What the FCA’s new rulebook means for the crypto sector
The Financial Conduct Authority on June 30, 2026 published its final crypto rulebook, finalizes crypto rules firms as the industry shifts from guidance to formal licensing. The move turns years of policy into a concrete framework that will govern who can offer cryptoasset services in the UK starting in 2027.
The regulator stresses that the regime will require full authorization under the Financial Services and Markets Act 2000 (FSMA) for any firm seeking to conduct new regulated cryptoasset activities. In practice, that means exchanges, custodians, stablecoin issuers, and other crypto firms must secure authorization or a variation of permission if they already hold a different FSMA-registered license.
Who must apply and how the process works
The gateway to UK crypto market access is now clearly defined. The FCA explains that firms pursuing new cryptoasset-regulated activities will need FSMA authorization. Those already authorized for other regulated activities must vary their permissions to cover crypto activities. Non-regulated entities that are currently registered for anti-money-laundering purposes face the same hurdle: AML registration does not automatically grant access to the crypto regime. The regulator emphasizes that AML registration cannot be converted into FSMA approval.
In practical terms, this creates a two-track path for firms that want to stay active in the UK. The first track is straightforward authorization for crypto activities. The second track involves a business case evaluation by the FCA to assess whether a firm’s controls, product suite, customer base, and business activities align with the new regime’s expectations.
The 2027 deadline and the path to compliance
The regime is designed to start in 2027, with a targeted date of October 25, 2027 for full market access under the new authorization framework. The FCA’s timeline means firms have a finite window to complete onboarding, implement enhanced controls, and pass regulatory scrutiny before that start date.
Regulators say this transition should compress the typical licensing timetable, pushing firms to front-load disclosures, conduct risk assessments, and demonstrate readiness for ongoing supervision. A spokesperson for the FCA noted that the 2027 start date is a hard milestone intended to reduce regulatory ambiguity for customers and investors alike.
What this means for a wide range of crypto businesses
- Exchanges must prove robust governance, security standards, and customer protections to obtain and maintain FSMA authorization.
- Custodians will face strict custody and risk controls, including segregation of assets and insurance requirements where applicable.
- Stablecoin issuers must show clear collateral frameworks, redemption mechanics, and liquidity risk management that align with regulated expectations.
- Businesses currently operating under AML registration must prepare for a formal variation or new authorization, with no automatic conversion.
- Firms will undergo ongoing supervision and periodic reviews post-authorization, affecting product launches, cross-border activity, and marketing.
Market implications and what firms should do next
The FCA’s finalization of crypto rules firms injects a dose of certainty into a historically uncertain landscape, but it also raises costs and compliance expectations. Firms will need legal counsel, compliance staff, and dedicated regulatory liaison time to navigate the FSMA process, gather documentation, and implement required controls.
Industry observers warn that the cost of compliance will be a gatekeeper for smaller players, potentially reshaping the UK crypto ecosystem toward larger, better-capitalized firms with established risk management frameworks. The agency’s emphasis on governance and consumer protection may also influence product design, with greater attention paid to disclosures, risk warnings, and customer due diligence.
What firms should do now to prepare
- Inventory current activities and map them to the new regulated categories to determine what authorization or permission changes are needed.
- Begin gap analyses of internal controls, cyber security measures, and incident response plans to meet the FCA’s standards.
- Engage with legal and compliance experts early to prepare FSMA variation applications and anticipate regulator inquiries.
- Revisit AML and KYC programs, ensuring alignment with future FSMA expectations even though AML registration alone won’t suffice.
Regulatory signals and the future of UK crypto access
As the FCA finalizes crypto rules firms, the rulebook establishes a clear, enforceable path for market access. The emphasis is on robust licensing, continuous oversight, and protections designed to shield consumers and financial markets from crypto-related risk. The industry will be watching closely as firms submit authorization packages, undergo scrutiny, and adjust their business models to fit a regime that regulators describe as more predictable and protective than the prior guidance-based approach.
Conclusion: a turning point for UK crypto
The publication of the final crypto rulebook marks a watershed moment for the UK crypto sector. It signals a transition from a loosely supervised environment to a formal, standards-based regime with a firm 2027 implementation date. For companies ready to adapt, the path to UK market access will be clearer, though challengingly rigorous. For others, the new rules may prompt strategic reconsiderations about footprint, timing, and business models as the clock ticks toward October 25, 2027.
Discussion