UK Crypto Firms Get Five Months to Seek FCA Authorization

The UK Financial Conduct Authority has opened a five-month application window for crypto businesses that want to continue operating under the country’s new FSMA regime. Firms have until 28 February 2027 to apply, with the rules taking effect on 25 October 2027.

The application period is not just administrative housekeeping. A crypto firm may need to show that its controls, governance and customer protections are ready for a broader regulatory system. For some businesses, the work starts with a gap analysis rather than a form.

Who needs to apply

The new requirements cover the activities the FCA regulates as cryptoasset services. Firms will need FCA authorization, either through a new application or a change to permissions they already hold, to perform those activities.

Registration under the Money Laundering Regulations does not carry over automatically. The same applies to firms registered or authorized under the Payment Services Regulations 2017 and the Electronic Money Regulations 2011. They must secure fresh authorization under the Financial Services and Markets Act framework.

That distinction matters for existing firms. Money laundering registration has not become a shortcut into the new regime. Current controls may provide useful evidence of compliance, but the FCA expects firms to assess broader changes, including market conduct, customer treatment and senior leadership.

The FCA’s rules cover areas including stablecoin issuance, crypto trading platforms and market abuse. The regulator finalized the rules in June, while its 30 September application guidance sets out what firms need to do before the regime begins.

Five months to prepare

The FCA expects to decide applications submitted during the window before the new regime starts. That gives firms time to work through the application process, although the sources reviewed do not provide a standard decision time.

The FCA is asking applicants to:

• Compare existing arrangements with the expected FSMA requirements.
• Strengthen any controls that fall short.
• Build an implementation plan with board-level oversight.
• Assess the resources and costs needed to meet the new standards.

Applications must be submitted through the FCA’s Connect system. Firms can also request a free, optional meeting through the Pre-Application Support Service. The FCA says the meeting gives applicants a chance to explain their business model and understand its expectations, but it does not provide advice or guarantee approval.

A small design choice makes the process clearer: the service can explain what the regulator is looking for, but the application still stands or falls on what the firm submits. Preparation is useful. A polished meeting is not a substitute for authorization.

What happens if approval arrives late

The regime includes a saving provision for firms that apply during the official window but have not received a final decision by 25 October 2027. They can continue providing cryptoasset services until the application is finally determined, including during an appeal to the Upper Tribunal.

That protection is conditional. A firm using the saving provision must tell the FCA as soon as reasonably practicable after the regime fully starts. It must also notify the regulator when it stops relying on the provision.

The route is less forgiving for late applicants. The FCA says it will not accelerate an assessment to compensate for a late submission. If a firm has not been authorized before commencement, it enters a transitional provision by law.

During that transitional period, the firm may perform existing contracts to the extent needed to complete them. It cannot enter new contracts with either existing or new UK customers. This allows some current business to finish, but it does not provide a normal operating model for the future.

Firms that never apply face the clearest break. They must run off their UK cryptoasset business before the regime begins. They do not receive either the saving or transitional provision, and continuing without the required permission could breach the FSMA general prohibition.

The practical deadline is earlier than it looks

The official closing date is 28 February 2027, but the FCA’s preparations advice points to work that has to happen well before a submission is ready. A late or incomplete application can be rejected or delayed. Poor-quality or out-of-window applications may also leave an existing firm unable to continue operating when the regime starts.

For a crypto company with board approval, compliance work or systems to redesign, five months is the formal window, not the whole preparation period. The firms best placed to use it are the ones that can identify gaps now, assign ownership at board level and test whether their customer and market controls match what the FCA expects.

The UK is moving from registration focused on anti-money laundering toward direct authorization of defined cryptoasset activities. The practical question for each firm is simple: can it show that its business is ready, not merely registered?