UK Cryptoasset Regulation: The 2026 Rules and 2027 Implementation

The United Kingdom has now created the legal foundation for a comprehensive cryptoasset financial-services regime, but the new framework is not yet fully in force.

The Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026 were made on February 4, 2026. They create new regulated activities covering areas such as operating cryptoasset trading platforms, dealing and arranging, safeguarding, staking and issuing qualifying stablecoins.

The main regime is scheduled to come into force on October 25, 2027.

Before then, firms face an important implementation period. The FCA will accept applications for the new cryptoasset permissions from 7:00am on September 30, 2026 until February 28, 2027.

At the same time, today's rules have not disappeared.

Cryptoasset firms can already face:

• anti-money-laundering registration requirements;
• financial-promotion rules;
• Travel Rule obligations;
• existing FSMA requirements where another regulated financial product or service is involved.

This creates one of the most important distinctions in UK crypto regulation:

FCA registration, lawful crypto advertising and future FSMA crypto authorisation are not the same thing.

A platform saying it is “FCA registered” may currently mean that the entity is registered under the Money Laundering Regulations for relevant cryptoasset activity.

That does not automatically mean the firm already holds the future permissions required to operate a regulated cryptoasset trading platform, safeguard qualifying cryptoassets, issue a qualifying stablecoin or provide another activity that enters the FSMA perimeter in October 2027.

The UK's crypto regime is moving into the FSMA framework

The new regime uses the UK's existing financial-services architecture rather than creating a completely separate crypto regulator.

The Financial Conduct Authority will supervise firms carrying on the new regulated cryptoasset activities.

The 2026 Regulations amend the existing FSMA framework and Regulated Activities Order to create new activities relating to cryptoassets.

This means crypto regulation increasingly sits alongside familiar UK financial-services concepts such as:

• authorisation;
• regulated activities;
• prudential standards;
• conduct requirements;
• safeguarding;
• Consumer Duty;
• Senior Managers and Certification Regime;
• operational resilience;
• market abuse;
• financial promotions.

For users, the regulatory question therefore becomes more specific.

Instead of asking:

Is crypto regulated in the UK？

ask:

Which legal entity provides this service, which regulated activity is it carrying on, and what permission does that entity hold？

The main regime starts on October 25, 2027

The commencement date is written directly into the 2026 Regulations.

Subject to provisions needed earlier for implementation, the Regulations come into force on:

October 25, 2027

That date matters because it separates:

pre-commencement preparation

from

full regulated operation under the new FSMA crypto regime.

The FCA published a major package of final rules and guidance on June 30, 2026. Those rules are designed to apply to cryptoasset firms that receive the required FSMA permissions when the regime begins.

So the existence of final FCA rules in 2026 does not mean every rule is already binding on every crypto firm today.

The date attached to the requirement still matters.

The implementation timeline

The current transition can be summarized as follows:

Each milestone means something different.

Regulations made is not the same as regime commenced.

Application submitted is not the same as authorisation granted.

MLR registered is not the same as authorised under FSMA for the new cryptoasset activities.

The application window is now fixed

The FCA says firms can apply for authorisation or vary existing FSMA permissions between:

September 30, 2026 and February 28, 2027.

Existing firms are encouraged to apply early in the window.

This is important because firms that submit poor-quality applications, apply too late or fail to obtain the necessary permissions may be unable to continue carrying on the relevant cryptoasset activities once the regime begins.

A platform should therefore not market:

“Application submitted”

as equivalent to:

“FCA authorised under the new cryptoasset regime.”

Those are different stages.

For current research, useful status fields include:

• not applied;
• application planned;
• application submitted;
• application under review;
• authorisation granted;
• application refused;
• transitional run-off.

Existing MLR registration does not convert automatically into FSMA authorisation

The UK has required relevant cryptoasset businesses to register with the FCA for anti-money-laundering supervision under the Money Laundering Regulations since 2020.

That remains important.

But MLR registration primarily concerns financial-crime obligations.

The future FSMA regime is much broader.

The FCA has explicitly told currently MLR-registered firms that they must prepare for new requirements involving areas such as:

• market conduct;
• customer treatment;
• senior leadership;
• prudential standards;
• operational resilience.

A firm with strong AML controls therefore starts with useful compliance infrastructure.

It does not automatically satisfy the new authorisation test.

The correct description in 2026 is:

MLR-registered cryptoasset firm

unless the company separately holds another relevant FSMA authorisation.

It should not be shortened to:

FCA licensed crypto exchange

without explaining the permission.

FSMA-authorised firms also need to check their permissions

A business already authorised under FSMA is not automatically authorised for the future cryptoasset activities either.

Existing financial-services firms will need to consider whether they must apply for a variation of permission.

For example, a company already authorised to conduct traditional financial activities may want to add:

• cryptoasset dealing;
• arranging;
• safeguarding;
• staking;
• operating a trading platform.

The fact that the company already has an FCA authorisation reduces neither the need to map the new regulated activity nor the need to obtain the correct permission.

Authorisation must match the service.

What activities will enter the new regulated perimeter？

The 2026 Regulations create several important regulated activities.

They include areas such as:

• issuing qualifying stablecoins;
• safeguarding qualifying cryptoassets;
• operating a qualifying cryptoasset trading platform;
• dealing in qualifying cryptoassets as principal;
• dealing in qualifying cryptoassets as agent;
• arranging deals in qualifying cryptoassets;
• qualifying cryptoasset staking.

The framework also creates designated activities relating to areas such as:

• public offers of relevant qualifying cryptoassets;
• admission of cryptoassets to trading.

These categories matter because a global crypto platform often combines several of them behind one interface.

A user can:

• buy a token;
• hold it in custody;
• stake it;
• trade it;
• receive an offer for a newly admitted asset;

without noticing that each function can raise a separate regulatory question.

One crypto licence will not necessarily cover every activity

The future system is permission-based.

That means a firm's regulatory status should not be recorded simply as:

Authorised: Yes

A more useful structure is:

The exact legal text and FCA record should control.

A company authorised for safeguarding should not automatically be described as authorised to issue a stablecoin.

A stablecoin issuer should not automatically be described as licensed to operate an exchange.

The FCA published final rules in June 2026

On June 30, 2026, the FCA published a major package of policy statements covering the future regime.

The package includes rules and guidance on areas such as:

• admissions and disclosures;
• cryptoasset market abuse;
• qualifying stablecoin issuance;
• regulated cryptoasset activities;
• prudential requirements;
• application of the FCA Handbook.

This means the future UK framework is no longer only an outline from Treasury consultation papers.

Much of the FCA rule architecture has now been published.

The important remaining distinction is timing:

Final rules published does not mean full regime already commenced.

Stablecoin issuance will become a regulated activity

The 2026 Regulations create a specific regulated activity for issuing a qualifying stablecoin in the UK.

The activity includes components such as:

• offering;
• redemption;
• maintaining the stable value of the qualifying stablecoin.

The FCA's final stablecoin rules address matters including:

• backing assets;
• safeguarding of backing assets;
• redemption;
• holder disclosures.

This is more specific than treating stablecoins simply as another type of cryptoasset listed on an exchange.

The issuer's obligations need to be analysed separately from the exchange or wallet distributing the token.

Stablecoin backing assets receive dedicated safeguards

The FCA's final rules include requirements around the assets supporting UK-issued qualifying stablecoins.

The framework includes a statutory trust structure for backing assets and rules addressing reserve composition and safeguarding.

The purpose is to create a clearer connection between:

stablecoins outstanding

and

assets supporting the redemption promise.

For users, the relevant questions include:

• Who is the authorised issuer？
• What assets back the stablecoin？
• How are those assets held？
• What redemption right exists？
• What fees and timing apply？

The fact that a stablecoin trades at £1 or $1 on an exchange does not by itself answer any of those questions.

Redemption is different from exchange liquidity

A user holding a stablecoin can potentially have two distinct exit routes.

Secondary-market sale

The holder sells the token through an exchange.

The price depends on:

• order-book liquidity;
• spread;
• buyer demand.

Issuer redemption

The holder uses the issuer's redemption process.

The result depends on:

• eligibility;
• redemption rules;
• identity checks;
• settlement terms.

Those mechanisms should not be confused.

An exchange price can move away from par temporarily even if formal issuer redemption remains available.

Likewise, a stablecoin issuer can remain functional while an exchange holding the token experiences an operational problem.

Treasury is still refining the stablecoin boundary

The 2026 regime is already made, but Treasury continued adjusting parts of it during the implementation period.

In September 2026, HM Treasury laid legislation amending the Cryptoassets Regulations.

One major issue concerns the interaction between:

• qualifying stablecoins;
• cryptoasset dealing and arranging;
• future payments regulation.

The government wants to avoid requiring stablecoin payment businesses to obtain unnecessarily overlapping permissions while a broader UK payments reform is still being developed.

That creates another important research rule:

Do not freeze the UK stablecoin perimeter based on an early 2026 draft or consultation.

Use the legislation and current Treasury/FCA implementation material applicable to the relevant date.

Stablecoin payment services and stablecoin lending are not the same thing

Treasury's 2026 amendments also illustrate why product-level analysis matters.

The government has proposed removing certain UK-issued qualifying stablecoin payment transactions from some dealing and arranging activities as the payments regime develops.

But lending and borrowing involving stablecoins remain a separate risk area.

A customer using a stablecoin for:

payment

is not taking the same risk as a customer placing it into:

lending

or:

yield.

The underlying token can be identical.

The economic and regulatory service is different.

Cryptoasset custody will become a regulated FSMA activity

Safeguarding qualifying cryptoassets is another major part of the future framework.

The FCA's 2026 rule package includes safeguarding requirements for cryptoasset custodians.

Custody analysis should examine more than whether a provider says it uses cold wallets.

Useful questions include:

• Which legal entity safeguards the asset？
• Who controls the keys？
• How are customer assets separated？
• What records show customer entitlement？
• What happens after insolvency？
• Can a third party hold the assets？
• What does the customer agreement say about return？

A custody permission regulates the provider's role.

It does not guarantee that the cryptoasset itself retains value.

Custody and staking should remain separate

A user can hold an asset in ordinary custody and later place it into staking.

That can change the risk.

Staking can introduce:

• validator risk;
• slashing;
• lock-up;
• unbonding;
• third-party dependencies.

The new UK framework recognizes staking as a distinct regulated cryptoasset activity within the relevant scope.

That is a good example of why one generic “crypto licence” is inadequate.

The platform may need different permissions for:

holding the customer's asset

and

providing the staking service.

Trading platforms will face admissions and market-abuse rules

The UK regime also addresses the quality and conduct of the market itself.

The FCA's final framework includes:

• admissions and disclosure requirements;
• due diligence for assets admitted to trading;
• market-abuse controls.

This moves UK crypto regulation beyond the question:

“Is the exchange holding customer assets safely？”

It also asks:

How are assets admitted to the platform, and how is manipulation monitored？

That is a major shift toward conventional financial-market supervision.

Cryptoasset market abuse will become a formal regulatory focus

Crypto markets can present risks including:

• insider dealing;
• manipulation;
• misleading information;
• coordinated trading.

The FCA's 2026 policy package creates a more explicit market-abuse framework for cryptoassets within the new regime.

Trading platforms will need controls designed for those risks.

For users, regulation does not mean that every unusual price move is manipulation.

It means providers and regulators have a clearer framework for identifying and responding to potentially abusive conduct.

Prudential requirements will also apply

The future regime includes dedicated prudential requirements for cryptoasset firms.

These are intended to ensure firms maintain adequate financial resources relative to their business and risk.

Prudential regulation is different from Proof of Reserves.

A PoR system may attempt to show crypto assets relative to customer liabilities at a snapshot.

Prudential regulation considers broader questions about the firm's own resilience and ability to continue operating.

Both can matter.

They answer different questions.

Consumer Duty will extend into the new regime

The FCA's policy framework applies important parts of the existing Handbook to authorised cryptoasset firms.

This includes the Consumer Duty where applicable.

That means regulation increasingly focuses on outcomes such as:

• whether customers understand products;
• whether support is adequate;
• whether communications are clear;
• whether products provide fair value within the regulatory framework.

A firm cannot comply merely by displaying a risk warning and assuming every other customer outcome is the user's problem.

The broader customer journey matters.

The Senior Managers and Certification Regime will matter too

The new framework also brings senior-management accountability into crypto regulation.

The Senior Managers and Certification Regime assigns clearer responsibility within regulated firms.

That matters because a global crypto exchange can otherwise have complex structures where it is difficult to identify who is responsible for:

• custody;
• market operations;
• financial crime;
• technology;
• customer treatment.

The FSMA approach moves UK crypto businesses closer to the governance structure expected across the wider financial-services sector.

Operational resilience becomes part of the compliance model

Crypto firms depend heavily on technology.

A platform can have adequate assets and still harm customers through:

• outages;
• cyber incidents;
• broken withdrawals;
• failed reconciliations;
• third-party service failures.

The FCA's 2026 framework therefore includes operational-resilience requirements and guidance.

This is particularly important for exchanges operating 24/7.

An outage during a high-volatility period can create serious customer harm even if no assets are stolen.

Financial promotions are already regulated today

One of the biggest mistakes in describing the UK transition is to act as though consumer-facing crypto rules begin in 2027.

They do not.

The UK cryptoasset financial-promotion regime has applied since October 2023.

Relevant crypto promotions to UK consumers must use a lawful route.

Unauthorized promotions can breach section 21 of FSMA and can amount to a criminal offence.

The FCA has actively supervised these rules.

So an overseas exchange cannot say:

“The full crypto regime does not begin until 2027, therefore our UK marketing is currently unregulated.”

That is incorrect.

The financial-promotion regime reaches websites and apps

The FCA takes a broad view of cryptoasset financial promotions.

Relevant communications can include:

• websites;
• mobile apps;
• social-media content;
• advertisements;
• influencer content;
• customer onboarding journeys.

The regulatory question is not limited to a traditional paid advertisement.

If a communication invites or induces a UK consumer to engage in qualifying cryptoasset activity, the promotion rules may be relevant.

This is especially important for overseas platforms whose websites remain globally accessible.

The current promotion regime includes a 24-hour cooling-off period

The FCA's cryptoasset financial-promotion rules include several important “back-end” customer-journey controls.

These include:

• client categorisation;
• personalised risk warnings;
• appropriateness assessments;
• a 24-hour cooling-off period for relevant direct-offer financial promotions.

The cooling-off period is not simply a website banner.

The consumer must be given time to reconsider before proceeding to the relevant direct-offer promotion.

At the end of the period, the option to proceed should not be designed to overwhelm the option to leave.

Appropriateness does not mean FCA recommends the investment

An appropriateness assessment tests aspects of whether a consumer understands the relevant risks.

Passing that assessment does not mean:

• FCA recommends the token;
• the exchange guarantees the investment;
• the asset is suitable for every objective;
• the customer cannot lose money.

It is a regulatory control inside the customer journey.

It is not an investment endorsement.

Firms have struggled with the promotion rules

The FCA's supervisory reviews have identified both good and poor practice.

Issues have included how firms implement:

• cooling-off periods;
• risk warnings;
• customer categorisation;
• appropriateness assessments.

This is useful because it shows the promotion regime is not only theoretical.

FCA supervision has focused on how the rules actually work inside the customer journey.

A compliant-looking homepage is not enough if the onboarding flow undermines the intended customer protections.

There are several lawful routes for crypto promotions

The financial-promotion regime is separate from the future crypto FSMA authorisation framework.

Today, a crypto promotion to a UK consumer can need to fall within one of the lawful routes.

For example, relevant communications can involve:

• an FCA-authorised person;
• an MLR-registered cryptoasset firm communicating its own qualifying promotion;
• an appropriately approved promotion;
• an applicable exemption.

The exact route needs to be checked against the current rules.

That is why:

promotion permission

and

permission to operate the crypto service

should not be recorded as one thing.

The future regime changes how financial promotions interact with authorisation

Once the new regime commences, the relationship between authorisation and financial promotions changes.

Firms authorised under FSMA for relevant cryptoasset activities will operate inside the broader FCA Handbook framework.

Treasury is also adjusting the financial-promotion perimeter to keep it aligned with the new regulated activities and stablecoin arrangements.

For researchers, historical promotion arrangements therefore need a date.

A route available to a firm in 2026 may not describe its position after October 2027.

Overseas firms also need UK authorisation analysis

An EU MiCA authorisation does not automatically permit a platform to provide regulated cryptoasset activities in or to the United Kingdom.

The UK is outside the European Union and has its own framework.

Likewise, a licence from:

• Dubai;
• Singapore;
• Hong Kong;
• another offshore jurisdiction;

does not automatically satisfy UK requirements.

An international platform should identify:

• the entity serving UK customers;
• the activity provided;
• the relevant UK permission;
• the lawful marketing route.

Website accessibility is not regulatory permission.

The UK regime has an international-firm approach

The FCA has published guidance for international cryptoasset firms as part of its 2026 implementation package.

That reflects a practical reality.

Many large crypto exchanges operate globally through group structures.

A UK-facing service can involve:

• an overseas parent;
• a UK subsidiary;
• offshore custody;
• international technology systems.

The FCA's focus remains on whether the business providing the regulated service in or to the UK meets the UK framework.

A global licence portfolio does not substitute for that analysis.

Application does not guarantee authorisation

The FCA application window begins on September 30, 2026.

A company can therefore soon state:

“We have applied for UK crypto authorisation.”

That is not the same as:

“We are authorised.”

The FCA can:

• reject an incomplete application;
• assess it;
• request information;
• refuse authorisation;
• grant permission with an appropriate scope.

A research database should keep application status separate from authorisation status.

The transition provision is a run-off mechanism, not temporary full authorisation

This is one of the most important parts of the 2027 transition.

Treasury created a transitional provision for certain firms that do not have the required permission when the new regime begins.

But this mechanism is designed for orderly run-off and exit.

It is not a general temporary licence to keep growing the UK business.

An eligible firm using the transitional provision can carry on relevant new cryptoasset regulated activities only to the extent necessary to perform pre-existing contracts.

It cannot:

• enter new contracts with new UK customers;
• enter new contracts with existing UK customers.

The purpose is to allow an orderly exit rather than abruptly abandoning customers.

The run-off period can last up to two years

The transitional provision begins when the new regime commences.

Eligible firms can receive up to a two-year period to wind down the relevant UK business.

That does not mean every firm automatically gets two years.

The FCA has powers relating to the exemption and can impose conditions or alter its scope under the framework.

Firms using the provision also need to notify affected customers and explain that they are not authorised under the new regime.

That disclosure is especially important.

A user should not mistake a firm legally running off old contracts for a fully authorised crypto business.

Firms that never apply can lose access to the transition mechanism

The transitional provision is not an automatic safety net for every existing crypto business.

The FCA explains that firms with existing UK business that fall within the new regime but do not apply for authorisation or variation before commencement will not be eligible for the run-off provision.

Those firms are expected to exit the UK market before the new regime begins.

This creates a strong incentive to address authorisation early.

A company cannot simply ignore the application process and assume it can continue for another two years after October 2027.

Firms with pending applications are treated differently

If a firm submitted a valid application during the application period and the FCA has not completed the assessment when the regime commences, its position is different from a firm that never applied.

The statutory and FCA transition arrangements distinguish several application outcomes.

That is why provider databases should avoid one generic status called:

Pending UK licence

Useful fields include:

• applied within window;
• application pending;
• authorisation granted;
• refused but review open;
• refused and entering run-off;
• withdrawn and entering run-off;
• no valid application.

Those statuses create materially different customer outcomes.

Firms in run-off face promotion restrictions too

A firm using the transitional run-off mechanism cannot continue marketing to UK consumers as though it were an ordinary operating provider.

The FCA says financial promotions during run-off can be communicated only where necessary for performance of pre-existing contracts.

That aligns with the purpose of the regime:

protect existing customers while the business exits

rather than:

allow the firm to continue acquiring customers without authorisation.

Customers should be told when a firm is relying on run-off

The transition rules require relevant customer notification.

A firm using the provision needs to tell parties to pre-existing contracts that:

• it is using the transitional provision;
• it is not FCA-authorised under the new regime.

The notification also needs to address material changes in areas such as:

• protection of assets;
• dispute mechanisms;
• compensation schemes.

This is important consumer information.

The platform branding may look unchanged while the regulatory status of the account has materially changed.

Authorisation does not guarantee compensation

The new UK regime increases regulatory oversight.

It does not make crypto investment risk disappear.

Even an authorised firm can be associated with losses caused by:

• falling token prices;
• illiquid markets;
• user mistakes;
• scams outside the platform;
• blockchain failures.

The future framework also should not be summarized as:

“All crypto held with an FCA-authorised company is government insured.”

Protection depends on:

• regulated activity;
• custody arrangements;
• cause of loss;
• applicable complaint or compensation mechanism.

Those questions need separate analysis.

FSCS protection should never be assumed from the FCA logo alone

A common financial-services misconception is that FCA authorisation always means every customer product is protected by the Financial Services Compensation Scheme.

That is not a safe assumption for cryptoassets.

Whether any compensation route exists depends on the product, activity and relevant legal framework.

For a specific exchange or custodian, users should check:

• the FCA record;
• customer agreement;
• Financial Ombudsman Service availability where relevant;
• FSCS treatment where relevant.

Do not infer protection from the regulator's logo.

Stablecoins and payments are still being coordinated

One of the remaining implementation challenges concerns stablecoins used for payments.

Treasury wants UK-issued qualifying stablecoins to integrate with the future payments regime without forcing firms into duplicative authorisation structures.

The September 2026 amendments continue refining this boundary.

This means stablecoin research in the UK should separate:

stablecoin issuance

stablecoin custody

stablecoin trading

stablecoin payment services

stablecoin lending

They can involve different regulated activities.

The same token can appear in all five contexts.

A service map is more useful than a token list

For a crypto platform, the strongest compliance map follows the customer journey.

For example:

GBP deposit → Buy stablecoin → Hold token → Stake token → Withdraw

Potential regulatory questions differ at every stage.

Ask:

The user may experience this as one app.

The regulator can see several activities.

How to verify a UK crypto platform in 2026

A useful review can be completed in several steps.

1. Identify the contracting entity

Read the:

• Terms of Service;
• account agreement;
• regulatory disclosure.

Find the exact legal company serving the UK account.

2. Check current FCA status

Determine whether the firm is:

• MLR registered;
• FSMA authorised for existing financial services;
• operating through another lawful basis.

Do not interpret MLR registration as the future cryptoasset FSMA authorisation.

3. Check the financial-promotion route

For UK-facing marketing, determine how the promotion is legally communicated.

The promotion regime is already active.

4. Identify the future regulated activities

Map the product against the 2026 Regulations.

Possible activities include:

• trading-platform operation;
• dealing;
• arranging;
• safeguarding;
• staking;
• stablecoin issuance.

5. Check application status after September 30

Once the gateway opens, distinguish:

• application submitted;
• application pending;
• authorisation granted.

Do not merge them.

6. Recheck before October 25, 2027

The position can change before commencement.

Check the FCA record and the firm's customer communications.

7. If the firm enters run-off, understand what that means

Run-off is an exit mechanism.

The firm is not permitted to continue ordinary new business under the transitional exemption.

A good UK regulatory database needs several status fields

For each entity, record:

Current status

• MLR registration;
• current FSMA authorisation;
• existing permissions.

Future crypto regime

• required new activity;
• application status;
• granted permission.

Promotion status

• lawful route for UK communications.

Transition status

• fully authorised;
• application pending;
• run-off;
• exiting market.

This is much more informative than one column labelled:

FCA regulated: Yes / No

What businesses should do during the application window

The FCA expects firms to conduct substantial preparation before applying.

A credible plan should address:

• regulated activities needed;
• requested permission scope;
• governance;
• senior management;
• financial resources;
• customer treatment;
• custody;
• market conduct;
• operational resilience;
• financial crime;
• implementation timelines.

Firms should also map which global-group functions support the UK entity.

A business model that depends on an offshore group company for custody, technology or liquidity still needs to explain how the UK regulated firm controls its risks.

Poor applications can create business disruption

The FCA has explicitly warned that low-quality or late applications can create problems.

Possible consequences include:

• rejection for missing minimum information;
• delays;
• refusal;
• inability to continue operating relevant cryptoasset activities after commencement.

This means application quality is not merely an administrative issue.

It can become a customer-continuity issue.

A platform with UK users should have a plan for:

• approval;
• pending assessment;
• refusal;
• orderly run-off.

The UK regime is broader than AML regulation

The central shift is structural.

The current MLR regime focuses heavily on financial crime.

The future FSMA framework adds areas such as:

• prudential resilience;
• conduct;
• safeguarding;
• market abuse;
• governance;
• disclosures;
• Consumer Duty.

That is why an old statement such as:

“The exchange is FCA registered”

will become increasingly incomplete as October 2027 approaches.

The regulatory question moves from:

Is the firm registered for AML supervision？

to:

Is the firm authorised for the cryptoasset service it provides？

The UK approach is different from MiCA

The UK and EU are both moving cryptoasset activity into comprehensive financial regulation, but their legal frameworks are separate.

An EU CASP authorised under MiCA does not automatically receive UK permission.

Likewise, UK FCA authorisation does not itself create an EU passport.

For a global exchange offering services in both markets, the regulatory database should record separate entities and permissions.

A useful structure is:

Brand → UK entity → FCA permission

and separately:

Brand → EU entity → MiCA authorisation

Do not use one as evidence for the other.

The main 2026 change is that implementation is now concrete

At the start of the UK's crypto regulatory debate, much of the discussion concerned consultation and future policy.

By September 2026, the situation is substantially more concrete.

The Regulations have been made.

The main commencement date is fixed.

The FCA has published major final rules.

The application window opens on September 30.

Treasury is making targeted amendments.

Firms are preparing actual authorisation applications.

This makes the correct status:

Enacted and in implementation, but not yet fully commenced.

That is much more precise than either:

“The UK has no crypto regulation”

or:

“All UK crypto exchanges are now fully FCA authorised.”

Neither statement is correct.

What the framework means for users today

For a customer in 2026, the most important protections are still a mixture of current and future rules.

Current protections can include:

• AML-supervised provider requirements;
• cryptoasset financial-promotion rules;
• Travel Rule requirements;
• existing payment or securities rules where applicable.

Future FSMA crypto protections are becoming clearer but generally do not fully apply until commencement.

Users should therefore check:

• current legal entity;
• current FCA status;
• current promotion route;
• future application status;
• future authorisation when granted.

The same platform can move through several regulatory stages without changing its brand name.

What the framework does not guarantee

Several misconceptions should be avoided.

FCA registration is not the same as FSMA crypto authorisation

Current MLR registration addresses financial crime.

The future regime is broader.

An application is not authorisation

Firms entering the September 2026 gateway still need FCA approval.

Transitional run-off is not a temporary operating licence

It is designed to service pre-existing contracts while the firm exits.

Authorisation does not guarantee token prices

Regulation of the provider does not remove market volatility.

Stablecoin regulation does not automatically cover yield products

Payments, lending and custody can involve different permissions.

Financial promotions law is already active

Overseas firms cannot wait until 2027 before complying with UK-facing marketing requirements.

MiCA does not substitute for UK permission

The UK has its own regime.

Conclusion

The United Kingdom's cryptoasset regulatory transition is now well defined.

The Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026 have been made.

The FCA has published major final rules.

Applications for the new cryptoasset permissions open on September 30, 2026 and close on February 28, 2027.

The full regime is scheduled to commence on October 25, 2027.

But those future rules sit alongside important obligations that already apply today.

The most important distinctions are:

MLR registration is not future FSMA crypto authorisation.

Financial-promotion rules already apply before 2027.

One FCA permission does not automatically cover every crypto service.

Stablecoin issuance, custody, dealing, staking and trading-platform operation are separate activities.

An application is not an approval.

The transitional provision is an orderly run-off mechanism, not permission to keep signing new UK customers.

For users and researchers, the right verification process is:

Check the entity.

Check current FCA status.

Check the product and regulated activity.

Check the financial-promotion route.

Check application status after September 30.

Check final authorisation before October 2027.

That turns the phrase “FCA regulated” from a marketing claim into something that can actually be verified.

Frequently asked questions

What is the main UK crypto regulation passed in 2026？

The key legislation is the Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026, SI 2026/102.

The Regulations were made on February 4, 2026 and create new regulated cryptoasset activities within the UK's FSMA framework.

When does the new UK crypto regime start？

The main regime is scheduled to come into force on October 25, 2027.

Some provisions came into force earlier to allow the FCA and other authorities to prepare for implementation.

When can crypto firms apply for FCA authorisation？

The FCA application window opens at 7:00am on September 30, 2026 and closes on February 28, 2027.

Firms can apply for a new authorisation or, where appropriate, vary existing permissions.

Is an application the same as FCA authorisation？

No.

An application can be accepted for assessment, refused or approved.

A firm should not be described as authorised for the new cryptoasset activities until the relevant FCA permission has actually been granted.

Does existing FCA crypto registration automatically become a new licence？

No.

Current cryptoasset registration under the Money Laundering Regulations primarily concerns AML/CFT supervision.

Firms carrying on the new regulated activities need the relevant FSMA permission under the future regime.

What crypto activities become regulated？

The 2026 Regulations cover activities including:

• issuing qualifying stablecoins;
• safeguarding qualifying cryptoassets;
• operating qualifying cryptoasset trading platforms;
• dealing in cryptoassets;
• arranging deals;
• qualifying cryptoasset staking.

The exact statutory definitions and exceptions should be checked for the particular service.

Are crypto financial promotions already regulated？

Yes.

The UK cryptoasset financial-promotion regime has applied since October 2023.

Relevant UK consumer promotions need to use a lawful route and comply with applicable FCA rules.

What is the 24-hour cooling-off period？

For relevant direct-offer financial promotions to new crypto investors, the FCA regime requires a minimum 24-hour period before the consumer can proceed to the relevant offer.

The rule is intended to give consumers time to consider the risks.

Does passing the appropriateness test mean FCA recommends the investment？

No.

The assessment is a customer-protection control.

It is not a guarantee or endorsement of the cryptoasset.

Does the new regime regulate stablecoins？

Yes.

Issuing qualifying stablecoins in the UK becomes a regulated activity, and the FCA has published rules relating to backing assets, safeguarding, redemption and disclosures.

Treasury is also refining the interaction between stablecoin activities and future payments regulation.

Is stablecoin custody the same as stablecoin issuance？

No.

Issuing the token, safeguarding it, dealing in it and using it for payments can be different activities requiring separate analysis.

Will cryptoasset custody require FCA permission？

Safeguarding qualifying cryptoassets is one of the new regulated activities under the 2026 Regulations.

The FCA's final rules also introduce dedicated safeguarding requirements for cryptoasset custodians.

Is staking regulated？

Qualifying cryptoasset staking is included among the new regulated activities.

The exact scope and exceptions need to be checked against the statutory framework and FCA rules.

What is the transitional provision？

It is an orderly run-off mechanism for certain existing crypto firms that do not have the necessary permission when the new regime starts.

Eligible firms can perform relevant activities only as needed to service pre-existing contracts while exiting the UK market.

Can a firm in transitional run-off take new UK customers？

No.

The FCA states that firms using the transitional provision cannot enter new contracts with new UK customers or enter new contracts with existing UK customers.

How long can transitional run-off last？

The provision can allow a maximum run-off period of up to two years after the new regime commences, subject to the rules and FCA powers.

Can a firm that never applied automatically use the transitional provision？

No.

The FCA states that in-scope firms with existing UK business that do not apply before commencement will not be eligible for the transitional provision and should exit before the new regime begins.

Does MiCA authorisation allow an exchange to operate in the UK？

Not automatically.

MiCA governs the EU framework.

A firm providing regulated cryptoasset services in or to the UK must assess the UK regulatory requirements separately.

Does FCA authorisation guarantee customer crypto？

No.

Authorisation imposes regulatory standards but does not guarantee token prices, exchange solvency or compensation for every type of loss.

How should I verify a UK crypto platform？

Use this sequence:

Brand → UK Legal Entity → Current FCA Status → Product → Current Promotion Route → New FSMA Activity → Application / Authorisation Status → Customer Agreement

Do not rely only on the phrase “FCA registered.”

Official sources

• The Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026
• FCA — A new regime for cryptoasset regulation
• FCA — Preparing for the new cryptoasset regulatory regime
• FCA — Cryptoasset authorisation gateway
• FCA — Transitional provision
• FCA — Overview of cryptoasset regime policy statements
• FCA — Cryptoasset financial promotions to UK consumers
• FCA — Review of cryptoasset financial-promotion compliance
• HM Treasury — Amendments to the Cryptoassets Regulations 2026
• FCA — Cryptoasset perimeter guidance

Disclaimer: This article is for regulatory research and informational purposes only. It is not legal or investment advice. The UK regime is in transition, so licence status, application status, stablecoin rules and commencement arrangements should be verified against current legislation, FCA records and the applicable customer agreement before use.