UK CASP Authorisation — FCA Cryptoasset Regime 2027
Prepare for UK FSMA cryptoasset authorisation — FCA gateway opens September 2026. Expert advisory on readiness, SM&CR and compliance.
Get Expert Advice
Whether you need licensing support, compliance advice or regulatory strategy, our team is ready to help. Free initial consultation — no obligation.
Get Expert Advice
What is the UK CASP Authorisation (2027)?
UK CASP authorisation is the new full FSMA authorisation regime for cryptoasset service providers in the United Kingdom. The Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026 were made by Parliament in February 2026, with the full FSMA cryptoasset regime commencing 25 October 2027.
The FCA cryptoasset authorisation gateway opens in September 2026. FSMA authorisation is materially more demanding than the current MLR 2017 registration regime — it applies the Senior Managers and Certification Regime (SM&CR), Consumer Duty, conduct rules, financial promotions controls, operational resilience obligations and ongoing FCA supervision.
Firms currently registered under MLRs 2017 must apply for FSMA authorisation separately — MLR registration does not automatically convert to FSMA authorisation. The preparation required for a complete FSMA application is substantial and should commence now.
Who Needs UK CASP Authorisation (2027)?
All firms carrying on regulated cryptoasset activities in the UK from October 2027 require FSMA authorisation.
- —Cryptoasset trading platforms
- —Firms dealing in cryptoassets as principal or agent
- —Firms arranging deals in cryptoassets
- —Cryptoasset custody providers
- —Staking service providers
- —Crypto lending platforms
- —Cryptoasset portfolio management services
The most critical misconception is that existing MLR 2017 registration provides a pathway to FSMA authorisation. It does not — MLR registration and FSMA authorisation are entirely separate regulatory frameworks. Firms must apply independently for FSMA authorisation and meet all FSMA requirements including SM&CR, Consumer Duty and operational resilience.
Key Requirements
Threshold Conditions
FSMA Threshold Conditions assessment — adequate financial and non-financial resources, suitable business model, fit and proper management, effective supervision capability. These conditions must be maintained on an ongoing basis post-authorisation.
SM&CR (Senior Managers & Certification Regime)
All Senior Management Function holders require individual FCA approval. SM&CR mapping must identify every SMF, prescribed responsibility and certified function. This is a fundamental shift from the MLR regime where no individual FCA approval was required.
AML & Financial Crime Controls
Robust AML programme substantially exceeding the current MLR standard. FSMA-grade AML requires integration with SM&CR, documented risk appetite and enhanced transaction monitoring proportionate to the expanded scope of regulated activities.
Consumer Duty
Consumer Duty framework required where applicable — outcomes monitoring, product value assessment, fair treatment policy and Consumer Duty board champion. The FCA expects Consumer Duty to be embedded from authorisation.
Operational Resilience
Documented operational resilience framework including important business services mapping, impact tolerances, scenario testing and third-party dependency management. ICARA (Internal Capital Adequacy and Risk Assessment) is expected.
Capital Requirements
FCA-publishable capital requirements are expected to be finalised before the gateway opens in September 2026. Capital planning should commence now based on expected thresholds aligned with the firm's business model and risk profile.
The Application Process
Gap Analysis and Readiness Assessment
Regulatory Counsel conducts a full gap analysis between your current framework (MLR or otherwise) and FSMA cryptoasset authorisation requirements. We produce a prioritised remediation roadmap with a timeline to readiness. Timeline: 4–8 weeks.
Governance Framework Design
Establish FSMA-grade governance — board composition and charters, SM&CR mapping, Senior Management Function holder appointments, documented delegations and risk appetite statement. Every SMF candidate must be identified and prepared. Timeline: 8–12 weeks.
Compliance Framework Build
Upgrade AML programme to FSMA standard. Build Travel Rule, Consumer Duty, financial promotions approval and operational resilience frameworks. Each framework must be implemented and evidenced, not merely documented. Timeline: 10–14 weeks.
Capital Planning and ICARA
Regulatory Counsel prepares capital adequacy analysis, ICARA documentation and three-year financial projections consistent with FCA Threshold Conditions. Capital structure must satisfy prudential requirements. Timeline: 4–6 weeks.
Regulatory Business Plan
FSMA-grade regulatory business plan — significantly more rigorous than the MLR application. Must demonstrate how regulated activities will be conducted compliantly across all FSMA frameworks. Timeline: 4–6 weeks.
FCA Gateway Submission and Assessment
Submit via FCA gateway from September 2026. FCA has a 6–12 month statutory assessment period. Regulatory Counsel manages all information requests, SMF interview preparation and assessment correspondence. Full regime commencement: 25 October 2027. Timeline: 6–12 months.
Total expected timeline from instruction to readiness: 12–18 months. Firms should begin preparation now.
Why Applications Fail — and How We Prevent It
Submitting MLR AML Programme Under FSMA
The most critical failure mode. The FSMA standard requires SM&CR integration, Consumer Duty, FSMA-grade financial promotions controls and operational resilience — none of which existed under the MLR regime. Firms submitting existing MLR frameworks to the FCA under FSMA are rejected.
SMF Holders Not Prepared
The FCA individually assesses every Senior Management Function holder. MLR-registered firms typically have no SMF holders mapped — identifying, appointing and preparing SMF candidates takes months and cannot be compressed into the final weeks before gateway submission.
Treating September 2026 as the Start of Preparation
September 2026 is the deadline for readiness, not the start of preparation. A complete FSMA application requires 12–18 months of preparation. Firms that begin in September 2026 will not be ready for the October 2027 commencement date and risk losing the ability to operate.
Capital Structure Not FCA-Ready
The FCA will assess capital adequacy against FSMA standards. Firms whose capital structure — equity composition, retained earnings, capital instruments — does not satisfy prudential requirements will be rejected. Capital planning must begin now to allow time for restructuring if needed.
How Regulatory Counsel Can Help
End-to-End Application Management
From gap analysis through to FCA gateway submission and FSMA authorisation — we manage every aspect of your UK CASP application including SM&CR mapping and SMF preparation.
Regulatory Business Plan
We prepare FSMA-grade regulatory business plans covering SM&CR, Consumer Duty, operational resilience and capital adequacy — the full suite of FSMA requirements that exceed the MLR standard.
Ongoing Compliance Support
Post-authorisation FSMA compliance support including SM&CR maintenance, Consumer Duty annual reviews, operational resilience testing and FCA supervisory engagement.
Regulatory Counsel is advising firms now on FSMA cryptoasset authorisation readiness. We have deep experience with the FCA's authorisation processes across payments, e-money and crypto — and we understand how the FCA will apply FSMA frameworks to cryptoasset firms. Starting preparation now is not optional — it is the only way to be ready for the September 2026 gateway.
Frequently Asked Questions
The FCA cryptoasset authorisation gateway opens in September 2026. The full FSMA cryptoasset regime commences 25 October 2027. Firms wishing to operate under the new regime from day one must have applications submitted well before October 2027 — preparation should begin immediately given the 12–18 month preparation timeline.
No. MLR registration does not convert to FSMA authorisation automatically. All firms carrying on regulated cryptoasset activities from October 2027 must apply through the FCA gateway — the FSMA requirements are substantially more demanding, applying SM&CR, Consumer Duty, conduct rules and operational resilience obligations that did not exist under MLR.
The Senior Managers and Certification Regime imposes individual accountability on senior individuals at FCA-authorised firms. Under the new FSMA cryptoasset regime, all Senior Management Function holders require individual FCA approval, documented statements of responsibilities and ongoing personal accountability. This is a significant governance uplift from the current MLR registration model.
The FSMA 2000 (Cryptoassets) Regulations 2026 define regulated activities including: operating a cryptoasset trading platform, dealing in cryptoassets as principal or agent, arranging deals in cryptoassets, providing cryptoasset custody, cryptoasset staking, lending and portfolio management. Any firm carrying on these activities from October 2027 without FSMA authorisation commits a criminal offence.
MLR registration is an AML gatekeeping process — the FCA assesses AML programme quality and key person fitness only. FSMA CASP authorisation is a full Threshold Conditions assessment covering capital adequacy, governance, SM&CR, Consumer Duty, conduct, financial promotions, operational resilience and ongoing supervisory obligations. The compliance burden is materially higher — comparable in scope to FCA payment institution authorisation.