Crypto regulation in the UK from 2026: FCA rules, licensing risks and why London faces growing pressure

The United Kingdom is set to implement a comprehensive statutory framework for cryptoassets in early 2026, transitioning from a temporary registration regime to a full authorization model under the Financial Services and Markets Act. The Financial Conduct Authority (FCA) will enforce stringent operational resilience, custody, and market abuse rules, affecting approximately 100 currently registered firms and numerous offshore entities. This regulatory shift aims to integrate crypto activities into the broader financial services perimeter, though it introduces significant licensing risks and compliance costs that could challenge London’s status as a global fintech hub. New requirements include mandatory physical presence, enhanced capital adequacy, and strict marketing standards. This was reported by The WP Times.

The Evolution of the FCA Regulatory Perimeter in 2026

Prior to 2026, the FCA primarily supervised crypto firms under the Money Laundering Regulations (MLRs). This regime was limited in scope, focusing almost exclusively on Anti-Money Laundering (AML) and Counter-Terrorist Financing (CTF) controls. Starting in the first quarter of 2026, the regulatory perimeter expands significantly. Cryptoasset service providers (CASPs) are now classified as "regulated activities" under the Financial Services and Markets Act 2000 (Regulated Activities) Order.

This expansion means that firms providing exchange, custody, or lending services must move beyond simple registration. They are now required to obtain "Part 4A Permission." The FCA’s new rulebook for 2026 demands that firms demonstrate not only clean financial records but also robust "fit and proper" management. Firms that fail to meet these elevated standards by the March 2026 deadline face immediate enforcement actions, including the potential cessation of UK operations.

Licensing Risks and the Authorization Bottleneck

The transition to a full licensing regime introduces a major bottleneck for the UK crypto industry. Historically, the FCA has maintained a rigorous stance, rejecting or causing the withdrawal of over 85% of crypto registration applications under the old AML regime. For 2026, the criteria are even more demanding.

Capital Adequacy and Liquidity Requirements

Under the new 2026 rules, the FCA mandates specific prudential requirements. Firms must maintain a minimum capital buffer, often calculated as a percentage of their assets under management (AUM) or fixed overheads. This is designed to prevent the type of liquidity crises seen in global exchange collapses in previous years.

• Small Firms: May face minimum capital requirements starting at £50,000.
• Institutional Custodians: Requirements can scale to several millions of pounds.

Physical Presence and "Mind and Management"

The FCA has clarified that offshore-only models are no longer viable for serving UK retail customers. From 2026, a firm must have a substantive physical presence in the UK. This includes having senior managers who are UK residents and who are personally accountable under the Senior Managers and Certification Regime (SM&CR). This requirement poses a significant risk for international exchanges that operate via decentralized or offshore structures.

Market Abuse and Custody Rules for Cryptoassets

A primary focus of the 2026 regulations is the protection of client assets and the prevention of market manipulation. The FCA has introduced a "Crypto Market Abuse" regime, which mirrors the existing rules for traditional equities and commodities.

Client Asset Protection (CASS-style rules)

Firms providing custody must ensure total segregation of client funds from company funds. In 2026, the use of client assets for proprietary trading or lending—common in the "DeFi" and "CeFi" sectors of the past—is strictly prohibited unless explicitly authorized under a specific lending license.

• Audit Requirements: Firms must undergo annual external audits of their custody arrangements.
• Technology Standards: Cold storage and multi-signature (Multi-Sig) protocols must meet ISO/IEC 27001 standards for information security.

Market Integrity Standards

The FCA now requires crypto exchanges to implement sophisticated surveillance systems to detect wash trading, "pump and dump" schemes, and insider trading. Firms that do not report suspicious transaction and order reports (STORs) can be fined up to 10% of their global turnover, a deterrent aimed at cleaning up the London digital asset market.

Comparison of UK Crypto Regulation: 2024 vs. 2026

The following table outlines the structural shift in the UK's approach to digital asset supervision.

Pressure on London as a Global Crypto Hub

London faces growing pressure from two directions in 2026: the European Union’s MiCA (Markets in Crypto-Assets) regulation and the emerging pro-crypto frameworks in the Middle East and Asia.

While the UK’s 2026 rules provide "regulatory certainty," they are perceived as more restrictive than MiCA in certain areas, particularly regarding the promotion of offshore services. The Financial Services Markets Act 2023 gave the FCA the power to fine or block unauthorized websites, a power that is being used more aggressively in 2026 to protect the "domestic perimeter."

Competition with MiCA (EU)

The EU’s MiCA allows firms to "passport" their license across 27 countries. The UK’s 2026 regime remains a standalone "Island" model. This means a firm licensed in London must still seek separate authorization to operate in Paris or Berlin, creating a dual-compliance burden that could push firms to relocate their primary headquarters to the EU.

Institutional Adoption vs. Retail Friction

The 2026 rules have been welcomed by traditional banks like HSBC and Standard Chartered, as they provide the legal clarity needed to offer crypto custody to institutional clients. However, for retail-focused fintechs, the friction—such as the 24-hour "cooling-off" period for first-time buyers and the ban on referral bonuses—has led to a significant decrease in new user registrations within the London tech corridor.

Steps for Firms to Achieve Compliance in 2026

Firms operating in the UK must follow a strict timeline to remain legal. Failure to adhere to these steps results in immediate "Unauthorised Business" status.

1. Gap Analysis: Compare current AML-only controls against the full Part 4A Permission requirements.
2. Submit Variation of Permission (VoP): Registered firms must apply for the new license by the prescribed FCA window (typically 6 months before the new law takes effect).
3. Appoint "Qualified Individuals": Hire UK-based Compliance Officers (SMF16) and Money Laundering Reporting Officers (SMF17).
4. Audit Custody Protocols: Engage an independent third party to verify that private keys and client assets are held according to the 2026 Safeguarding Rules.
5. Review Marketing Collateral: Ensure all digital assets promotions include the mandatory risk warnings and have passed the "suitability test" for retail investors.

The Market Abuse Regime (MARC) and New Obligations for Large CATPs

The introduction of the Market Abuse Regime for Cryptoassets (MARC) in early 2026 represents a significant shift in how the Financial Conduct Authority (FCA) supervises digital asset trading. Unlike the general anti-fraud measures of previous years, MARC mirrors the traditional Market Abuse Regulation (UK MAR) while addressing the unique technical architecture of blockchain technology.

Mandatory Monitoring and Systems

By the first quarter of 2026, firms operating as Cryptoasset Trading Platforms (CATPs) must implement specific surveillance systems. The FCA’s current consultation papers (CP25/41) clarify that "Large CATPs" are subject to enhanced monitoring requirements:

• On-Chain Surveillance: Large CATPs are now required to monitor on-chain activities using blockchain analytics and wallet clustering tools to detect wash trading and "spoofing" that may originate from private wallets.
• Information Sharing: In a move to prevent cross-platform manipulation, Large CATPs must share information with other regulated platforms if they have reasonable grounds to suspect abusive behavior.
• Insider Lists: All CATPs and issuers must maintain digital "Insider Lists" that record the identity, date, and exact time individuals obtained access to sensitive, non-public information—such as pending token listings or vulnerability reports.

Prohibited Practices and "Coin Burning"

The MARC framework specifically defines and prohibits "pump and dump" schemes and the unlawful disclosure of inside information. However, it also designates certain legitimate market practices:

• Coin Burning: Removing cryptoassets from circulation is recognized as a legitimate practice if conducted for valid business reasons and properly disclosed.
• Crypto-Stabilization: Measures taken to support a token's price during an initial offering are permitted under specific "safe harbor" conditions, preventing them from being classified as market manipulation.

The Systemic Stablecoin Framework and the "DIGIT" Sovereign Pilot

The second major pillar of the 2026 landscape is the finalized regulation for sterling-denominated systemic stablecoins, overseen jointly by the Bank of England and the FCA. This regime seeks to transform stablecoins from speculative assets into reliable payment instruments for the mainstream economy.

Reserve and Liquidity Standards

Following the closure of the Bank of England's consultation on February 10, 2026, issuers of systemic stablecoins are now subject to the "40/60 Reserve Rule":

• Central Bank Deposits: At least 40% of the backing assets must be held as unremunerated deposits directly at the Bank of England to ensure immediate liquidity during stress events.
• Government Debt: Up to 60% of the backing assets may be held in short-term sterling-denominated UK government debt securities (gilts).
• Redemption Rights: Issuers are legally mandated to provide "par value" redemption in fiat currency to all holders at all times, with no "exit fees" permitted for retail users.

The DIGIT Sovereign Debt Pilot

A landmark development for March 2026 is the progress of the Digital Gilt Instrument (DIGIT) pilot within the government’s Digital Securities Sandbox (DSS).

• Mechanism: Led by major financial institutions including HSBC (which passed the DSS Gate 1 in late 2025), the project involves the issuance of fully on-chain sovereign debt.
• Purpose: This pilot tests the use of Distributed Ledger Technology (DLT) for the primary issuance and secondary trading of UK Gilts, aiming to reduce settlement times from the current T+2 standard to near-instantaneous (T+0).
• Settlement: The pilot explores the "multi-moneyverse," allowing these digital securities to be settled using either tokenized deposits or regulated stablecoins, bridging the gap between traditional state finance and the digital asset ecosystem.

Future Outlook for UK Digital Finance

The 2026 regulatory framework marks the end of the "Wild West" era for cryptoassets in the UK. By integrating digital assets into the formal financial system, the government is betting on long-term stability over short-term growth.

For the general public in the UK, this means that from March 2026, any crypto firm they interact with must meet the same baseline standards for safety and transparency as a retail bank or a stockbroker. While this reduces the risk of total loss due to fraud or exchange insolvency, it also means a more regulated, less volatile, and more expensive marketplace. The success of London’s "Crypto Hub" ambition now depends on whether the FCA can balance this rigorous protection with the flexibility needed to foster technological innovation.

Read about the life of Westminster and Pimlico district, London and the world. 24/7 news with fresh and useful updates on culture, business, technology and city life: What April’s £200 energy bill cut means for UK households — and what happens after 2029