stablecoin provisions under the FCA regime:
Non-UK-issued stablecoins can circulate in the UK market, a provision the industry has described as commercially pragmatic.
PS26/12 introduces two new FCA Handbook sourcebooks — COREPRU and CRYPTOPRU — establishing the prudential framework for cryptoasset firms.
A firm's capital requirement is the highest of three components:
The K-factor regime mirrors the UK's Investment Firms Prudential Regime (IFPR) in structure. The K-SII coefficient was fixed at 1%, halved from the 2% proposed in consultation. The FCA accepted industry submissions that the original calibration overstated operational risk relative to stablecoin backing, trust, and custody safeguards.
Firms conducting multiple regulated activities must aggregate applicable K-factors. Annual stress testing is mandatory, with internally designed models submitted to the FCA for review.
PS26/9 establishes, for the first time in the UK, a dedicated market abuse regime for cryptoassets. The framework covers insider dealing, market manipulation, and unlawful disclosure of inside information related to qualifying cryptoassets traded on authorized platforms.
Issuers face disclosure obligations modeled on existing securities regulation. Trading venues must apply due diligence and admission criteria before listing tokens. The FCA specified a digital token identifier standard — a technical requirement absent from the consultation drafts — to facilitate surveillance and cross-platform monitoring.
The UK and EU have taken fundamentally different architectural approaches.
| Dimension | UK (FCA) | EU (MiCA) | |-----------|----------|-----------| | Legal basis | Integrated into FSMA 2000 | Standalone regulation | | Approach | Principles-based ("same risk, same outcome") | Prescriptive, activity-specific | | Passporting | None — UK-only license | Pan-EU passporting | | Timeline | Effective October 2027 | Fully applicable since December 2024 | | Consumer duty | UK Consumer Duty applies (outcomes-based) | MiCA conduct rules (less extensive) | | Stablecoin reserves | Up to 70% government bonds | 100% liquid assets | | Stablecoin capital | 1% of issued value | Varies by class | | DeFi | Further consultation pending | Under targeted review | | Global liquidity access | Overseas venue access preserved | More restrictive |
The UK's principles-based model places greater discretion in the hands of the FCA but provides less cross-border portability. MiCA's passporting mechanism allows a single license to cover 27 EU member states. Firms operating in both jurisdictions must obtain separate authorization in each.
MiCA has been fully applicable since December 2024. As previously reported by webthreepedia, MiCA enforcement has locked out approximately 75% of EU crypto firms. The UK regime does not take effect until October 2027, giving the FCA nearly three years more lead time — but also leaving the UK market in a regulatory gap while EU and US frameworks mature.
Industry response has been mixed. Institutional players and compliance-oriented firms have praised the framework's clarity and its preservation of global liquidity access through overseas trading venues.
David Geale, the FCA's executive director of payments and digital finance, stated that the regulator has "created a framework that doesn't force firms to choose between regulatory certainty and room to innovate."
Zumo CEO Nick Jones, while crediting the FCA's collaborative approach, warned that the rules mark "the end of an era: of offshore provision, of start-up style business processes, and of unregulated business models."
The primary concern centers on the authorization bottleneck. The five-month application window (September 2026 to February 2027) must accommodate what could be hundreds of fresh submissions from an industry that currently has fewer than 60 MLR-registered firms. The FCA's historical 85%+ rejection rate — while improving — signals the bar remains high.
According to CoinDesk, "huge compliance hurdles still threaten the rollout." Firms must now satisfy not only AML requirements but also prudential standards, conduct rules, Consumer Duty obligations, SM&CR governance, operational resilience mandates, and annual stress testing. The aggregate compliance cost for smaller firms is expected to be substantial.
The UK crypto market was valued at approximately $344 billion in 2026, according to market research estimates. Crypto ownership among UK adults reached 24% in 2025, up from 18% in 2024, according to Forbes Advisor UK — the largest annual jump of any surveyed country.
The FCA's June 30 publication closes three years of policy development and positions the UK as the third major jurisdiction — after the EU and US — to establish a comprehensive cryptoasset regulatory framework. The regime's principles-based architecture and global liquidity provisions differentiate it from MiCA's prescriptive model.
The execution risk is concentrated in the authorization gateway. The FCA must process a potentially large volume of complex applications within five months, using a framework that expands requirements far beyond the AML-only regime that already saw 85% of applicants fail. The PASS pre-application service and the regulator's improved recent approval rates suggest awareness of the bottleneck, but the system has not been tested at scale.
For the UK's $344 billion crypto market and its 24% adult ownership rate, the October 2027 deadline is now fixed. Firms that do not apply by February 28, 2027, will lose the right to operate legally in the UK. The countdown, as Dentons noted on July 16, has started.