Key Takeaways
- • The UK Financial Conduct Authority (FCA) opened its crypto authorization gateway on 30 September 2026, requiring all crypto exchanges, custodians, and stablecoin issuers to apply for licences by 28 February 2027 or face full enforcement action from 25 October 2027.
- • Unlicensed crypto activity becomes illegal from 25 October 2027; firms that apply on time may continue serving customers during the FCA's approval process, while late applicants can only honour existing contracts with no new customers or deals permitted.
- • The FCA's authorization framework goes beyond anti-money laundering checks and requires all applicants—including those already registered under Money Laundering Regulations—to apply from scratch under the Cryptoassets Regulations 2026 and Financial Services and Markets Act 2000.
- • Permanent minimum capital requirements range between £75,000 and £750,000 depending on firm type and activities; the FCA will judge applicants on consumer protection, asset custody safeguards, market integrity, and financial resilience, with approval not automatic.
- • Firms that do not apply must wind down UK operations entirely by 25 October 2027, creating a hard deadline for the crypto industry to either formalize operations under FCA supervision or exit the British market.
Summary
The FCA's opening of its crypto authorization gateway on 30 September 2026 marks a structural shift in how cryptocurrency businesses operate in the UK. The regulatory framework introduces a two-phase compliance timeline: firms have until 28 February 2027 to file authorization applications under the Cryptoassets Regulations 2026, and all unlicensed crypto activity becomes illegal from 25 October 2027 onwards. According to Dominic Cashman, the FCA's director of authorization, the new regime aims to "give consumers greater protections and firms a clear framework to operate in."
The scope of the authorization requirement is broadly drawn, extending beyond traditional exchange operators to encompass custodians holding customer assets, stablecoin issuers, and firms arranging staking services. Critically, the FCA is not providing a streamlined pathway for firms already registered under the Money Laundering Regulations; all applicants must undergo fresh authorization from the start under the more comprehensive Financial Services and Markets Act framework. The regulatory bar is substantive: the FCA will assess applications based on consumer protection measures, safeguarding of customer assets, market integrity commitments, and financial resilience. Approval is not automatic.
Capital adequacy rules establish a tiered structure with permanent minimum capital requirements ranging from £75,000 to £750,000, depending on the firm's business model and regulated activities. The FCA's guidance creates different outcomes based on application timing: firms that file by the 28 February 2027 deadline may continue acquiring new customers and executing new transactions while their applications are under review. Late applicants face material restrictions—they may only service existing customer contracts and cannot onboard new customers or execute new deals with current ones. Any firm declining to apply must cease UK operations entirely by 25 October 2027.
This regulatory architecture effectively forces the UK crypto industry into a binary choice: formalize operations under FCA supervision with associated compliance costs and capital requirements, or exit the market. The 13-month application window provides sufficient time for serious operators to prepare applications, though the breadth of the FCA's assessment criteria—encompassing consumer protection, asset custody protocols, market conduct, and financial stability—suggests that not all applicants will achieve approval.
The scope of the authorization requirement is broadly drawn, extending beyond traditional exchange operators to encompass custodians holding customer assets, stablecoin issuers, and firms arranging staking services. Critically, the FCA is not providing a streamlined pathway for firms already registered under the Money Laundering Regulations; all applicants must undergo fresh authorization from the start under the more comprehensive Financial Services and Markets Act framework. The regulatory bar is substantive: the FCA will assess applications based on consumer protection measures, safeguarding of customer assets, market integrity commitments, and financial resilience. Approval is not automatic.
Capital adequacy rules establish a tiered structure with permanent minimum capital requirements ranging from £75,000 to £750,000, depending on the firm's business model and regulated activities. The FCA's guidance creates different outcomes based on application timing: firms that file by the 28 February 2027 deadline may continue acquiring new customers and executing new transactions while their applications are under review. Late applicants face material restrictions—they may only service existing customer contracts and cannot onboard new customers or execute new deals with current ones. Any firm declining to apply must cease UK operations entirely by 25 October 2027.
This regulatory architecture effectively forces the UK crypto industry into a binary choice: formalize operations under FCA supervision with associated compliance costs and capital requirements, or exit the market. The 13-month application window provides sufficient time for serious operators to prepare applications, though the breadth of the FCA's assessment criteria—encompassing consumer protection, asset custody protocols, market conduct, and financial stability—suggests that not all applicants will achieve approval.
Go deeper than the headline
Research every firm in this story, track the ones that matter and get the daily briefing — free for 7 days.