BLOCKRIVER AG RECEIVES SRO MEMBERSHIP: VIEW INFO
16.4.26
arrow up rightarrow up right

UK's FCA Sets October 2027 Deadline for Crypto Authorisation: Compliance Officers Face 18-Month Countdown

The FCA has opened its final consultation on the UK's crypto regulatory regime, confirming that all cryptoasset activities will require full FSMA authorisation from October 2027. For unregulated brokers with client demand for digital assets, the authorisation window running from September 2026 to February 2027 creates a compressed timeline that makes in-house licensing builds economically unviable. The choice now is simple: secure regulated infrastructure before the gateway closes, or watch client flow migrate to competitors who already have it.

The Financial Conduct Authority published its perimeter guidance consultation on 15 April 2026, setting a 3 June deadline for industry feedback. Crypto will be regulated in the UK from October 2027. The FCA is finalising the wider cryptoasset regime, with rules to be published this summer. This is not a discussion paper or a regulatory trial balloon. Parliament confirmed the statutory instrument in February, and the FCA is now clarifying the final boundaries of what falls inside the perimeter.

The regulated activities include issuing qualifying stablecoins in the UK, safeguarding or arranging safeguarding of qualifying cryptoassets, operating a qualifying cryptoasset trading platform, dealing in qualifying cryptoassets as principal, dealing in qualifying cryptoassets as agent, arranging deals in qualifying cryptoassets, and arranging qualifying cryptoasset staking. For brokers who currently execute, custody, or settle crypto for clients through informal arrangements or offshore counterparties, every one of these activities will require FCA authorisation or a regulated infrastructure partner after October 2027.

The gateway mechanics deserve close attention. The application period for firms that want to undertake the new cryptoasset regulated activities will be open from 30 September 2026 to 28 February 2027. The FCA expects the application period will open on 30 September 2026 and will close on 28 February 2027 as set out in its direction. That is a five-month window. Missing it does not merely delay your entry into the UK market; it fundamentally changes your operational position.

Firms applying within this window will receive priority review, and if decisions are delayed, a saving provision will allow them to continue operating temporarily. Those applying late will enter a transitional regime, permitting only the run-off of existing contracts without taking on new business until full authorisation is granted. The distinction matters. Firms inside the saving provision can continue serving clients while their application is processed. Firms outside it face a cliff edge: no new contracts, no new clients, existing relationships only. In practical terms, that is market exit by default.

The transition from the current AML registration regime to full FSMA authorisation is not automatic. Firms should note that there will be no automatic conversion from MLR registration to FSMA authorisation. Every firm, whether currently registered under the MLRs, authorised under FSMA for other activities, or operating as a payment institution, must make a fresh application for cryptoasset permissions under the new framework. This is a hard reset. Existing regulatory status buys you nothing.

Although October 2027 may appear distant, the practical runway is actually shorter. The FCA has said that authorisation assessments will reflect the breadth and complexity of the new regime. For many firms, this suggests preparation work might need to begin well in advance of the application window, particularly if governance arrangements, data capabilities, and control frameworks need development.

The scope of what the FCA will assess during authorisation extends well beyond AML controls. Across its consultation program, the FCA has consistently applied the principle of "same risk, same regulatory outcome". Where crypto asset activities present risks comparable to those seen in traditional finance, the regulatory response is intended to be comparable. Applications for authorisation may be assessed against a range of FCA Handbook requirements including Threshold Conditions, Principles for Businesses, SYSC governance requirements, SM&CR senior management accountability, and financial crime controls. This is not a light-touch regime.

For unregulated brokers, the arithmetic is unforgiving. Building authorisation-ready infrastructure from scratch, governance frameworks, custody arrangements, settlement systems, compliance monitoring, capital requirements, takes twelve to twenty-four months under optimistic assumptions. The application window opens in five months. Even if you started today, you would be submitting an application for a business that exists largely on paper, asking the FCA to approve a firm that has not yet demonstrated it can operate the systems it is describing. The FCA has historically been sceptical of such applications.

The alternative, waiting to see how the regime settles before committing resources, looks increasingly like a decision to exit the UK crypto market. Failure to submit an application during the application window will result in a firm losing the benefit of the transitional regime, thereby facing cliff-edge risk when the regime comes into force. Clients with crypto demand will not wait eighteen months for their broker to resolve a licensing question. They will move to counterparties who can execute today.

The FCA's consultation timeline reinforces this urgency. Final policy statements are expected in summer 2026, with a concluding perimeter guidance statement anticipated in autumn 2026. By the time the rules are finalised, the application window will already be open. Firms that have not begun preparation will be reacting to published rules rather than building to anticipated standards.

For market participants, the transition introduces both risk and opportunity. Firms that adapt early to the evolving requirements may gain a competitive edge as weaker or non-compliant operators exit the market. The corollary is less comfortable: firms that adapt late, or not at all, will find themselves on the wrong side of a regulatory line that separates those who can serve UK clients from those who cannot.

The operational question for compliance leads at unregulated brokers is no longer whether to pursue crypto capabilities, but how. The FCA has made clear that the UK crypto market will be regulated to standards comparable with traditional financial services. Meeting those standards requires either substantial internal build, which the timeline does not permit, or partnership with infrastructure providers who already hold the relevant permissions. Neither path is simple, but one of them is still available.

References

[1] FCA Consultation Paper CP26/13: Cryptoasset perimeter guidance

[2] FCA Press Release: FCA consults on guidance on UK's future crypto regime

[3] FCA: Cryptoassets. How the gateway will operate

[4] HM Treasury: Regulatory regime for cryptoassets (regulated activities), Draft SI and Policy Note

Stay informed.
<NEWSLETTER REGISTRATION CONFIRMED>
<ERROR>