FCA Finalizes Rules for UK Cryptoasset Regime Taking Effect October 2027

Key Takeaways

• The FCA has published final rules and guidance for the new UK cryptoasset regulatory regime, which is expected to take effect on 25 October 2027.
• Cryptoasset firms must be authorized and supervised under FSMA to operate in or to the UK, so compliance teams should begin gap assessments and authorization planning now.

Deep Dive

The FCA has published final rules and guidance for the new UK cryptoasset regulatory regime, which is expected to take effect on 25 October 2027. Cryptoasset firms must be authorized and supervised under FSMA to operate in or to the UK, so compliance teams should begin gap assessments and authorization planning now.

The source text has an internal inconsistency that teams should clarify. It says the final rules apply to firms "granted permission to operate under FSMA on or after 25 October 2027," yet it also says further policy consultations will follow and that final rules will be set out in policy statements before implementation. Compliance teams should treat the 30 June 2026 publication as the baseline but expect additional rules and refinements. They should monitor the FCA's consultations and policy statements, and confirm with the regulator or counsel which rule sets apply at each stage.

The FCA identifies several preparation areas: the authorization gateway and how it will operate, the transitional provision, use of s.21 approvers (financial promotions), registration under the Money Laundering Regulations (MLRs) ahead of the FSMA regime, the FCA Handbook and standards, and perimeter guidance. Webinars cover the prudential regime, authorization, Handbook application, regulated activities, stablecoin issuance, admissions and disclosures, and the Market Abuse Regime for Cryptoassets (MARC). Previous sessions covered AML, SM&CR, and operational resilience. Several of the listed September 2026 webinars fall on or before the 16 September 2026 page date, so recordings and Q&As should be reviewed.

Recommended actions:
- Map current and planned products and services against the new regulated activities and perimeter guidance.
- Determine authorization timing and transitional eligibility.
- Assess readiness against FCA standards, including prudential requirements, SM&CR accountability, operational resilience, AML/MLR registration, financial promotions controls, market abuse, and admissions and disclosures.
- Assign senior ownership and a program plan with milestones ahead of 25 October 2027.
- Track upcoming consultations and register for FCA updates.

Risk implications: Operating without required authorization after commencement could expose firms to enforcement action and restrict market access. Firms also face execution risk from tight authorization timelines, likely high application volumes, and the need to build governance, capital, and control frameworks. Early engagement reduces regulatory, operational, and reputational risk, and gives firms a competitive advantage in the UK market.

Source: Financial Conduct Authority