UK finalizes crypto rules; authorization starts Oct. 25, 2027

The Financial Conduct Authority has finalized a regulatory framework for cryptoasset activities that sets prudential requirements, market abuse controls and stablecoin standards. Firms must obtain FCA authorization from Oct. 25, 2027. The application window runs from Sept. 30, 2026 to Feb. 28, 2027, and pre-application support meetings will begin in July. Existing registrations under the Money Laundering Regulations will not convert automatically and firms must secure FCA approval to continue regulated crypto activities after the regime takes effect.

The framework creates a single regulatory structure for the full range of regulated cryptoasset activity in the UK. It applies conduct, operational resilience and consumer protection requirements where risks are comparable to those in traditional financial services. The rules cover crypto trading platforms, dealing and arranging firms, custodians, stablecoin issuers, lending and borrowing providers, staking firms and certain decentralised finance businesses that have an identifiable controlling entity.

Qualifying cryptoasset trading platforms, or QCATPs, must meet new admission criteria, perform due diligence on listed assets and publish qualifying cryptoasset disclosure documents for assets admitted to trading. The FCA removed a previous exception that had allowed fungible cryptoassets to be listed without a disclosure document.

The market abuse framework introduces rules on insider trading and market manipulation and updates requirements for disclosure of inside information and intermediary notifications. For large QCATP operators the regulator kept an industry-led approach while narrowing mandatory on-chain monitoring obligations.

Stablecoin issuers must meet rules covering reserve backing, safeguarding arrangements, redemption processes and customer disclosures. The FCA removed a prior obligation for redemption forecasting of backing assets, allowed limited intragroup custody of backing assets subject to safeguards, and permitted backing pools to hold up to 5% in excess assets. The regulator also reduced the K-SII capital coefficient for stablecoin issuance to 1% from 2%.

Prudential standards for eligible cryptoassets admitted to UK qualifying trading platforms were simplified. The final framework applies a single net risk position requirement of 40% and a 40% counterparty default volatility adjustment, replacing a previously proposed two-tier classification system.

Until Oct. 25, 2027 the FCA's oversight of crypto firms will remain limited to financial promotions and anti-money laundering requirements. Firms operating in scope of the new regime should plan to submit applications within the set window and use the regulator's pre-application support to prepare documentation.

David Geale, the FCA's executive director of payments and digital finance, described the package as “a significant milestone for crypto regulation in the UK,” saying the regime aims to give firms regulatory certainty while leaving scope for innovation and noting that consumers “will benefit from standards aligned more closely with those applied to other financial services providers.” The final policy documents narrow and clarify several earlier proposals following industry consultation, with the regulator emphasising proportionality in monitoring and reporting obligations for larger market operators.