T
The Bitcoin Act
Guest
The United Kingdom has spent years building a regulatory perimeter around cryptoassets. Now firms have to walk through the door.
The Financial Conduct Authority has opened its authorization process for crypto firms ahead of a new regime that will bring a much wider range of digital asset activities under its supervision. The dates are fixed. Firms that want to keep operating in the UK must apply by February 28, 2027, and the new rules take effect on October 25, 2027, the regulator said in a statement.
On paper, that looks like a generous runway. The calendar tells a stricter story.
The framework was published in June of this year. It covers firms that facilitate crypto trading and transactions, along with staking and the custody of digital assets. Beyond the question of who needs permission, it introduces substantive rules on cryptoasset admissions and disclosures, market abuse, prudential standards and consumer protection.
For bitcoin businesses, the relevant activities are the familiar ones. An exchange that lets users buy and sell bitcoin facilitates trading. A service that holds bitcoin for customers is engaged in custody. Neither sits at the margins of this regime. Both sit at its center.
The shift is structural. Existing firms have operated under registration with the Money Laundering Regulations, a regime whose focus, as its name suggests, is financial crime. The new framework asks broader questions: whether customers are protected, whether their assets are safeguarded, whether markets are clean, and whether the firm itself can withstand pressure.
This is the point most likely to catch established firms off guard. Registration under the Money Laundering Regulations will not automatically convert into authorization under the new regime. Existing firms cannot simply carry their current status across.
The regulator was equally direct about the bar. Applicants will need to demonstrate that they meet requirements covering consumer protection, the safeguarding of customer assets, market integrity and financial resilience. Approval is not guaranteed.
That distinction carries real legal weight. A registration regime and an authorization regime do different jobs. The first confirms that a firm has adequate controls in one defined area. The second is a gatekeeping judgment about whether the firm should conduct a regulated activity at all, measured against a far wider rulebook. A firm that cleared the first test has shown something meaningful. It has not shown what the FCA will now be looking for.
Emma Banymandhub, CEO of The Payments Association, an industry body, said in a statement that the opening of applications "moves policy into practical delivery" and reflects its members' calls for "proportionate regulation that protects consumers without unnecessarily constraining innovation and growth."
She urged firms, including those already registered under the Money Laundering Regulations, to treat the process as a fresh authorization exercise and to be realistic about the standards they will need to meet. She also stressed the importance of proportionate implementation, particularly for smaller and scaling firms, arguing that a well administered process will matter for UK competitiveness and for building a trusted market in digital assets.
Those are the views of an industry association. They read as a welcome and a warning at the same time.
The most commercially significant detail may be the transitional arrangement. According to the FCA, firms that apply during the application window can continue providing specified cryptoasset services, including taking on new business, while their applications are assessed, provided they meet the relevant transitional conditions.
That protection is valuable. A pending application does not force a firm to freeze its customer base or halt onboarding while the regulator works through its file.
But the protection rests on two things: applying within the window, and satisfying the transitional conditions. Firms should read those conditions in the FCA's own materials rather than assume they qualify. The terms summarized publicly so far also do not address what happens to a firm that applies late. The structure of the arrangement invites that question, and any firm inclined to treat the February deadline as flexible should get a precise answer first.
It is tempting to anchor on October 25, 2027, the day the regime goes live. That would be a mistake.
The application window runs roughly five months. Between its close and commencement sit about eight more. The most natural reading of that calendar is that the FCA intends to do much of its assessment work before the new rules take effect, which means the file a firm submits by February will likely carry most of the weight.
That is an inference drawn from the dates, not something the regulator has said. It is, however, consistent with a process the FCA has described as a genuine test rather than an administrative step.
For compliance teams, the practical consequence is plain. Evidence of safeguarding arrangements, financial resilience and market integrity controls cannot wait until the summer of 2027. It has to be substantially ready before the window closes.
For individual holders, the regime does not change what bitcoin is. It changes the terms on which UK firms can offer services around it. Exchanges, custodians and other intermediaries operating in the country will answer to a new standard, and the outcome of each application is not a formality.
The broader signal is one of normalization. The UK has chosen to treat crypto intermediaries less like entries on a register and more like regulated financial businesses, with the obligations that status brings. Whether the process proves proportionate, as the industry is asking, will only become clear once the FCA begins issuing decisions.
Until then, the date to circle is February 28, 2027.
Disclaimer: This article is analysis and commentary for informational purposes only. It is not legal advice, and nothing here is written in a professional capacity. Firms affected by the regime should rely on the FCA's published materials and qualified advice.
For clear, sourced analysis of bitcoin law and regulation around the world, subscribe to The Bitcoin Act at thebitcoinact.xyz.
The Financial Conduct Authority has opened its authorization process for crypto firms ahead of a new regime that will bring a much wider range of digital asset activities under its supervision. The dates are fixed. Firms that want to keep operating in the UK must apply by February 28, 2027, and the new rules take effect on October 25, 2027, the regulator said in a statement.
On paper, that looks like a generous runway. The calendar tells a stricter story.
What the Regime Reaches
The framework was published in June of this year. It covers firms that facilitate crypto trading and transactions, along with staking and the custody of digital assets. Beyond the question of who needs permission, it introduces substantive rules on cryptoasset admissions and disclosures, market abuse, prudential standards and consumer protection.
For bitcoin businesses, the relevant activities are the familiar ones. An exchange that lets users buy and sell bitcoin facilitates trading. A service that holds bitcoin for customers is engaged in custody. Neither sits at the margins of this regime. Both sit at its center.
The shift is structural. Existing firms have operated under registration with the Money Laundering Regulations, a regime whose focus, as its name suggests, is financial crime. The new framework asks broader questions: whether customers are protected, whether their assets are safeguarded, whether markets are clean, and whether the firm itself can withstand pressure.
A Fresh Application, Not a Conversion
This is the point most likely to catch established firms off guard. Registration under the Money Laundering Regulations will not automatically convert into authorization under the new regime. Existing firms cannot simply carry their current status across.
The regulator was equally direct about the bar. Applicants will need to demonstrate that they meet requirements covering consumer protection, the safeguarding of customer assets, market integrity and financial resilience. Approval is not guaranteed.
That distinction carries real legal weight. A registration regime and an authorization regime do different jobs. The first confirms that a firm has adequate controls in one defined area. The second is a gatekeeping judgment about whether the firm should conduct a regulated activity at all, measured against a far wider rulebook. A firm that cleared the first test has shown something meaningful. It has not shown what the FCA will now be looking for.
Emma Banymandhub, CEO of The Payments Association, an industry body, said in a statement that the opening of applications "moves policy into practical delivery" and reflects its members' calls for "proportionate regulation that protects consumers without unnecessarily constraining innovation and growth."
She urged firms, including those already registered under the Money Laundering Regulations, to treat the process as a fresh authorization exercise and to be realistic about the standards they will need to meet. She also stressed the importance of proportionate implementation, particularly for smaller and scaling firms, arguing that a well administered process will matter for UK competitiveness and for building a trusted market in digital assets.
Those are the views of an industry association. They read as a welcome and a warning at the same time.
The Transitional Arrangement and Its Conditions
The most commercially significant detail may be the transitional arrangement. According to the FCA, firms that apply during the application window can continue providing specified cryptoasset services, including taking on new business, while their applications are assessed, provided they meet the relevant transitional conditions.
That protection is valuable. A pending application does not force a firm to freeze its customer base or halt onboarding while the regulator works through its file.
But the protection rests on two things: applying within the window, and satisfying the transitional conditions. Firms should read those conditions in the FCA's own materials rather than assume they qualify. The terms summarized publicly so far also do not address what happens to a firm that applies late. The structure of the arrangement invites that question, and any firm inclined to treat the February deadline as flexible should get a precise answer first.
Why February, Not October, Is the Real Deadline
It is tempting to anchor on October 25, 2027, the day the regime goes live. That would be a mistake.
The application window runs roughly five months. Between its close and commencement sit about eight more. The most natural reading of that calendar is that the FCA intends to do much of its assessment work before the new rules take effect, which means the file a firm submits by February will likely carry most of the weight.
That is an inference drawn from the dates, not something the regulator has said. It is, however, consistent with a process the FCA has described as a genuine test rather than an administrative step.
For compliance teams, the practical consequence is plain. Evidence of safeguarding arrangements, financial resilience and market integrity controls cannot wait until the summer of 2027. It has to be substantially ready before the window closes.
What Bitcoiners Should Watch
For individual holders, the regime does not change what bitcoin is. It changes the terms on which UK firms can offer services around it. Exchanges, custodians and other intermediaries operating in the country will answer to a new standard, and the outcome of each application is not a formality.
The broader signal is one of normalization. The UK has chosen to treat crypto intermediaries less like entries on a register and more like regulated financial businesses, with the obligations that status brings. Whether the process proves proportionate, as the industry is asking, will only become clear once the FCA begins issuing decisions.
Until then, the date to circle is February 28, 2027.
Disclaimer: This article is analysis and commentary for informational purposes only. It is not legal advice, and nothing here is written in a professional capacity. Firms affected by the regime should rely on the FCA's published materials and qualified advice.
For clear, sourced analysis of bitcoin law and regulation around the world, subscribe to The Bitcoin Act at thebitcoinact.xyz.