FCA Crypto Registration vs Authorisation: Which Route Does Your Business Need?

By CRYPTOVERSE Legal Consultancy

FCA cryptoasset registration and FCA authorisation are different regulatory statuses. Registration under the Money Laundering Regulations addresses the applicable cryptoasset financial crime framework. Authorisation under the Financial Services and Markets Act 2000 (“FSMA”) grants permissions for specified regulated activities within a broader regulatory framework.

A third route matters for firms already holding Part 4A permissions: variation of permission, commonly called a VoP.

Choosing the correct route affects your application, documentation, financial resources, governance and launch plans. It also determines how accurately you can describe your regulatory status to customers and commercial partners.

With the expanded UK cryptoasset regime approaching, companies need to answer two separate questions:

What permits our activities today, and what will we need when the new regime begins?

The Difference at a Glance

The FCA expressly states that MLR registration will not automatically convert into FSMA authorisation. Existing FSMA-authorised firms must assess the need to vary their permissions for the new crypto activities. FCA

What Is FCA Cryptoasset Registration?

FCA cryptoasset registration is registration under the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017, commonly shortened to the MLRs.

The relevant framework includes:

• Regulation 14A: definitions of cryptoasset exchange providers and custodian wallet providers;
• Regulation 54: the registration framework; and
• The applicable financial crime obligations governing the business.

The FCA explains that relevant cryptoasset businesses must register before providing in-scope services by way of business in the UK. The exchange definition includes relevant exchange services and arrangements facilitating exchange; custody assessment concerns the actual safeguarding arrangements. www.fca.org.uk

Registration therefore requires more than identifying the business as an exchange or wallet provider. The assessment must examine its functions and UK business connections.

Registration Is Not General Approval of the Business

An MLR-registered firm should describe its status precisely.

Registration does not establish that every product, investment or activity offered by the business is covered by an FSMA permission. It should also not be presented as an FCA endorsement.

The FCA specifically warns applicants against website or marketing language suggesting that an application represents its endorsement or recommendation. www.fca.org.uk

Accurate status descriptions matter in customer terms, investor presentations, banking applications and promotional material.

What Is FCA Cryptoasset Authorisation?

Authorisation concerns permission to carry on regulated activities under FSMA.

The statutory starting point is section 19, the general prohibition. Applications for Part 4A permissions must identify the activities the firm intends to undertake and address the relevant requirements.

For crypto businesses, the expanded framework brings a wider range of activities within the FCA’s perimeter. The FCA identifies trading platforms, intermediaries, custodians, stablecoin issuers and firms arranging staking among the affected business models. www.fca.org.uk

Authorisation is activity-specific. A firm should establish which permissions its operating model requires rather than simply apply for a broadly described “crypto licence”.

The Assessment Extends Beyond AML

Financial crime controls remain important, but the authorisation assessment also addresses the business model, governance, suitability, effective supervision and appropriate resources.

The FCA notes that FSMA fit-and-proper requirements are broader than those under the MLRs. www.fca.org.uk

For management, that means an existing AML framework may be a useful foundation while still leaving substantial work on financial resources, customer protection, operational controls and activity-specific obligations.

When Is a Variation of Permission Required?

A variation of permission changes permissions held by an existing Part 4A-authorised firm.

For example, an authorised financial services business proposing to add cryptoasset custody must assess whether its permission scope covers that activity and what changes are needed to its resources and controls.

A VoP is not merely a shortened application for an existing firm. It requires a credible explanation of the proposed change and its consequences.

The FCA’s new regime guidance directs firms to assess whether their business models require new authorisation or a variation of permission. www.fca.org.uk

The assessment should include:

• The precise activities being added;
• Interactions with existing products and customers;
• Additional personnel and financial resources;
• Changes to technology and outsourcing;
• New customer asset responsibilities; and
• Any conditions or restrictions affecting the existing permissions.

What If You Are a Payment Institution or Electronic Money Institution?

The phrase “FCA regulated” does not identify the firm’s exact legal status.

A payment institution or electronic money institution should establish whether it separately holds relevant Part 4A permissions. Payment services or electronic money status alone should not be assumed to qualify the firm for the same application route as an existing FSMA-authorised person.

The FCA’s gateway guidance specifically includes firms registered or authorised under the payment services and electronic money frameworks among those needing to assess FSMA authorisation for the new crypto activities. FCA

Check the legal entity and its actual status before choosing the form.

What Changes for Existing MLR-Registered Crypto Firms?

Existing registration does not remove the need to assess the expanded regime.

A registered firm should map its actual functions against the new activities, identify the permissions required and review readiness against the broader standards.

Consider an illustrative exchange business that also controls customer wallets and offers staking through a third party. Its existing registration history does not, by itself, answer the future permission questions arising from those functions.

Preparation should begin with an updated regulatory assessment, followed by a gap analysis covering the proposed permission scope.

The FCA’s final perimeter guidance, published in PS26/18, helps businesses assess when their cryptoasset activities require authorisation. www.fca.org.uk

Should a New Entrant Apply for MLR Registration Now?

The answer depends particularly on whether the business needs to commence in-scope operations before the expanded regime begins.

As at the publication date:

• Current MLR registration obligations continue.
• The FCA encourages firms to focus on FSMA authorisation after the gateway opening.
• Firms still seeking MLR registration should explain their plans and reasons through the Pre-Application Support Service.
• In qualifying circumstances, FSMA application information can support an MLR application, subject to the firm’s confirmation.
• The applications remain legally distinct; an MLR form cannot simply become an FSMA application. FCA

The commercial decision should account for preparation costs, realistic launch timing and the usefulness of obtaining registration before commencement of the expanded regime.

It should also consider whether the business will remain within an MLR registration requirement after that commencement. The FCA explains that firms outside the relevant registration exemptions must continue to use the MLR gateway. FCA

Which Dates Matter?

The FCA announced these milestones when opening the gateway. www.fca.org.uk

These dates should inform preparation and continuity planning. They do not replace the conditions governing any particular firm’s right to operate.

Can You Continue Operating While an Application Is Pending?

A pending application is not universal permission to trade.

Eligible existing firms may benefit from saving arrangements while applications are determined. Separate transitional arrangements address orderly run-off. Their conditions and permitted activities must be examined carefully.

The FCA’s transitional guidance describes eligibility requirements for existing businesses that have not secured the permissions needed to continue under the new regime. www.fca.org.uk

Management should obtain a documented assessment covering:

• Existing services;
• New customers and transactions;
• New product launches;
• Existing contractual obligations; and
• The consequences of withdrawal or an unsuccessful application.

Does Financial Promotion Approval Replace Registration or Authorisation?

No. The permission to communicate a promotion and the legal basis for performing the promoted service are separate questions.

FSMA section 21 concerns financial promotions. Section 19 concerns carrying on regulated activities.

A firm using an authorised approver should therefore review both its communications and its underlying operating model. The FCA maintains specific guidance for crypto firms relying on section 21 approvers as they prepare for the expanded regime. www.fca.org.uk

The same distinction matters for overseas companies: an acceptable marketing arrangement does not settle every question about providing services to UK customers.

How to Choose the Correct Route

Start with the legal entity and its existing status, then assess:

1. Activities: What does the firm actually do?
2. Assets: What rights and characteristics do the supported tokens have?
3. Territory: Which UK connections engage the applicable rules?
4. Timing: What is required for current operations and planned commencement?
5. Permissions: Is registration, new authorisation, a VoP or another route needed?
6. Readiness: What must be implemented and evidenced before submission?

The outcome should be a clear permissions matrix identifying the entity, activity, legal basis, required application and relevant dependencies.

How CRYPTOVERSE Can Help

CRYPTOVERSE provides specialist legal and regulatory support for UK FCA cryptoasset authorisation.

Our work can include:

• Assessing registration, authorisation and VoP routes;
• Mapping activities, tokens and territorial scope;
• Reviewing existing permissions;
• Conducting readiness and gap assessments;
• Preparing agreed application documents and business plans;
• Reviewing consistency and supporting evidence; and
• Supporting regulatory correspondence within the agreed engagement.

Already registered, planning a UK launch or adding crypto services? Request a regulatory route assessment from CRYPTOVERSE before committing to your application strategy.

FAQs