By CRYPTOVERSE Legal Consultancy
Choosing an adviser for FCA cryptoasset authorisation is a decision about the legal analysis, application preparation and regulatory support your business needs.
A useful adviser should be able to explain which permissions your activities require, identify weaknesses in your proposed operating model and help management support its application with credible evidence. The engagement should also make clear who will perform the work, what the fees cover and what remains the applicant’s responsibility.
The FCA encourages applicants to consider independent legal or compliance advice. It also expects firms themselves to be ready, willing and organised and able to articulate their regulatory obligations. Appointing an adviser therefore supports preparation; management must still understand and take responsibility for the business. FCA
This guide provides practical criteria for comparing FCA crypto authorisation advisers.
1. Start With Your Business Model and Application Route
Before requesting proposals, prepare a short description of your business:
- The proposed applicant entity and group structure.
- Its products, services and target customers.
- The jurisdictions from which it operates.
- How transactions are executed and settled.
- Who controls customer money and cryptoassets.
- Existing regulatory registrations or permissions.
- Proposed launch dates and UK expansion plans.
This information helps advisers scope the work accurately.
An exchange operating its own trading platform, a broker executing orders and a technology provider supporting withdrawals may need different analyses, documents and specialist input.
The application route also matters. The FCA states that existing MLR registration will not automatically convert into FSMA authorisation. Firms already authorised under FSMA need to vary their permissions to undertake relevant new cryptoasset activities. FCA
Ask prospective advisers to explain the proposed route and the assumptions supporting it before comparing their prices.
2. Test Their Ability to Analyse the Regulatory Perimeter
A strong engagement begins with understanding what the applicant actually does.
Ask how the adviser will assess:
- Token characteristics and relevant classifications.
- Each service and its underlying transaction steps.
- The roles of group entities and external providers.
- Territorial scope and UK customer access.
- Potential exclusions or exemptions.
- The permissions requested and any proposed limitations.
A useful deliverable is a written activity and permission analysis that identifies the facts relied upon, relevant legal provisions, conclusions and unresolved questions.
For example, describing a service as “non-custodial” should lead to questions about key access, signing authority, recovery mechanisms and withdrawal control. The label alone does not explain the arrangement.
Likewise, “institutional customers only” should prompt examination of the actual customer relationships and transaction chain.
An adviser’s willingness to investigate these details is a useful indicator of the quality of the proposed work.
3. Distinguish UK Expertise From General Crypto Knowledge
Experience with crypto businesses is relevant, but it should be connected to the UK framework.
Ask the adviser to explain how their approach addresses:
- FCA application requirements.
- The UK regulatory perimeter.
- Governance and individual responsibilities.
- Financial crime controls.
- Applicable prudential requirements.
- Customer asset arrangements.
- Financial promotions.
- Regulatory questions and application changes.
For an overseas business, ask how home-country arrangements will be assessed against UK requirements.
A framework prepared for VARA, MiCA or another regulator may provide useful background. Its suitability for the UK applicant still needs to be examined, including the legal entity, responsibilities, controls and evidence.
The FCA’s expanded crypto standards address matters including business model suitability, effective supervision, appropriate resources and fitness and propriety. A proposal focused only on AML policies should therefore be assessed carefully against the broader support your application needs. FCA
4. Verify Who Will Actually Perform the Work
The person presenting the proposal may not be the person drafting the application or answering your questions.
Before appointment, establish:
- Who leads the engagement.
- Who performs the legal analysis.
- Who prepares and reviews the documents.
- Which specialists support finance, technology or operational matters.
- Whether subcontractors will participate.
- Who handles FCA correspondence.
- Who provides cover during absences.
Ask about the qualifications and professional status of the individuals whose work you will rely on. Where professional regulation is claimed, verify the relevant individual or entity with the stated regulator.
For an international team, clarify which jurisdiction’s legal advice is covered and whether separate UK-qualified counsel will be required for any part of the mandate.
The engagement letter should identify the contracting entity and the nature of the services being provided.
5. Assess Relevant Experience Carefully
Experience claims are most useful when they identify the work actually performed.
Ask prospective advisers:
- Which application routes have they supported?
- What types of crypto business have they worked with?
- Did their role include perimeter analysis, document preparation, implementation support or regulator responses?
- Who in the proposed team performed that work?
- What lessons are relevant to your business?
Anonymised examples can demonstrate an adviser’s approach without disclosing confidential client information.
Treat success-rate claims cautiously. Their value depends on the number and type of applications, the period covered, the adviser’s involvement and how withdrawn or incomplete applications are counted.
For the newly opened crypto FSMA gateway, distinguish experience under established FCA processes from experience with the new crypto application route.
6. Compare Deliverables, Not Document Counts
A proposal offering a large number of policies may still leave important questions unanswered.
Compare whether the engagement covers the following work:
| Workstream | What to clarify |
| Regulatory assessment | Activities, tokens, territorial scope, permissions and assumptions |
| Readiness review | Gaps, priorities, responsibilities and evidence needed |
| Business plan | Applicant-specific operating model, governance and implementation |
| Policies and procedures | Drafting, tailoring, operational detail and internal review |
| Financial information | Who prepares forecasts, checks assumptions and reviews regulatory treatment |
| Application preparation | Forms, supporting documents, consistency review and submission support |
| Management preparation | Briefings, responsibility review and mock interviews |
| FCA correspondence | Information requests, revisions, meetings and response limits |
| Post-authorisation support | Which ongoing services are separately available |
For each deliverable, ask what inputs you must provide and what constitutes completion.
A policy that has been drafted may still require management approval, system configuration, staff training and testing. The scope should explain how those dependencies will be handled.
7. Understand How the Adviser Will Assess Evidence
Application preparation should connect important statements to supporting material.
Ask how the adviser will examine evidence concerning:
- Decision-making authority.
- Staffing and capacity.
- Funding and forecast assumptions.
- Transaction flows.
- Outsourcing arrangements.
- System access and operational controls.
- Testing and remediation.
- Outstanding implementation work.
Consider a statement such as “all withdrawals require dual approval”. A useful review would establish who approves, how the system enforces the requirement, how exceptions are handled and what testing supports the statement.
The FCA expects application documents to be final, thoroughly reviewed and appropriately signed off. It also states that willingness to address deficiencies does not compensate for submitting a poor application. FCA
Ask whether the adviser will provide a documented readiness assessment before submission and how unresolved issues will be escalated.
8. Confirm the Applicant’s Responsibilities
A clear engagement allocates work between the adviser and the applicant.
Management will need to supply accurate facts, make business decisions, review documents and arrange implementation. Finance, compliance, technology and operations personnel may all need to contribute.
Agree who will:
- Validate application answers.
- Approve policies and forecasts.
- Obtain contracts and corporate records.
- Implement controls.
- Arrange testing.
- Confirm remediation.
- Authorise communications with the FCA.
- Report changes after submission.
The adviser should also explain how assumptions will be recorded when information is incomplete.
This helps prevent a common practical problem: documents advancing while the decisions and controls supporting them remain unresolved.
9. Compare Fees on a Consistent Basis
A meaningful fee comparison requires comparable scopes.
Ask each adviser to identify:
- The work included in the quoted fee.
- Milestones and payment dates.
- Assumed permissions and products.
- The number of revision rounds.
- Included meetings and regulatory responses.
- Hourly or additional charges.
- External specialists and third-party costs.
- The treatment of material business changes.
- Termination and handover arrangements.
Clarify whether support ends at submission, continues through assessment or includes a specified period or number of FCA information requests.
Regulatory application fees, professional fees, operating capital and implementation expenses should be separately identified. They serve different purposes and should not be presented as one undifferentiated “licence cost”.
10. Examine Timelines and Outcome Claims
Ask an adviser to separate the timetable into stages:
- Fact gathering and regulatory assessment.
- Remediation and implementation.
- Document preparation and approval.
- Submission.
- FCA assessment and responses.
For each stage, identify dependencies and who controls completion.
The FCA’s relevant crypto application period currently runs from 30 September 2026 to 28 February 2027. Its interaction with saving and transitional provisions requires attention to the applicant’s circumstances. An adviser should explain the applicable analysis rather than assume that any pending application permits continued business. FCA
Promises of guaranteed authorisation or a guaranteed decision date should prompt close scrutiny. The adviser can commit to defined work and service standards; the regulatory outcome remains subject to the FCA’s assessment.
11. Protect Confidential Information and Preserve a Usable Handover
Crypto authorisation work can involve sensitive corporate, financial and security information.
Before sharing it, clarify:
- Confidentiality obligations.
- Approved document-sharing arrangements.
- Access by subcontractors or external specialists.
- Use of AI tools or external document-processing services.
- Retention and deletion practices.
- Incident notification.
- Ownership or permitted use of deliverables.
- Access to editable documents and correspondence records.
If AI tools are used, ask how legal references and factual statements are checked and whether client information is entered into external systems.
Also agree what you will receive if the engagement ends. A practical handover should preserve the application record, current documents, outstanding requests and unresolved issues.
12. Use a Short Adviser Selection Checklist
Before signing, obtain clear answers to these questions:
- What application route and permissions do you propose, and why?
- What facts must be verified before that conclusion is final?
- Who will perform and review the work?
- What relevant experience does that team have?
- Which deliverables and implementation activities are included?
- How will you assess readiness and supporting evidence?
- What must our management team provide and approve?
- What FCA assessment support is included?
- What circumstances increase the fees?
- How are confidentiality, conflicts and handover addressed?
The quality and specificity of the answers can help you assess whether the proposed engagement fits your business.
How CRYPTOVERSE Can Support Your FCA Crypto Application
CRYPTOVERSE is a specialist legal and regulatory firm for UK FCA cryptoasset authorisation support.
Our support can include regulatory perimeter assessments, application route analysis, readiness reviews, business plans, governance documentation, policy preparation, management briefings and assistance with regulatory information requests.
We scope the engagement around the applicant’s activities, existing arrangements and evidence requirements, with clear deliverables and responsibilities.
Contact CRYPTOVERSE to discuss your UK crypto business model and the legal and regulatory support your application requires.
FAQs
1.Is appointing an adviser compulsory?
The FCA encourages applicants to consider independent legal or compliance advice. The appropriate level of support depends on the complexity of the business and the applicant’s internal capabilities. FCA
2.Should we appoint a lawyer, compliance consultant or both?
Identify the work required first. Legal perimeter analysis, operational compliance implementation, financial modelling and technical assurance may require different expertise. Allocate those responsibilities clearly.
3.Can the adviser take over management’s regulatory responsibilities?
The engagement can provide substantial preparation and coordination support. Management still needs to understand the business, verify its information and approve the decisions and arrangements within its remit.
4.Can we use documents prepared for another jurisdiction?
They can be reviewed as starting material. The UK applicant’s activities, legal obligations, operating arrangements and evidence should determine the final content.
5.What is the most useful first engagement?
Where the route or readiness is uncertain, a defined regulatory assessment and gap review can establish the work required before committing to the full application mandate.