UK crypto rules are the laws and FCA standards that decide who can run crypto businesses in Britain and how customers must be treated. Until now, most firms only needed an anti-money-laundering registration. That is ending.
The Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026 were made on 4 February 2026. The FCA application window opened on 30 September 2026. This guide covers the steps, the regulated activities, and what investors should check.
Crypto grew faster than the rules around it. Many platforms operated with light checks, and retail buyers had little formal protection.
The new framework moves crypto closer to the standards applied to investment firms. Supervision now reaches governance, capital, and the handling of customer assets.
This window is the application period for firms seeking permission to run regulated crypto activities. It runs from 9:00 am on 30 September 2026 to 11:59 pm on 28 February 2027.
Firms that apply inside the window can use transitional provisions while the regulator reviews the case. Firms that miss it risk being unable to continue UK business when the regime starts. The FCA has also said existing registrations will not convert automatically.
4 February 2026: the regulations set the legal perimeter.
30 June 2026: the FCA published final rules in policy statements PS26/9 to PS26/13.
16 September 2026: Perimeter guidance (PS26/18) explained which activities need authorization.
30 September 2026: the gateway opened.
25 October 2027: the full regime starts.
The regulator plans further consultation in October on stablecoins, market making, and decentralized finance. Details could still change.
The regulations name these regulated activities:
Trading platforms: running a market where buyers and sellers trade.
Dealing as principal: trading with the firm's own funds against customers.
Dealing as an agent: buying or selling for clients.
Arranging deals: setting up or connecting transactions.
Custody and safeguarding: holding crypto or access keys for clients.
Staking: arranging the locking of tokens to support a network for rewards.
Stablecoin issuance: covered by the same regime.
A separate guide, UK Crypto Rules for Crypto Exchanges and Trading Platforms, explains stablecoin activity in detail.
Platform responsibilities: Each platform needs accountable senior managers, enough money in reserve, and a plan for when systems fail.
Customer protection: Customer assets stay separate from the firm's own money, so client funds are not tied up if the company gets into trouble.
Market integrity: Fair trading is the aim. A dedicated market abuse regime covers insider dealing and price manipulation.
Disclosure: Projects selling or listing tokens must publish clear documents that explain the risks in plain terms.
HM Treasury writes the law. The Financial Conduct Authority decides which firms may operate, sets the conduct rules, and keeps watch over them. HMRC looks after tax. The Bank of England is expected to oversee large stablecoins.
Firms apply through the regulator's gateway. They must show a sound business plan, honest and capable owners and managers, enough money, and strong controls.
Running a regulated activity without permission after the start date can lead to criminal, civil, and regulatory action. So businesses should list their activities, spot the gaps, get board approval for a plan, and apply early.
HMRC treats most crypto as a digital asset that triggers capital gains tax. Selling, swapping, spending, or gifting all count as a disposal.
The first £3,000 of gains each year is tax-free. Gains above that face a rate of 18% or 24%, based on income. Since 1 January 2026, UK platforms have also collected customer data and reported it to HMRC. The first reports are due by 31 May 2027.
Authorized status: Buyers can check the FCA Register before picking a firm.
Safe custody: Firms must keep client funds apart from their own.
Clear disclosure: Offer documents spell out the risks before anyone buys.
Market abuse limits: Manipulation and insider trading are banned.
Fair promotions: Crypto adverts must be clear and not misleading.
Prices can still drop sharply. Authorization does not promise returns.
Unauthorised firms may keep operating until October 2027.
Scammers may pretend to be authorized firms.
Rules for decentralized finance are still taking shape.
The new UK crypto rules bring trading, custody, staking, and stablecoins under FCA supervision from 25 October 2027.
Safeguarding and disclosure stand out. How many firms win approval is the biggest unknown. Investors should check a firm's status on the FCA crypto firm register and look at their own tax duties.
Disclaimer
This article is for information only and is not financial, investment, legal, or tax advice. Crypto is high risk, and capital may be lost. Readers should verify facts with official sources and consult a qualified adviser before acting.