FCA cryptoasset regime 2026: new rules explained

If you run a crypto business in the UK, hold some personal digital assets or have simply been waiting to see whether the UK would ever settle on a workable set of rules for this sector, 30 June 2026 was the day you would have been waiting for. On that date, the Financial Conduct Authority (FCA) published a package of five policy statements that together form the operational backbone of the UK’s new cryptoasset regime – the most detailed and consequential piece of crypto regulation this country has produced to date.

In our July 2026 update on UK crypto regulation we described the landscape formed by the initial publication of the FCA’s final rules and guidance and analysed what firms needed to do to prepare. This article digs deeper into what the FCA’s finalised rules say, what has changed following the period of consultation and, most importantly, what this means in practical terms for stablecoin issuers, trading platforms, custodians, lenders or simply someone who holds cryptoassets and wants to understand the evolving situation.

Five documents – one regime

The FCA’s package consists of five core policy statements, each addressing a different slice of the market: rules on admissions, disclosures and market abuse for cryptoassets; a dedicated regime for stablecoin issuance; rules for firms carrying out day-to-day regulated cryptoasset activities such as trading, custody, lending and staking; a new prudential (capital) framework built specifically for cryptoasset firms; and a statement clarifying exactly which parts of the FCA’s existing rulebook – from the Consumer Duty to operational resilience requirements – now apply to this sector. A consolidated cost-benefit analysis sits alongside them.

Collectively, these documents are the product of more than three years of consultation, stretching back to 2023, and represent the practical follow-through on the Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026, which brought a wide range of cryptoasset activities within the FCA’s regulatory perimeter for the first time since February 2026, when they were passed by Parliament. Crucially, the full scope of regulated activity under the new regime will not bite until 25 October 2027 – a deliberate runway designed to give firms time to prepare.

What has actually changed since consultation

For firms that have been tracking this process closely, the headline is that the FCA has largely held its nerve on the core architecture it originally proposed, while making a series of targeted adjustments clearly shaped by industry feedback. A few are worth flagging.

Stablecoins

On stablecoins, the regulator has simplified some of the more operationally awkward requirements floated during consultation. Issuers will no longer need to estimate redemption forecasts when calculating their backing asset composition, and a modest 5% excess is now permitted within the backing asset pool, giving issuers some practical headroom. Backing assets will sit in statutory trust arrangements, with the previously proposed ‘unallocated backing fund’ structure dropped.

Limited intragroup custody is now permitted, subject to safeguards, and there is now clearer guidance on how redemption obligations apply once a stablecoin is trading in the secondary market. All of this sits alongside a joint framework, with the Bank of England governing how systemically important stablecoins will be regulated jointly between the two institutions – a genuinely novel piece of UK regulatory architecture that reflects our earlier coverage of the Bank of England’s softer stance on stablecoin rules and the broader evolution of UK stablecoin policy we have tracked over the past year.

Prudential regulation

On the prudential side – essentially, how much capital cryptoasset firms need to hold – the FCA has scaled back the complexity it originally proposed. The capital coefficient applied to stablecoin issuance risk has been halved, from 2% to 1%, easing the burden on larger issuers. And rather than the two-tier classification system for cryptoassets originally floated for market risk purposes, the FCA has settled on a single, simpler framework: cryptoassets that can be reliably valued and are admitted to a UK trading platform attract a flat 40% risk weighting, while everything else is deducted from regulatory capital entirely and treated as higher risk. It is a pragmatic compromise – simpler to apply, while still preserving the underlying risk distinction regulators wanted.

Safeguarding

Custody and safeguarding rules – critical for anyone entrusting assets to a third party – have also been refined. The FCA is proceeding with applying its established client-asset protection framework to cryptoassets held on behalf of customers, with targeted exceptions and a technology-neutral approach to how firms manage private keys. For decentralised finance, the FCA has opted for a case-by-case approach rather than blanket rules, focusing on whether an identifiable controlling entity exists – a sensible, if inherently fact-specific, line to draw.

The dates that matter

Whatever your role in this market, there are two dates worth putting in the diary now. The window for firms wishing to rely on transitional “savings provisions” – allowing existing UK crypto businesses to keep operating while their authorisation application is assessed – opens on 30 September 2026 and closes on 28 February 2027. Applying early within that window matters: it maximises the period during which a firm can lawfully continue trading while the FCA considers its application. Miss the window, and a firm may have to stop relevant activities altogether until it is authorised. Existing registrations under the Money Laundering Regulations, or authorisations under payment services or e-money rules, will not convert automatically – a fresh application is required for anyone within scope of the new regime.

Why this matters beyond compliance box-ticking

It would be easy to read all of this as a purely technical exercise for compliance officers. It is not. The FCA has been explicit that this regime is meant to make the UK a more attractive, more credible home for cryptoasset business – while being equally explicit that cryptoassets remain high-risk, speculative investments for anyone holding them. That tension – encouraging responsible innovation while being honest about risk – runs through the whole package, and it is a tension our clients navigate daily, whether they are building a platform, managing an exchange or simply trying to understand what protections they now have as an investor.

It also sits alongside a broader enforcement and asset-recovery landscape we have written about extensively, from how the SFO and HMRC are using crypto wallet freezing orders to the growing overlap between UK sanctions policy and crypto compliance, and the increasing willingness of international bodies to pursue crypto-related extradition cases. Regulation and enforcement are two sides of the same coin, and firms that treat this new FCA regime as a genuine opportunity to get their house in order – rather than a box to tick – will be far better placed if scrutiny follows.

Where Gherson comes in

Navigating a rulebook this dense – five interlocking policy statements, a new prudential framework and a transitional window with hard deadlines – is not something any business should attempt alone. Our White-Collar Crime team have tracked this regime from its earliest discussion papers through to this final package, and we advise cryptoasset businesses, investors and individuals on authorisation strategy, compliance frameworks and what to do when things go wrong – whether that is an FCA investigation, a wallet freezing order or a sanctions query.

If you are weighing up whether your business needs FSMA authorisation, wondering if the savings provisions apply to you or simply want a clear-eyed second opinion on where you stand, get in touch with our cryptoassets team.

Frequently Asked Questions

What is the FCA’s new cryptoasset regime?

The FCA’s new regime is a package of five policy statements, covering admissions, disclosures and market abuse, stablecoin issuance, regulated cryptoasset activities (including trading, custody, lending and staking), prudential requirements and the application of existing FCA rules to the cryptoasset sector.

When will the new UK cryptoasset regime take effect?

The full scope of regulated activity under the new regime will take effect on 25 October 2027.

When can existing UK crypto businesses apply under the transitional savings provisions?

The application window opens on 30 September 2026 and closes on 28 February 2027. These provisions may allow existing UK crypto businesses to continue operating while their authorisation applications are being assessed.

Will existing registrations or authorisations automatically transfer to the new FCA regime?

No. Existing registrations under the Money Laundering Regulations or authorisations under payment services or e-money rules will not automatically convert. Firms within the scope of the new regulations will need to make fresh applications.

What changes has the FCA made to the rules for stablecoin issuers?

Among the changes, issuers will no longer need to estimate redemption forecasts when calculating backing asset composition, a 5% excess is permitted within the backing asset pool, and backing assets will be held in statutory trust arrangements.

How will the new regime affect cryptoasset custody and safeguarding?

The FCA will apply its established client-asset protection framework to cryptoassets held for customers, with targeted exceptions and a technology-neutral approach to private-key management.

What should cryptoasset businesses do to prepare?

Businesses should consider whether they require FSMA authorisation, if the transitional savings provisions apply to them and whether their existing compliance frameworks are ready for the new regime.

Please do not hesitate to contact us for further advice, send us an e-mail, or, alternatively, follow us on X, Facebook, or LinkedIn to stay up-to-date.

The information in this blog is for general information purposes only and does not purport to be comprehensive or to provide legal advice. Whilst every effort is made to ensure the information and law is current as of the date of publication it should be stressed that, due to the passage of time, this does not necessarily reflect the present legal position. Gherson accepts no responsibility for loss which may arise from accessing or reliance on information contained in this blog. For formal advice on the current law please do not hesitate to contact Gherson. Legal advice is only provided pursuant to a written agreement, identified as such, and signed by the client and by or on behalf of Gherson.

This article was first published in January 2026 and has been updated in August 2026. 

©Gherson 2026