The Financial Conduct Authority has opened the application window for firms seeking authorization under the United Kingdom’s new cryptoasset regulatory regime.
Applications opened on September 30, 2026 and the application period closes on February 28, 2027. The regime itself is expected to come into force on October 25, 2027.
The FCA has also published perimeter guidance explaining how the new framework applies to different cryptoasset business models. Activities potentially requiring authorization include issuing qualifying stablecoins, operating cryptoasset trading platforms, dealing and arranging transactions, safeguarding cryptoassets and arranging cryptoasset staking.
The timing matters because the regulatory question for firms is becoming operational.
During the policy development phase, a company could ask whether the UK intended to regulate a particular activity. The more immediate question is now which legal entity performs that activity, which permissions it needs and whether the controls around the service are suitable for an authorized business.
That is particularly relevant to firms whose product descriptions conceal several distinct activities.
A business may describe itself as a platform or wallet provider while its operating model also involves safeguarding assets, arranging transactions, issuing an instrument or providing access to staking. Authorization therefore depends on the actual workflow, not the commercial label attached to the product.
The same issue applies to firms entering the UK from another jurisdiction. A regulatory permission elsewhere does not remove the need to determine how the UK perimeter applies to the local activity.
This is where regulatory implementation starts to affect architecture.
Legal entities, custody arrangements, client flows, contracts, financial crime controls, governance and operational responsibilities need to correspond with the activities the FCA will regulate. Firms that treat authorization as a documentation exercise may find that the harder work sits inside the operating model itself.
What to watch
The next useful evidence will be the composition of the applicant population and the way firms restructure products or legal entities in response to the perimeter.
The opening of the window does not mean every current crypto business will become authorized. It starts the process by which firms will have to demonstrate that their actual activities can operate inside the new regime.
The effective date remains more than a year away. Operational preparation has already started.