From the journal

FCA Finalises UK Cryptoasset Regime Rules, Authorisation Window Opens 30 September 2026

On 30 June 2026, the Financial Conduct Authority published five policy statements setting out final rules for the full range of regulated cryptoasset activities in the UK. The rules cover admissions and disclosures, market abuse, stablecoin issuance, prudential requirements, and FCA Handbook application. Firms must apply for authorisation between 30 September 2026 and 28 February 2027 to retain access to transitional provisions until the regime takes full effect on 25 October 2027.

3 min read

On 30 June 2026, the Financial Conduct Authority published five policy statements setting out final rules for the UK cryptoasset regime. The statements cover admissions and disclosures, market abuse, stablecoin issuance, prudential requirements, and FCA Handbook application to regulated cryptoasset activities. The regime enters full legal effect on 25 October 2027.

The regime's legal basis is The Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026, passed by Parliament on 4 February 2026. Those regulations designate a broad range of cryptoasset activities as specified activities under FSMA 2000, requiring firms to hold FCA authorisation or permission. The five policy statements span five regulatory domains. The admissions and disclosures statement sets out what information issuers must publish before and after a token is admitted to trading. A bespoke market abuse statement covers insider dealing and market manipulation specific to cryptoasset markets. A prudential statement calibrates capital and liquidity requirements to cryptoasset business models. A stablecoin statement specifies requirements for fiat-backed e-money token issuers. An FCA Handbook application statement maps existing conduct and organisational obligations onto regulated cryptoasset activities. Alongside the five statements, the FCA published three pieces of finalised guidance and two further guidance consultations.

Cryptoasset exchanges, custodians, stablecoin issuers, and firms providing lending, staking, or portfolio management in cryptoassets must obtain full FCA authorisation before 25 October 2027. Firms already registered under the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 may apply for authorisation between 30 September 2026 and 28 February 2027. Those that apply within the window may rely on transitional provisions to continue operating while the FCA assesses their application. Firms that miss the 28 February 2027 deadline forfeit access to transitional arrangements and may be required to stop regulated activities until authorisation is granted.

The two further guidance consultations address areas where the FCA requires additional market input before finalising rules, creating residual rule-making risk in those domains. Firms should map their activities against the five policy statement domains and assess existing compliance infrastructure against the new requirements before filing an authorisation application. The full cryptoasset regime applies only to firms granted FSMA permission on or after 25 October 2027.

We may advise on cryptoasset regulatory compliance and have a partner network with direct experience on FCA authorisation for cryptoasset firms. Contact us to discuss a readiness assessment or authorisation pathway. Work we undertake includes cryptoasset regulatory licensing, FSMA permissions applications, stablecoin issuance compliance, market abuse policy development, and prudential requirements analysis.

Source: Financial Conduct Authority, Overview of Cryptoassets Regime Policy Statements, 30 June 2026

Crypto Regulatory

More from the journal

See all
Illia Prokopiev

From Cloud Concentration to AI Dependence: The UK’s Critical Third Parties Regime

The United Kingdom now directly oversees designated technology suppliers whose service failures could threaten financial stability. The question is whether the first cloud designations show a legal expansion toward AI-model providers, and what the present regime requires. This analysis assumes the quoted statement concerns the UK financial-services Critical Third Parties regime and assesses the law through 14 July 2026.

Alberta Regulated iGaming Market Launched on 13 July 2026 with 22 Operators

Alberta's regulated private iGaming market launched on 13 July 2026, making Alberta the second Canadian province to permit private online gambling operators after Ontario. The Alberta Gaming, Liquor and Cannabis Commission serves as market regulator and the Alberta iGaming Corporation oversees commercial operations and operator contracts. Twenty-two operator sites went live on day one, including FanDuel, DraftKings, BetMGM, and BetRivers. Operators must fully launch or exit the Alberta market by 13 October 2026.

European Commission Presents Cybersecurity and AI Action Plan on 7 July 2026

On 7 July 2026, the European Commission presented an Action Plan on Cybersecurity and Artificial Intelligence. The plan directs the Commission and ENISA to evaluate advanced AI models before they reach the EU market, establish a secure testing platform for critical-sector organisations, and launch an EU Grand Challenge on AI-powered cybersecurity solutions. It operates alongside the AI Act, NIS2 Directive, DORA, Cyber Resilience Act, and Cyber Solidarity Act, and introduces no new directly binding obligations.