What changes and when
The Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026 (SI 2026/102) were made on 4 February 2026. They bring seven cryptoasset activities inside the Financial Services and Markets Act 2000 (FSMA). From 25 October 2027, you must hold FCA authorisation to carry on any of those activities in the UK, or for UK consumers, unless an exemption applies.
The FCA opens its application gateway on 30 September 2026 and the window it has set by direction runs to 28 February 2027. If you are registered with the FCA as a cryptoasset exchange provider or custodian wallet provider under the Money Laundering Regulations, that registration does not convert into FSMA authorisation. You must apply.
Check whether your activities are in scope
The regime covers qualifying cryptoassets: fungible, transferable cryptoassets that are not simply a record of value or contractual rights. Qualifying stablecoins are a subset. Tokenised securities and other cryptoassets that are already specified investments stay under the existing investment rules, though safeguarding them is caught by the new custody activity.
Seven activities become regulated: issuing a qualifying stablecoin in the UK, safeguarding qualifying cryptoassets (custody), operating a trading platform, dealing as principal, dealing as agent, arranging deals, and staking. Each has its own exclusions, so check the Regulated Activities Order article for each one. Activity that is only incidental to selling goods or supplying services, or to a professional practice, is excluded.
Whether you need UK authorisation turns on UK consumers, meaning individuals in the UK acting outside their trade, business or profession. An overseas firm that sells to UK consumers directly, or safeguards or stakes for them, is treated as carrying on the activity in the UK and needs authorisation. An overseas firm that serves only UK institutional customers, or whose UK consumer business goes through a UK-authorised trading platform or principal dealer, does not. The FCA's baseline expectation for an overseas firm that needs authorisation is a UK legal entity. The rules apply UK-wide.
Prepare and submit your application
You apply on the FCA's Connect system for Part 4A permission covering each activity you will carry on. The FCA reviews applications in order of receipt and expects to decide in-window applications before 25 October 2027. An application that lacks the minimum information is rejected without assessment, the fee is refunded, and you are treated as not having applied.
-
1. Map each activity to its Regulated Activities Order article
List everything your business does with qualifying cryptoassets and match each line to one of the seven regulated activities, checking the exclusions. The permissions you ask for decide your application fee, your capital requirement and the rules you will be supervised under.
-
2. Check you meet the permanent minimum capital
The FCA sets a permanent minimum requirement for each activity. It is a threshold condition with no phase-in, so you cannot be authorised for an activity unless you already hold the capital for it. Your own funds requirement may be higher still, based on fixed overheads and K-factors.
-
3. Prepare the application pack
The FCA has published a walkthrough of every question on the form. You need a regulatory business plan, forecasts on the FCA's financial data template, controller and close-links information, senior manager applications, your compliance and financial crime framework, your financial promotions approach, and the activity-specific sections for each permission you seek. The FCA offers free pre-application meetings.
-
4. Decide whether to apply for MLR registration at the same time
If you are not yet registered under the Money Laundering Regulations and need to trade before 25 October 2027, you must still register. You can apply for MLR registration and FSMA authorisation on one form, and the FCA accepts new MLR applications until 31 July 2027. The two are decided separately.
-
5. Budget for the application fee
You pay the application fee for the highest-fee activity you apply for, even if you apply for several activities or combine the application with MLR registration. Periodic fees follow once you are authorised.
-
6. Apply early in the window
The window runs from 30 September 2026 to 28 February 2027. Applying early gives the FCA time to raise questions and you time to fix a rejected submission before the window closes. Applications after 28 February 2027 are accepted but not expedited.
-
7. Keep your MLR registration and controls current
Until the regime starts you must keep complying with the Money Laundering Regulations in full, including keeping your registration details up to date. Applying for authorisation does not pause any existing obligation.
-
8. If you are already authorised, apply for a variation of permission
A firm that already holds FSMA permission for other activities applies to vary its permission to add the cryptoasset activities. Do this inside the window too.
What happens after you apply
What you can do on 25 October 2027 depends on when you applied and where your application stands. If you applied in the window and the FCA has not yet decided, or has refused you but the decision is still open to review or appeal, the saving provision applies. You carry on as before, including taking on new customers, until the application is finally determined. The saving provision ends on 24 October 2029 whatever the state of your application.
If you applied in the window but were refused with no review pending, or you withdrew, or you applied after the window closed, only the transitional provision applies. You may perform contracts that pre-date the regime, you cannot take on new UK business, and you must notify the FCA and tell your counterparties that you are not authorised for the activity. The FCA can vary or cancel the exemption. The transitional provision also ends on 24 October 2029.
If you never applied, neither provision applies. You must run off your UK cryptoasset business before 25 October 2027. A newly established firm may apply at any time, but can only provide regulated cryptoasset services once the regime is live and it is authorised.
Once you are authorised, your MLR registration is replaced by a notification to the FCA. Every other Money Laundering Regulations duty continues.
Rules that apply now and continue
Some rules bind you now and carry on after the regime starts. Promotions of qualifying cryptoassets to UK consumers have been inside the financial promotion restriction since October 2023, with FCA rules in force from 8 October 2023. A promotion must be made or approved by an authorised person, or communicated by an MLR-registered cryptoasset business under its own exemption. That last route ends on 25 October 2027, and firms that rely on a section 21 approver to reach UK customers will then need their own authorisation.
The Travel Rule in the Money Laundering Regulations has applied to cryptoasset transfers since 1 September 2023. Every transfer must carry originator and beneficiary details, and transfers to or from a business outside the UK must carry enhanced details at or above a threshold set in the Regulations. Your other Money Laundering Regulations duties, such as customer due diligence, a nominated officer and suspicious activity reporting, continue throughout.
From 25 October 2027 authorised cryptoasset firms are subject to the FCA Handbook: the Consumer Duty, conduct of business rules, complaints handling with access to the Financial Ombudsman Service, systems and controls, the Senior Managers and Certification Regime in full, client assets rules and regulatory reporting. Financial Services Compensation Scheme cover is not extended to the new activities.
Penalties for getting it wrong, and the draft amendments
From 25 October 2027, carrying on a regulated cryptoasset activity without authorisation or an exemption breaches the general prohibition in section 19 of FSMA. That is a criminal offence under section 23, punishable by imprisonment or a fine, with a defence of all reasonable precautions and all due diligence. Communicating an unlawful promotion of qualifying cryptoassets is a separate offence under section 25 and already applies. From the same date, HM Treasury's explanatory memorandum says that offering a qualifying cryptoasset to the public without an exemption will also be an offence, and a market abuse regime applies to qualifying cryptoassets.
HM Treasury has laid the draft Financial Services and Markets Act 2000 (Cryptoassets) (Miscellaneous Amendments) Regulations 2026 before Parliament. They are not law. If made, they would carve transfers and exchanges of UK-issued qualifying stablecoin out of dealing, arranging and the financial promotion restriction, but not lending and borrowing or exchanges for other qualifying cryptoassets. Do not plan your permissions around the draft until it is made.
If your firm is not yet registered under the Money Laundering Regulations, read the guide to registering a money service business or cryptoasset business for AML supervision first.
Legal basis
Primary legislation and key regulations
Official guidance
FCA - a new regime for cryptoasset regulation (opens in a new tab)
The FCA hub page for the regime, with links to every gateway, transitional and rules page.
fca.org.uk
FCA - how the cryptoasset gateway will operate (opens in a new tab)
Application window, what the form needs, how the FCA prioritises and rejects applications.
fca.org.uk
FCA - cryptoasset regulated activities, FSMA and the FCA Handbook (opens in a new tab)
Which Handbook sourcebooks apply to authorised cryptoasset firms from 25 October 2027.
fca.org.uk
FCA - registration under the MLRs ahead of the new FSMA regime (opens in a new tab)
No automatic conversion, the 31 July 2027 cut-off for new MLR applications, and combined applications.
fca.org.uk
FCA - overview of the cryptoasset regime policy statements (opens in a new tab)
Index of PS26/9 to PS26/13 covering admissions and market abuse, stablecoin issuance, regulated activities, prudential rules and the Handbook.
fca.org.uk
Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026 (opens in a new tab)
SI 2026/102, the regulations that create the regulated cryptoasset activities and the saving and transitional provisions.
legislation.gov.uk
Financial Services and Markets Act 2000 (opens in a new tab)
The general prohibition (section 19), the financial promotion restriction (section 21) and the offences in sections 23 and 25.
legislation.gov.uk
Money Laundering Regulations 2017 (opens in a new tab)
The Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017, including the Travel Rule in Part 7A.
legislation.gov.uk
Money Laundering and Terrorist Financing (Amendment) Regulations 2026 (opens in a new tab)
SI 2026/621, which set the Travel Rule enhanced-information threshold in pounds from 30 June 2026.
legislation.gov.uk