How Long Do Crypto Firms Have to Apply for FCA Authorisation Before the 2027 Deadline

From 30 September 2026 the Financial Conduct Authority (FCA) opens its cryptoasset authorisation gateway, giving firms a five-month window — closing 28 February 2027 — to apply for full FSMA authorisation before the new UK crypto regime commences on 25 October 2027, after which no firm may carry out regulated cryptoasset activities in Britain without it. The pressure is sharper than many expected: there is no automatic conversion from existing Money Laundering Regulations (MLR) registration, applications are assessed strictly in the order received with no priority for incumbents, and as compliance specialists tracked by The WP Times have warned, firms that miss the window face a cliff-edge of restricted services rather than business as usual. This article sets out the exact timeline, who must apply, how the saving provision works, and the practical preparation steps facing London's crypto sector.

What Is the FCA Crypto Authorisation Gateway

The gateway is the application route created under the Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026 — the statutory instrument (SI 2026/102) that brings cryptoassets inside the UK's mainstream financial regulatory perimeter for the first time. It replaces a patchwork in which only financial promotions and anti-money-laundering registration applied, and subjects crypto firms to standards comparable to those imposed on traditional financial institutions.

The regime is significant in scope rather than incremental. It creates a new regulated activity category that covers Bitcoin exchange operations, custody services, staking, lending, and stablecoin issuance — activities that were largely unregulated in the UK until this legislation. Crucially, firms must base compliance on the substance of their operations because automation, decentralisation or blockchain use do not automatically exclude regulation. The gateway is the formal mechanism through which any firm wanting to continue serving UK customers after October 2027 obtains permission.

When Does the Window Open and Close

The single most important set of dates concerns the application period itself, which is fixed and finite. The FCA confirmed the timetable in early 2026, and it leaves a compressed runway between the gateway opening and the regime going live.

The key dates are as follows:

The application period opens on 30 September 2026 and runs until 28 February 2027, giving firms a 5-month window to apply for authorisation ahead of the regime's commencement on 25 October 2027. The FCA has stated that applications submitted within this window are expected to be determined before the regime begins, subject to the volume and quality of submissions received.

Who Has to Apply Through the Gateway

The obligation does not fall on a single type of firm. The FCA has grouped affected businesses into categories, each facing a different procedural route, and existing UK registrations or permissions do not carry over automatically.

The categories break down as follows:

• MLR-registered crypto firms — exchanges, wallet providers and similar businesses currently registered under the Money Laundering Regulations must apply for full FSMA authorisation for the first time. There is no automatic conversion.
• Firms already authorised under FSMA for other activities — including some payments and e-money firms — must apply for a Variation of Permission (VoP) to add the new cryptoasset activities.
• New entrants — firms not yet operating in the UK that intend to provide regulated cryptoasset services.

Applications will be assessed strictly in the order they are received, meaning there is no prioritisation for firms with existing permissions. This first-come, first-served principle is the practical reason the regulator and advisers have pressed firms to prepare early rather than wait for the deadline.

What Happens to Firms That Apply in Time but Aren't Yet Approved

A common concern is whether a firm that files a complete application before 28 February 2027 but does not receive a decision before 25 October 2027 must stop trading. The legislation addresses this through a saving provision built into Part 7 of the regulations.

In practice, applying on time buys continuity. If this is not the case, the Treasury's Statutory Instrument includes a saving provision that will allow the firm to continue to provide cryptoasset services until its application has been finally determined. That protection extends even to firms that refer an FCA refusal to the Upper Tribunal while the Tribunal's decision is pending. The arrangement also interacts with the financial-promotions rules: firms that apply within the window may continue using a section 21 approver until their application is determined, including during any saving-provision period. FCA

What Do Firms That Miss the Window Face

Missing the application window does not necessarily mean instant closure, but it removes the orderly transition route and narrows what a firm may do. The distinction between applying within the window and applying late — or not at all — is material. The consequences scale by timing:

• Apply within the window (by 28 Feb 2027): expected decision before the regime starts, with the saving provision as a backstop if the decision is delayed.
• Apply after the window closes: firms relying on a section 21 approver may continue using it only until the regime commences; if undetermined at that point, the firm enters the transitional provision and is limited to communicating promotions to pre-existing contracts.
• Do not apply before the regime: firms relying on a section 21 approver must run off their UK cryptoasset business before the new regime commences.

Operating regulated crypto activities without authorisation once the regime is live carries serious exposure. Operating regulated crypto activities without FCA authorisation risks criminal sanctions, unlimited fines, imprisonment up to two years and unenforceable contracts.

Why Did the FCA Move the Timeline Earlier Than Expected

Industry advisers have noted that the timetable surprised parts of the sector, which had assumed the gateway would open close to the October 2027 commencement date. The FCA's decision to open it in September 2026 compresses the preparation period considerably.

As one compliance commentary put it, "Many stakeholders had been expecting that the FCA would not open the application window under the Gateway until close to the commencement of the new regime (25 October 2027)" (Latham & Watkins, Global Fintech & Digital Assets Blog). The regulator's stated rationale is to allow applications to be processed in an orderly fashion and determined before the regime goes live, rather than creating a last-minute bottleneck. The FCA has also been explicit that the exercise is substantive rather than administrative, expecting firms to evolve from informal, high-growth models into disciplined, transparent businesses capable of sustaining long-term regulatory supervision, with particular scrutiny on governance, financial crime controls, operational resilience and consumer protection.

What Should London Crypto Firms Do Before 30 September 2026

The pre-application phase matters because the FCA built in support tools ahead of the formal window. Firms can engage the regulator before submitting, and the quality of an early application affects how quickly it is assessed. Practical preparation steps include:

• Use the PASS service. Pre-application meeting requests open on 11 May 2026, with meetings running from July 2026, aimed at improving application quality and speeding assessment.
• Map activities against the regime. Confirm whether exchange, custody, staking, lending or stablecoin issuance brings the firm into scope, based on operational substance.
• Plan the correct route. MLR-registered firms prepare a first-time FSMA authorisation; existing FSMA-authorised firms prepare a Variation of Permission.
• Build out compliance infrastructure. Governance, financial-crime systems, operational resilience and consumer-protection frameworks are focal points of FCA scrutiny.
• Treat the order of submission as strategic. Because applications are assessed in the order received, earlier filing reduces the risk of a delayed determination.

FAQ: FCA crypto authorisation gateway and the new UK crypto regime

When does the FCA crypto authorisation gateway open and close

The FCA crypto authorisation gateway is expected to open on 30 September 2026 and close on 28 February 2027. This gives firms a five-month application window to submit either a new authorisation application or, where relevant, a variation of permission. The FCA has told firms to prepare before the window opens, not after, because incomplete or weak applications may face delay or refusal.

When does the new UK crypto regime take effect

The new UK cryptoasset regime is expected to commence on 25 October 2027. From that date, firms carrying on regulated cryptoasset activities in the UK will generally need FCA authorisation under the Financial Services and Markets Act framework. The regime is designed to bring cryptoasset activity closer to mainstream financial services regulation, including authorisation, conduct, governance and enforcement expectations.

Does an existing MLR registration convert automatically into FSMA authorisation

No. Existing registration under the Money Laundering Regulations does not automatically become FSMA authorisation. MLR-registered crypto firms must apply through the FCA gateway if they want to continue regulated cryptoasset activity under the new regime. This is one of the most important practical points for firms already operating in the UK market: being on the MLR register is not enough.

What happens if a firm applies on time but is not approved before 25 October 2027

A firm that submits a valid application during the gateway period may benefit from a saving provision. In practice, this may allow the firm to continue providing relevant cryptoasset services until its application is finally determined, including where the matter is referred to the Upper Tribunal. This protection is not a free pass: it depends on the firm applying within the correct window and remaining within the scope of the transitional arrangements.

What happens if a crypto firm misses the FCA application window

Missing the window could be commercially serious. A firm that does not apply by 28 February 2027 may lose the ability to rely on transitional protections and could be unable to continue regulated cryptoasset activity in the UK once the new regime starts. For firms serving UK customers, the deadline is therefore not just administrative — it may determine whether the business can lawfully remain in the UK market.

What are the penalties for operating without authorisation under the new regime

Operating without the required FCA authorisation may expose a firm and its senior individuals to severe consequences. These may include criminal sanctions, unlimited fines, imprisonment of up to two years and the risk that certain agreements become unenforceable. The enforcement risk is particularly important for firms that assume crypto regulation will remain a lighter-touch regime after October 2027.

Which firms should be preparing now

Crypto exchanges, custodians, brokers, dealers, arrangers, stablecoin issuers, staking service providers and firms operating crypto trading platforms should assess whether their UK-facing activities fall within scope. Firms outside the UK should also review their position if they market to UK clients or provide services into the UK. The key question is not only where the company is incorporated, but whether its activity has a UK regulatory connection.

What should firms do before the gateway opens

Firms should map their activities, identify which permissions they may need, review governance and financial crime systems, prepare compliance documentation and test whether their senior management structure would satisfy FCA expectations. The FCA has also opened pre-application support, with firms able to request meetings from 11 May 2026, ahead of the formal gateway opening.

Why does the FCA gateway matter for consumers and investors

For consumers, the new regime is intended to create clearer accountability for firms offering cryptoasset services in the UK. FCA authorisation does not mean cryptoassets become risk-free, but it does mean authorised firms will be subject to regulatory standards and supervision. For investors, the main practical change is that the UK market should become more structured, but also more selective, with weaker or unprepared firms potentially forced out.

What is the key date firms cannot ignore

The first critical date is 30 September 2026, when the FCA application gateway opens. The second is 28 February 2027, when the application window closes. The third is 25 October 2027, when the new regime is expected to go live. For crypto firms, the safest approach is to treat the 2026 gateway as the real deadline, not the 2027 commencement date.

Read about the life of Westminster and Pimlico district, London and the world. 24/7 news with fresh and useful updates on culture, business, technology and city life: GRAI Licences Go Live 1 July 2026: Ireland's New Era