The UK Financial Conduct Authority on September 16 published Policy Statement PS26/18, its final perimeter guidance clarifying which cryptoasset activities require authorization under the country's forthcoming regulatory regime. The authorization gateway opens September 30, 2026 — 13 days from pu...
"We are building a crypto regime that firms, consumers and international partners can trust." — David Geale, Executive Director of Consumers, Payments and Competition, UK Financial Conduct Authority
The UK Financial Conduct Authority on September 16 published Policy Statement PS26/18, its final perimeter guidance clarifying which cryptoasset activities require authorization under the country's forthcoming regulatory regime. The authorization gateway opens September 30, 2026 — 13 days from publication — with applications accepted through February 28, 2027. The full regime takes effect October 25, 2027.
The guidance caps a 14-month rulemaking sprint. Between June and September 2026, the FCA issued five policy statements (PS26/9 through PS26/18) covering trading platforms, intermediaries, custody, stablecoin issuance, capital requirements, and market integrity. The result is the UK's first comprehensive crypto-specific regulatory framework, arriving 16 months after the EU's Markets in Crypto-Assets Regulation (MiCA) became fully applicable and while the US still lacks omnibus legislation after the CLARITY Act failed 49–50 on September 15.
One day after publishing PS26/18, the FCA conducted enforcement actions at three London premises suspected of operating unregistered peer-to-peer crypto trading businesses — the second such crackdown in 2026 — signaling that the regulator intends to enforce the perimeter it just defined. Separately, the UK government announced £500 million ($676 million) and 500 new officers dedicated to economic crime enforcement, with crypto-related laundering explicitly named as a priority.
PS26/18 names five categories of activity that will require FCA authorization once the Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026 take effect on October 25, 2027:
The guidance explicitly clarifies two carve-outs: software development is not itself a regulated activity, and providing information, analytics, or dashboards does not amount to arranging deals. These distinctions reduce compliance uncertainty for infrastructure providers and data firms operating adjacent to regulated markets.
Notably, crypto lending is excluded as a standalone regulated activity, according to analysis from legal observers. This means firms that lend cryptoassets without also conducting one of the five named activities may fall outside the FCA's perimeter — a deliberate scope limitation that contrasts with the EU's broader approach under MiCA.
The FCA's rulemaking output between June and September 2026 was dense:
| Policy Statement | Date | Coverage | |---|---|---| | PS26/9 | June 30, 2026 | Stablecoin issuance rules | | PS26/11 | June 30, 2026 | Regulated cryptoasset activities, conduct requirements, custody, trading platforms, transparency, record-keeping, DeFi | | PS26/12 | June 30, 2026 | Prudential regime: capital, liquidity, risk management | | PS26/18 | September 16, 2026 | Perimeter guidance: which activities fall inside the regime | | Government SI amendments | September 2026 | Targeted legislative exclusions and clarifications |
PS26/11 is the heaviest of the set. It confirms conduct requirements for trading platforms and intermediaries, sets transparency and record-keeping obligations, establishes safeguarding standards for client cryptoassets, and addresses staking and elements of decentralized finance. PS26/12 sets the prudential floor: capital, liquidity, and risk management requirements, with the K-SII coefficient reduced from 2% to 1% following industry feedback that the original calibration overstated operational risk.
The government also made targeted legislative amendments in September 2026, introducing limited exclusions and clarifications regarding the regulatory perimeter. The FCA indicated it will consult on guidance updates in October 2026 to reflect these changes.
The mechanics of the authorization process are structured in three phases:
Phase 1 — Pre-Application (July 2026 onward): The FCA has offered pre-application support since July 2026, allowing firms to engage with the regulator before the gateway opens.
Phase 2 — Application Window (September 30, 2026 – February 28, 2027): Firms that want transitional cover — the ability to continue operating while their applications are reviewed — must file by the February 28 deadline. Late applicants will not receive transitional protections.
Phase 3 — Regime Goes Live (October 25, 2027): From this date, conducting any of the five named activities without FCA authorization will be illegal, subject to criminal and civil enforcement.
A critical operational detail: existing registrations under the Money Laundering Regulations 2017 do not convert automatically. Firms currently registered for anti-money laundering purposes must determine whether their activities fall inside the new perimeter and apply for full authorization separately. As of mid-2024, approximately 44 firms held FCA crypto registrations under the AML regime. The number of firms that will apply for the broader authorization remains uncertain.
PS26/12 introduces a bespoke prudential regime rather than attempting to map crypto firms onto existing banking or investment firm frameworks. Key elements include:
The FCA has stated that a firm's capital requirements will be driven, in part, by the type and combination of cryptoasset activities it undertakes. A custody-only firm will face a different capital calculation than a trading platform that also issues stablecoins.
The timing of the FCA's enforcement activity alongside its rulemaking is not coincidental. On September 17, 2026 — one day after publishing PS26/18 — the FCA announced it had conducted cease-and-desist actions at three London premises suspected of operating unregistered peer-to-peer crypto trading operations. The action was carried out jointly with HM Revenue & Customs and the Metropolitan Police Service on September 10.
This was the second such crackdown in 2026, following similar operations in April. No arrests were announced, but the FCA issued cease-and-desist letters requiring traders to stop participating in unregistered crypto businesses.
The enforcement context is broader than crypto-specific operations. The UK government on September 16 announced £500 million ($676 million) over three years and 500 new officers across police forces, the National Crime Agency, and the Crown Prosecution Service to trace and seize criminal money. The NCA estimates that more than £100 billion moves through UK or British corporate structures for laundering purposes annually, with crypto and fintech explicitly named as channels.
Operation Destabilise, the NCA's ongoing crypto-focused enforcement program, has produced 119 arrests and seized more than £25 million in cash and crypto in under a year, according to the agency.
The FCA's regulatory clarity arrives against an unresolved tension in the UK market: nine major UK banks currently impose limits or outright blocks on customer payments to crypto exchanges, according to industry analysis reported by CrowdFund Insider and CryptoBriefing. Research cited in industry coverage estimates that roughly 40% of UK bank-to-exchange crypto transfers are blocked or delayed.
Banks base these restrictions on internal risk assessments, not any FCA directive or national ban. The FCA's new regime does not mandate that banks process crypto payments. Government policy expects licensed crypto firms to receive fair banking treatment, but banks retain discretionary authority over payment routing.
A UK Parliament inquiry is examining whether banks are unfairly limiting crypto firms' access to banking services — a de-banking issue that mirrors complaints raised by crypto firms in the US and Australia. The outcome of that inquiry, combined with the authorization regime's implementation, may determine whether regulatory clarity translates into operational access.
The UK's regime arrives into a fragmented global landscape:
| Feature | UK (FCA) | EU (MiCA) | US | |---|---|---|---| | Status | Rules finalized, gateway open | Fully applicable since June 2024 | No omnibus legislation; SEC rulemaking | | Approach | Principles-based, integrated into FSMA | Rules-based, standalone regulation | Fragmented across SEC, CFTC, state regulators | | Passporting | UK only | 27 EU member states | N/A | | Stablecoin rules | Issuance requires authorization | EMT/ART classification, reserve requirements | GENIUS Act pending | | DeFi treatment | Elements addressed in PS26/11 | Largely excluded | Unclear | | Lending | Excluded as standalone activity | Covered | Regulated as securities in some cases |
MiCA's passporting advantage — a single license to operate across 27 EU member states — is the feature the UK cannot replicate. Firms licensed in France can serve customers in Germany without additional authorization. UK-authorized firms serve the UK market only, requiring separate licensing for EU or other jurisdictions.
However, the UK framework addresses DeFi more directly than MiCA, which largely excludes decentralized protocols from its scope. The FCA's willingness to engage with staking and certain DeFi activities under PS26/11 positions the UK regime as marginally broader in its perimeter, even if narrower in geographic reach.
The US remains the outlier. Following the CLARITY Act's failure in the Senate on September 15, the SEC has signaled it will proceed with rulemaking under existing authority. The SEC proposed Regulation Crypto Assets and on September 17 granted temporary, conditional relief allowing tokenized US stocks to trade through on-chain automated market makers — piecemeal actions that lack the comprehensive structure of either the UK or EU frameworks.
The FCA's own consumer research paints a mixed adoption picture. According to the FCA's Cryptoassets Consumer Research 2025 report, published in December 2025, UK crypto ownership fell from 12% to 8% year-over-year — a decline from approximately 7 million to 4.5 million holders. However, awareness remained at 91%, and average holdings among remaining owners increased, suggesting a consolidation toward more committed participants rather than a wholesale retreat.
The UK cryptocurrency market was valued at $323 billion in 2025, according to IMARC Group estimates, with projections reaching $578 billion by 2034 at a 6.68% compound annual growth rate. Whether the FCA regime accelerates or constrains this trajectory depends on execution — specifically, whether authorization translates into banking access and whether compliance costs filter out smaller firms, further consolidating the market around well-capitalized incumbents.
The UK's crypto regulatory framework is now structurally complete. The question shifts from "what are the rules" to "who can meet them." The five-month application window that opens September 30 will determine the composition of the UK's authorized crypto market. Firms that clear the authorization threshold gain legal certainty and a defensible compliance posture. Those that do not will face the same enforcement apparatus that raided three London premises this week.
The banking access problem remains the regime's most significant unresolved friction. Regulatory authorization means little if banks continue to refuse payment processing. The parliamentary inquiry into de-banking, the FCA's own enforcement posture, and the behavior of authorized firms under the new regime will determine whether the UK's framework produces a functional market or merely a well-documented perimeter around an inaccessible one.