The rules have changed. If you run a business that touches cryptocurrency in the UK — whether you’re an exchange, a custodian, a stablecoin issuer, or even a DeFi platform with a UK-facing interface — the legal landscape beneath your feet shifted dramatically on 4 February 2026.
That was the day the Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026 were enacted. And with them came a deadline that every crypto business in the UK needs to have circled in red: 30 September 2026.
Here’s the short version: from that date, the FCA’s authorisation gateway for crypto firms opens. If your business is in scope and you don’t apply in time, you risk committing a criminal offence under UK financial services law. Not a fine. Not a warning letter. A criminal offence.
This guide explains what has changed, who is affected, and what steps you should be taking right now.
What Has Actually Changed?
For years, crypto businesses in the UK operated under a patchwork of rules — anti-money laundering registration with the FCA, financial promotions restrictions, and consumer protection law. That approach is now being replaced with a comprehensive regulatory regime that mirrors how traditional financial services firms are regulated under the Financial Services and Markets Act 2000 (FSMA).
The new Cryptoassets Regulations 2026 bring five core activities within the regulatory perimeter:
- Operating a crypto trading platform
- Crypto custody (safeguarding digital assets on behalf of clients)
- Stablecoin issuance
- Crypto lending and staking services
- Acting as a crypto intermediary or broker
If your business does any of these things and serves UK customers, you will need to be authorised by the FCA, or qualify for an exemption. There is no grey area here.
The September 2026 Deadline: What It Means
The FCA’s application window runs from 30 September 2026 to 28 February 2027. Firms that apply within this window can continue operating during the transition period while their applications are processed. Firms that don’t apply — or apply too late — face a cliff edge: they will need to wind down their UK business before the new regime goes live in October 2027.
The FCA has also confirmed it will open a Pre-Application Support Service (PASS) in July 2026, to help firms prepare their submissions. Given the complexity of the authorisation process, firms that begin preparation now will be significantly better positioned than those who leave it until July.
Who Is Affected?
The scope is broader than many businesses realise. You are likely in scope if you:
- Operate any kind of exchange, trading desk or matching platform for crypto assets
- Hold client crypto assets in custody — even as a secondary service
- Issue or redeem stablecoins in the UK market
- Offer crypto lending, yield products or staking on behalf of clients
- Market or intermediate crypto products to UK consumers
- Build and operate a DeFi interface with identifiable UK users
It is worth noting that purely decentralised protocols — where there is genuinely no central operator — are not regulated. But if there is a company behind the interface UK users interact with, that company very likely falls within the new regime.
What Does FCA Authorisation Involve?
The FCA is adapting its existing financial services authorisation framework to crypto. That means firms will need to demonstrate:
- Fitness and propriety of senior managers and directors
- Adequate financial resources (capital requirements vary by activity)
- Robust AML/KYC procedures and systems
- Operational resilience — clear plans for system outages and cyber incidents
- Consumer protection measures — fair treatment of clients, clear disclosures
- Compliance with the Senior Managers and Certification Regime (SM&CR)
For businesses that have never been through an FCA authorisation, this is a substantial undertaking. The documentation requirements alone — policies, procedures, governance frameworks, financial projections — can take months to prepare properly. Starting the process now is not early. It is necessary.
What About Existing MLR-Registered Firms?
If your firm is already registered with the FCA under the Money Laundering Regulations (MLR) as a crypto asset business, that registration does not automatically transition into the new FSMA authorisation. You will still need to apply through the gateway. However, your existing registration may support your application — it demonstrates a compliance history that the FCA will take into account.
The Market Abuse and Promotions Framework
Alongside the authorisation regime, the 2026 regulations also introduce a market abuse framework specifically for qualifying cryptoassets. This covers insider dealing, market manipulation, and unlawful disclosure — mirroring the rules that apply to listed securities.
The financial promotions regime for crypto has also been tightening since 2023, and those rules remain in force under the new regime. If your business approves or communicates financial promotions related to crypto, you need to ensure you are doing so through a properly authorised route.
What Should You Do Right Now?
There is a clear order of operations for any crypto business that wants to be trading legally in the UK from October 2027 onwards:
- Assess whether you are in scope — a legal review of your business model and activities is the essential first step
- Identify which regulated activities you are carrying out — the list is specific and some activities have different requirements
- Begin preparing your authorisation application — governance structures, policies, financial resources, SM&CR mapping
- Register for FCA’s PASS when it opens in July 2026 — this gives you direct access to FCA support
- Submit your application between 30 September and 28 February 2027
The firms that will navigate this transition smoothly are the ones that treat it as a compliance project starting now, not a form-filling exercise starting in September.
How Saracens Solicitors Can Help
At Saracens Solicitors, our digital assets and corporate law teams have been advising crypto businesses, founders, and investors on the evolving UK regulatory landscape for years. We help clients assess whether they fall within the new regime, structure their legal entities appropriately, prepare the governance documentation required for FCA authorisation, and navigate the application process.
Whether you are a start-up building a crypto product or an established exchange looking to secure your UK operating licence, we can provide the legal support you need to get this right.
Contact us today for a confidential consultation: call 020 3588 3500 / email coco@saracenssolicitors.co.uk
The information in this blog is for general guidance only and does not constitute legal advice. You should seek specific legal advice for your individual circumstances.
