Crypto's Regulatory Gray Zone Is Closing Across Major Markets
For much of the past decade, regulatory ambiguity was a feature of the crypto industry rather than an exception. Rules differed sharply between markets, licensing requirements were often limited to anti-money-laundering registration, and businesses could sometimes operate under frameworks that were never designed for platforms trading or safeguarding digital assets at scale.
That is changing quickly.
The shift is not happening on one synchronized global deadline, and the regulatory models differ significantly from one jurisdiction to another. But across Europe, the United States, the United Kingdom and Australia, the direction is increasingly clear: governments are replacing fragmented or limited crypto rules with formal licensing, custody, capital, disclosure and supervisory requirements.
For brokerages such as UpTrade, where client assets are held within a broker-led custody model rather than leaving users entirely responsible for execution and storage, this is no longer a distant policy discussion. It is becoming part of the operating environment.
That convergence is the backdrop against which Jeff Zylstra, founder and CEO of UpTrade, has been thinking about what it takes to build a brokerage that can operate through the industry's next regulatory phase.
Europe's Transition Period Has Ended
Europe provides the clearest example of what happens when a transitional crypto regime reaches its endpoint.
The European Union's Markets in Crypto-Assets Regulation, better known as MiCA, did not suddenly take effect on July 1, 2026. Its broader crypto-asset service provider rules had applied since December 30, 2024. What ended on July 1 was the final possible grandfathering period that allowed certain providers already operating under national law to continue doing business while seeking MiCA authorization.
That distinction matters, but so does what happened when the transition ended.
According to subsequent CoinDesk reporting, Europe was thought to have had more than 3,000 registered virtual asset service providers under the pre-MiCA system as of 2024. By late June 2026, 244 crypto-asset service providers had secured MiCA authorization. Later reporting put the number of valid MiCA-authorized companies at 323 around the July transition, while more than 1,700 unlicensed platforms were required to stop serving EU customers after the grandfathering period ended.
Those numbers should not be read as a simple licensing "pass rate." Pre-MiCA national registrations, MiCA applications and ultimately authorized entities are not directly comparable datasets, and not every business without a MiCA license necessarily applied and failed. Some firms consolidated entities, changed operating models, partnered with licensed providers or left particular markets.
What the numbers do show is how dramatically the regulatory threshold has changed.
For crypto-asset service providers, MiCA introduces a single EU-wide framework covering authorization, governance, safeguarding of client assets, disclosures and prudential requirements. Once authorized, firms can operate across the bloc through a common regulatory framework rather than relying on a patchwork of national registrations.
The trade-off is that market access now comes with substantially greater regulatory obligations.
The United States Is Moving Differently, With Stablecoins First
The United States is following a narrower path.
The GENIUS Act, signed into law on July 18, 2025, established a federal regulatory framework specifically for payment stablecoins. It should not be confused with a comprehensive federal licensing regime for every crypto exchange, brokerage or custodian.
Its significance is still considerable.
The Office of the Comptroller of the Currency issued a proposed implementing rule in February 2026 covering areas including reserve assets, redemption, risk management, reporting, supervision, custody and capital requirements for payment stablecoin issuers within its jurisdiction. A separate proposal addressing anti-money-laundering and sanctions compliance followed in June.
As of August, implementation remains in the rulemaking stage. Comptroller of the Currency Jonathan Gould said on August 19 that the OCC expects to have its final GENIUS rule out by November.
Under the law, the GENIUS Act becomes effective on the earlier of 18 months after enactment, which would be January 18, 2027, or 120 days after federal payment stablecoin regulators issue final implementing regulations.
The important distinction is that the United States has not yet brought crypto brokerages broadly into one new bank-style regulatory system. Instead, it has started with one of the industry's largest and most systemically relevant segments: payment stablecoins.
Even so, the direction resembles what is happening elsewhere. An asset class that spent years operating without a dedicated federal framework is moving toward explicit reserve, redemption, compliance and supervisory requirements.
Australia's New Framework Brings the Shift Closer to Home
Australia may be the more directly relevant example for firms such as UpTrade.
The Corporations Amendment (Digital Assets Framework) Act 2026 received Royal Assent on April 8. The legislation creates a formal framework for digital asset platforms and tokenised custody platforms within Australia's existing financial-services system, including Australian Financial Services Licence requirements for businesses that fall within scope.
The framework covers more than registration. It introduces requirements around licensing, minimum standards, platform rules, disclosure and other obligations drawn from Australia's broader financial-services architecture.
Importantly, the new regime does not begin immediately.
The legislation is scheduled to commence on April 9, 2027. It then provides a six-month transition period for existing providers. Businesses that apply during that window for the necessary AFSL or licence variation can continue to benefit from transitional treatment until ASIC decides the application.
That distinction is particularly important when discussing businesses already operating in the Australian crypto market.
UpTrade is currently registered with AUSTRAC as a Digital Currency Exchange provider. That registration carries existing anti-money-laundering and counter-terrorism-financing obligations, but it should not be confused with authorization under the incoming Digital Assets Framework. The two regimes are different.
UpTrade also says client assets held through its brokerage are secured using Fireblocks custody infrastructure. As Australia moves toward a more formal platform and custody regime, businesses built around holding, executing and safeguarding client assets will need to assess how their existing systems fit within the new licensing framework.
For Zylstra, that makes regulatory preparation less about responding to a single deadline and more about building operating systems that can withstand a progressively higher level of scrutiny.
The UK Has Finalized Key Rules, but Implementation Is Still Ahead
The United Kingdom provides another example of why regulation is converging without happening simultaneously.
After a series of consultations covering areas including crypto trading, staking, custody, stablecoins and prudential requirements, the Financial Conduct Authority published final rules and guidance for important parts of its new crypto regime on June 30, 2026.
The authorization gateway is due to open ahead of implementation, while the expanded regulatory regime is expected to come into force on October 25, 2027.
Firms carrying out newly regulated crypto activities in or to the UK will generally need authorization under the Financial Services and Markets Act framework and will be expected to meet requirements that are much closer to those applied elsewhere in regulated financial services.
That leaves the UK at a different point in the transition from Europe. MiCA's final grandfathering deadline has already passed. Britain's broader regime is largely still in the preparation and authorization phase.
The regulatory destination, however, is increasingly familiar.
Different Rules, Similar Direction
It would be misleading to treat MiCA, the GENIUS Act, Australia's Digital Assets Framework and the UK's incoming regime as versions of the same law.
They regulate different activities, use different licensing structures and come into force on different timelines.
The United States has focused first on payment stablecoins. Europe has created a broad cross-border framework for crypto-asset service providers and issuers. Australia is bringing digital asset platforms and tokenised custody platforms deeper into its existing financial-services licensing architecture. The UK is creating a broader set of regulated crypto activities within its FSMA system.
What they share is a move away from the idea that crypto businesses can be supervised primarily through limited registration requirements and general guidance.
Licensing, governance, safeguarding, capital, disclosure, market conduct and operational controls are becoming central parts of the conversation.
That changes the economics of running a crypto business.
Compliance Is Becoming Part of the Cost of Market Access
MiCA illustrates the point clearly.
Its permanent minimum capital requirements vary according to the services a crypto-asset service provider is authorized to offer. Class 1 providers face a €50,000 minimum. Class 2 providers, which can include firms providing custody and crypto exchange services, face a €125,000 minimum. Class 3 providers operating crypto trading platforms face a €150,000 minimum.
Those figures are only part of the prudential calculation. Under MiCA, providers must maintain safeguards equal to at least the higher of the relevant minimum capital amount or one quarter of the previous year's fixed overheads.
Capital is also only one component of compliance. Firms may face additional expenditure on legal advice, audits, governance, cybersecurity, reporting, risk controls, custody architecture and compliance personnel.
The result is a different competitive environment from the one in which many crypto platforms were originally built.
For smaller and mid-sized businesses, the strategic question increasingly becomes whether to build the necessary infrastructure internally, operate through partnerships with appropriately licensed providers, consolidate or leave activities that have become more expensive to regulate.
Zylstra sees that change as more consequential than any individual licence fee. His argument is that compliance is becoming part of the underlying infrastructure of a crypto brokerage, rather than something that can be added once a business reaches sufficient scale.
That does not guarantee that larger companies will always win. Regulation can also create opportunities for specialist firms that design their systems around a narrower set of activities and build the required controls early.
But it does make regulatory readiness more relevant to competition than it was when market access depended primarily on customer acquisition, liquidity and technology.
Regulation Can Become a Competitive Factor
For years, crypto companies often discussed regulation primarily as a constraint: another expense, another jurisdictional hurdle or another reason to move operations elsewhere.
That calculation is becoming more complicated.
A clear licensing framework can increase costs, but it can also give customers, counterparties and institutions a better way to evaluate who is responsible for assets, how reserves or client funds are handled, what happens when something goes wrong and which regulator has authority over the provider.
MiCA's passporting system is one example. A company that satisfies the authorization requirements can use a common framework across the EU rather than navigating a separate registration system in each member state.
Australia is moving toward a similar principle through a different regulatory structure. The incoming regime places digital asset platforms and custody businesses within a financial-services framework that investors and other market participants already understand.
Zylstra's view is that businesses preparing for those requirements before they become mandatory may ultimately find the transition easier than companies trying to retrofit compliance systems after years of rapid growth.
There is an important caveat. Regulatory preparation itself is not proof of safety, good governance or future licensing approval. Nor does existing registration under an AML regime automatically satisfy the requirements of a future financial-services licence.
The advantage, if there is one, comes from having the systems, personnel and operating discipline needed to respond when the regulatory standard changes.
Crypto's Next Phase Will Be Defined by the Operators That Can Adapt
The era of regulatory ambiguity has not disappeared everywhere, and it did not end on a single date.
But across several of the world's largest crypto markets, relying on that ambiguity is becoming a less durable business strategy.
Europe has reached the end of its MiCA transition. The United States is turning its stablecoin legislation into detailed implementing rules. Australia has passed a digital asset platform and custody framework that begins in 2027. The UK has finalized important elements of a broader regime that will follow later.
The timelines differ, but the broader shift is difficult to miss.
Crypto businesses are increasingly being asked to answer the same kinds of questions that traditional financial firms have dealt with for decades: Who holds the client's assets? What controls protect them? How much capital sits behind the business? What must be disclosed? Who is accountable when systems fail? And which regulator has the authority to intervene?
For companies operating in that environment, compliance is no longer simply a legal function at the edge of the business.
It is becoming part of the business model itself.
