The UK Financial Conduct Authority (FCA) opened its crypto authorisation gateway at 7 a.m. UK time on Sept. 30, 2026, a procedural start that does not equate to automatic approval. The framework sets three distinct milestones: the gateway opening (Sept. 30, 2026), the close of the main application window (Feb. 28, 2027), and the legal commencement of the regime (Oct. 25, 2027). Firms that want to continue operating in the UK should file during the main window because a timely, valid application may preserve a different legal position at commencement than a late filing.
The FCA published a 73-page preview of the application that illustrates the scale of information required: business plans, organisational charts, controllers and close links, IT systems, financial forecasts to cover FCA fees, litigation and bankruptcy history, compliance and financial crime frameworks, complaints handling and staff personal dealing policies. The regulator maps nine crypto activities into FSMA permissions, including UK issuance of qualifying stablecoins, safeguarding qualifying crypto assets, arranging for another party to safeguard them, operating a qualifying trading platform, dealing as principal or agent, two types of arranging activity, and qualifying crypto asset staking. Firms must match each proposed permission to the precise activities performed by the legal entity seeking authorisation.
Existing registration under money laundering rules (MLR) does not convert into FSMA authorisation. The new permissions broaden scrutiny from financial crime to governance, market conduct, customer treatment and operational resilience. The FCA warns that an incomplete filing can be rejected and that merely pressing submit at the deadline without the minimum information does not secure the procedural protections associated with a valid, timely application. Where a timely applicant remains under review when the regime starts, a saving provision can permit continuance of specified services while the FCA decides, and this protection can survive an appeal to the Upper Tribunal while unresolved. By contrast, applications submitted after Feb. 28 may be subject only to a transitional route limited to performing what is necessary under pre-existing contracts, with no ability to sign new UK customers.
The regulator also stresses practical limits: authorisation will not automatically resolve commercial challenges such as banking relationships; UK banks may continue to impose crypto payment restrictions even as the regulatory framework takes shape. Dominic Cashman, the FCA’s director of authorisation, said the regime will give consumers greater protections and firms a clear framework. Emma Banymandhub, CEO of The Payments Association, welcomed the opening but urged MLR-registered businesses to treat authorisation as a fresh process and warned that implementation will be particularly important for smaller and growing firms. The gateway therefore starts the hard work: mapping order flow, wallets, custody arrangements, contractual counterparties and the people responsible for each function to ensure accurate permissions and demonstrable compliance.
Applications open; support available
The new items add operational detail: applications opened at 7 a.m. UK time on Sept. 30 and the main window closes Feb. 28, 2027, but filing is not automatic approval. The FCA expects to determine many windowed applications before the regime starts on Oct. 25, 2027; critically, eligible firms that file during the period can continue serving customers — including taking new business — while their applications are assessed. Firms filing after Feb. 28 face a more limited transitional route that generally restricts them to pre-existing contracts if their application is still pending.
Additional practical support was also highlighted: the FCA’s Pre Application Support Service has offered free meetings since July to help prospective applicants, on-demand webinars are available, and the regulator’s September perimeter guidance remains a preparation tool. Market responses cited in the reports include CoinCorner launching an insured Bitcoin custody service and more than 50 companies appearing on the FCA cryptoasset register at opening (examples named include Kraken, Ripple, BlackRock and BNY). Media reports also indicate Binance is considering an FCA application, illustrating that overseas firms are preparing potential entry under the new framework. Importantly, registration on the existing list does not guarantee future authorization under the incoming FSMA permissions.