FCA Cryptoasset Authorisation: A Complete Guide for UK and Overseas Crypto Companies

By CRYPTOVERSE Legal Consultancy

FCA cryptoasset authorisation requires a business to identify its regulated activities, obtain the appropriate permissions and demonstrate that its governance, financial resources and controls support its operating model. Existing cryptoasset registration, overseas licensing or approval of financial promotions does not automatically resolve those requirements.

The FCA’s crypto authorisation gateway opened on 30 September 2026. The application period closes on 28 February 2027, ahead of the expanded regime commencing on 25 October 2027. Businesses should assess their route and prepare their evidence now. FCA

For founders, the practical challenge starts before completing an application form: which entity needs which permissions for which activities?

A platform might execute transactions, control customer wallets, arrange staking and distribute tokens within the same customer journey. Each function needs to be understood before the application can accurately describe the business.

This guide explains the principal routes, preparation requirements and issues facing UK and overseas crypto companies.

What Is FCA Cryptoasset Authorisation?

FCA cryptoasset authorisation is the process through which a firm obtains permission under the Financial Services and Markets Act 2000 (“FSMA”) to carry on relevant regulated cryptoasset activities.

Under the expanded regime, a business must assess whether its activities fall within the regulatory perimeter and whether any exclusion or exemption applies. The FCA’s final perimeter guidance, published through PS26/18 and reflected in PERG 18, assists that assessment. FCA

“UK crypto licence” is a common search term, but the application must identify the actual permissions required. There is no useful substitute for analysing the services the firm performs.

Authorisation also has an ongoing dimension. A firm must continue to meet the standards supporting its permissions after approval.

FCA Registration vs Authorisation: Which Route Applies?

Three routes are particularly important:

The FCA’s expanded regime moves beyond the AML and financial promotions standards that previously defined much of its cryptoasset role. Existing firms therefore need to assess whether they require authorisation or a variation of permission. FCA

A company registered under the MLRs should not assume that registration automatically converts into FSMA authorisation. Equally, a firm authorised for another financial service should check whether its existing permissions cover the proposed crypto activities.

Payment services or electronic money status should also be examined carefully rather than treated as interchangeable with Part 4A authorisation.

What About Operations Before October 2027?

Current obligations remain relevant during preparation for the expanded regime.

The FCA states that businesses providing in-scope cryptoasset services in the UK must obtain the relevant MLR registration before starting those services. Preparing a future authorisation application does not itself resolve that requirement. FCA

The legal basis for existing operations and the route for future activities should therefore be assessed separately.

Which Crypto Businesses Need FCA Authorisation?

The FCA identifies trading platforms, intermediaries, custodians, stablecoin issuers and firms arranging staking among the businesses affected by the expanded framework. FCA

However, those commercial descriptions are only the starting point.

A regulatory assessment should establish:

• What functions the business actually performs;
• Which assets those functions involve;
• Whether it acts as principal, agent or intermediary;
• Whether it controls or safeguards customer assets;
• Which entity performs each function;
• Where the activities are carried on; and
• Whether relevant exclusions or exemptions apply.

An Illustrative Business Model

Consider a business describing itself as a “crypto brokerage”.

Customers deposit assets, request trades and can select a staking option. The brokerage executes transactions through liquidity providers and retains the ability to authorise wallet withdrawals.

Its assessment should examine transaction execution, arranging, asset safeguarding and staking arrangements. Describing the business as a brokerage does not settle the permission analysis.

The resulting application must also explain how those functions interact. Separate policies that describe incompatible operating models will undermine the credibility of the submission.

Does Token Classification Affect the Application?

Yes. The legal characteristics of an asset can change the applicable activity and regulatory requirements.

The assessment should examine token rights, transferability, fungibility, backing arrangements, redemption rights and the obligations of identifiable persons.

Commercial labels such as “utility token”, “stablecoin”, “NFT” or “real-world asset token” are insufficient on their own. A classification exercise should address the relevant statutory definitions and exclusions using the actual terms and economic arrangements.

This is particularly important where a business supports several token types or combines token issuance with trading, custody or distribution.

The FCA’s perimeter guidance should be used alongside the applicable legislation when determining the treatment of the assets and activities. handbook.fca.org.uk

Can Overseas Crypto Companies Apply?

Overseas companies must assess whether their services in or to the UK fall within the relevant perimeter.

The analysis should examine customer locations, operational presence, contracting arrangements, group responsibilities and the territorial rules applying to each activity.

It should also consider whether the proposed structure enables effective supervision and provides appropriate resources and accountable management. The FCA identifies these issues within its threshold condition framework; its location condition is not a universal requirement that every applicant establish the same corporate structure. FCA

For an overseas group, practical questions include:

• Which entity will contract with UK customers?
• Who will control customer assets?
• Where will trading and compliance decisions be made?
• Which functions will remain with overseas affiliates?
• How will the applicant oversee shared technology and suppliers?
• How will the FCA obtain the information needed to supervise the business?

An overseas licence may provide useful background evidence. The UK assessment must nevertheless address the UK legal requirements.

What Does the FCA Expect From an Applicant?

The FCA’s authorisation standards extend beyond having a complete set of documents. Its threshold conditions address matters including effective supervision, appropriate resources, suitability and the business model. FCA

For application preparation, these expectations translate into four connected questions.

1. Is the Business Model Clear?

The application should explain products, customers, revenue, contractual roles and transaction flows.

It should distinguish activities intended at launch from later expansion.

2. Can Management Control the Business?

The applicant needs clear responsibilities, suitable personnel, reporting arrangements and oversight of group and outsourced functions.

An organisation chart should reflect real authority.

3. Are the Resources Credible?

Funding and forecasts should support the proposed scale and risks.

For relevant firms, the prudential framework includes COREPRU and CRYPTOPRU. Capital and liquidity planning must follow the applicable requirements rather than a single assumed “crypto licence capital” figure. fca.org.uk

4. Can the Firm Support Its Statements With Evidence?

If a policy says monitoring systems are configured, the firm should be able to explain the configuration and relevant testing.

If the business plan describes independent compliance oversight, staffing and reporting arrangements should support that description.

What Documents Are Needed?

The final document pack depends on the application route, activities and current forms.

The FCA’s gateway information distinguishes general firm application information from cryptoasset-specific sections driven by the business model. Applications are submitted through Connect. FCA

Preparation commonly involves:

Not every item is necessarily a mandatory attachment. Each should be mapped to the applicable question or requirement.

For MLR applications, the FCA specifically expects a framework tailored to the cryptoasset business and evidence of relevant competence, including the MLRO’s experience. FCA

How Should a Company Prepare?

A practical sequence is:

1. Map the business: Identify entities, services, assets, customers and transaction flows.
2. Assess the perimeter: Determine classification, activities, territorial scope and application route.
3. Review readiness: Identify missing personnel, funding, controls and evidence.
4. Resolve material gaps: Allocate owners, resources and measurable completion requirements.
5. Prepare the application: Align forms, business plans, forecasts, policies and contracts.
6. Approve the submission: Obtain management confirmation of the exact final pack.
7. Manage regulatory review: Answer questions with consistent explanations and supporting evidence.

The application should present one coherent business. Changes during preparation must be reflected across the relevant documents.

Can the Business Operate While Its Application Is Pending?

A pending application is not a universal permission to operate.

The answer depends on the current legal basis, commencement date and eligibility for the relevant saving or transitional arrangements. The FCA’s gateway and transitional guidance must be considered together. FCA

An assessment should distinguish continued operations while an eligible application is determined from arrangements permitting an orderly run-off. It should separately address accepting new customers, launching products and performing existing contracts.

Management should obtain a documented conclusion for its particular circumstances.

What About Marketing to UK Customers?

Authorisation planning and financial promotions compliance are connected but separate.

The cryptoasset financial promotions regime applies to firms marketing to UK consumers, including overseas firms. Communications must use an available lawful route and satisfy the applicable requirements. FCA

A business should review its website, application, advertising, affiliates and customer journey before publishing a campaign. Legal review of promotional content must also be distinguished from statutory approval where that is required.

How CRYPTOVERSE Supports FCA Cryptoasset Authorisation

CRYPTOVERSE provides specialist legal and regulatory support for UK FCA cryptoasset authorisation.

Our support can be scoped around:

• Regulatory perimeter and token classification assessments;
• Application route and permissions mapping;
• Readiness reviews and gap remediation;
• Regulatory business plans and agreed compliance documentation;
• Review of application evidence and document consistency;
• Financial promotions assessments;
• Application coordination and regulatory response preparation; and
• UK market-entry planning for overseas crypto groups.

The engagement should identify what CRYPTOVERSE will prepare, what the Client must implement and where specialist financial, technical or separately qualified legal input is required.

Planning a UK launch or preparing for the expanded regime? Request an FCA cryptoasset authorisation scoping consultation with CRYPTOVERSE.

FAQs