From the journal

FCA Publishes Final Rules for UK Cryptoasset Regime, Taking Effect October 2027

The Financial Conduct Authority published its complete final rule set for the UK cryptoasset regime on 30 June 2026, completing a Crypto Roadmap started in 2023. Cryptoasset service providers must apply for FCA authorisation between 30 September 2026 and 28 February 2027. The full mandatory regime takes effect on 25 October 2027.

2 min read

The Financial Conduct Authority published its final rules and guidance for the UK cryptoasset regime on 30 June 2026. The publication completes the Crypto Roadmap the FCA launched in 2023. The authorisation window for firms opens on 30 September 2026. The full mandatory regulatory perimeter takes effect on 25 October 2027.

The statutory foundation is the Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026. Parliament enacted those Regulations on 4 February 2026, bringing a broad range of cryptoasset activities within the Financial Services and Markets Act 2000 perimeter for the first time at primary-legislation level. The FCA's regulatory reach now extends beyond the prior anti-money laundering registration and financial promotions consent regimes. The final rules span four policy statements covering stablecoin issuance under Policy Statement PS26/10, trading admission and disclosure, market abuse for cryptoassets, and the application of the FCA Handbook to regulated cryptoasset activities.

All firms intending to carry on regulated cryptoasset activities in the UK must obtain FCA authorisation under the Financial Services and Markets Act 2000 before 25 October 2027. Exchanges, custody providers, stablecoin issuers, and trading platforms must submit applications to the FCA between 30 September 2026 and 28 February 2027. Anti-money laundering registration under the Money Laundering Regulations does not substitute for full authorisation under the new regime. Firms with temporary registered status should begin authorisation scoping immediately.

The FCA confirmed that firms already registered under the anti-money laundering regime may continue to operate while their authorisation applications are pending. The FCA also published consultation paper CP26/4, covering FCA Handbook modifications for the second part of the regulated cryptoasset activities regime. CP26/4 remains open for responses as of this post. Its outcome will affect conduct requirements applying from 25 October 2027.

Licentium may advise firms on authorisation strategy, application preparation, and compliance structuring under the UK cryptoasset regime. We also work with firms on product and business model analysis as the new perimeter takes effect. Work we undertake includes cryptoasset regulatory authorisation, FSMA perimeter analysis, CASP licensing, stablecoin issuance compliance, trading platform regulation, market abuse controls, and FCA Handbook implementation.

Source: Financial Conduct Authority, Cryptoasset Regime Policy Statements, 30 June 2026

Crypto Regulatory

More from the journal

See all
Illia Prokopiev

From Cloud Concentration to AI Dependence: The UK’s Critical Third Parties Regime

The United Kingdom now directly oversees designated technology suppliers whose service failures could threaten financial stability. The question is whether the first cloud designations show a legal expansion toward AI-model providers, and what the present regime requires. This analysis assumes the quoted statement concerns the UK financial-services Critical Third Parties regime and assesses the law through 14 July 2026.

Alberta Regulated iGaming Market Launched on 13 July 2026 with 22 Operators

Alberta's regulated private iGaming market launched on 13 July 2026, making Alberta the second Canadian province to permit private online gambling operators after Ontario. The Alberta Gaming, Liquor and Cannabis Commission serves as market regulator and the Alberta iGaming Corporation oversees commercial operations and operator contracts. Twenty-two operator sites went live on day one, including FanDuel, DraftKings, BetMGM, and BetRivers. Operators must fully launch or exit the Alberta market by 13 October 2026.

European Commission Presents Cybersecurity and AI Action Plan on 7 July 2026

On 7 July 2026, the European Commission presented an Action Plan on Cybersecurity and Artificial Intelligence. The plan directs the Commission and ENISA to evaluate advanced AI models before they reach the EU market, establish a secure testing platform for critical-sector organisations, and launch an EU Grand Challenge on AI-powered cybersecurity solutions. It operates alongside the AI Act, NIS2 Directive, DORA, Cyber Resilience Act, and Cyber Solidarity Act, and introduces no new directly binding obligations.