The UK Financial Conduct Authority has published final rules creating a comprehensive authorization regime for cryptoasset businesses, with full enforcement from 25 October 2027 — after which any firm conducting crypto activities in or into the UK without FCA permission will be operating unlawfully.

The regime, formally designated the Cryptoassets Regulations 2026, sits under the Financial Services and Markets Act 2000 (FSMA). The FCA published its final rules in June 2026. The framework covers stablecoin issuance, trading platform operations, and market conduct, bringing crypto firms within the same statutory perimeter that governs banks, brokers, and asset managers rather than crafting standalone legislation for the sector.

Capital requirements scale with activity

The rules impose permanent minimum capital requirements ranging from £75,000 to £750,000, calibrated to a firm's activity profile. A company issuing qualifying stablecoins faces different thresholds than an operator of a trading venue, with the range designed to scale according to the risk each business line carries.

The authorization application window opens on 30 September 2026 and closes on 28 February 2027. Firms have five months to file. Those that miss the window face pressure to complete the process before the October 2027 enforcement date.

Existing MLR registrants get no grandfathering

One consequential design choice: firms already registered under the Money Laundering Regulations (MLRs) receive no automatic transfer into the new regime. The Cryptoassets Regulations 2026 extend far beyond anti-money laundering compliance, so current MLR registrants must apply from scratch for the broader FSMA permissions. Their existing registration carries no weight under the new framework.

This marks the continuation of a deliberate expansion of UK crypto oversight. The regulatory arc began with AML rules under the MLRs and widened through the financial promotions regime. By anchoring the crypto regime in FSMA rather than bespoke legislation, the FCA has signaled that crypto businesses should meet the same structural standards — capital buffers, governance requirements, and market conduct provisions — as incumbent financial institutions.

Operational consequences for the market

The immediate effect will be a market sorting. Firms that can satisfy the capital floors, build compliant operational frameworks, and complete the authorization process will retain access to the UK market. Those that cannot, or choose not to, will be excluded from it entirely.

For consumers and investors, the regime is designed to reduce the risk of platform failures and mismanagement of customer funds. The layered operational standards embedded in the FCA's rules create protections that did not exist under the previous registration model, which focused narrowly on money laundering controls.

The stablecoin provisions carry particular structural weight. By establishing explicit requirements for qualifying stablecoin issuance, the FCA has carved out a regulated pathway for one of the most systemically significant segments of the crypto market, giving issuers a defined route to operate lawfully in the UK for the first time.

Enforcement posture

The open question is how aggressively the FCA will enforce the October 2027 deadline against firms that miss the application window or fall short of the standards. The regulator's record with its existing crypto registration process — where it rejected or withdrew the majority of applicants — suggests a low tolerance for incomplete or deficient applications.

Firms targeting the UK market now face a fixed sequence: prepare authorization filings ahead of the 30 September 2026 opening, submit within the five-month window ending 28 February 2027, and hold capital against the permanent minimums — all before the regime becomes fully enforceable on 25 October 2027.