← All stories
🔒

FCA’s UK crypto authorisation gateway and the new regime

The UK Financial Conduct Authority (FCA) opened its crypto authorisation gateway at 7 a.m. UK time on Sept. 30, 2026, a procedural start that does not equate to automatic approval. The framework sets three distinct milestones: the gateway opening (Sept. 30, 2026), the close of the main application window (Feb. 28, 2027), and the legal commencement of the regime (Oct. 25, 2027). Firms that want to continue operating in the UK should file during the main window because a timely, valid application may preserve a different legal position at commencement than a late filing.

The FCA published a 73-page preview of the application that illustrates the scale of information required: business plans, organisational charts, controllers and close links, IT systems, financial forecasts to cover FCA fees, litigation and bankruptcy history, compliance and financial crime frameworks, complaints handling and staff personal dealing policies. The regulator maps nine crypto activities into FSMA permissions, including UK issuance of qualifying stablecoins, safeguarding qualifying crypto assets, arranging for another party to safeguard them, operating a qualifying trading platform, dealing as principal or agent, two types of arranging activity, and qualifying crypto asset staking. Firms must match each proposed permission to the precise activities performed by the legal entity seeking authorisation.

Existing registration under money laundering rules (MLR) does not convert into FSMA authorisation. The new permissions broaden scrutiny from financial crime to governance, market conduct, customer treatment and operational resilience. The FCA warns that an incomplete filing can be rejected and that merely pressing submit at the deadline without the minimum information does not secure the procedural protections associated with a valid, timely application. Where a timely applicant remains under review when the regime starts, a saving provision can permit continuance of specified services while the FCA decides, and this protection can survive an appeal to the Upper Tribunal while unresolved. By contrast, applications submitted after Feb. 28 may be subject only to a transitional route limited to performing what is necessary under pre-existing contracts, with no ability to sign new UK customers.

The regulator also stresses practical limits: authorisation will not automatically resolve commercial challenges such as banking relationships; UK banks may continue to impose crypto payment restrictions even as the regulatory framework takes shape. Dominic Cashman, the FCA’s director of authorisation, said the regime will give consumers greater protections and firms a clear framework. Emma Banymandhub, CEO of The Payments Association, welcomed the opening but urged MLR-registered businesses to treat authorisation as a fresh process and warned that implementation will be particularly important for smaller and growing firms. The gateway therefore starts the hard work: mapping order flow, wallets, custody arrangements, contractual counterparties and the people responsible for each function to ensure accurate permissions and demonstrable compliance.