Crypto's New Rulebook: The FCA Opens the Door to a Regulated Market

The longest running argument in British financial regulation, what to do about crypto, is entering its final chapter. From this month, firms can apply for authorisation through the Financial Conduct Authority's Connect system, the gateway to a regime that will, for the first time, bring cryptoassets fully inside the regulatory perimeter.

The legal foundation was laid on 4 February, when Parliament made the Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026. Until then, the FCA's reach extended little further than anti-money laundering registration and the rules on financial promotions. The regulator published its final rules and guidance on 30 June, in a run of policy statements numbered PS26/9 to PS26/13, and the full regime comes into force on 25 October 2027.

The timetable is deliberate. Ministers and the regulator have chosen a long runway over a hard stop, giving firms more than a year to secure authorisation before the perimeter closes around them. The message to the industry is that there will be no excuses left when the gate shuts.

The industry, which once lobbied against regulation altogether, has largely changed its tune. After a decade of collapses, hacks and scandals, the bigger platforms now regard a credible licence as a commercial asset rather than a burden, a way to win customers and banking relationships that the wilder corners of the market cannot reach. Smaller firms face a harder calculation: compliance is expensive, and some will not survive the transition.

What will be regulated

The list is comprehensive. Operating a cryptoasset trading platform, safeguarding or administering cryptoassets for customers, dealing as principal or agent, arranging deals, staking and the issuance of stablecoins will all become regulated activities requiring FCA authorisation. Firms serving retail customers will be subject to the Consumer Duty, the obligation to deliver good outcomes that has reshaped the rest of retail finance since 2023.

Trading platforms face two further layers. A dedicated market abuse regime for cryptoassets, known as MARC, will target manipulation and insider dealing, while admissions and disclosures standards will govern which tokens may be admitted to trading and what buyers must be told about them. One carve-out is already in view: in April, the Government proposed excluding UK-issued qualifying stablecoins from the arranging and dealing rules, ahead of a future payments regime that would treat them more like money than investments.

What changes now, and what does not

For firms, the instruction is to prepare early. Authorisation is expected to be demanding, and the FCA has been explicit about its aims: to strengthen consumer protections, to tackle financial crime, and to position the UK as a trusted, competitive home for responsible innovation. Companies that want to be operating lawfully on day one are being encouraged to engage with the gateway now, not in the autumn of 2027.

For ordinary holders, the honest answer is that little changes yet. Until 25 October 2027, most crypto activities remain unregulated, and investors are unlikely to have access to the Financial Services Compensation Scheme or the Financial Ombudsman Service if something goes wrong. The existing promotions rules, including the prominent risk warnings every lawful crypto advert must carry, remain in force in the meantime, and the scammers have not waited for the statute book.

The direction of travel, though, is unmistakable. Within two years, buying crypto in Britain should feel much closer to buying shares: authorised platforms, standardised disclosures and a conduct regulator with real powers. For the FCA, the reputational stakes are just as high. License too freely and the regime becomes a badge for cowboys; too tightly and the business moves offshore. Whether any of it tames the volatility is another matter. Regulation can police the market; it cannot police the price.