FCA Issues Cryptoasset Perimeter Guidance Ahead of September 2026 Authorization Gateway Opening

Key Takeaways

• The FCA has published guidance explaining how the UK's new cryptoasset regime applies to firms and which activities may require authorization.
• With the authorization gateway opening on September 30, 2026 and the regime taking effect on October 25, 2027, compliance teams should use the guidance now to assess perimeter exposure and prepare applications.
• Further targeted changes are expected through an October consultation.

Deep Dive

The FCA has published guidance explaining how the UK's new cryptoasset regime applies to firms and which activities may require authorization. With the authorization gateway opening on September 30, 2026 and the regime taking effect on October 25, 2027, compliance teams should use the guidance now to assess perimeter exposure and prepare applications. Further targeted changes are expected through an October consultation.

The timeline is tight. The authorization gateway opens on September 30, 2026, and the regime comes into force on October 25, 2027. The FCA finalized its rules and guidance in June 2026, so the core framework is largely settled. The FCA will consult in October 2026 on targeted updates to the perimeter guidance. These updates reflect Government amendments to the legislation, which introduce limited exclusions and clarifications. The consultation will cover UK qualifying stablecoins, proprietary trading and market making, certain technology providers, decentralized protocols, safeguarding arrangements involving central securities depositories, and financial promotions. The FCA states that most firms will not be affected by these changes and can rely on the current guidance. Firms in the listed areas, however, should expect their perimeter conclusions to be subject to change.

Recommended actions include the following:
- Conduct a documented perimeter analysis against the guidance, mapping each product and service to a regulated activity.
- Monitor the October consultation, and make any assessments in the affected areas provisional until it concludes.
- Decide on authorization timing and begin assembling application materials, including governance, prudential, conduct, and financial crime frameworks.
- Take advantage of the FCA's pre-application meetings and webinars on applying the FCA Handbook, getting authorized, and the prudential framework.
- Review financial promotions processes, as this is an area flagged for targeted change.

The risk implications are significant. Firms that misjudge the perimeter may carry on regulated activity without authorization once the regime takes effect, exposing them to enforcement action, restrictions on marketing, and reputational damage. Delayed preparation could also leave firms unable to secure authorization before the commencement date, creating business continuity and market access risk. Firms operating in the areas under consultation face added uncertainty and should build flexibility into their programs. Established financial institutions entering or expanding cryptoasset activity should also consider operational, custody, and third-party risk, particularly around safeguarding and staking arrangements.

Source: Financial Conduct Authority