The UK Financial Conduct Authority opened its cryptoasset authorization gateway on September 30, 2026, initiating a five-month application window that will determine which firms can legally operate crypto services in Britain after October 25, 2027. The stakes are quantifiable: of 359 registration...
"We are opening the gateway so that firms can prepare in advance for the new regime. Crypto firms that are serious about operating in the UK should apply now." — Nikhil Rathi, CEO, Financial Conduct Authority
The UK Financial Conduct Authority opened its cryptoasset authorization gateway on September 30, 2026, initiating a five-month application window that will determine which firms can legally operate crypto services in Britain after October 25, 2027. The stakes are quantifiable: of 359 registration applications received since the FCA assumed crypto oversight in 2020, only 47 have been approved — a rejection, withdrawal, or refusal rate exceeding 87%.
The gateway launch follows five finalized policy statements (PS26/9 through PS26/13) published on June 30, 2026, covering market abuse, stablecoin issuance, conduct rules, prudential capital requirements, and handbook integration. Together, these documents create the most comprehensive single-jurisdiction crypto regulatory framework outside the EU's Markets in Crypto-Assets Regulation (MiCA), covering nine regulated activities including trading, dealing, custody, staking, and stablecoin issuance.
Approximately 4.5 million UK adults — 8% of the adult population — hold cryptoassets, according to FCA consumer research from August 2025. The UK cryptocurrency market was valued at approximately $323 billion in 2025. Seventy-two percent of existing crypto holders told the FCA they would increase their purchases if crypto were regulated, suggesting the regime could expand market participation if firms survive the authorization process.
The authorization gateway operates on a fixed schedule. Applications opened September 30, 2026, and close February 28, 2027. Firms that apply during this window can continue operating under transitional arrangements while their applications are assessed. After October 25, 2027, operating a regulated cryptoasset activity in the UK without FCA authorization is unlawful.
Nine activities trigger the authorization requirement: operating a cryptoasset trading platform, dealing in cryptoassets as principal, dealing as agent, arranging deals in cryptoassets, safeguarding (custody), staking, advising on cryptoassets, managing cryptoasset portfolios, and issuing qualifying stablecoins.
Existing FCA registrations under the Money Laundering Regulations (MLRs) do not convert automatically. Every firm must apply for a new authorization under the Financial Services and Markets Act 2000 (FSMA). The FCA has stated that registration — an AML/CTF check — is "deliberately narrower" than the full authorization now required.
The historical approval record is severe. Of 359 total applications received since 2020, 47 were approved. In the FCA's most recent annual reporting period, only 4 of 35 applications from crypto-related firms were approved; 15 were withdrawn and 9 were rejected outright. The regulator has attributed rejections to weak money-laundering controls and submission quality that "didn't include key components necessary for assessment."
Some firms have already exited the UK market rather than face two sequential authorization processes. According to reporting by IndexBox, crypto companies paused or delayed FCA registration efforts to avoid undergoing separate approvals under both the old and new regimes.
On June 30, 2026, the FCA published its finalized regulatory package in five policy statements:
PS26/9 — Admissions & Disclosures and Market Abuse Regime for Cryptoassets (A&D and MARC). Establishes rules for admitting cryptoassets to trading on UK platforms and creates a dedicated market abuse regime mirroring UK MAR (Market Abuse Regulation).
PS26/10 — UK Stablecoin Issuance. Sets backing asset requirements, redemption rules, and safeguarding obligations for qualifying stablecoins issued in the UK.
PS26/11 — Regulatory Perimeter and Conduct Rules. Defines which activities fall within scope and applies the FCA's Consumer Duty framework to cryptoasset firms.
PS26/12 — Prudential Regime for Cryptoasset Firms. Establishes capital, liquidity, and risk management requirements using a K-factor framework adapted from the investment firm prudential regime.
PS26/13 — FCA Handbook Application. Clarifies how existing FCA Handbook provisions (systems and controls, fit-and-proper management, conduct of business) apply to authorized cryptoasset firms.
PS26/12 introduces a K-factor framework that ties capital requirements to the specific risks each firm generates, rather than imposing a flat capital floor. Key K-factors include:
Permanent minimum capital requirements are set at £350,000 for stablecoin issuers. The framework also includes liquid asset requirements, an overall risk assessment process, and public disclosure obligations. Some prudential requirements take effect in October 2027, with certain provisions deferred to January 2028.
The K-SII reduction from 2% to 1% was the most notable concession to industry feedback. According to the FCA's cost-benefit analysis published alongside the policy statements, the original coefficient would have required larger issuers to hold disproportionate capital reserves relative to the risk profile of fully backed stablecoins.
PS26/10 mandates that qualifying stablecoins must be fully backed at all times. Permissible backing assets are divided into two tiers:
Core backing assets — short-term deposits and short-term government debt instruments — are available to all UK stablecoin issuers as the baseline eligible backing pool.
Expanded backing assets are available only to issuers that have notified the FCA of their intent to use them and have demonstrated the requisite skills and competence.
The FCA did not expand permissible backing assets beyond what was proposed in consultation. Notably, multi-currency backing is not permitted, a decision the regulator attributed to the need to "avoid increased volatility of the backing asset pool." Tokenized versions of permitted backing assets may be included in the pool.
The backing asset pool must be held on statutory trust for tokenholders. According to PS26/10, this structure creates fiduciary duties and ring-fences pool assets from the firm's own estate, placing them outside the insolvency estate. This approach differs from MiCA's requirement for segregated client asset accounts and specific custody protocols.
The FCA also simplified the backing asset composition requirement by removing the obligation for firms to estimate redemption forecasts — another change made in response to consultation feedback.
PS26/9 introduces three prohibitions modeled on UK MAR: insider dealing, unlawful disclosure of inside information, and market manipulation. The regime applies to any qualifying cryptoasset admitted to trading — or subject to an application for admission — on a UK qualifying cryptoasset trading platform (QCATP).
The jurisdictional reach extends beyond UK borders. According to the FCA, the prohibitions apply "regardless of whether the activity takes place in the UK or overseas," consistent with the extraterritorial scope of UK MAR for traditional securities.
Firms operating UK trading platforms bear obligations to prevent and detect market abuse. The regime takes effect October 25, 2027, alongside the broader authorization framework.
The UK regime and the EU's MiCA, fully applicable since December 2024, regulate the same industry through materially different architectures:
| Dimension | UK FCA Regime | EU MiCA | |-----------|--------------|---------| | Legal basis | Folds crypto into existing FSMA | Bespoke crypto-specific regulation | | Scope | Includes lending, borrowing, staking | Largely excludes DeFi, lending | | Passporting | No cross-border passporting | Single license covers all EEA | | Stablecoin oversight | Bank of England for systemic issuers | EBA direct supervision for significant tokens | | Client asset protection | Statutory trust / fiduciary duties | Segregated accounts + insurance requirements | | Implementation | October 2027 | Fully effective December 2024 |
The UK's decision to bring crypto lending, borrowing, and staking into regulatory scope addresses activities that MiCA explicitly left unregulated. According to analysis published by Flagright, this makes the UK framework "more stringent, bank-like" in its treatment of crypto firms.
The absence of passporting rights is the most commercially significant structural difference. UK-authorized firms cannot serve EU customers without separate MiCA authorization; MiCA-licensed firms cannot serve UK customers without FCA authorization. Firms operating across both markets face dual compliance costs.
On June 30, 2026, the Bank of England and FCA published a joint approach paper establishing a two-tier stablecoin oversight structure:
Non-systemic stablecoins are regulated solely by the FCA under the standard authorization framework.
Systemic stablecoins — those designated by HM Treasury based on transaction scale, interconnectedness, and substitutability — fall under joint regulation by both the Bank of England and the FCA.
Once HM Treasury designates an issuer as systemic, the Bank of England assumes prudential regulation of backing assets, capital reserves, safeguarding, and failure arrangements. The FCA retains responsibility for consumer protection, market integrity, and conduct. The Bank intends to finalize its Systemic Stablecoin Code by the end of 2026.
No stablecoin issuer has been designated systemic to date. The designation criteria have not been publicly quantified, though the joint paper references "transaction scale" and "substitutability" as key factors.
The UK's crypto authorization gateway represents the largest single regulatory reset for the country's digital asset industry since the FCA assumed anti-money laundering oversight in 2020. The 87% historical failure rate on registration applications — under a regime the FCA describes as "deliberately narrower" than what is now required — signals that full FSMA authorization will filter out a substantial portion of current market participants.
The five-month application window creates a defined timeline. Firms that do not apply by February 28, 2027, lose the transitional right to continue operating. Those that apply face assessment against prudential capital requirements, market abuse obligations, consumer duty standards, and operational resilience expectations imported from the FCA's existing handbook.
The regime's commercial implications extend beyond compliance costs. The absence of passporting means UK authorization is valid only domestically, forcing firms with European operations to maintain parallel MiCA compliance. At the same time, the UK's decision to regulate staking, lending, and borrowing places activities within scope that remain outside MiCA's reach — creating a more comprehensive framework at the cost of higher regulatory burden.
Whether this framework attracts or repels crypto activity from the UK will become measurable after October 2027. The FCA's own consumer research suggests latent demand: 25% of non-holders say regulation would prompt them to enter the market. The question is whether the firms needed to serve that demand can clear the authorization bar.