UK FCA Crypto Licensing Regime: October 2027 Deadline, £150K Minimum Capital, and the End of the Wild West
The UK crypto industry is getting a deadline. A real one, with real consequences.
By 25 October 2027, every crypto firm operating in the UK will need full FCA authorisation. No more temporary registrations. No more AML-only oversight. No more hoping the regulator loses interest.
The Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026 — made by Parliament on 4 February 2026 — folds crypto into the same regulatory framework that governs banks, brokers, and asset managers. Not a standalone crypto rulebook like the EU’s MiCA. Not a jurisdictional turf war like the US. Just existing financial services law, extended to cover digital assets.
For an industry that’s operated under an AML-only regime where 85% of registration applications failed, this is either the regulatory clarity it’s been begging for — or the compliance burden that finally kills the small players.
The Application Window Is Already Closing
The timeline is tight and non-negotiable:
- 30 September 2026: FCA authorisation gateway opens
- 28 February 2027: Application window closes
- 25 October 2027: Regime comes into force — full authorisation required
Any firm that doesn’t apply by February 2027 must wind down its UK cryptoasset business before October. Not pause. Not wait for a second window. Wind down.
The FCA published three landmark consultation papers on 16 December 2025 — covering trading platforms and intermediaries (CP25/40), admissions, disclosures and market abuse (CP25/41), and the prudential regime (CP25/42). Consultation closed 12 February 2026. Final rules will be published in policy statements during 2026.
The message to the industry is clear: the preparation window is now. By the time the gateway opens in September, you should already have your application ready.
What the Regime Actually Covers
The new framework creates a single regulatory category: Authorised Cryptoasset Firm (ACF). It covers:
- Cryptoasset Trading Platforms (CATPs) — systems matching multiple third-party buying and selling interests
- Cryptoasset Intermediaries — dealing as principal or agent, arranging transactions
- Cryptoasset Lending & Borrowing — transferring ownership for returns
- Cryptoasset Staking — locking assets for blockchain validation
- Stablecoin Issuers — fiat-referenced stablecoin issuance
- Cryptoasset Custodians — safeguarding qualifying cryptoassets
Notably excluded: DeFi protocols remain largely outside the perimeter. NFTs aren’t directly captured unless they function as financial instruments. The FCA is drawing the line at centralised intermediaries — the entities it can identify, regulate, and hold accountable.
This is a deliberate choice. The EU’s MiCA tried to capture everything. The US is still fighting over jurisdiction. The UK is regulating what it can reach and leaving the rest for later — when the Secretary of State gains secondary legislation powers to expand scope, much like the Cyber Security and Resilience Bill does for digital infrastructure.
The £150K Question
The prudential regime is where the rubber meets the road. The FCA is proposing a MiFID-style capital framework with three components: a Permanent Minimum Requirement (PMR), a Fixed Overheads Requirement (FOR), and K-factor requirements scaled to activity.
The headline numbers:
- Crypto custodians: £150,000 minimum capital
- Stablecoin issuers: £350,000 minimum capital
- Where a firm does both, the higher amount applies
But the minimum capital is just the start. Stablecoin issuers must hold 2% of average issuance. Custodians need 0.04% of average assets safeguarded. Everyone needs a Basic Liquid Assets Requirement (BLAR) of one-third of FOR plus 1.6% of client guarantees. Stablecoin issuers face an additional Issuer Liquid Asset Requirement (ILAR) to ensure 1:1 backing.
Then there’s the annual ICARA — Internal Capital Adequacy and Risk Assessment. A process familiar to every FCA-regulated firm, now mandatory for crypto companies. It’s not just about having the money. It’s about demonstrating you understand your risks, have modelled your exposures, and can absorb losses without collapsing.
💡 85% of crypto registration applications under the old AML-only regime were rejected, refused, or withdrawn. Only 41 out of approximately 265 applications were approved. The FCA isn’t easing up — it’s adding more requirements.
The Temporary Registration Disaster
To understand why the FCA is going this hard, you need to understand how badly the previous regime failed.
Under the old system, crypto firms only needed to register with the FCA for Anti-Money Laundering compliance. No capital requirements. No conduct rules. No consumer protection beyond financial promotions. It was supposed to be a stepping stone to comprehensive regulation.
It was a catastrophe.
85% of crypto registration applications were rejected, refused, or withdrawn. Only 41 out of approximately 265 were approved. 29 were outright rejected. 74% either refused to continue or couldn’t meet minimum standards.
Major firms like B2C2 and Wirex withdrew their applications. Revolut sat on the temporary register, at risk of shutdown. The Temporary Registration Regime was extended multiple times — originally supposed to end in March 2022, it limped on because the FCA couldn’t process applications fast enough and firms couldn’t meet basic standards.
The FCA eventually imposed restrictions on all newly authorised firms: monthly customer reporting, KYC refreshes, enhanced monitoring. The regulator’s frustration was palpable. The new FSMA-based regime is what that frustration produces — comprehensive regulation that leaves no ambiguity about what’s expected.
How It Compares to EU MiCA
The comparison is inevitable, and the differences are fundamental.
The EU created MiCA — a standalone, crypto-specific regulation with its own categories, its own definitions, and its own enforcement mechanisms. It’s comprehensive, prescriptive, and fully in force since December 2024. It covers stablecoins (both asset-referenced tokens and e-money tokens), utility tokens, and crypto-asset service providers.
The UK is doing something philosophically different: folding crypto into existing FSMA. Crypto firms become “Authorised Cryptoasset Firms” — a new category within the existing framework, not a separate regime. They’ll follow adapted versions of existing conduct rules, prudential requirements, and consumer protection standards.
The UK approach has advantages. It leverages existing regulatory infrastructure. It avoids the definitional complexity of creating an entirely new rulebook. It’s principles-based rather than prescriptive — the FCA adapts existing frameworks rather than writing from scratch.
But it also has trade-offs. MiCA provides a single passport for the entire EU — one authorisation, 27 markets. UK firms wanting to serve European clients need separate authorisation in each jurisdiction (or an EU entity). The UK’s approach also imposes stricter advertising rules than MiCA: cooling-off periods, personalised risk warnings, and restrictions on referral bonuses.
For crypto firms operating globally, this creates a triple compliance burden: UK (FSMA-based), EU (MiCA), and whatever the US eventually decides (still TBD). The October 2027 deadline isn’t just a UK milestone — it’s a forcing function for firms to decide which jurisdictions are worth the compliance cost.
The US Comparison
The US remains a regulatory mess. The SEC and CFTC continue fighting over jurisdiction. The GENIUS Act for stablecoins is advancing, and potential market structure bills are in committee, but there’s no comprehensive framework yet.
The UK’s approach actually aligns more with US-style oversight — treating crypto like traditional finance — but with the crucial difference that the UK has actually published rules, set deadlines, and is moving to implementation. The US is still arguing about definitions.
For firms choosing between jurisdictions, the UK’s clarity is a competitive advantage, even if the compliance burden is heavier than the previous regime. Regulatory certainty beats regulatory limbo, even when the certainty is expensive.
Who This Hurts
The £150K minimum capital for custodians and £350K for stablecoin issuers will be manageable for institutional players — the Coinbases, Krakens, and Circle’s of the world. For smaller UK-based crypto firms, it’s a different story.
The ICARA process alone requires significant compliance infrastructure — risk modelling, capital planning, annual reviews. Combined with the Fixed Overheads Requirement (one quarter of previous year’s expenditure), smaller firms face compliance costs that may exceed their revenue.
The industry is expecting consolidation. Some firms will merge. Some will be acquired. Some will leave the UK market entirely. The FCA’s record with the Temporary Registration Regime suggests it won’t lower the bar to keep marginal players in the market.
The tighter advertising rules add another layer. Cooling-off periods for first-time crypto buyers. Personalised risk warnings. Restrictions on refer-a-friend bonuses. These are stricter than both MiCA and US rules, and they’ll hit the growth strategies of firms that rely on aggressive customer acquisition.
What Firms Need to Do Now
If you’re a crypto firm with UK operations, the timeline is already moving:
- Assess your category: Are you a trading platform, intermediary, custodian, staking provider, or stablecoin issuer? Multiple activities mean multiple obligations.
- Start capital planning now: If you’re a custodian, you need at least £150K. If you issue stablecoins, £350K. But minimum capital is the floor, not the ceiling — your ICARA will likely require more.
- Build your compliance infrastructure: The ICARA process, ongoing capital monitoring, customer reporting, and market abuse surveillance all require dedicated resources.
- Review your advertising: Cooling-off periods and risk warnings are coming. Audit your customer acquisition funnels now.
- Prepare your application: The gateway opens September 2026. Have your business plan, capital projections, compliance framework, and governance structures ready.
- Decide on the UK market: If the compliance cost exceeds the revenue opportunity, make that decision early. Winding down by October 2027 is cleaner than scrambling at the deadline.
The Bigger Picture
Chancellor Rachel Reeves has framed the regime as giving firms “clear rules of the road.” She’s right — but the road has tolls, and they’re not cheap.
The UK crypto licensing regime represents a philosophical choice: the government would rather have fewer, well-capitalised, properly regulated crypto firms than a large number of undercapitalised, poorly governed ones. It’s the same instinct that drove the Cyber Security and Resilience Bill — minimum standards, enforced with real penalties, applied to entities that handle other people’s money and data.
The contrast with the UK’s approach to AI regulation is striking. AI — a technology with potentially transformative risks — gets delayed indefinitely. Crypto — a mature financial technology — gets a hard deadline with capital requirements. The difference isn’t risk. It’s political calculus. Crypto regulation plays well with voters who associate it with fraud. AI regulation plays badly with investors who associate it with innovation barriers.
But consistency doesn’t drive policy. Optics do.
What Happens Next
Final rules will land in policy statements during 2026. The gateway opens 30 September 2026. Applications close 28 February 2027. The regime goes live 25 October 2027.
Between now and then, expect three things: a wave of pre-application consultations with the FCA, a wave of mergers and acquisitions as smaller firms seek scale, and a wave of departures as firms decide the UK market isn’t worth the cost.
The FCA’s track record with the Temporary Registration Regime suggests it won’t compromise on standards to hit participation targets. 85% failure rate under the old regime. The new regime has more requirements, not fewer.
For the UK crypto market, October 2027 is the moment of truth. The firms that make it through the gateway will operate with regulatory certainty, consumer trust, and institutional credibility. The ones that don’t will have to find other markets — or other businesses.
The Wild West is over. Whether what replaces it is a functioning financial market or a ghost town depends on how many firms can afford the ticket.
Related Reading
- UK Cyber Security and Resilience Bill: Why MSPs Are About to Become the Front Line — The same regulatory tightening happening in cyber security, with similar supply chain and compliance implications
- UK Postponing AI Compliance Deadlines: The Country That Can’t Decide What It Wants to Regulate — How the UK’s light-touch AI approach contrasts with hard crypto and cyber regulation
- IMF Weighs In: The 2026 Roadmap for Real-World Asset Tokenization — The broader institutional framework for tokenised assets that FCA crypto licensing enables
Sources
- FCA — A new regime for cryptoasset regulation
- FCA CP25/40 — Regulating cryptoasset activities
- FCA CP25/41 — Admissions, disclosures, market abuse
- FCA CP25/42 — Prudential regime for cryptoasset firms
- SI 2026/102 — Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026
- Linklaters — FCA proposes MiFID-style capital requirements
- PwC UK — Understanding the next phase of crypto rules
- UK Parliament Treasury Committee — 85% of crypto firms failed
- Vixio — FCA Data Shows 85% of Attempted Crypto Registrations Fail
- Morgan Lewis — UK and EU Crypto Regimes: The Road Ahead
- Finextra — MiCA vs UK Regulation
- Reuters — UK crypto regulation starts October 2027
- CoinDesk — UK plans to start regulating cryptocurrency in 2027
- Latham & Watkins — UK cryptoasset regime key takeaways
- PryceWilliams — UK cryptoasset regulations October 2027
- GOV.UK — Policy note on crypto regulated activities
- Paul Hastings — The new UK cryptoasset regime: time to act
- Yahoo Finance — FCA sets September 2026 gateway
- BCLP — FCA CP25/40 explained
- CoinPaprika — FCA cryptoasset rules advance 2027 start
