Britain's Financial Conduct Authority has published guidance spelling out how its forthcoming crypto rulebook applies to individual firms, releasing the perimeter guidance on Wednesday—two weeks before the window for authorization applications opens.

Crypto firms will be able to apply for UK authorization between September 30 and February 28, 2027, with the new regime taking effect on October 25, 2027. The timing matters: applications submitted inside the window trigger transitional protections, while missing the February deadline forfeits the cover that lets firms keep operating while their applications are assessed.

The guidance sets out which activities require FCA approval—in effect marking the regulatory perimeter, the line separating business that falls inside the new regime from business that stays outside it. It covers issuing qualifying stablecoins, running trading platforms, dealing and arranging deals, safeguarding cryptoassets, and arranging staking.

"This guidance gives firms the clarity they've asked for so they can prepare with confidence," said David Geale, the FCA's executive director of consumers, payments and competition.

A wide catchment area

The rules reach well beyond British-based companies. Parliament extended the regime's territorial scope so that overseas firms dealing with, arranging for, or safeguarding cryptoassets for UK retail consumers count as carrying on business in the UK, said Michelle Kirschner, a partner at Gibson Dunn. The overseas persons exclusion that firms normally rely on, she noted, "is simply not available for these activities."

Two limits temper the reach. Purely institutional business conducted from overseas remains largely untouched, as do firms that reach UK consumers only through a UK-authorized dealer or trading platform.

"The policy intent is clear," Kirschner said. "If a firm wants direct access to UK retail customers, it must come onshore and get authorised."

The February deadline carries real consequences

The deadline matters more than it looks. Applying inside the window triggers statutory saving provisions that let a firm keep operating while the FCA assesses its application, said Thomas Brown, a partner at Shoosmiths. Miss it, and the application will still be accepted—but without that cover, a firm not yet authorized by October 2027 is "likely to be restricted to servicing existing contractual arrangements and may be unable to onboard new customers or enter into new business."

Until permissions are granted and the regime commences on October 25, 2027, existing money laundering registrations and the financial promotions regime continue to govern. "It will not be the case that anyone will be authorised early," Kirschner said, though early application does afford additional preparation time. Brown cautioned that firms should avoid treating February 2027 as a "target date rather than a deadline."

What remains open

The government has amended the underlying legislation to add targeted exclusions and clarifications, and the FCA will consult in October on how the guidance should change. That consultation covers UK qualifying stablecoins proprietary trading and market making, certain technology providers, decentralized protocols, safeguarding arrangements involving central securities depositaries, and financial promotions. With the application gateway opening on September 30, that consultation will overlap the window itself—meaning early applicants will be filing while several of these definitional questions remain under review.

When the FCA finalized its rulebook in June, it said the regime would reach DeFi where there is an "identifiable controlling entity"—a term neither the legislation nor the regulator has defined. Brown listed what is likely to count: a foundation or company controlling development; a team with authority to ship upgrades; anyone able to change core parameters; DAO participants with concentrated governance power; entities holding treasury assets; operators of user-facing interfaces; and anyone deriving commercial benefit from the protocol.

The FCA has declined to publish worked examples, insisting on case-by-case assessment. The hardest questions, including what happens when several parties could each qualify, "have been deferred by the FCA rather than resolved," Kirschner said, though she noted this "reflects a genuinely difficult perimeter problem that no major jurisdiction has yet cracked."

A fixed timetable—and a contrast with the US

The rollout has followed a steady rhythm: legislation was set out in February, the FCA consulted in April, rules were finalized in June, perimeter guidance arrived this week, the gateway opens this month, and the regime commences in just over a year. The Bank of England, which will supervise systemic stablecoins, replaced individual holding caps with a £40 billion issuance limit in June.

The FCA's announcement dropped a day after the U.S. Senate declined to advance the Clarity Act, leaving oversight in America to what Kirschner called "an agency-by-agency patchwork that a future administration can rewrite." Britain, by contrast, has a statute, a rulebook, guidance and a fixed commencement date—meaning that "for boards making multi-year decisions about where to build, that certainty is worth a great deal," she said.

Brown expects the result to be "a market divide," with firms chasing institutional credibility and banking relationships drawn to Britain, while "smaller firms and highly experimental DeFi projects may continue to favour jurisdictions with lighter regulatory burdens." The UK's advantage, he said, "is unlikely to be minimal regulation."

Source: Decrypt