UK Finalizes Crypto Rulebook, Opening Path to Full FCA Supervision

Key Takeaways

• Comprehensive Crypto Framework Finalized: The FCA has completed its crypto regulatory roadmap with rules covering prudential standards, market conduct and consumer protections.
• Authorization Will Become Mandatory: Trading platforms, custodians, intermediaries, stablecoin issuers and staking firms must obtain FCA authorization before the regime takes effect on Oct. 25, 2027.
• Prudential Requirements Expanded: Crypto firms will face capital and stress testing requirements alongside new rules targeting insider trading and market manipulation.
• Stablecoins Receive Dedicated Oversight: Stablecoin issuers will operate under a separate regulatory framework with tailored prudential standards.
• Further Guidance Still to Come: The FCA will consult later this year on decentralized finance, operational resilience, financial crime guidance and additional stablecoin oversight with the Bank of England.

Deep Dive

The UK Financial Conduct Authority published the final rules governing firms that buy, trade, safeguard and issue cryptoassets, completing the policy framework that will underpin the country's new regulatory regime. The package reaches well beyond anti-money laundering controls and financial promotions, bringing prudential requirements, market conduct standards and consumer protections into a sector that has long operated under a narrower form of oversight.

For firms hoping to build a long-term business in the UK, the message is equally clear: authorization will become mandatory, and the standards expected of crypto firms will begin to resemble those already applied across much of financial services.

The framework follows legislation enacted in February 2026 that formally brought cryptoassets within the FCA's remit, one of the regulator's most significant expansions of authority in recent years. Until the new regime comes into force on Oct. 25, 2027, the FCA's powers over the sector will remain limited largely to financial promotions and anti-money laundering supervision.

From Registration to Full Prudential Supervision

The rules require crypto firms to demonstrate financial resilience rather than simply legal compliance. Businesses covered by the regime will face capital requirements and stress testing obligations intended to ensure they can continue operating through periods of financial strain. The FCA is also extending familiar market abuse concepts into digital assets. New rules prohibit insider dealing and market manipulation, reflecting the regulator's view that crypto markets should meet many of the same integrity standards expected elsewhere in financial markets.

Stablecoins receive their own regulatory framework. Issuers of cryptoassets designed to maintain a stable value, typically by referencing a fiat currency such as the pound sterling, will be subject to dedicated requirements aimed at improving transparency and strengthening confidence in how those assets function.

Following consultation with industry, the FCA revised several aspects of the proposals before finalizing them. It simplified capital requirements for stablecoin firms and adjusted trading rules to better reflect how crypto markets operate in practice while preserving the overall regulatory objectives. The regulator said it drew on established financial services standards where comparable risks exist, including the UK's Consumer Duty.

A Narrower Gap Between Crypto and Traditional Finance

David Geale, the FCA's executive director of payments and digital finance, described the publication as a turning point for UK crypto regulation.

"We've created a framework that doesn't force firms to choose between regulatory certainty and room to innovate," Geale said. "This regime means they can have both in a stable, competitive home to build and grow."

He also cautioned that regulation has limits. While crypto firms will be held to standards more closely aligned with other financial institutions, consumers should continue to recognize that cryptoassets remain high-risk investments. That runs throughout the framework.

The FCA is attempting neither to isolate crypto from the broader financial system nor to treat it as an exceptional asset class beyond conventional regulation. Instead, it applies existing regulatory principles where the underlying risks are comparable while adapting specific requirements where crypto markets operate differently.

Firms Face a Defined Transition Timeline

The regulator is encouraging firms to begin preparing well before the new regime becomes mandatory. Pre-application support meetings will be available from July, giving prospective applicants an opportunity to engage with supervisors before submitting authorization requests.

The authorization window itself opens on Sept. 30, 2026, and closes on Feb. 28, 2027. Trading platforms, intermediaries, custodians, stablecoin issuers and firms arranging staking services will all require FCA authorization if they wish to operate legally once the regime takes effect in October 2027.

The FCA's crypto policy work is not yet complete. The regulator plans to publish another policy statement in September clarifying how the regulatory perimeter applies to cryptoasset activities. Later this year it also expects to consult on guidance covering decentralized finance, operational resilience for firms using distributed ledger technology and updates to its Financial Crime Guide for cryptoasset businesses.

Work on stablecoins will continue jointly with the Bank of England. The two authorities intend to consult later this year on how FCA requirements would apply if HM Treasury designates a stablecoin issuer as systemically important.

Industry groups welcomed the completed framework, arguing that clearer rules should provide firms with greater certainty while strengthening confidence in the UK's digital asset market. For the FCA, however, the publication marks less the end of a policy exercise than the beginning of a supervisory one. The roadmap has now become a rulebook, and the next phase will be measured not by consultation papers but by the firms able, or unable, to meet it.

The GRC Report is your premier destination for the latest in governance, risk, and compliance news. As your reliable source for comprehensive coverage, we ensure you stay informed and ready to navigate the dynamic landscape of GRC. Beyond being a news source, the GRC Report represents a thriving community of professionals who, like you, are dedicated to GRC excellence. Explore our insightful articles and breaking news, and actively participate in the conversation to enhance your GRC journey.