New FCA perimeter guidance gives firms greater certainty over which cryptoasset activities will require authorisation from October 2027, creating new opportunities across payments, stablecoins and digital assets while raising the bar on governance, controls and regulatory evidence.
21 September 2026 — The Financial Conduct Authority’s latest guidance on the UK cryptoasset regulatory perimeter is giving banks, payments providers and fintechs a clearer route into regulated digital-asset services, but firms will need to demonstrate that their governance and controls work in practice rather than relying on policies alone.
The FCA published its final cryptoasset perimeter guidance on 16 September 2026, setting out how the incoming regime will apply to activities including stablecoin issuance, cryptoasset trading platforms, dealing and arranging, safeguarding and staking. The new regime is scheduled to take effect on 25 October 2027, while the authorisation application window opens on 30 September 2026 and closes on 28 February 2027 for firms seeking access to transitional arrangements.
For financial institutions already exploring digital assets, the guidance reduces some of the uncertainty around where the regulatory boundary sits. At the same time, it creates a much more immediate operational challenge: firms now have to map their products and activities against the new regulated categories, identify which permissions they need and prove that their systems, controls and governance are ready for FCA scrutiny.
Existing permissions will not automatically carry over
One of the most important points in the FCA guidance is that existing registrations and permissions will not automatically convert into authorisation under the new cryptoasset regime.
Firms already authorised under the Financial Services and Markets Act may need to apply for a variation of permission, while businesses currently registered under the Money Laundering Regulations will still need to assess how the broader FSMA framework changes their obligations. The FCA has specifically told firms to review their business models, governance, systems and controls before applying.
That means regulatory readiness is likely to become a significant competitive factor over the next year.
A firm with a technically viable crypto product but weak accountability, poor data lineage or controls that cannot be evidenced may struggle during authorisation. Conversely, banks and fintechs that have already embedded compliance, risk management and operational resilience into their product development may be in a stronger position to expand when the regime begins.
Operational evidence will matter as much as policy
Aditya Mittal, Managing Principal for Financial Crime, Risk, Regulations and Finance at Capco, argues that firms should now focus on how the new perimeter applies to their specific operating models.
He said businesses need to map products and end-to-end activities against the regulated activities, determine which permissions will be required and assess whether existing operating models and controls meet the standards expected for FCA authorisation.
Mittal also highlighted a critical distinction between having documented controls and being able to prove those controls work.
For firms preparing applications, that means showing clear ownership, governance and accountability while producing reliable evidence that controls are embedded in day-to-day operations. This could include areas such as transaction monitoring, safeguarding arrangements, customer treatment, market conduct, senior-management accountability and operational resilience.
The FCA itself has told firms that authorisation under the new framework will require them to demonstrate compliance with expectations across areas including market conduct, customer treatment and senior leadership.
Stablecoins move closer to mainstream payments
The new perimeter guidance is particularly significant for the payments sector.
Stablecoins have long been discussed as a bridge between blockchain infrastructure and conventional financial services, but regulatory uncertainty has limited how aggressively many established institutions have been willing to deploy them.
The FCA’s wider crypto regime now includes final rules on qualifying stablecoin issuance alongside rules covering admissions and disclosures, market abuse, regulated cryptoasset activities and prudential requirements. Those rules were published in June 2026 as part of a broader regulatory package.
At the same time, HM Treasury is continuing to adjust the legislative framework to support tokenised payments. A policy note published on 15 September states that the government is looking to modernise UK payments legislation while ensuring the framework can facilitate innovations such as stablecoin-based payments.
This creates a clearer pathway for banks, payment companies and fintechs to explore stablecoins for settlement, treasury operations, cross-border payments and programmable money.
Regulation alone will not make stablecoins competitive
Greater clarity does not automatically mean stablecoin-based payments will succeed commercially.
Mittal argues that stablecoins will still need to demonstrate a practical advantage over conventional payment methods, particularly in areas such as settlement.
That is likely to become one of the most important questions as regulation develops.
For consumers and businesses, existing payment rails are already familiar, widely accepted and in many cases nearly instantaneous. Stablecoin-based systems therefore need to offer a measurable improvement in areas such as cross-border settlement, operating hours, cost, reconciliation or programmability rather than simply providing a blockchain-based alternative.
At the same time, the systems will need to meet regulatory expectations around resilience, safeguarding and consumer protection.
The opportunity is therefore less about replacing the existing payments system wholesale and more about identifying specific use cases where tokenised money offers operational or economic advantages.
Banks may gain an advantage from existing compliance infrastructure
The incoming regime could also alter the competitive balance between traditional finance and crypto-native firms.
Banks already operate within mature regulatory structures covering capital, compliance, financial crime, operational resilience and consumer protection. Although crypto introduces new technical and market risks, these institutions already have many of the governance systems regulators expect.
That does not mean entry will be simple, but it could lower some of the organisational barriers.
The FCA explicitly identifies traditional finance firms exploring cryptoasset markets, payment service providers and electronic-money issuers among the businesses affected by the guidance.
For established institutions, regulatory clarity could therefore transform crypto from an experimental innovation programme into a more conventional product-development decision.
The commercial question becomes whether there is sufficient customer demand and economic value to justify the investment.
Fintechs face both an opportunity and a higher compliance threshold
Fintech companies may benefit even more directly from the clearer perimeter.
Many already operate close to payments, trading, digital wallets or alternative financial infrastructure and may be able to develop regulated crypto services faster than larger incumbents.
However, the authorisation process could also create a more demanding threshold for smaller companies.
The FCA has made clear that the new regime will introduce standards intended to improve consumer protection and support sustainable growth. Firms will need authorisation to conduct relevant regulated activities once the framework takes effect.
This means business models that were previously able to operate through narrower registration requirements may need to invest more heavily in compliance, governance, risk and operational infrastructure.
The result could be a more institutionalised UK crypto market in which regulatory capability becomes as important as technology.
The authorisation timetable creates urgency
Although the new regime does not start until October 2027, the practical preparation window begins now.
Applications for authorisation open on 30 September 2026, and firms seeking to benefit from transitional arrangements have until 28 February 2027 to apply.
That gives firms only a limited period to assess whether they fall within scope, redesign operating models where necessary and assemble the evidence required for a credible application.
The FCA has said it will provide support through webinars and its Pre-Application Support Service, while dual-regulated firms are also expected to engage with the Prudential Regulation Authority where relevant.
For firms still treating UK crypto regulation as a distant policy issue, that timetable makes delay increasingly risky.
The UK is moving from crypto policy to implementation
The significance of the September guidance lies less in introducing another policy document and more in moving the UK crypto regime closer to operational reality.
The government passed the Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026 earlier this year, and the FCA subsequently published final rules covering stablecoins, prudential requirements, market abuse, regulated activities and the application of its Handbook.
The perimeter guidance now helps firms determine exactly when those rules apply.
This is an important transition for the UK market.
For several years, discussion around crypto regulation focused on whether and how digital assets should be brought into the financial-services perimeter. The question is increasingly becoming how regulated firms will implement that framework in practice.
Regulation could accelerate institutional crypto adoption
Greater certainty may ultimately encourage more established financial institutions to enter digital assets.
Regulatory ambiguity has historically made it difficult for banks and large payment companies to justify investment in products where legal treatment, capital requirements or customer-protection obligations were unclear.
A defined perimeter can reduce that uncertainty.
However, the FCA’s approach also means that firms seeking the benefits of greater regulatory legitimacy will face higher standards of accountability.
That could favour institutions capable of combining product innovation with compliance infrastructure rather than businesses focused primarily on speed to market.
The next phase of the UK crypto market may therefore look less like the early speculative cycle of digital assets and more like the broader financial-services industry: highly regulated, operationally complex and increasingly integrated with traditional banking and payments.
About Capco
Capco, a Wipro company, is a global technology and management consultancy focused on financial services and energy. The company works across banking, capital markets, payments, insurance, wealth and asset management, combining advisory, technology, data and AI capabilities.
