.jpg)
UK crypto firms now have their FCA crypto authorization homework, and the deadline for the good students is eight months closer than the law requires. On September 16, the Financial Conduct Authority issued final perimeter guidance telling companies to reassess their permissions before applications open on September 30, with existing registrations explicitly not carrying over into the regime that takes effect on October 25, 2027. The message between the lines: being registered today means nothing for being authorized tomorrow.
What the FCA Crypto Authorization Guidance Requires
The guidance defines which activities pull a firm into the authorization perimeter: issuing qualifying stablecoins, running crypto trading platforms, dealing in digital assets, arranging transactions, safeguarding cryptoassets, and arranging staking services. The operative test is functional, not cosmetic. The FCA examines what a company actually does rather than how it describes itself, which means a business may need separate permission assessments for each service it performs. Firms already holding other regulatory permissions may need a variation of permission to add crypto activities, and companies registered under the UK's anti-money laundering rules must still complete the new authorization process, because the AML register's narrower purpose never granted the permissions the incoming framework demands.
The timetable has teeth. Applications open September 30, giving firms more than a year before the regime begins, but companies seeking transitional arrangements must apply by February 28, 2027, and those who wait past that point may not qualify for the same arrangements when the rules begin. The FCA finalized its rule package in June, covering stablecoin reserves and redemptions, custody, operational resilience, consumer treatment and capital requirements, with separate provisions for token admissions and platform misconduct, building on the framework debate that already produced the FCA's tokenized gold exemption review and the Bank of England's sterling-collateral work. Parliament approved the Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026 in February, so the framework is law with a fixed start date, not a consultation draft.
Why Existing Registrations Do Not Transfer
This is the part of the guidance that will trip up the complacent. The UK crypto AML register, administered since 2020, was a fitness test for money-laundering controls, not a license to operate a financial services business. The FCA's new regime is the real thing: prudential requirements, consumer duty, capital buffers, safeguarding rules. A firm that treats its AML registration as a head start will discover it is the legal equivalent of bringing a learner's permit to a commercial driving test. The FCA is offering pre-application meetings and webinars to walk firms through the Handbook, which is the regulator's way of saying the excuses have been pre-emptively retired.
David Geale, the FCA's executive director of consumers, payments and competition, framed the guidance as a service rather than a warning: Getting ready for regulation starts with understanding how the regime applies to your business, and the guidance gives firms the clarity they have asked for so they can prepare with confidence. Confidence is doing heavy lifting in that sentence, but the point stands: the regulator published the map before opening the gate.
Overseas Firms and the October Review
The perimeter reaches outside Britain. Overseas firms serving UK customers, including American exchanges, custodians, stablecoin issuers and staking providers, fall inside the framework and will need FCA authorization regardless of their home licenses. SEC or CFTC registration does not replace FCA approval for regulated activity in Britain, and the two systems are moving at different speeds: the US just watched a market-structure bill die in the Senate, while the UK framework has a fixed start date and a defined application window. For international operators, that asymmetry is now a strategic fact, permission in one jurisdiction buys nothing in the other.
More rules are coming. In October, the FCA plans to consult on targeted updates covering qualifying UK stablecoins, proprietary trading, market making, some technology providers, decentralized protocols, custody arrangements involving central securities depositories, and financial promotion rules. Meanwhile the House of Lords voted 194-138 in September for an amendment requiring the Treasury to prepare a national digital asset strategy within 12 months of the Financial Services and Markets Bill becoming law, covering cryptoassets, stablecoins, tokenized securities and digital financial infrastructure. The regulator's parallel work on prediction-market oversight, where the FCA has already been weighing restrictions on event contracts, continues on its own track, alongside the persistent friction between banks and crypto that keeps UK payment limits tight.
The Takeaway for Firms
The strategic read: February 28, 2027, not October 25, 2027, is the date that matters for firms wanting transitional cover, and the functional test means hybrid businesses, exchange plus custody plus staking, must map every service separately. The FCA has effectively turned authorization into a planning exercise that starts now, not a scramble that starts next autumn. Firms that treat the September 30 gateway opening as the starting gun have already lost a month. Watch the October consultation for the decentralized protocol language in particular, because how the FCA defines the boundary of arranging and safeguarding for DeFi will determine whether an entire category of operators needs permissions at all.
