UK FCA Publishes Final Cryptoasset Rules With a 2027 Start Date

The Financial Conduct Authority published the final rules for the United Kingdom's cryptoasset regime on June 30, setting out which firms will need its permission to operate and the standards they will have to meet. Trading platforms, intermediaries, custodians, stablecoin issuers and staking providers all come inside, facing FCA authorisation together with capital requirements, stress-testing standards and market-abuse rules. One published account of the package carries the timetable. On its dates, the authorisation gateway opens on 30 September 2026, applications close on 28 February 2027, and the regime takes effect on 25 October 2027. No second account had confirmed that schedule by publication, and it stands single-sourced. Taken as published, it leaves firms roughly five months in which to file and gives the FCA the eight months after that to work through what it receives. The rules landed a day before the European Union's own transitional arrangements expire, and a week after the Bank of England set out its approach to systemic stablecoins.

Five categories of firm brought inside

The perimeter is drawn by activity, not by asset. What determines whether a firm is in scope is what it does with cryptoassets, not which tokens it handles. The five categories named are:

trading platforms, which match buyers and sellers;
intermediaries, which arrange or execute deals on a client's behalf;
custodians, which hold client assets or the keys controlling them;
stablecoin issuers, which create tokens intended to hold a fixed value;
staking providers, which lock client assets into a network to earn rewards.

Grouping them under one authorisation regime means a firm doing several of these things applies once, against a single set of standards, instead of assembling permissions piecemeal. It also pushes the hard questions to the edges. A wallet provider that never takes control of keys sits outside the perimeter until the FCA says otherwise.

Capital, stress tests and market abuse

The three substantive standards are the ones already familiar from regulated finance. Capital requirements oblige a firm to hold a buffer of its own resources against the risks it runs, so that losses fall on the operator before they fall on customers. Stress testing requires it to demonstrate that it would still function under adverse conditions, not only in ordinary ones. Market-abuse rules prohibit trading on inside information and manipulating prices, and they matter more on cryptoasset venues than on equity exchanges because the same operator often runs the venue and holds the assets, with sight of every order. Applying them makes a listing decision or a large client order the kind of information a firm must control rather than trade around.

A window that opens in September and shuts in February

An authorisation gateway is simply the window during which the regulator accepts applications for the new permission. It opens on 30 September 2026 and closes on 28 February 2027, and the point of closing it is to give the FCA a fixed caseload to assess before the regime goes live. A firm that does not apply within the window will not hold authorisation on 25 October 2027, and without authorisation it cannot lawfully carry on the regulated activity in the UK from that date. It could stop or sell to an authorised firm. Failing that, it waits for whatever route the FCA leaves open afterwards. Firms operating in Europe have just seen the same logic applied on a shorter fuse: the 1 July deadline at which MiCA's national grandfathering ends requires unauthorised service providers to stop onboarding EU clients immediately and to wind down in an orderly way.

Two regulators for one stablecoin issuer

The stablecoin part of the perimeter is the piece still being assembled elsewhere. On 22 June the Bank of England published a policy statement and draft Code of Practice for systemic sterling stablecoins, setting a temporary aggregate limit of £40 billion per coin and taking feedback until 22 September, and it described a joint supervisory approach with the FCA for the firms that end up in both regimes. An issuer large enough to be designated systemic will therefore answer to the Bank on stability and to the FCA on conduct, and the two timetables run close together. What the final rules do not remove is the ordinary uncertainty of a first authorisation round. How demanding the capital standards prove in practice will only show in the first decisions. So will the size of the caseload: how many applicants the gateway attracts before it shuts, and how many firms decide the UK is not worth the filing.