The Financial Services and Markets Act 2026 brings cryptoassets including exchanges, custody services, and stablecoins into the UK’s core financial regulatory framework for the first time. It gives the Financial Conduct Authority oversight of crypto firms operating in or targeting UK customers, ending years of light-touch registration. This section explains what the regime requires, which businesses it affects, key compliance deadlines, and what the changes mean for UK consumers and the broader crypto industry.
Key takeaways
- From 2026, operating without FCA authorisation becomes a criminal offence rather than a civil breach.
- Under the new rules, exchanges, custody services, staking platforms, and crypto issuers all require FCA authorisation.
- Before authorisation is granted, exchanges must meet best execution, fee disclosure, and market manipulation controls.
- Custody providers must segregate client assets, reconcile them regularly, and keep documented recovery procedures in place.
- Firms that apply before the transitional deadline can continue operating while the FCA assesses the application.
- Appoint a senior manager with direct compliance accountability before the deadline rather than after it.
- Consumers gain clearer fee disclosure, segregated assets, and recourse mechanisms that did not exist before.
What FSMA 2026 Actually Changes for Crypto in the UK
Check whether any crypto service you use holds FCA authorisation under the new regime. From 2026, operating without it becomes a criminal offence rather than a civil breach. That change in legal status is the central shift FSMA 2026 introduces.
Before this legislation, cryptoasset businesses registered under the Money Laundering Regulations faced anti-money laundering checks, but not conduct obligations. FSMA 2026 brings cryptoassets into the Financial Services and Markets Act 2000 framework. As a result, exchanges, custodians, and stablecoin issuers must meet the same baseline conduct standards applied to banks and investment firms.
Stablecoins used for retail payments fall into a separate, stricter category. Issuers must hold backing assets in segregated accounts and meet redemption requirements. This reduces the risk of a Terra-style collapse affecting UK consumers.
For retail investors, the key change is a mandatory risk warning on every crypto promotion approved by an FCA-authorised firm, alongside a 24-hour cooling-off period for first-time purchasers. That rule came into effect for promotions ahead of the broader 2026 authorisation deadline.
Which Crypto Activities Require FCA Authorisation Under the New Rules
| Likely requires FCA authorisation | Generally outside the perimeter |
|---|---|
| Operating a cryptoasset exchange | Peer-to-peer transfers between private wallets |
| Running a custody service | Holding cryptoassets purely for personal use |
| Arranging crypto deals | Non-custodial protocol development without direct dealing or arranging for UK retail users |
| Issuing cryptoassets to UK retail investors | Web3 infrastructure activity that does not directly interface with UK retail users in a regulated capacity |
| Staking-as-a-service and lending platforms where custody or counterparty risk is taken | — |
Failing to identify whether your activity falls within the new regulated perimeter carries criminal liability from 2026, so the scope matters now. The FCA will require authorisation for operating a cryptoasset exchange, running a custody service, arranging crypto deals, and issuing cryptoassets to UK retail investors. Staking-as-a-service and lending platforms are also captured where they take on custody or counterparty risk.
Peer-to-peer transfers between private wallets fall outside the perimeter. Holding cryptoassets purely for personal use also sits outside it. Businesses operating within web3 infrastructure, such as non-custodial protocol developers, are unlikely to require authorisation unless they directly interface with UK retail users in a dealing or arranging capacity.
Firms already registered under the Money Laundering Regulations gain no exemption under the new framework. Registration and authorisation are separate processes, each with distinct legal thresholds. Any firm uncertain whether its model crosses the regulatory boundary should seek a determination from the FCA before 2026, because no grace period for continued unlicensed operation has been confirmed.
How the New Regime Affects Exchanges, Issuers, and Custody Providers
FSMA 2026 obligations differ sharply by activity. Firms that blur those lines create compliance gaps. Exchanges must meet conduct standards on best execution, fee disclosure, and market manipulation controls. The FCA assesses those standards before authorisation, not after launch.
Custody providers must segregate client assets from firm assets, reconcile them regularly, and maintain documented recovery procedures in the event of insolvency. Token issuers distributing to UK retail investors must produce a cryptoasset public offer document. That document must cover technical architecture, risk factors, and issuer conflicts of interest. The MLR framework has no direct predecessor to this requirement.
Firms operating across multiple categories must satisfy the obligations for each activity separately. A single FCA authorisation can cover multiple regulated functions, but only when the firm has demonstrated compliance with the distinct requirements attached to each one.
Compliance Obligations: What Firms Need to Do Before the Deadline
The FCA’s authorisation gateway is open. Firms that apply before the transitional deadline can keep operating during assessment. Those that miss it must halt regulated activities immediately.
Map every service you provide against the regulated activities listed in the amended Financial Services and Markets Act. If an activity falls within scope, appoint a senior manager with direct accountability for compliance before you submit. The FCA expects adequate financial resources, robust controls, and a credible wind-down plan from day one.
Three errors consistently delay applications. A missing perimeter analysis creates gaps that the FCA identifies immediately. An existing AML framework is not enough for conduct documentation, because conduct obligations require separate policies. Firms also underestimate the Senior Managers and Certification Regime. It requires individual responsibility maps, not generic governance diagrams.
Firms registered under the Money Laundering Regulations should not assume that registration accelerates authorisation. The FCA treats them as new applicants for conduct purposes. For plain-English guidance on navigating the process, Crypto Help offers support tailored to the UK regulatory environment.
What FSMA 2026 Means for UK Crypto Investors and Consumers
- Using an unauthorised crypto service becomes easier to spot by checking FCA authorisation status.
- Crypto promotions must carry a risk warning approved by an FCA-authorised firm.
- First-time purchasers get a 24-hour cooling-off period.
- Stablecoins used for retail payments face stricter backing and redemption requirements.
- Some firms may need to stop offering services if they miss the authorisation gateway.
- Consumers may face reduced choice where firms cannot meet the new standards.
- The perimeter is complex, so consumers still need to verify whether a service is properly authorised.
For anyone holding or trading crypto in the UK, FSMA 2026 removes the ambiguity that has defined the market since Bitcoin’s emergence. Platforms that once operated under minimal conduct rules must now meet the same baseline standards as stockbrokers and investment firms. That means clearer fee disclosure, segregated assets, and recourse mechanisms that did not exist before.
If you use an exchange or custody service, the most direct way to assess your exposure is to check whether it holds FCA authorisation under the new regime. Unauthorised platforms may disappear or halt services mid-transition. That can leave users without access to funds during the assessment period. Understanding is crypto safe under current conditions means accounting for that regulatory gap while it closes.
For consumers, the practical gain is clear: authorised firms carry enforceable obligations on complaints handling, transparency, and asset protection, backed by the FCA’s supervisory and enforcement powers. That shifts the risk balance significantly compared with the pre-2026 environment, where retail users had limited formal recourse against exchange failures or misconduct.
Frequently Asked Questions
What is FSMA 2026 and how does it change crypto regulation in the UK?
The Financial Services and Markets Act 2026 brings crypto assets into the UK’s existing financial regulation framework for the first time. Exchanges, custodians, and issuers must now meet FCA authorisation requirements. It replaces the previous lighter-touch registration regime with full conduct and disclosure obligations.
Which crypto activities will require FCA authorisation under FSMA 2026?
Under FSMA 2026, regulated activities focus on services offered to UK customers, not simply on operating in the UK. Businesses will need FCA authorisation to run a crypto exchange, issue stablecoins, provide custody services, or facilitate crypto lending. Once the regime takes effect, operating without authorisation will be a criminal offence.
How does FSMA 2026 affect UK crypto firms and overseas firms serving UK customers?
UK-based crypto firms must register with the FCA before they can operate. They also need to meet conduct, disclosure, and financial resilience standards. Overseas firms that target UK customers face the same requirements unless a specific exemption applies. Under the new regime, serving UK clients without authorisation becomes a criminal offence.
What consumer protections and compliance duties does FSMA 2026 introduce for crypto businesses?
FCA authorisation is mandatory before a firm can offer crypto services to UK retail customers. Authorised firms must meet the Consumer Duty standard. That means products must deliver fair value, and communications must stay clear and honest. Financial promotions also require FCA approval. High-risk assets must carry prescribed risk warnings.
When will FSMA 2026 take effect, and what should crypto firms do to prepare?
The Financial Services and Markets Act 2026 is expected to bring crypto activities under full FCA authorisation requirements from 2026. Transitional provisions will likely run through 2027. Firms should start compliance mapping now. Key priorities include appointing a compliance officer, reviewing marketing practices, and assessing custody arrangements against incoming regulatory standards.