The Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026: Greater Compliance, Broader Application and the Road to FCA Authorization

The Regulations mark the end of crypto’s partial regulatory status in the UK. Ultimately, the UK government has extended the existing Financial Services and Markets Act 2000 (FSMA) framework to capture defined cryptoasset activities. This means that crypto firms will now operate within the same structural architecture as traditional financial services firms.

Under the Regulations, by October 2027, firms conducting defined cryptoasset activities will require full authorization from the Financial Conduct Authority (FCA) and will be subject to the full realm of FSMA supervision. In its Explanatory Memorandum, the Government stated that its approach to cryptoassets is “same risk, same regulatory outcome.”

This framework follows extensive work undertaken through proposals and policy consultations conducted by the FCA. In tandem with the Regulations, the FCA is actively consulting on the detailed rules and guidance that will give effect to the new regime. These consultations are central to determining the practical compliance burden firms will face. Although consultation periods have largely closed, some, such as the CP26/4: Application of FCA Handbook for regulated cryptoasset activities – part 2 and GC26/2: Application of the Consumer Duty to cryptoasset firms are still open. These consultations (along with webinars) are a central part of the FCA’s crypto roadmap and will inform the final rules that will apply once the regime commences ahead of full implementation.

As the regime develops, the FCA’s consultation papers and policy statements will clarify how these Handbook provisions will apply to cryptoasset businesses. Firms planning to operate under the new regime should monitor the FCA’s consultation outputs closely. In the interim, firms preparing for authorization should familiarize themselves with the FCA Handbook framework.

New Regulated Activities
The activities regulated by the FCA are set out in the Financial Services and Markets Act 2000 (Regulated Activities) Order 2001 (RAO). Any regulated activities require the FCA’s authorization before any individual, or firm, can conduct the said regulated activity. The Regulations add a range of defined crypto-focused activities relating to “qualifying cryptoassets” to the RAO such as:

• Issuing qualifying stablecoins
• Safeguarding qualifying cryptoassets and specified cryptoasset investments
• Operating a qualifying cryptoasset trading platform
• Dealing in qualifying cryptoassets as principal and/or as agent
• Arranging deals and/or transactions in qualifying cryptoassets
• Qualifying cryptoasset staking services

The Regulations provide greater compliance, greater supervisory scrutiny, and greater alignment with established financial service standards, which many crypto activities have not previously been subject to in full. One of the most significant consequences of the Regulations is the requirement for full FCA authorization, rather than AML-only registration.

Importantly, any financial services firms dealing with stablecoin issuance, tokenization, or digital asset custody will also fall within scope of conducting regulated cryptoasset activities. In addition, cross-border organizations servicing UK clients may be brought within scope of the Regulations depending on the nature and location of their activities. Therefore, the Regulations may affect more businesses than initially apparent. Detailed regulatory analysis will be essential for any firm with UK-facing crypto operations.

Consequences of the FCA’s Full Authorization
The FCA requires both authorized firms and the individuals working within them to meet a series of minimum regulatory standards. These standards are set out in FSMA and the FCA Handbook and apply at the authorization stage and continue to govern firms on an ongoing basis. The FCA’s Threshold Conditions establish the minimum requirements a firm must satisfy to obtain and retain FCA authorization. In summary, firms must demonstrate:

• Business model viability—appropriate for the regulated activities they intend to undertake.
• Effective supervision—the FCA must be able to supervise the firm properly.
• Appropriate location of offices—including a UK head office where applicable.
• Adequate resources—including financial resources, personnel and systems.
• Suitability—the firm must be fit and proper as per the statutory criteria under FSMA.

Cryptoasset firms transitioning from AML registration should note that these requirements are broader and more rigorous than those under the Money Laundering Regulations.

Once authorized, firms fall within the FCA’s criminal, civil and regulatory enforcement remit. Inadequate preparation may expose firms to supervisory intervention or enforcement action, potentially extending beyond crypto activities to other related regulated services.

Implementation Timeline
The Regulations are expected to be fully in force by October 2027, allowing for a transitional period. This period should be viewed as a structured implementation phase rather than a regulatory delay. Any organization that wishes to undertake newly regulated cryptoasset activities will be required to be authorized by the FCA before the regime comes into force.

The FCA has stated that the application period for firms who wish to undertake newly regulated cryptoasset activities will open from September 30, 2026, to February 28, 2027.

Firms that defer preparation may encounter practical constraints, including authorization backlogs and compressed implementation timelines.

Key Takeaways

• The detailed compliance framework will be shaped by the FCA’s ongoing consultations and forthcoming policy statements.
• Firms conducting regulated cryptoasset activities will need to obtain full FCA authorization ahead of the regime’s expected commencement in October 2027.
• The move from AML registration to FSMA supervision entails a substantial increase in regulatory obligations for organizations.
• Authorized firms must continuously meet the FCA’s Threshold Conditions, amongst others, demonstrating appropriate resources, effective oversight and suitability.
• Carrying on regulated cryptoasset activities without permission once the regime is in force may lead to criminal, civil and regulatory sanctions.
• Proactive planning will be essential to ensure business operational continuity.

As the UK moves toward full FCA supervision of cryptoasset activities, firms should take a structured and forward-looking approach.

Pillsbury’s Crypto & Digital Assets Practice comprises a deep bench of true specialists across practices and international offices with experience and understanding of cryptoassets: corporate EC/VC, securities law and commodity laws, payments, AML, finance, IP, tax, bank regulatory, consumer protection and litigation/arbitration (including former SEC attorneys). We have helped clients in this space for many years on their token raises, cryptoasset sales, crypto patents, MSB licensing, enforcement defense and transatlantic commercial and financial disputes, offering an integrated advisory platform across the lifecycle of digital asset creation, commercialization, regulation and protection.

If you would like to discuss how the Regulations may affect your business, please reach out to a member of our team.