The UK Financial Conduct Authority published final guidance on Sept. 16 explaining when cryptoasset activities fall inside the country’s future authorization regime. The regulator’s PS26/18 policy statement says firms that safeguard assets, operate trading platforms, arrange deals or arrange staking may need permission under the Financial Services and Markets Act.
The guidance also addresses overseas businesses. A firm does not avoid the UK perimeter simply because it is incorporated elsewhere if it provides in-scope services to UK consumers or operates through an authorized firm acting as its agent. The exact test depends on the activity, the customer relationship and any statutory exclusion.
That gives offshore platforms a specific question to answer: Where does the UK customer access the service? A website, app or institutional arrangement can create a different regulatory analysis from a purely foreign transaction with no UK-directed activity.
The dates firms need to track
The FCA says the new cryptoasset regime comes into force on Oct. 25, 2027. Firms seeking transitional arrangements can apply between Sept. 30, 2026 and Feb. 28, 2027. Existing registrations under the UK’s anti-money-laundering rules will not automatically convert into full authorization.
The timetable matters because preparation starts before the legal start date. Businesses must map their services, identify the entity that contracts with UK customers, review custody and safeguarding controls, and decide whether they need a variation of an existing permission or a new application.
The FCA’s guidance covers qualifying stablecoin issuance, trading platforms, dealing, arranging, custody and staking. It does not grant permission to any named exchange or settle every cross-border question; firms still need to read the rules that apply to their exact model and seek independent legal advice where the boundary is unclear.
A regime with practical consequences
The regulator says the perimeter guidance responds to 78 consultation responses and is meant to help firms prepare for the wider rulebook. The FCA’s policy statements also address admissions and disclosures, market abuse, stablecoin issuance, prudential requirements and how the handbook applies to cryptoasset activities.
For customers, the change should make it easier to distinguish a firm that has entered the authorization process from one that merely advertises UK access. Authorization will not remove market, custody or technology risk, but it will attach the firm to conduct, capital, reporting and supervision requirements that do not follow from a marketing claim.
The next evidence is the first application records, the FCA’s decisions and any guidance on firms that serve UK users from abroad. A deadline is not an authorization. Until the regulator lists a firm as authorized, readers should not infer protection from the fact that an exchange accepts UK customers or says it plans to apply.
