FCA Finalises Crypto Authorisation Regime Ahead of 2027 Mandate

The Financial Conduct Authority (FCA) has published the final tranche of its cryptoasset rulebook, completing the regulatory roadmap that will govern trading platforms, custodians, intermediaries, stablecoin issuers and staking arrangers operating in the United Kingdom. The framework crystallises the perimeter established when legislation brought cryptoassets within the FCA's remit in February 2026, and sets a hard commencement date of 25 October 2027 for the mandatory authorisation regime.

For those responsible for financial crime controls, the operational timeline is the immediate priority. The authorisation gateway opens on 30 September 2026, with the application window running until 28 February 2027. Firms that fail to secure authorisation within that period will be unable to continue trading once the regime bites. Pre-application support meetings become available from July, and firms would be prudent to treat the intervening months as a compliance readiness exercise rather than a deadline to be met at the margin.

The substance of the regime imports established prudential and conduct expectations into a sector that has, until now, sat largely outside them. Firms will face financial resilience requirements encompassing capital adequacy and stress testing, alongside market integrity rules addressing insider dealing and market manipulation — provisions that will demand surveillance capabilities and control frameworks familiar from traditional markets but frequently absent in crypto-native businesses. The application of the Consumer Duty signals that the FCA intends to hold these firms to standards comparable with other regulated financial providers.

Stablecoins attract a bespoke set of standards, with the FCA and the Bank of England pursuing joint supervision and a further consultation expected on the treatment of issuers recognised as systemic by HM Treasury. The regulator has moderated certain requirements following consultation, including simplified capital rules for stablecoin firms and trading provisions tailored to market structure — adjustments that reduce friction without diluting the underlying integrity objectives.

Anti-money laundering practitioners should note that the FCA has flagged forthcoming updates to the Financial Crime Guide relevant to cryptoasset firms, alongside planned consultations on decentralised finance (DeFi) and operational resilience for firms using distributed ledger technology (DLT). The existing anti-money laundering registration regime continues to apply in the interim, meaning firms must not treat the 2027 commencement as licence to defer their financial crime obligations. The direction of travel is unambiguous: crypto firms will be expected to demonstrate the same calibre of controls, governance and accountability as any other participant in UK financial services.