FCA Opens Crypto Authorisation Gateway Under FSMA 2023

The Financial Conduct Authority has opened its cryptoasset authorisation gateway, according to legal publication Lexology, converting the Financial Services and Markets Act 2023 into an operational licensing regime for UK crypto firms.

That single action reshapes the near-term roadmap for exchanges, custodians, brokers and advisory platforms that have spent the better part of two years preparing applications. Until now, the legislative scaffolding sat in place without a doorway.

What does the gateway actually require?

Under FSMA 2023, which received Royal Assent in June 2023, cryptoasset firms fall within the regulated perimeter for the first time. The Act extended the FCA's remit over qualifying cryptoasset activities and defined a category of "cryptoasset" that excludes tokenised securities and certain other instruments already covered by existing rules.

Firms that offer cryptoasset services to UK clients must now hold FCA authorisation. The application demands evidence of minimum capital, governance arrangements, anti-money laundering controls, and the fitness and propriety of senior managers — a package that mirrors the standards applied to traditional investment businesses.

The gateway also dovetails with the FCA's October 2023 financial promotions regime, which requires crypto firms marketing to UK consumers to either be authorised or have promotions approved by an authorised firm. That earlier rule created the demand for authorisation; the gateway now supplies the supply.

How does the UK approach compare with the EU?

The launch lands alongside the EU's Markets in Crypto-Assets Regulation, which began applying in stages from June 2024. UK officials have argued the domestic regime is more principles-based and faster to adapt.

Industry lawyers counter that the slower UK timeline has already pushed firms toward Frankfurt, Paris and Dublin. The gateway's opening narrows that gap, but does not close it. MiCA grants passporting across all 27 member states; the UK regime does not.

For US firms, the UK route offers a regulated European foothold without the full operational lift of MiCA compliance — though the FCA's case-by-case approach to authorisation has produced longer-than-expected review periods in adjacent sectors.

What changes for firms operating in the UK now?

The practical effect: any firm offering cryptoasset services to UK clients without authorisation is exposed to enforcement once transitional arrangements end. The regulator has historically used a mix of warnings, restrictions and, where necessary, formal action against unauthorised business.

Smaller firms without dedicated compliance teams will likely find the application process demanding. Legal and compliance advisors have warned that the time and cost of preparing a credible submission — risk frameworks, governance documentation, business model descriptions — can stretch internal teams well beyond their usual bandwidth.

For consumers, the regime promises clearer recourse through the Financial Ombudsman Service and the Financial Services Compensation Scheme where authorised firms fail, though the FCA has stressed that compensation does not cover investment losses.

What happens next?

The FCA has not published a hard deadline for full compliance, but firms operating without authorisation should expect supervisory contact. Watch for the first wave of authorisation decisions in the coming quarters — those will signal how the FCA intends to apply the rules across different business models, and whether the UK can credibly compete with the EU for crypto's European centre of gravity.