FCA gives crypto firms two weeks to prepare for September 30 authorization

The Financial Conduct Authority has published perimeter guidance clarifying which crypto firms fall under UK regulation, with just two weeks left before the September 30, 2026, opening of the authorization window.

The timing leaves crypto exchanges, custodians, trading platforms, intermediaries and other businesses with little room to ignore the new rules.

The FCA has been building the framework since Parliament approved the Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026 in February. The regulator published the bulk of its final rules in June, covering areas including trading, custody, stablecoins, staking, market abuse, prudential requirements and consumer protection.

David Geale, the FCA’s executive director for payments and digital finance, described the new framework as a major step for crypto regulation.

“This is a significant moment for crypto regulation in the UK.” — David Geale, executive director of payments and digital finance, FCA.

UK crypto regulation puts overseas firms in focus

One of the biggest issues for international crypto companies is where the FCA draws the line around activity being conducted in the UK.

The regulator’s perimeter guidance says certain crypto activities can be treated as being carried on in the UK even when the firm itself is based abroad. That includes circumstances where services are provided to UK consumers from outside the country.

The FCA has also set a baseline expectation that firms requiring authorization will carry out their regulated crypto activities through a UK legal entity.

That is particularly relevant for international exchanges and other offshore businesses that have historically served UK users without establishing a fully regulated UK operation.

The regulator said in its consultation that international firms can present additional supervisory and consumer-protection challenges.

“We cannot adequately supervise the conduct of a firm’s UK business without this.” — Financial Conduct Authority, on its expectation for firms seeking authorization to have a UK presence.

The final framework is therefore designed to bring more of those businesses into the FCA’s direct oversight rather than allowing the location of their headquarters to determine whether UK rules apply.

The September 30 deadline is not the go-live date

There is an important distinction between the authorization window and the start of the new regime.

September 30 is when firms can begin submitting applications. It is not the date on which the new rules suddenly become fully operational.

The full regime is scheduled to begin on October 25, 2027.

That gives firms more than a year between the opening of the application window and the formal commencement of the new framework. But businesses already operating in the UK cannot simply wait until 2027 without considering the transition rules.

The application window closes on February 28, 2027.

Firms applying during that window may, subject to the relevant conditions, continue certain activities under the regime’s savings and transitional provisions while their applications are being assessed. The FCA has advised firms to apply as early as possible.

New firms face a different position.

According to FCA guidance, newly established cryptoasset firms will generally only be able to provide regulated cryptoasset services in the UK once the new regime has started and their application has been approved.

That makes preparation particularly important for companies that want to launch in the UK rather than simply maintain an existing operation.

What the new crypto regulation covers

The FCA’s framework goes considerably further than the registration system currently used for anti-money laundering purposes.

Under the new crypto regulation regime, firms involved in activities including operating qualifying cryptoasset trading platforms, dealing in qualifying cryptoassets, arranging deals, safeguarding cryptoassets and arranging staking will require FCA authorization where they fall within the regulated perimeter.

Stablecoin issuance is also covered by the framework, with separate requirements for backing assets, redemption and safeguarding.

The FCA is also bringing broader financial-services standards into the sector, including the Consumer Duty, operational resilience requirements, senior-management accountability and prudential requirements.

Market integrity is another major component.

The FCA’s final framework includes rules addressing areas such as insider dealing and market manipulation, reflecting the regulator’s intention to bring crypto markets closer to established financial-market standards where comparable risks exist.

But the FCA has also stressed that regulation does not make crypto safe.

“We can’t regulate away risk.” — David Geale, executive director of payments and digital finance, FCA.

That warning remains central to the regulator’s approach. Cryptoassets will continue to be treated as high-risk investments, and the FCA says consumers should understand that they could lose the entire value of an investment.

For the industry, the immediate issue is less than two weeks away.

On September 30, the FCA’s authorization gateway opens.

By then, firms serving UK consumers will need to know where they sit inside the new crypto regulation perimeter, what permissions they require and whether their corporate structure can meet the FCA’s expectations.

The bigger deadline comes later.