The UK Financial Conduct Authority has published final guidance setting out exactly which crypto activities will require authorization when the country’s new digital asset regime opens for business, giving firms a definitive checklist less than two weeks before the application window launches on Sept. 30.
The guidance, issued on Wednesday, covers the activities the FCA considers to fall inside the regulatory perimeter: issuing qualifying stablecoins, operating cryptoasset trading platforms, dealing and arranging transactions in cryptoassets, safeguarding client cryptoassets, and arranging crypto staking services. For each category, the document explains how the FCA interprets its remit and which specific permissions a firm will need to apply for before the regime takes effect.
## No automatic conversion of existing registrations
One of the most consequential points for firms already operating in the UK market is that existing registrations and permissions will not automatically convert into permissions under the new regime. Every firm will need to review its current activities against the guidance and decide whether it needs full FCA authorization, a variation of its existing permissions, or can continue operating outside the perimeter altogether.
That review exercise is exactly what the FCA intends the guidance to enable. “Getting ready for regulation starts with understanding how the regime applies to your business,” said David Geale, the FCA’s executive director of consumers, payments and competition. “This guidance gives firms the clarity they’ve asked for so they can prepare with confidence.”
The timeline firms must now plan around is tight at the front end. Applications open on Sept. 30, and firms that want to benefit from transitional arrangements must file by Feb. 28, 2027. The new regime fully takes effect on Oct. 25, 2027. The regulator has also signaled it is not finished writing: a consultation on further changes to its perimeter guidance is planned for later this year.
## A regulatory framework two years in the making
The publication lands at the end of a long sequence of building blocks. Parliament approved the regulations bringing cryptoassets within the FCA’s regulatory remit back in February, and the regulator finalized a core package of rules and guidance in June. Wednesday’s document fills in the practical layer: the activity-by-activity map that determines who needs to knock on the FCA’s door.
The pace has picked up on the political side as well. Last week, the House of Lords voted 194-138 to attach an amendment to the Financial Services and Markets Bill requiring the Treasury to develop a comprehensive digital asset strategy within 12 months of the bill becoming law, covering cryptoassets, stablecoins, tokenized securities and digital financial infrastructure.
The FCA’s own work on tokenized assets also continues to expand. On Monday, the regulator opened a feedback request on whether certain tokenized gold products should be exempted from UK fund rules, and it has said, jointly with the Bank of England, that it plans to publish a roadmap for tokenization in wholesale financial markets before the end of the year.
## What it means for crypto firms
For major exchanges, stablecoin issuers and custody providers serving UK customers, the guidance effectively ends a long period of ambiguity about scope. Firms that issue qualifying stablecoins or operate trading platforms sit squarely inside the perimeter and face the longest authorization lead times, since these are the permission categories the FCA has flagged as most sensitive from a consumer-protection standpoint.
Custody and staking arrangements, by contrast, had been among the murkiest areas in earlier drafts, and the final guidance’s decision to treat arranging staking as an in-scope activity will be closely parsed by platforms that offer yield products to UK users. Firms that assumed staking arrangements might escape the perimeter will need to revisit that view before September ends.
The stakes are commercial as well as legal. The UK has positioned itself as a candidate hub for digital asset businesses in Europe, and the Feb. 28, 2027 transitional deadline creates a de facto race: firms that file early can continue operating under transitional provisions while their applications are processed, while late filers risk a gap in their ability to serve UK clients once October 2027 arrives.
Market context remains unsettled as the industry digests the framework. Bitcoin traded near 75,800 USD and Ether near 2,404 USD at the time of writing, with Solana around 98 USD, as broader markets absorbed the Federal Reserve’s latest rate decision on the same day the FCA document was published.
The FCA’s message to the industry is direct: the era of negotiating over scope is closing, and the practical work of authorization now begins.
Disclaimer: This article is for informational purposes only and does not constitute financial or legal advice.
Geale calling it the clarity firms asked for while dropping final rules 13 days before the Sept 30 window opens is a choice. the checklist reads fine, the calendar is the problem
safeguarding being its own category is the sleeper. half the small platforms running pooled custody setups are about to discover they need a whole new permission stack
pooled custody is exactly what the safeguarding permission targets. cheap multisig setups wont survive an fca audit and everyone running them knows it
less than two weeks to the Sept 30 window and they drop the final guidance now? compliance teams are going to have a fun weekend
existing registrations not converting automatically is the big one here. half the firms operating in the uk assumed they could just roll over
roll over into what though? the permissions are different per activity. if you safeguard client assets AND arrange staking you are applying for two separate things
two separate applications and two capital stacks on top. small uk staking platforms will just geoblock rather than file both before february
geoblock is already happening, my uk account got three region lock notices this month. feb 2027 deadline might as well not exist for the small shops
geoblocking is already the default answer tbh. expect a wave of temporarily unavailable in your region banners by mid october
region banners by mid october is generous. some platforms will flip the switch on sept 29 and blame scheduled maintenance
geoblocking uk users by mid october is the netherlands playbook from last year. nothing in this guidance makes that harder, expect it as the default move
two capital stacks is exactly why the small uk staking shops are already shopping for buyers. mid october consolidation incoming
The Sept 30 window opening with final rules out this late is tight. Firms now have roughly two weeks to map every activity against that perimeter list before applying.
two weeks to map five activity categories against permissions is doable if you actually read the consultation drafts. the firms panicking now are the ones that ignored those too
two weeks is brutal but firms paying attention saw the consultation drafts months ago. the ones in trouble assumed auto conversion and did nothing
two weeks to map five categories is fine if you read the june package. the ones sweating now ignored that too
at least staking finally has an actual rulebook instead of the fca pretending it didnt exist since 2023 lol
staking getting defined at all is the win honestly. three years of the fca treating it like a gray zone while firms just guessed
Biggest detail is buried at the end: current registrations will not auto-convert. Plenty of UK firms probably assume they are covered and will find out they need a fresh authorization or a variation.
the variation route is the trap nobody is talking about. miss a category in your mapping and you are dealing with an unauthorized activity case, not a paperwork delay
cranog is right about the variation trap. the perimeter doc maps permissions per category, so missing one is an unauthorized activity case, not a late filing
@Angharad exactly, and arranging staking being pulled inside the perimeter is a huge one. Exchanges offering staking to UK users just got a compliance project with a two week fuse.
two week fuse is generous tbh. anyone who ignored the consultation drafts is now choosing between geoblocking uk users and rushing a botched application
oct 25 2027 full effect and a lords amendment 194-138 last week. at least the uk is doing this in daylight, mica felt like rules arriving by fax
Safeguarding client cryptoassets getting its own category is overdue. The custody rules will decide which platforms survive the authorization queue honestly.
read the perimeter list twice and safeguarding is where firms will trip. pooled custody is treated as client money adjacent, that means capital rules, not another form