FCA Crypto Authorisation for Startups: What Must Be Ready Before You Apply?

By CRYPTOVERSE Legal Consultancy

Two founders are preparing to launch a UK crypto brokerage. Their application works, investors have expressed interest and a consultant has delivered a substantial policy pack.

They believe they are ready to apply.

During a preparation meeting, someone asks: “When a customer buys crypto, which company owes them delivery—and who can move the assets?”

The founders give different answers. Their customer terms describe one arrangement, while the technology demonstration shows another.

That uncertainty affects the permission assessment, customer protection arrangements, funding requirements and responsibilities of management.

A startup preparing for FCA cryptoasset authorisation needs a defined business model, credible resources, accountable management and evidence that its controls can work. Completed documents are only one part of readiness.

What does the FCA mean by application readiness?

The FCA expects applicants to be ready, willing and organised. Its general application guidance requires final, thoroughly reviewed and appropriately approved documents. Firms should understand their obligations and respond openly and promptly during assessment.

For a startup, this means turning important assumptions into decisions and evidence before submission.

It does not mean operating unlawfully to generate a trading history. A pre-launch business can prepare demonstrations, testing records, contracts and documented arrangements without commencing activities requiring authorisation.

The useful question is: could management explain how the proposed business will operate tomorrow, including when something goes wrong?

Start with a business model everyone can explain

If you need a UK Crypto License Before commissioning more policies, bring the founders, legal advisers, compliance lead and technical team together.

Walk through one representative customer transaction:

1. The customer opens an account.
2. Money or cryptoassets enter the service.
3. An instruction is received.
4. A transaction is executed.
5. Assets are delivered, held or withdrawn.
6. A complaint or failed transaction is resolved.

Identify the legal entity responsible at each stage.

The FCA’s perimeter guidance emphasises substance, including activities, UK territorial scope, business status and applicable exclusions or exemptions. A product label does not settle the assessment. 

For our hypothetical founders, this exercise reveals an unresolved choice: will their company sell cryptoassets to customers as principal, or transmit instructions to another provider?

That decision should be made before the application describes the service.

Choose a launch scope you can support

UK Crypto staking FCA Authorisation for startups often plan an ambitious product suite: trading, custody, staking, lending and token issuance.

Each additional service introduces questions about permissions, controls, resources and dependencies. A sensible preparation strategy is to distinguish the initial launch from later development.

Create a scope statement recording:

• Products included at launch.
• Intended customers and jurisdictions.
• Assets supported.
• Services expressly deferred.
• Third-party providers.
• Changes requiring a fresh regulatory assessment.

This is recommended project discipline, rather than a requirement that every startup launch with a narrow offering.

The purpose is to make the application internally consistent. Financial forecasts should fund the same services described in the business plan, customer terms and technology arrangements.

Establish who owns customer assets—and who controls them

Custody questions can arise even where a startup describes itself as a broker or technology platform.

The FCA’s guidance examines control over cryptoassets and arrangements performed on behalf of others. Relevant capabilities can extend beyond possession of a conventional private key. 

Prepare an asset-control map covering:

• Wallet ownership and access.
• Transaction approval powers.
• Recovery arrangements.
• Administrative privileges.
• Customer withdrawal instructions.
• The roles of custody and technology providers.

Then compare that map with the contracts.

In our scenario, the founders discover that their staff can initiate transfers through a provider’s dashboard. They need to assess that functionality and the contractual arrangements before concluding that custody is entirely outside their role.

Make the funding plan survive an uncomfortable question

An investor presentation might assume rapid customer growth. Application preparation needs to examine what happens if growth is slower, costs rise or funding arrives late.

The FCA’s prudential framework addresses eligible own funds, capital, liquidity and risk assessment. Requirements depend on the firm’s activities and applicable rules.

A useful startup financial model should distinguish:

An expression of investor interest should not be presented as unconditional funding.

Document the instrument, amount, timing, conditions and status. Management should understand what the company can access and what remains contingent.

Appoint people who can own the controls

An impressive organisation chart is useful only if its responsibilities reflect actual arrangements.

The UK Crypto Staking FCA Authorisation for FCA’s crypto standards address the business model, governance, suitability of personnel and adequate resources.

For practical preparation, identify:

• Who approves new products.
• Who owns compliance decisions.
• Who handles financial crime escalations.
• Who can suspend customer activity.
• Who oversees providers.
• Who reports incidents to management.
• Who covers key absences.

Assess required roles against the firm’s particular permissions and applicable rules.

A fractional or outsourced resource should have a clearly defined mandate, capacity and reporting line. Founders also need to understand the controls: appointing a specialist does not make every regulatory question someone else’s responsibility.

Turn policies into evidence

The startup in our scenario has an AML policy stating that unusual transactions will be escalated promptly.

Its preparation review asks three practical questions:

• What creates an alert?
• Who receives it?
• What prevents the transaction proceeding while it is investigated?

The team cannot demonstrate the workflow yet.

A useful response is to test the process using synthetic cases and record the result.

Suggested pre-launch exercises include:

• A suspicious transaction alert.
• A failed withdrawal.
• A customer complaint.
• A compromised administrator account.
• An unavailable custody provider.
• A discrepancy between customer records and asset balances.

Record the scenario, responsible people, actions, outcome and improvements.

These exercises are recommended preparation tools. Their value lies in exposing weaknesses that policy wording alone may conceal.

Understand your providers before relying on them

A startup may outsource much of its infrastructure. It still needs to understand and oversee the resulting dependencies.

The FCA explains that outsourcing does not transfer regulatory responsibility away from the firm.

For each material provider, assess:

• Its contractual responsibilities.
• Information and access available to the applicant.
• Service failures and escalation.
• Security and resilience arrangements.
• Subcontracting.
• Termination and transition.
• Effects on customers if the relationship ends.

“Our provider handles that” should lead to supporting evidence, including how the startup monitors the service and responds to problems.

Align the application, marketing and launch timetable

The expanded regime is scheduled to commence on 25 October 2027. The application gateway opened on 30 September 2026, and the relevant application period ends on 28 February 2027. Transitional arrangements have conditions; a new startup should assess eligibility rather than assume protection.

Overseas Crypto company for FCA UK for financial promotion requirements already apply, including to overseas firms marketing to UK consumers.

Separate application submission from marketing clearance and operational launch.

Review website claims, waitlists and investor announcements. Describe the firm’s regulatory status accurately and assess any promotional communication before publication.

A practical decision before submission

The FCA publishes information about its cryptoasset application form to support preparation. Use the applicable live requirements when assembling the submission.

Before applying, ask management to review these questions:

For our founders, the review produces concrete work: settle the execution model, assess asset control, revise contracts, confirm funding and test escalation.

They can then submit an application describing a business they understand.

Preparing your startup with CRYPTOVERSE

CRYPTOVERSE is a specialist legal and regulatory firm for UK FCA cryptoasset authorisation support.

CRYPTOVERSE can support startup perimeter assessments, permission planning, business plans, documentation and application readiness reviews.

Preparing your first FCA cryptoasset application? Contact CRYPTOVERSE to identify the decisions, controls and evidence your business needs before submission.

FAQs