The UK’s crypto licensing window opens Wednesday. The hard part starts now

The FCA has already published final perimeter guidance and a 73-page preview of the application. The preview asks for far more than a company name and anti-money laundering registration number. A firm has to identify what it actually does, which regulated permissions correspond to each service, who controls it, how customer assets and complaints are handled and how it will meet the relevant financial and operational standards. The same legal group might operate a trading venue, safeguard assets and arrange staking, but those activities do not collapse into one undifferentiated crypto licence.

This is the point missing from a simple countdown to Sept. 30. The application window gives firms a route to preserve their business while the regulator decides. It does not lower the standards for becoming authorised, and it does not give a late filer the same ability to sign new UK customers after the regime starts.

Nine activity descriptions precede any decision on a licence

The FCA’s map of regulated crypto activities lists nine kinds of activity being added to the existing financial services framework. They include UK issuance of qualifying stablecoins, safeguarding qualifying crypto assets, arranging for another party to safeguard them, operating a qualifying trading platform, dealing as principal or agent, two kinds of arranging deals, and qualifying crypto asset staking. A firm’s permissions must match the acts it performs.

An exchange that holds customer tokens and matches orders may need to consider both operating a trading platform and safeguarding. A company that forwards orders without holding assets needs to identify the precise arranging or dealing activity, if any, in its business model. A stablecoin issuer in the UK does not become authorised to run an exchange merely by being assessed as an issuer. These examples explain why the permission map matters; the FCA’s published perimeter guidance governs particular fact patterns.

The gateway is open to new applicants and to firms already authorised under the Financial Services and Markets Act 2000 that need a variation of permission. A firm that is registered for anti-money laundering supervision must seek FSMA authorisation separately. The FCA says there is no automatic conversion. Crypto.news reported the fresh authorisation requirement when the final perimeter guidance appeared on Sept. 16.

This is a material distinction for an established operator. Its existing registration may reflect past scrutiny of financial crime controls, but FSMA authorisation assesses a wider business: market conduct, customer treatment, senior leadership, resources and systems. Crypto.news reported Robinhood’s UK crypto registration in August, an example of the earlier status that will not automatically convert. Conversely, an existing bank or investment firm with FSMA permission cannot assume its current permission already includes a newly defined crypto activity. It needs a variation for the activities it proposes to add.

The perimeter is not an assertion that every piece of blockchain software is automatically regulated. The regulated activity, qualifying asset, UK connection and role of each legal entity matter. A developer writing code, a custodian holding keys and a company operating an order book can have different legal positions even when they contribute to one customer journey. The FCA’s September guidance is a starting point for working out the scope, not a substitute for a firm mapping its contracts and operations.

The 73-page preview shows where an application gets difficult

The FCA published an information-only preview of the application form dated Sept. 17. It runs to 73 pages. The regulator says applicants will answer general financial services questions and additional questions chosen according to the business model and permissions requested; a single firm will not necessarily fill every crypto-specific page.

Reading the contents changes the meaning of “apply.” The preview asks for controllers and close links, an organisational chart, a regulatory business plan, projected income for FCA fees, financial forecasts and information about IT systems. It asks about litigation, bankruptcy and other significant events, a financial crime prevention framework, compliance monitoring and complaints. A crypto firm may have to describe its records management, staff personal dealing policy and the approach used to assess whether a retail customer understands a product.

Those are not interchangeable checkboxes. A business plan must explain what the firm sells and how it will earn money. Financial forecasts test whether it has enough resources for the scale it claims. An organisational chart helps identify who actually makes decisions. A complaints process concerns what happens when a customer disputes a transaction or an asset becomes inaccessible. IT controls matter because a custodial failure is not merely a software bug for the customer whose assets are missing.

There is a useful comparison inside the preview. The personal account dealing attestation is described as irrelevant to firms applying only to issue stablecoins; the retail appropriateness question matters only for firms that will have retail customers. An overseas applicant intending to act through a UK branch must explain how it will meet and keep meeting minimum standards. This tailoring is the reason an applicant has to choose its permissions accurately at the start. A generic policy pack cannot answer activity-specific questions for a real exchange, custodian or issuer.

The FCA warns that the preview is supplied on a best-efforts basis and that the online wording may change slightly. Applicants should not try to complete the preview itself. The live form is due to appear when the gateway opens. A serious firm can nevertheless use the preview to find the missing owner of a control or a forecast before it submits anything.

File by February and a pending decision is a different status

The regulator sets out two routes for firms still awaiting a decision. A firm that files during the Sept. 30 to Feb. 28 window may be able to continue its crypto services after Oct. 25, 2027 under a saving provision while the FCA determines its application. This can extend through a challenge to a refusal where the Upper Tribunal has not made a final decision. The firm is not thereby fully authorised. It is operating under a defined temporary legal route.

A firm applying after Feb. 28 may still submit a request. The FCA says it will not speed up review to make up for the late filing. If October 2027 arrives before that application is approved, the firm enters a transitional provision. That provision permits eligible firms to perform only what is necessary under contracts already in place before entering transition. It does not permit new contracts with existing UK customers or new customers.

Put two hypothetical exchanges side by side. Both are lawfully serving UK clients in September 2026 and both remain under FCA review on Oct. 25, 2027. One filed a valid application in February 2027; the other filed in March. If other eligibility conditions hold, the first can use the saving route while a decision is pending. The second can find itself limited to running off existing contracts. Thirty-one days on the calendar can change whether a firm may take a new client order. This is an illustration of the stated rules, not a ruling about any particular exchange.

The difference between the routes is sharper than the phrase “transitional arrangement” suggests. The FCA’s transitional provision guidance calls that route a way to leave the UK market promptly and in an orderly way. Its maximum duration is two years after commencement. It requires firms using it to notify counterparties that the firm is not authorised and to explain material changes in asset protection, dispute resolution and compensation arrangements. Promotions are limited to what is necessary for pre-existing contracts.

A timely application may still be rejected for lacking minimum information. The FCA says a firm whose application is rejected as incomplete, and that does not subsequently submit a valid application, is treated as not having applied for transition eligibility. Pressing submit at 11:59 on the final day with empty controls does not secure the same position as a complete filing. Crypto.news covered the five-month window earlier in September; the exact legal value of filing depends on the validity and timing of the application.

A registered exchange faces a larger examination than it has had

For firms on the FCA’s money laundering register, the new process changes the breadth of scrutiny. Registration under the existing regime has focused on compliance with financial crime requirements. The new FSMA permissions bring questions about governance, market behavior, customer treatment, operational resilience and conduct into the same approval decision. Existing controls may count as evidence, but they are not a replacement for the new requirements.

The regulator’s preparation page asks firms to map each proposed permission to the business model, compare current controls against FSMA standards, and produce a board-approved implementation plan. The plan should identify accountable people, changes, delivery steps and timing. That is a higher bar than announcing that a compliance team has been hired.

Take custody. A firm may already use cold storage and multisignature approval. An authorisation assessment can require it to explain who controls keys, which entity owes the customer the assets, how records reconcile to wallet balances, how incidents are escalated and how recovery is tested. The precise FCA rules applicable to a custodian determine the legal obligation. The example shows why an examiner asks for evidence of a system operating in practice, not only a description of technology.

Or take a platform with several affiliates. One legal company may own the brand, another handle UK customers, and a third hold tokens abroad. A permissions application for one entity cannot silently cover all three. The organisational chart, controllers and close-links questions in the FCA preview make that problem visible. A UK customer must be able to tell which firm contracts with them and which entity has custody. The answer might look simple on an app screen and complicated in the corporate structure underneath.

For an overseas group, there is an additional UK connection question. The preview asks a firm applying through a UK branch to explain how it meets standards despite operations elsewhere. Crypto.news reported Binance’s planned UK licence bid, which remains a plan unless a formal application and decision follow. Offshore access does not automatically put every global service inside the same category, but a business actively serving UK customers should not assume that a foreign incorporation settles its regulatory position.

An application does not fix the banking relationship

The strongest case for the new regime is visible in the FCA’s own timetable. A business that has wanted clear permissions can describe its model, seek authorisation and operate inside a common financial services framework once approved. Existing companies get a defined window and a saving provision if a timely application remains unresolved. That reduces the risk that a regulator’s backlog alone forces an otherwise eligible applicant to turn off service on the commencement date.

The regime also has a limit that matters to users. FCA approval for a crypto activity will not require banks to process every transfer to an exchange. Crypto.news reported that UK banks can retain crypto payment restrictions even as the wider framework approaches. An authorised exchange may still face difficulties connecting its customers’ bank accounts to its services. Authorisation is a regulatory status; it is not a guaranteed commercial banking contract.

There is an opposing argument about cost and access. Smaller firms may have fewer people to prepare a full FSMA application, independent controls and forecasts. That can favor established financial groups with compliance teams and capital. The FCA says its framework aims to support sustainable growth and consumer protection, while the rules impose obligations that carry real costs. The question is whether the standards and review process allow credible smaller applicants to show compliance without weakening the protection consumers are meant to receive.

Nor is the FCA making every outcome knowable before Sept. 30. Its wider framework page says further policy statements will follow on parts of the regime. The application preview itself disclaims legal-advice status and warns of possible small changes in wording. A firm with a marginal product can still dispute whether a specific activity is in scope. These limits do not erase the published deadline or the decisive difference between timely and late filing.

Rejection, appeal and withdrawal are three different paths

An application can fail before the FCA assesses whether the firm meets all substantive standards. The regulator says it may reject a filing that lacks the minimum information required. A business in that situation has not secured a place merely by uploading a form. It can prepare and submit a valid application, but the relevant timing of that valid filing matters for the saving provision. The FCA’s guidance treats a rejected application with no later valid submission as a failure to apply for the purposes of access to the transitional route.

Refusal is different. It follows consideration of an application and may be challenged. The saving provision can continue where a timely applicant refers a refusal to the Upper Tribunal and that process has not concluded. The FCA also says it can direct a refused applicant into the narrower transitional route in certain circumstances, including consumer protection or preventing crime. A firm telling customers that it is “appealing” therefore has to identify whether it is still permitted to serve new business, operating under an FCA direction or limited to existing contracts. The word appeal alone does not answer that question.

Withdrawal creates its own problem. The FCA’s transitional guidance includes some firms that applied during the window and withdrew before commencement among those eligible for an orderly run-off. That is a route to close existing business, not an alternative way to grow without authorisation. A firm already in transition must notify its contract counterparties about its status and any material change to asset protection, dispute mechanisms or compensation arrangements. It may communicate financial promotions only as necessary to carry out pre-existing contracts.

For a customer, those distinctions can become immediate. Suppose an exchange takes a deposit shortly before the regime begins. If its application was timely and still open, the saving provision may permit continuing the service while the FCA decides. If its late application remains pending and it enters transition, the firm may be unable to enter a new contract with that same customer. Whether a particular deposit, order or account amendment is a new contract depends on the actual customer terms and conduct. The FCA’s general page cannot classify every product variation in advance.

The regulator can amend, condition or cancel a transitional exemption and can gather information from firms using it. A maximum two-year run-off is a ceiling, not a promise that an exchange can keep operating for two years regardless of compliance. A refusal, a withdrawal and an incomplete submission are therefore not interchangeable labels. Each changes what the firm can do and what it must tell customers.

The first public outcome will be permissions, not registrations

Applicants should look for a specific grant of permission under FSMA when the FCA issues decisions, and check which activities it covers. A registration under the existing money laundering framework is a different status. A pending application is different again. The same brand may market one service through an authorised firm while another service sits outside that permission.

For customers, that distinction becomes important on Oct. 25, 2027. A firm under a saving provision can continue specified services while the application is decided, but that should not be described as if it has already passed the full authorisation test. A firm in the transitional provision is winding down under constraints; it cannot use the transition as a licence to expand. Customers should be told which entity they contract with and what its status means for asset protection and complaints.

The FCA says firms that apply during the main period will generally be decided before the new regime begins. It does not promise that every file will be approved or resolved by a particular day. Timely and complete submission gives an applicant a procedural route. The regulator’s substantive decision still depends on the evidence the firm supplies and its ability to meet the standards.

The hard part starts with a map of the actual business: order flow, wallets, contracts, control of keys, customer residency and the people responsible for each. A firm that cannot draw that map cannot usefully choose its permissions. The gateway opening Wednesday makes that weakness testable.

What to watch

• Sept. 30 opening. Check the FCA’s online system for the live application and any updated wording at 7 a.m. UK time.
• FCA policy statements. Additional final rules may specify obligations for each activity before commencement.
• Feb. 28 filings. Timely, valid applications are central to the saving route if decisions remain pending.
• Permission grants. Check the exact FSMA activity and legal entity named in each authorisation.
• Oct. 25, 2027 status. A pending application, saving provision and restricted run-off are different legal positions.

FAQ

Disclaimer: This article is for information and educational purposes only and does not constitute financial or investment advice. Figures reflect regulatory filings and reporting available at the time of writing and change with each disclosure. Nothing here is a recommendation to buy, sell, or hold any security or asset. Always do your own research. Information is accurate as of September 28, 2026.