FCA Cryptoasset Authorisation: What Offshore Firms Must Fix

FCA cryptoasset authorisation will be required for regulated UK crypto businesses from 25 October 2027. The application window opens on 30 September 2026. Firms that apply by 28 February 2027 can keep serving UK customers while the FCA decides. Most commentary focuses on capital and stablecoin backing. For crypto businesses run from Dubai, Singapore or the BVI with real UK customer flow, the harder test is where your people sit. This guide covers the dates, the perimeter, staffing, stablecoin rules, capital and the steps to take now.

What Is FCA Cryptoasset Authorisation?

FCA cryptoasset authorisation is the FSMA permission a firm needs to carry on regulated cryptoasset activities in the UK from 25 October 2027. Its legal basis is the Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026, which Parliament passed on 4 February 2026.

The FCA published its core rulebook on 30 June 2026. It contains five policy statements (PS26/9 to PS26/13) and three pieces of finalised guidance (FG26/5 to FG26/7). This ended a process of 4 discussion papers and 10 consultation papers that began in 2023. On 16 September 2026 the FCA added perimeter guidance in PS26/18.

Which cryptoasset activities need authorisation?

Seven activities sit inside the regulated perimeter:

• Issuing qualifying stablecoins in the UK
• Safeguarding qualifying cryptoassets, or arranging for them to be safeguarded
• Operating a qualifying cryptoasset trading platform (QCATP)
• Dealing in qualifying cryptoassets as principal
• Dealing in qualifying cryptoassets as agent
• Arranging deals in qualifying cryptoassets
• Arranging qualifying cryptoasset staking

Lending and borrowing is not a separate activity. The FCA treats it as a business model, so firms offering it need permission to deal as principal or as agent.

Do MLR-registered crypto firms need to reapply?

Yes. Registrations under the Money Laundering Regulations (MLRs) do not convert into FSMA permissions. MLR-registered crypto firms need full authorisation. So do firms operating under the Payment Services Regulations 2017 or the Electronic Money Regulations 2011. Firms already authorised under FSMA apply for a variation of permission (VoP) instead.

When Does the FCA Cryptoasset Application Window Open?

The FCA gateway opens on 30 September 2026 and closes on 28 February 2027, giving firms five months to file. The regime itself comes into force on 25 October 2027.

The October consultation covers several areas:

• UK qualifying stablecoins
• Proprietary trading and market making
• Certain technology providers
• Decentralised protocols
• Safeguarding arrangements
• Financial promotions

The FCA says most crypto firms will not be affected.

What happens if you miss the 28 February 2027 deadline?

If you miss the window, you lose the saving provision and your UK business moves toward run-off. This difference in outcomes is what decides whether you still have a UK business in 2028.

Can an Overseas Crypto Firm Use a UK Branch?

Usually not. The FCA expects international firms regulated only by the FCA to use a UK legal entity. FG26/7 sets out this approach to international firms.

The branch route is narrow:

• QCATP operators may use a UK branch in limited cases. The FCA must be satisfied that the home state offers comparable protection and that access to global liquidity improves execution for customers.
• Firms regulated by both the PRA and the FCA may use a branch case by case, subject to PRA approval.
• Safeguarding is generally expected to sit in a UK legal entity.

The FCA declined to publish general guidance on acceptable overseas structures. It will decide case by case, so your structure rationale has to rest on your own facts.

Where must SMF16 and SMF17 be located?

The Compliance Oversight holder (SMF16) and the Money Laundering Reporting Officer, or MLRO (SMF17), should work from the firm’s principal place of business in the UK. Under PS26/13, the FCA expects a UK-authorised crypto firm’s “mind and management” (its senior decision-making) to be located in the UK.

The FCA accepted that the Senior Managers & Certification Regime (SM&CR) fits poorly with management structures where key responsibilities sit with people overseas. It kept the expectation anyway.

Why is a UK shell entity not enough?

A UK entity with a registered office and a nominee director will not pass, because the FCA is testing how the firm actually operates. Suppose your compliance function and MLRO sit in the Gulf or Asia today. Then you do not have a viable application. You have a hiring plan you have not started.

Check for these red flags before drafting:

• Compliance and MLRO decisions are made outside the UK
• UK directors have no real control over outcomes for UK customers
• Nobody in the UK can answer FCA questions on day-to-day controls

I hold the MLRO function myself. It is not a role you can fill in eight weeks with someone who has never carried it. Regulators test it.

What Are the FCA Stablecoin Rules for UK Issuers?

Under PS26/10, a UK qualifying stablecoin must be backed one-to-one by low-risk, liquid assets held on statutory trust. It must be redeemable at par, and holders cannot receive interest from the backing pool.

• Backing assets: short-term deposits and short-term government debt. The FCA refused to add low-volatility NAV money market funds.
• Statutory trust: backing assets are kept separate from the issuer’s own assets. Each product needs its own pool and its own trust.
• Single currency only: multi-currency pools were rejected because of FX risk.
• Redemption: at par, with the payment order placed by the next business day, subject to AML checks.
• No yield pass-through: issuers cannot pass interest or income from the backing pool to tokenholders. Rewards can be paid from the issuer’s own account, for example based on usage or transaction volume. Third parties may reward their own customers from their own funds.

What did the FCA change after consultation?

The FCA made two concessions to issuers:

1. Intragroup custody of backing assets is allowed with adequate controls. It is capped at 20% of the pool unless you can show the cap is disproportionate.
2. The K-SII charge was halved from 2% to 1% of stablecoins in issuance. K-SII is the capital charge that covers operational risk in stablecoin issuance.

How should stablecoin issuers model revenue?

Build the business on transaction economics, not on the carry (the yield earned on reserves). If your plan was to keep the float yield and share part of it with holders, the sharing part is no longer allowed. Revenue has to come from how the coin is used, not from interest paid out to holders. 

How Much Capital Does an FCA-Authorised Crypto Firm Need?

Under PS26/12, your own funds requirement is the highest of three measures:

• The Permanent Minimum Requirement (PMR)
• The Fixed Overheads Requirement (FOR)
• The K-factor requirement, which scales with your activity

The PMR is £750,000 for dealing as principal and £350,000 for issuing qualifying stablecoins.

Is the UK crypto capital regime stricter than MiCA?

On headline minimums, yes, and the FCA chose not to lower them. Seventy per cent of respondents opposed the own funds proposals. Many argued the dealing-as-principal PMR sits well above MiCA, the EU’s crypto regime.

The FCA gave three reasons for holding its position:

• Dealing as principal needs the same risk infrastructure whether the instrument is a share or a token. The PMR therefore mirrors MIFIDPRU.
• MiCA has no directly equivalent activity, so the comparison does not hold.
• The UK may be the first major jurisdiction to apply prudential rules across this many activities. Headline capital figures are a poor measure of competitiveness.

Which capital deductions catch founders out?

Two deductions from CET1 capital surprise most founders: tokens you control, and software you built.

• Tokens you issue or whose supply you control are deducted in full. The logic matches holding your own shares in traditional finance: in a crisis, these tokens cannot absorb losses independently of the firm. UK-issued qualifying stablecoins are the exception.
• Internally developed software and systems are deducted as intangible assets, however central they are to revenue.

There is also no FSCS protection for regulated cryptoasset activities. Eligible complainants can still use the Financial Ombudsman Service.

How Does UK Tokenisation Policy Affect Crypto Firms?

The UK is competing to attract institutional tokenised assets, not to offer the cheapest crypto licence. Chris Woolard CBE, HM Treasury’s Wholesale Digital Markets Champion, delivered his first report to the Chancellor on 13 July 2026.

The report cites a Boston Consulting Group estimate that tokenised real-world assets could reach USD 88 trillion by 2035. For the UK, it estimates up to GBP 33 billion in extra annual economic output and GBP 14 billion in annual tax revenue by the same year.

The report’s priority areas are practical:

• Tokenised collateral
• A tokenised funds market
• Wholesale payment rails
• Legal certainty
• Interoperability standards
• Financial crime compliance and digital identity
• A technology-neutral approach to tax

An industry taskforce of 54 firms will work on these over the next 12 months. A regime built around institutional trust suits some businesses and not others, so decide which kind you are.

Common Mistakes in FCA Cryptoasset Authorisation Applications

The costliest mistakes are about structure, and each one can be fixed before you draft:

• Assuming your MLR registration carries over. It does not convert.
• Treating 25 October 2027 as the deadline. Saving-provision protection requires an application by 28 February 2027.
• Filing through a nominee UK shell. Mind and management must be in the UK.
• Keeping SMF16 and SMF17 offshore. Both should work from the UK principal place of business.
• Modelling capital without deductions. Own tokens and proprietary software come off CET1.
• Drafting before reading the form guidance. The FCA previewed the form on 8 July 2026. It has separate modules for stablecoin issuance, safeguarding, staking, lending and borrowing, intermediation and QCATPs.

What Should Crypto Firms Do Before the Gateway Opens?

Six actions decide whether your application is ready on 30 September 2026:

1. Decide whether you are applying. If you don’t apply, you run off your UK business. You cannot just carry on quietly.
2. Map your activities against PS26/18. Cover trading, dealing, custody, staking, and lending and borrowing.
3. Settle the entity question. Assume a UK legal entity unless you have a specific, defensible case for a branch.
4. Name your SMF16 and SMF17, based in the UK. If you are still recruiting, you are already behind.
5. Model capital properly. Include the PMR, FOR, K-factors and the CET1 deductions.
6. Book an FCA pre-application meeting. Read the application form guidance before drafting anything.

Primary Sources for Your FCA Application

These nine FCA documents are the rules your application will be assessed against:

For secondary analysis, the most useful review I have read is DLA Piper’s UK Cryptoassets and Digital Markets Developments. It was written by Sophie Lessar and Puesan Lam and published on 21 July 2026.

Final Thoughts

FCA cryptoasset authorisation is a five-month decision with consequences that run into 2028. The gateway opens on 30 September 2026. If you file after 28 February 2027, you lose saving-provision protection.

Capital is a number you can model this week. People take longer. Put your SMF16 and SMF17 in the UK and build a real UK entity. Price any stablecoin or trading model on the assumption that you can’t share reserve yield with holders and can’t run the firm from offshore. Start the hiring plan today.

FAQs

When does the FCA crypto application window close?

The window closes on 28 February 2027 after opening on 30 September 2026. Suppose you apply inside this window and are still waiting for a decision on 25 October 2027. You can keep providing cryptoasset services to UK customers until the FCA decides. Firms that apply later get no faster review.

Do I need a UK entity for FCA cryptoasset authorisation?

In most cases, yes. The FCA expects international firms regulated only by the FCA to operate through a UK legal entity. A branch is possible in limited cases, mainly for trading platform operators and for firms regulated by both the PRA and the FCA, subject to PRA approval. Safeguarding generally has to sit in a UK entity.

What is the minimum capital for a UK crypto firm?

Your requirement is the highest of three measures: the Permanent Minimum Requirement, the Fixed Overheads Requirement and the K-factor requirement. The PMR is £750,000 for dealing as principal and £350,000 for issuing qualifying stablecoins. Own-issued tokens and proprietary software are deducted from CET1. Your eligible capital may therefore be lower than your balance sheet suggests.

Can UK stablecoin issuers pay interest to holders?

No. Under PS26/10, issuers cannot pass interest or income from the backing asset pool to tokenholders. Issuers can pay rewards from their own account, for example based on usage or transaction volume. Third-party platforms are not prohibited from rewarding their own customers from their own funds.

Does my MLR registration convert to FCA authorisation?

No. Money Laundering Regulations registrations do not automatically convert into FSMA permissions. MLR-registered crypto firms must apply for full authorisation, ideally within the window. Firms already authorised under FSMA for other activities need a variation of permission to add the new cryptoasset activities.