FCA Opens Crypto Authorization for the 2027 UK Regime

The Financial Conduct Authority has opened a formal application window for crypto businesses that want to operate legally in the United Kingdom once a sweeping new regulatory regime takes effect on 25 October 2027. The deadline to apply is 28 February 2027, and the FCA has been explicit: existing registration under the Money Laundering Regulations will not carry over. Every firm, regardless of how long it has held an MLR registration, must go through a full authorization process. For accounting firms, auditors, and CFOs supporting crypto businesses, this is a compliance planning inflection point that cannot be deferred.

What the FCA Has Actually Announced

The FCA opened the authorization window on 30 September 2026. The timing is deliberate. The regulator wants enough lead time to work through applications before the October 2027 go-live date, and firms that submit before the end of February 2027 are the ones it expects to have a decision in hand by then.

The scope of the new regime

The incoming framework extends FCA oversight well beyond the anti-money laundering and financial promotion requirements that currently govern most UK crypto businesses. According to the FCA's announcement, the regime will introduce substantive obligations covering:

• Stablecoin issuance, bringing issuers into a regulated perimeter for the first time under a dedicated crypto-specific framework.
• Crypto trading platforms, which will face conduct-of-business and systems-and-controls standards comparable to those applied to traditional trading venues.
• Market abuse, meaning crypto asset markets will sit within a formal market integrity regime with detection and reporting obligations.

Dominic Cashman, the FCA's Director of Authorizations, described the outcome as giving consumers greater protections while giving firms a clear operating framework. The language matters because it signals that the FCA sees authorization as a quality filter, not a rubber stamp.

The MLR registration trap

This point deserves particular emphasis for any firm that has been operating on the basis of its existing money laundering registration. Emma Banymandhub, CEO of The Payments Association, put it plainly in comments shared with Cointelegraph: "MLR registration will not carry over, and firms should be realistic about the standards they will need to meet."

That is a direct warning to businesses that may have assumed their current registration provides continuity. It does not. The authorization bar is materially higher, and firms that leave the application too late risk a gap between the October 2027 go-live date and the resolution of their application, which could force them to suspend UK operations.

Why the February 2027 Deadline Is the Real Risk Point

The FCA has not set the February deadline as a hard legal cutoff for submitting an application. What it represents is the processing window the regulator has identified as realistic for reaching decisions before October 2027. Firms submitting after that date are not automatically refused, but they lose the expectation of a pre-regime decision. That creates a period of regulatory uncertainty that is very difficult to manage commercially or operationally.

What happens to late applicants

A firm that submits after February 2027 and has not received a decision by 25 October 2027 will need legal advice on whether it can continue operating while the application is pending. The FCA's transitional provisions will govern this, and the regulator has not yet published detailed transitional arrangements as of the date of this article. Firms should monitor the FCA's policy statements closely and factor the risk of a trading suspension into their contingency planning.

Application quality will determine outcomes

The FCA's history with crypto MLR registrations is instructive. The regulator rejected a significant proportion of applications during the MLR registration phase due to inadequate AML frameworks, insufficiently experienced senior management, and weak financial crime controls. The authorization process will apply at least the same scrutiny, and the additional scope of the new regime means applicants need to demonstrate capability across a wider set of regulatory requirements. Submitting a thin or incomplete application early is not a strategy; the FCA is likely to return or reject it.

Accounting and Audit Implications for Firms and Their Advisers

Authorization is not purely a legal and compliance exercise. It has direct implications for how crypto businesses are structured, reported, and audited, and for the accounting firms and CFOs that support them.

Regulatory capital and financial reporting

FCA authorization will almost certainly introduce regulatory capital requirements for crypto firms, as it does across other regulated financial services sectors. CFOs need to model their capital position under the expected requirements before submitting an application, since a firm that cannot demonstrate adequate financial resources will not be authorized. This means balance sheet analysis, liquidity projections, and potentially a recapitalization plan need to be in place ahead of the filing date.

From a financial reporting perspective, the shift from MLR registration to FCA authorization changes the firm's regulatory status, which is a disclosable event in audited accounts. Auditors will need to assess going-concern implications if a firm's authorization is uncertain, and will need to understand the timeline when forming their opinion on financial statements prepared for periods straddling October 2027.

Stablecoin issuers: a new accounting category

The inclusion of stablecoin issuance within the regime is particularly significant for accounting purposes. An FCA-authorized stablecoin issuer will be subject to asset-backing and redemption requirements that have direct balance sheet consequences. Reserve assets will need to be identified, ring-fenced, and reported consistently with any FCA rules on eligible assets. Auditors will need to develop specific procedures around the completeness and valuation of those reserves. Firms using crypto compliance reporting workflows will need to ensure those workflows can produce the data the FCA will expect to see in supervisory returns.

Market abuse obligations and record-keeping

Bringing crypto trading platforms within a market abuse regime means firms will need surveillance systems, written procedures, and record-keeping that can support both internal monitoring and regulatory reporting. From an accounting standpoint, this translates into new cost lines for technology and compliance infrastructure that need to be reflected in budgets and potentially in impairment assessments of existing systems that fall short of the required standard.

AML: from registration to authorization standard

The gap between MLR registration and full FCA authorization in AML terms is substantial. MLR registration requires firms to have adequate AML policies and controls, but the assessment is relatively light-touch compared to the ongoing supervisory relationship that comes with FCA authorization. Authorized firms will be subject to skilled person reviews, supervisory visits, and data requests. Their transaction monitoring, customer due diligence, and suspicious activity reporting procedures will need to meet the standard the FCA applies across regulated financial services, not just the crypto-specific bar set during MLR registration.

For accounting firms advising these clients, understanding how on-chain AML screening fits into a compliant crypto workflow is now a prerequisite for providing credible advice. And given the broader expansion of the UK digital asset regulatory framework, firms that have been monitoring policy developments in this space should already have a view on the direction the FCA is heading.

Practical Steps for B2B Advisers Right Now

The authorization window is open. The question is not whether to engage with this process but how to sequence it efficiently.

Immediate actions for accounting firms and CFOs

First, confirm which of your crypto clients currently hold MLR registrations and make sure they understand that registration does not give them continuity of permission beyond October 2027. This is an advisory conversation that should happen in the next few weeks, not in Q1 2027.

Second, conduct a gap analysis against the FCA's authorization requirements. The key dimensions are: governance and senior management accountability, financial resources, AML and financial crime controls, systems for market surveillance (for trading platforms), and, where relevant, stablecoin reserve management. Digital asset accounting software that produces audit-ready records across these categories will be a practical necessity, not an optional upgrade.

Third, assess the timeline for remediation. If a client's current infrastructure has gaps, those gaps need to be closed before the application is submitted. Filing with known deficiencies and hoping the FCA will accept undertakings is a high-risk approach given the regulator's track record.

Fourth, build in time for the application itself. FCA authorization applications for financial services firms are substantial documents. They require detailed descriptions of business models, financial projections, regulatory business plans, and individual fitness-and-propriety assessments for approved persons. A well-resourced firm should allocate several months to preparing a submission of sufficient quality. With the February 2027 deadline in view, that means substantive work needs to start in Q4 2026.

For firms considering UK market entry

Overseas firms that have been watching the UK market but holding back pending regulatory clarity now have a defined window. The trade-off is clear: apply early, meet the authorization standard, and have a decision before October 2027, or wait, face uncertainty, and risk being locked out of the UK market during the transition period. The economics of that decision will depend on each firm's UK revenue exposure, but the authorization window is now open and the clock is running.

Frequently Asked Questions

Does my MLR registration give me any transitional rights under the new regime?

No. The FCA has confirmed that MLR registration will not convert into authorization under the new crypto regime. Firms currently operating on the basis of MLR registration must submit a full authorization application and meet the authorization standard independently of their registration history.

What is the application deadline and what happens if I miss it?

The FCA expects firms to apply by 28 February 2027 to receive a decision before the regime takes effect on 25 October 2027. Applications submitted after that date will not automatically be refused, but the FCA has not committed to deciding them before go-live. Firms in that position may face a period where they cannot operate pending a decision, depending on the transitional arrangements the FCA publishes.

Which crypto business activities fall within the new regime?

Based on the FCA's announcement, the regime covers stablecoin issuance, crypto trading platforms, and market abuse obligations. It extends materially beyond the anti-money laundering and financial promotion requirements that currently define the regulatory perimeter for most UK crypto businesses.

What are the key accounting implications of FCA authorization for crypto firms?

Authorization will likely introduce regulatory capital requirements, creating new balance sheet constraints and disclosure obligations. Stablecoin issuers will need to account for reserve assets under specific FCA rules. Market abuse and surveillance obligations will add compliance cost lines to the income statement. Auditors will need to address the authorization status and timeline in going-concern assessments for financial statements covering periods that straddle October 2027.

How should accounting firms be advising crypto clients right now?

The immediate priority is ensuring clients understand that MLR registration provides no continuity of permission. From there, a structured gap analysis against the FCA's authorization requirements, followed by remediation planning and a realistic application timeline, is the correct sequence. Firms that leave this until 2027 risk running out of time to prepare a credible application before the February deadline.

Source: Cointelegraph