UK FCA Publishes Final Cryptoasset Rules With a 2027 Start Date

The Financial Conduct Authority published the final rules for the United Kingdom's cryptoasset regime on June 30, setting out which firms will need its permission to operate and the standards they will have to meet. The rules cover trading platforms, intermediaries, custodians, stablecoin issuers and staking providers, and impose FCA authorisation together with capital requirements, stress-testing standards and market-abuse rules. According to a single published account of the package, the authorisation gateway opens on 30 September 2026, applications close on 28 February 2027, and the regime takes effect on 25 October 2027. That leaves firms roughly five months in which to file and gives the FCA the eight months after that to work through what it receives. The publication lands a day before the European Union's own transitional arrangements expire, and a week after the Bank of England set out its approach to systemic stablecoins.

The Perimeter: Five Categories of Firm Brought Inside

The regime is drawn by activity rather than by asset, so what determines whether a firm is in scope is what it does with cryptoassets, not which tokens it handles. The five categories named are:

trading platforms, which match buyers and sellers;
intermediaries, which arrange or execute deals on a client's behalf;
custodians, which hold client assets or the keys controlling them;
stablecoin issuers, which create tokens intended to hold a fixed value;
staking providers, which lock client assets into a network to earn rewards.

Grouping them under one authorisation regime means a firm doing several of these things applies once, against a single set of standards, rather than assembling permissions piecemeal. It also pushes the hard questions to the edges: a wallet provider that never takes control of keys sits outside the perimeter until the FCA says otherwise.

The Standards: Capital, Stress Testing and Market Abuse

The three substantive standards are the ones already familiar from regulated finance. Capital requirements oblige a firm to hold a buffer of its own resources against the risks it runs, so that losses fall on the operator before they fall on customers. Stress testing requires it to demonstrate that it would still function under adverse conditions rather than only in ordinary ones. Market-abuse rules prohibit trading on inside information and manipulating prices, and they matter more on cryptoasset venues than on equity exchanges because the same operator often runs the venue, holds the assets and can see every order. Applying them makes a listing decision or a large client order the kind of information a firm must control rather than trade around.

The Gateway: A Window That Opens in September and Closes in February

An authorisation gateway is simply the window during which the regulator accepts applications for the new permission. It opens on 30 September 2026 and closes on 28 February 2027, and the point of closing it is to give the FCA a fixed caseload to assess before the regime goes live. A firm that does not apply within the window will not hold authorisation on 25 October 2027, and without authorisation it cannot lawfully carry on the regulated activity in the UK from that date — leaving it to stop, to sell the business to an authorised firm, or to wait for whatever route the FCA leaves open afterwards. Firms operating in Europe have just seen the same logic applied on a shorter fuse: the 1 July deadline at which MiCA's national grandfathering ends requires unauthorised service providers to stop onboarding EU clients immediately and to wind down in an orderly way.

What Comes Next: Stablecoin Supervision and Sixteen Months of Runway

The stablecoin part of the perimeter is the piece still being assembled elsewhere. On 22 June the Bank of England published a policy statement and draft Code of Practice for systemic sterling stablecoins, setting a temporary aggregate limit of £40 billion per coin and taking feedback until 22 September, and it described a joint supervisory approach with the FCA for the firms that end up in both regimes. An issuer large enough to be designated systemic will therefore answer to the Bank on stability and to the FCA on conduct, and the two timetables run close together. What the final rules do not remove is the ordinary uncertainty of a first authorisation round: how demanding the capital standards prove in practice, how many applicants the gateway attracts before it shuts, and how many firms decide the UK is not worth the filing.