UK sets final crypto rules as firms face 2027 FCA authorization deadline

The FCA has now published the full crypto framework it has been building toward, and the main message for firms is simple: if you want to operate in the UK, you will need FCA authorization. For PSPs, acquirers, custodians, and stablecoin issuers, this turns the UK from a consultation exercise into a licensing project with a hard timeline.

1. The licensing window for crypto companies opens in September and runs until Feb. 28, 2027, before the regime goes live on Oct. 25, 2027. The framework covers trading platforms, custodians, stablecoin issuers, staking companies and other intermediaries.
2. Under the new rules, crypto firms in the UK will be held to “similar standards” as other financial service providers, according to David Geale, executive director of payments and digital finance at the FCA. The regulator said the framework is meant to give firms both regulatory certainty and room to innovate, which is a tidy way of saying there is now a rulebook and a deadline.
3. Existing authorization under the money laundering regulations will not be enough. AML-authorized crypto firms will need new licenses, and existing operators may only continue specified activities for a limited period under the framework’s transitional “savings provisions” while they apply.
4. The FCA said pre-application support meetings will be available starting next month. It will also set out policy statements during a webinar on July 17, then publish another policy statement in September on how the regulatory perimeter applies to cryptoasset activities.
5. On stablecoins, the FCA kept the core framework but simplified the capital standards. The revised rules no longer require estimated redemption forecasts in the backing asset composition test, add a statutory trust requirement over reserves, remove unallocated backing fund accounts, require specific withdrawal rights for users, permit a 5% excess in the backing asset pool, and allow limited intragroup custody subject to safeguards.

The practical read for high-risk payment businesses is that the UK is moving from ambiguity to authorization. If your crypto product depends on UK access, the next question is not whether the FCA will care, but which entity in the stack will hold the license and how quickly it can get through the process.