By CRYPTOVERSE Legal Consultancy
An FCA cryptoasset authorisation application needs documents that explain the business and evidence supporting its governance, resources and controls. The precise requirements depend on the applicant, requested permissions, customer types and operating model.
There is no universal document pack suitable for every crypto exchange, custodian, intermediary or stablecoin issuer.
The FCA’s application information distinguishes general firm questions from cryptoasset-specific sections relevant to the business model. Its published information document is a preparation resource—not a form to complete instead of the live application. fca.org.uk
This guide explains how to organise the application documents, identify supporting evidence and avoid common preparation weaknesses.
Start With the Correct Application Route
Before assembling documents, determine whether the business needs:
- MLR cryptoasset registration;
- New FSMA authorisation; or
- A variation of existing Part 4A permissions.
The FCA confirms that MLR registration does not automatically convert into authorisation. It publishes a cryptoasset supplement for variation-of-permission applications and financial data materials for applicants. FCA
Information may overlap between routes, but the forms and legal requirements must be assessed separately.
The authorisation application period closes on 28 February 2027, ahead of the expanded regime commencing on 25 October 2027. Preparation should allow time for implementation, review and management approval. www.fca.org.uk
The Master Document Checklist
The following is a practical organising framework. It is not a statement that every item is a mandatory attachment.
| Document group | Materials to assess for the application |
| Regulatory scope | Perimeter assessment, token classification and permissions matrix |
| Corporate information | Incorporation, ownership, controllers, group structure and close links |
| Business model | Regulatory business plan, customer journeys and transaction flows |
| Governance | Organisation chart, personnel information and responsibility arrangements |
| Financial resources | Forecasts, assumptions, funding evidence and applicable resource assessments |
| Financial crime | Risk assessments, policies, procedures and implementation records |
| Technology | Architecture, access controls, security and recovery arrangements |
| Outsourcing | Supplier assessments, contracts and oversight arrangements |
| Customer protection | Terms, disclosures, complaints and conflicts arrangements |
| Activity-specific controls | Materials addressing custody, trading, issuance, staking or other functions |
| Submission administration | Forms, evidence index, declarations and approvals |
Use the applicable live form to determine which materials must be uploaded, described in answers or retained for subsequent questions.
1. Regulatory Assessment and Permissions Matrix
A coherent application begins with a settled scope.
The assessment should identify the activities, assets, entities and territorial connections involved. It should also address exclusions and material uncertainties.
The FCA’s PS26/18 provides final perimeter guidance on when cryptoasset activities require authorisation. www.fca.org.uk
A practical permissions matrix should record:
| Entity | Business function | Proposed permission | Supporting analysis | Outstanding question |
| [Applicant] | [Function] | [Permission] | [Reference] | [Issue] |
This document helps prevent the application form from requesting one model while the business plan describes another.
2. Corporate Ownership and Control Information
The FCA’s application information includes controller details, close links and organisational structure. fca.org.uk
Prepare the relevant corporate records and identify any arrangements affecting ownership or control.
The review should reconcile:
- Legal ownership;
- Voting rights;
- Appointment rights;
- Shareholder agreements;
- Nominee or trust arrangements; and
- Planned investment or restructuring.
For international groups, identify which entity owns the technology, contracts with customers, employs personnel and holds assets.
A clear ownership chart should agree with the underlying records.
3. The Regulatory Business Plan
The FCA’s application information identifies the regulatory business plan as a required upload. fca.org.uk
A practical plan should explain the applicant’s:
- Products and permission scope;
- Customers and geographic market;
- Contracting and execution model;
- Revenue and financial assumptions;
- Governance and personnel;
- Technology and suppliers;
- Risks and controls; and
- Implementation dependencies.
Include diagrams where they clarify transaction or asset flows.
The plan should describe how the business will operate, rather than rely primarily on market opportunity or growth ambitions.
Consistency check: Compare it with financial forecasts, customer terms, policies and supplier agreements.
4. Governance and Personnel Materials
Prepare documents showing who makes decisions, oversees risks and performs key functions.
Depending on the applicable requirements, materials may include CVs, appointment information, role descriptions, reporting lines, committee responsibilities and relevant individual applications.
The FCA’s authorisation standards address suitability, effective supervision and appropriate resources. www.fca.org.uk
A useful personnel review asks:
- Is the role filled or proposed?
- Does the individual have relevant experience?
- Is sufficient time allocated?
- Does the person have authority and access to information?
- Are competing responsibilities or conflicts disclosed?
A job title alone does not demonstrate an effective arrangement.
5. Financial Forecasts and Funding Evidence
The FCA’s published application information includes financial forecasts. fca.org.uk
The preparation work should connect projected revenue, costs and staffing with the proposed activities.
Supporting materials should explain significant assumptions and funding dependencies. Distinguish available funds from expected investment and identify conditions attached to commitments.
For relevant firms, the prudential assessment must address COREPRU and CRYPTOPRU. www.fca.org.uk
Avoid using a generic capital figure without analysing the firm’s activities and applicable calculations.
Consistency check: Does the budget fund the controls and personnel described elsewhere?
6. Financial Crime Documents and Operational Evidence
The published application information addresses the financial crime framework and compliance monitoring. fca.org.uk
Assess relevant documents covering risk assessment, customer checks, sanctions, monitoring, suspicious activity reporting, Travel Rule procedures and recordkeeping.
For MLR registration, the FCA expects a framework tailored to the actual cryptoasset business. FCA
Operational evidence can include:
- Configuration and threshold rationale;
- Testing records;
- Anonymised customer assessments;
- Alert investigations;
- Escalation decisions;
- Training completion; and
- Management reporting.
Distinguish what is implemented from what remains planned.
7. Technology and Outsourcing Materials
The FCA’s application information includes IT systems information. fca.org.uk
Prepare descriptions that management can explain and support.
Useful records include architecture diagrams, access arrangements, wallet controls, incident procedures, recovery testing and supplier responsibilities.
For each material outsourced service, establish:
- What the provider performs;
- Who oversees it;
- What the contract permits;
- How performance and risk are monitored; and
- What happens if the service fails or ends.
Where specialist technical verification is required, its scope should be identified separately from legal document review.
8. Customer Terms Disclosures and Promotions
Customer documentation should accurately reflect the service.
Review asset ownership, fees, execution, withdrawals, staking, redemption and counterparty exposure as relevant.
The financial promotions workstream should establish the communication route and applicable safeguards. The existing regime reaches overseas firms marketing to UK consumers. www.fca.org.uk
Maintain the distinction between:
- Customer contracts;
- Risk disclosures;
- Promotional content; and
- Statutory promotion approval where required.
9. Activity-Specific Supplements
The additional materials should follow the actual functions performed.
| Business function | Preparation focus |
| Custody | Control, ownership, segregation, reconciliation and asset return |
| Trading platform | Admission, trading rules, surveillance and settlement |
| Dealing or arranging | Execution, pricing, counterparties and order handling |
| Stablecoin issuance | Token rights, backing, redemption and issuance controls |
| Staking | Customer authority, validators, rewards, withdrawal and loss risks |
Map these subjects to the relevant rules and application questions.
For custody, distinguish the applicable asset categories. The FCA identifies different initial treatment under CASS 17 and CASS 6, with associated client money questions also requiring assessment. www.fca.org.uk
Documents and Evidence Serve Different Purposes
A policy explains the intended procedure. Evidence supports a conclusion about implementation.
| Application statement | Evidence to consider |
| Monitoring is operational | Configuration and testing records |
| Oversight is effective | Reports, decisions and escalation records |
| Funding is available | Financial records and executed commitments |
| Recovery arrangements work | Exercises and remediation records |
| Assets are reconciled | Reconciliation records and exception handling |
This distinction prevents a large document pack from creating a false impression of readiness.
Build an Evidence Index
Use one controlled register throughout preparation.
| Evidence ID | Document | Version | Relevant question | Owner | Approval | Treatment |
| EV–001 | [Title] | [Version] | [Reference] | [Name] | [Status] | Submit / Retain |
Remove superseded versions from the submission folder. Record amendments made after submission and preserve the exact submitted pack.
Final Checks Before Submission
The FCA expects final, thoroughly reviewed and appropriately signed-off documents. www.fca.org.uk
Confirm that:
- Requested permissions match the operating model;
- Names, figures and responsibilities are consistent;
- Policies match actual procedures;
- Implementation claims have evidence;
- Outstanding dependencies are disclosed;
- Required declarations are completed; and
- Management has approved the final submission.
The applicant remains responsible for accurate and complete information.
How CRYPTOVERSE Can Help
CRYPTOVERSE provides specialist legal and regulatory support for UK FCA cryptoasset authorisation.
Our support can include application scoping, evidence checklists, business plans, agreed compliance documentation, readiness assessments and final consistency reviews.
Request an application document and evidence review from CRYPTOVERSE to identify what your business needs before submission.
FAQs
1. What is the FCA cryptoasset authorisation application deadline?
The relevant FCA cryptoasset authorisation application period runs from 30 September 2026 to 28 February 2027. Businesses should assess their permissions, prepare supporting documentation and submit a complete application within the applicable period.
2. Can a crypto business apply for FCA authorisation after 28 February 2027?
Yes. Applications may be submitted outside the relevant application period, but late submission can affect assessment timing and eligibility for transitional arrangements. Businesses should evaluate the implications before relying on a later application.
3. What is the difference between a saving provision and transitional run-off?
A saving provision can allow eligible firms with qualifying applications to continue certain activities while their applications are determined. Transitional run-off allows eligible firms to perform qualifying pre-existing contractual obligations on a restricted basis while exiting the relevant UK activities.
4. Can a crypto exchange accept new UK customers during transitional run-off?
No. The transitional exemption does not permit firms to enter into new contracts with existing UK customers or new UK customers for the relevant regulated cryptoasset activities. Firms should implement appropriate controls to manage onboarding and new contractual relationships.
5. Does submitting an FCA application guarantee permission to continue operating?
No. Submission does not guarantee authorisation or unrestricted continuation. The firm’s eligibility, application validity, regulatory status and applicable transitional conditions must be assessed before determining which activities may continue.