FCA Guidance Lands Two Weeks Before UK Crypto Authorization Window Opens

The Financial Conduct Authority has published detailed perimeter guidance explaining how its new crypto rulebook will apply, just days before firms can begin applying for authorization. The guidance identifies the regulated activities that will require FCA approval, including issuing qualifying stablecoins, operating trading platforms, dealing and arranging transactions, safeguarding cryptoassets, and arranging staking. The authorization application window opens on September 30, 2026 and closes on February 28, 2027, with the regime itself due to take effect on October 25, 2027.

The FCA and government changes extend the regime’s reach beyond UK-based companies: overseas firms that deal with, arrange for or safeguard cryptoassets for UK retail customers are treated as carrying on business in the UK and therefore must seek authorization. Legal advisers highlighted that the usual overseas persons exclusion does not apply for these retail-facing activities. Two limited exceptions remain: purely institutional business from abroad and firms that access UK customers only via a UK-authorised dealer or platform.

Timing matters because applications submitted within the September–February window benefit from statutory saving provisions that allow firms to continue operating while the FCA assesses their applications. Firms that miss the February 28 cut-off can still apply, but they will not have that transitional cover and may be constrained to servicing existing contractual arrangements rather than onboarding new customers or entering new business before October 25, 2027. The FCA has also said early applications do not produce early authorizations; permissions to commence will only be granted to take effect from the regime’s start date.

Several issues remain unresolved and will be the subject of further consultation. The government and FCA plan an October consultation on topics including UK qualifying stablecoins, proprietary trading and market-making, some technology providers, decentralised protocols, safeguarding involving central securities depositories, and financial promotions. The regulator has said it will apply a case-by-case approach to DeFi, where it will reach protocols with an "identifiable controlling entity" — a concept the FCA has not defined. Legal advisers and practitioners have given examples of parties likely to qualify for control, such as foundations or companies overseeing development, teams with upgrade authority, entities holding concentrated governance power or treasury assets, and operators of user-facing interfaces.

The perimeter guidance completes a rapid sequence of steps that began with legislation in February, an FCA consultation in April and final rules in June. The Bank of England will supervise systemic stablecoins and in June set a £40 billion issuance cap for those instruments. Observers contrast the UK’s fixed statute, rulebook and timetable with the U.S. picture after the Senate declined to advance the Clarity Act, leaving crypto oversight there to agency-level approaches. The new UK framework is likely to push firms making long-term location decisions to weigh the compliance obligations against the benefits of onshoring to maintain direct access to UK retail customers.