FCA opens UK crypto authorization gateway ahead of 2027 regime

The UK Financial Conduct Authority opened its application gateway for cryptoasset firms on September 30, 2026, moving the country’s future regulatory system from published rules into an active authorization process. Firms seeking to keep conducting covered UK crypto activities should apply by February 28, 2027, before the regime starts on October 25, 2027.

The opening matters because registration under the UK’s anti-money-laundering rules will not roll over automatically. Existing crypto businesses, newly entering firms and companies that already hold other FCA permissions now have to choose and document the permissions their business models require.

What opened — and what did not

The FCA said firms can now submit new authorization applications or requests to vary existing permissions through its Connect system. Applications will be assessed against standards covering consumer protection, safeguarding customer assets, market integrity and financial resilience. Approval is not automatic, and an application is not evidence that a firm has passed those tests.

The gateway’s opening also does not bring the complete regime into force today. Until October 25, 2027, firms providing in-scope services remain subject to the current legal framework, including registration requirements under the Money Laundering Regulations where applicable. The FCA says firms already registered under that framework still need separate authorization under the Financial Services and Markets Act for the new regulated activities.

The future perimeter includes issuing qualifying stablecoins, operating cryptoasset trading platforms, dealing in or arranging cryptoasset transactions, safeguarding cryptoassets and arranging cryptoasset staking. The FCA published perimeter guidance on September 16, while noting that a further October consultation will address targeted changes involving stablecoins, proprietary trading and market making, some technology providers, decentralized protocols, safeguarding arrangements and financial promotions. That planned consultation means some boundary guidance may still change even though applications are open.

The timing creates different outcomes

The regulator set an application period running from September 30, 2026 through February 28, 2027. It expects to decide applications filed during that window before the new regime begins. If an in-window application is still unresolved at commencement, the statutory saving provision can allow the applicant to continue serving customers, including taking new business, until a final determination.

The position is narrower for firms that apply after February 28 but before commencement. If they lack the required permission when the regime starts, they enter a transitional route that limits regulated activity to what is necessary to perform contracts made beforehand. The FCA says those firms cannot make new contracts with existing UK customers or accept new UK customers while relying on that provision.

Firms that do not apply and do not plan to seek authorization must wind down their UK crypto business before commencement. The FCA warns that continuing afterward could breach the statutory prohibition on unauthorized regulated business.

What remains unknown

The regulator has not disclosed how many applications arrived on opening day, which firms applied, or how long individual reviews will take. Its expectation that timely applications will be decided before commencement is not a guarantee of approval or a fixed processing deadline.

Today’s event is therefore an operational milestone, not the arrival of full consumer protections across the market and not an endorsement of any applicant. The next measurable checkpoints are application disclosures by firms, FCA authorization decisions and any October changes to the perimeter guidance. Until then, customers should distinguish a company saying it has applied from the FCA actually granting it permission.