FCA issues crypto authorisation guidance ahead of UK window

The Financial Conduct Authority published guidance for crypto firms two weeks before the UK authorisation window opens, setting out the information and documentary evidence applicants must submit to seek permission to carry out regulated crypto activities.

The guidance explains the standards firms must meet for organisational and financial resilience and the types of controls the regulator will assess. It outlines the procedural steps, submission formats and the timelines the FCA will follow once the window opens.

It applies to firms seeking authorisation or registration to operate in the UK, including trading venues, custody providers and businesses offering crypto-related services that fall within the regulatory perimeter. The document makes clear when activities require prior authorisation and what follows if firms continue to operate without the appropriate permissions.

Published two weeks before applications open, the guidance gives firms a short period to gather required documentation and to check internal systems against the regulator’s expectations. The FCA sets out how it will assess governance arrangements, financial crime controls, record-keeping, client asset protections and operational resilience measures.

The guidance also details practical elements of the application process, including expected response times, how to present evidence of compliance and where to seek clarification during the submission period. The FCA advises firms to complete remediation where necessary and to consult legal or compliance advisers if they have complex business models.

For firms already operating in the UK or registered under anti-money-laundering regimes, the guidance clarifies how existing controls and documentation should be aligned with new authorisation requirements. The FCA warns that gaps in governance or customer protections will need to be addressed before an application can succeed.

The publication follows a period of intensified regulatory focus on crypto activity as the regulator brings certain crypto services into its supervisory framework. The guidance reiterates that authorisation is required for specific regulated activities and that enforcement remains an option where firms operate without the required permissions.

The FCA’s document forms part of the UK’s wider effort to define the regulatory perimeter for crypto services, with the stated aims of increasing consumer protection and reducing risks linked to financial crime and operational failures. The guidance specifies how the regulator will evaluate firms that seek to enter or continue operating under the forthcoming authorisation regime.