The UK’s Financial Conduct Authority published a major package of final crypto rules on June 30, 2026. The regime covers financial resilience, trading conduct, market integrity, disclosures and qualifying stablecoins.
The rules do not all apply immediately. The FCA says its authorisation gateway will open on September 30, 2026, while the mandatory regime is scheduled to begin on October 25, 2027. Headlines saying the complete framework is already in force are therefore misleading.
UK crypto regulation timeline
| Date | Milestone |
|---|---|
| February 2026 | Government regulations established the framework for new regulated crypto activities |
| June 30, 2026 | FCA published final rules and guidance |
| September 30, 2026 | Authorisation application gateway is due to open |
| February 28, 2027 | Application period is due to close |
| October 25, 2027 | New mandatory regime is scheduled to commence |
The gap gives firms time to prepare capital, governance, systems and applications. It also gives the FCA time to review applications before commencement.
Which activities are affected?
HM Treasury’s framework brings specified activities involving qualifying cryptoassets within the UK financial-services perimeter. Examples include operating a qualifying cryptoasset trading platform, safeguarding qualifying cryptoassets and issuing a qualifying stablecoin in the UK.
Scope depends on the activity, asset, location and customer base. A tokenised share or deposit may be covered by a different existing regime. Firms need to assess the statutory definitions rather than assume every blockchain product follows one crypto rulebook.
Businesses outside the UK may also fall within scope when providing covered services in or to the UK. App availability alone does not establish whether an overseas entity has the permissions required for a particular service.
What changes for exchanges and custodians?
The FCA says all covered firms will face financial-resilience requirements, including capital and stress testing. Trading venues will also face market-integrity standards addressing conduct such as insider dealing and manipulation.
For users, the important details will be the legal entity holding assets, the applicable custody arrangement, segregation, conflicts, execution practices and the disclosures made when something goes wrong. A familiar app name can sit above several entities with different permissions.
How stablecoin treatment differs
The framework creates rules for qualifying stablecoins rather than treating every token that claims a peg as equivalent. FCA materials describe standards intended to improve backing, redemption and operational transparency.
Systemic stablecoins can involve joint oversight by the Bank of England and FCA, while non-systemic qualifying stablecoins may sit under the FCA regime. Algorithmic tokens or products that do not meet the statutory definition should not be assumed to receive the same treatment.
Even a regulated stablecoin can face reserve, bank, operational, cyber and redemption risk. Regulation does not guarantee a permanent one-to-one market price.
Registration is not the same as authorisation
The UK already applies anti-money-laundering and financial-promotion requirements to parts of the crypto market. The new Part 4A-style authorisation is a broader permission to perform specified regulated activities.
Consumers should distinguish:
- a firm appearing on an anti-money-laundering register;
- a promotion approved or communicated under the financial-promotion regime;
- an application submitted during the gateway; and
- an actual authorisation covering the service used.
An application is not an approval. The FCA says firms that want to continue covered activity need to follow the gateway rules and relevant transition arrangements.
What users should check
Before depositing or trading, verify:
- the full legal name of the service provider;
- the exact activity and permission shown on the FCA register;
- who holds private keys and whether assets are segregated;
- redemption and withdrawal terms;
- which complaint or compensation protections actually apply; and
- what happens if the provider or a third-party custodian fails.
The FCA continues to describe crypto as high risk. New rules can improve consistency, but they cannot remove volatility or make a crypto balance equivalent to an insured bank deposit.
Why the UK rules matter outside Britain
International platforms often standardise product design, disclosures and surveillance across markets. A major UK regime can therefore influence users elsewhere, but legal protection remains jurisdiction-specific.
Indian users should not assume that a UK-branded or FCA-related service provides UK protections to an account contracted with a different overseas entity. Check the account agreement and applicable Indian rules.
Bottom line
The 2026 FCA package is a final-rule milestone, not the start of the full mandatory regime. The next major dates are the September 2026 gateway opening, the February 2027 application deadline and the October 2027 commencement.
Use the FCA register and primary documents rather than a platform badge or social-media claim. This article is general information, not legal or investment advice.
Advertisement
Sources and review
This article was checked against the primary or authoritative sources below on .
- FCA sets landmark crypto rules — Financial Conduct Authority
- How the cryptoasset authorisation gateway will operate — Financial Conduct Authority
- Policy note on the Cryptoasset Regulations 2026 — HM Treasury
Frequently asked questions
The FCA application window is due to run from September 30, 2026 to February 28, 2027. The expanded mandatory regime is scheduled to begin on October 25, 2027.
No. Existing anti-money-laundering registration and financial-promotion requirements are not the same as authorisation under the new regime. The application gateway has not yet opened as of this review.
No. Regulation can improve standards and disclosure, but it cannot prevent token losses, fraud, cyberattacks, depegging or every firm failure.
Advertisement