
Crypto License in the United Kingdom
Last Update: 14.05.2026
A UK crypto license — Part 4A FSMA permission from the FCA — takes from 18 months end-to-end and starts from $65,000 in fees and support; the FCA application window runs 30 September 2026 to 28 February 2027 ahead of regime commencement on 25 October 2027. Gofaizen & Sherle handles three routes: full Part 4A authorization, the s.21 financial-promotions alternative for non-UK firms, and MLR-to-FSMA transition for firms already on the FCA register.
A UK crypto license is FCA authorization under The Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026 (SI 2026/102), the statutory instrument made by HM Treasury on 4 February 2026 that brings cryptoasset activities within the FSMA perimeter. From 25 October 2027, firms carrying on regulated cryptoasset activities by way of business in the UK must hold a Part 4A FSMA permission from the Financial Conduct Authority (FCA) — the previous AML-only Money Laundering Regulations (MLRs) 2017 registration is no longer sufficient.
Nine new regulated activities are introduced: issuing qualifying stablecoin in the UK, safeguarding qualifying cryptoassets, arranging for another to safeguard, operating a qualifying cryptoasset trading platform (QCATP), dealing in qualifying cryptoassets as principal or as agent, arranging deals, and qualifying cryptoasset staking. Public offers of qualifying cryptoassets and admissions to trading become separate designated activities under Part 5A FSMA, alongside a new market abuse framework.
The FCA authorization gateway opens 30 September 2026 and closes 28 February 2027. Firms that apply during this window benefit from a saving provision allowing continued operation while the application is determined. Firms registered under the MLRs 2017 do not automatically convert — each must apply separately for Part 4A authorization. Pre-application support (PASS) opens 11 May 2026, with FCA meetings scheduled from July 2026.
Non-UK firms have two practical routes during transition: apply for Part 4A authorization directly, or operate via an FCA-authorized s.21 approver for financial promotions to UK customers until 25 October 2027 (after which only pre-existing contract promotions remain available without authorization). The UK regime does not provide EU passporting — for EU market access, a separate CASP license under MiCA is required.
Summary of key information
| Regulator | Financial Conduct Authority (FCA) |
| Legal basis | The Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026 (SI 2026/102). FSMA 2000 as amended by FSMA 2023. |
| Required permission | Part 4A FSMA permission (one or more of nine cryptoasset regulated activities) |
| Regime commencement | 25 October 2027 |
| Authorization gateway | Open 30 September 2026. Close 28 February 2027. |
| Pre-application support (PASS) | Requests from 11 May 2026. FCA meetings from July 2026. |
| MLR-to-FSMA conversion | Not automatic. Existing MLR-registered firms must apply separately. |
| Transitional s.21 route | Available until 25 October 2027 for non-authorized firms (FCA-approved promotions only) |
| Saving provision | Firms applying during the gateway window keep operating until application is determined (or 25 October 2029 backstop) |
| Application fee | To be confirmed by FCA. Existing MLR fees: £2,000 (~$2,540) under £250,000 (~$317,500) turnover. £10,000 (~$12,700) above. |
| UK presence | Establishment in the UK required for most activities. Overseas firms cannot rely on a general overseas-person exclusion. |
| Corporate tax | 19% (profits below £50,000 (~$63,500)). 25% (profits above £250,000 (~$317,500)). Tapered between. |
| EU passporting | Not available post-Brexit |
Crypto license in the UK
Part 4A FSMA authorization: gateway opens 30 September 2026
Five-month window to apply for full FCA authorization under SI 2026/102. Gofaizen & Sherle prepares the complete Part 4A package — perimeter analysis, SMCR appointments, regulatory business plan, FCA Connect submission, PASS engagement.
Timeline
from 18 months
Total Budget
$65,000
What types of crypto activities require FCA authorization?
From 25 October 2027, nine cryptoasset activities require Part 4A FSMA permission from the FCA under SI 2026/102, alongside the continuing Money Laundering Regulations 2017 (MLRs) obligations. The new regime introduces categories of cryptoasset — qualifying cryptoassets (including qualifying stablecoin) and specified investment cryptoassets — and defines which activities trigger authorization.
The nine regulated cryptoasset activities
- Issuing a qualifying stablecoin in the UK: offering, redemption, and maintaining the value of a qualifying stablecoin from an establishment in the UK.
- Safeguarding qualifying cryptoassets: holding cryptoassets or private keys on behalf of customers — custody in the traditional sense.
- Arranging for another person to safeguard qualifying cryptoassets: introductory or coordination activity that leads to a third party providing custody.
- Operating a qualifying cryptoasset trading platform (QCATP): bringing together multiple third parties buying and selling qualifying cryptoassets — the new equivalent of a regulated exchange.
- Dealing in qualifying cryptoassets as principal: buying or selling on the firm’s own account against UK customers.
- Dealing in qualifying cryptoassets as agent: brokerage and OTC services executing trades on behalf of clients.
- Arranging deals in qualifying cryptoassets: matching, introducing, or facilitating transactions without taking the trade on own account.
- Qualifying cryptoasset staking: offering or arranging staking services where the firm holds, controls, or pools customer assets.
- Safeguarding relevant specified investment cryptoassets: custody activities where the cryptoasset itself qualifies as a specified investment under existing FSMA categories (security tokens, e-money tokens).
Designated activities under Part 5A FSMA
Beyond the nine regulated activities, two activity categories are designated activities under Part 5A FSMA (a lower-impact regulatory category):
- Public offers of qualifying cryptoassets: prohibited unless within Schedule 1 exceptions. Contravention is a criminal offence.
- Admissions to a regulated trading platform: disclosure obligations apply, with a new market abuse framework covering insider dealing, market manipulation, and the unlawful disclosure of inside information.
Token classification under UK law
- Qualifying cryptoassets: the new statutory category covering cryptographically secured digital representations of value or rights that are fungible and transferable. Most exchange tokens (Bitcoin, Ether) fall here.
- Qualifying stablecoin: a subset of qualifying cryptoassets — tokens whose value is maintained by reference to one or more fiat currencies. Issuance is a regulated activity in its own right.
- Specified investment cryptoassets: tokens already classified as specified investments under existing FSMA (security tokens). Safeguarding these is a regulated activity.
- Utility tokens: tokens granting access to a product or service without investment characteristics. Generally outside the new perimeter unless they exhibit financial-instrument characteristics.
Territorial scope: who falls within the perimeter
The new regime explicitly does not apply the general overseas-person exclusion to qualifying stablecoin issuance or any other regulated cryptoasset activity. The Cryptoasset Regulations amend section 418 of FSMA to add a new ninth case under which cryptoasset activities provided to UK consumers — without an authorized intermediary — are regarded as carried on “in the UK”. Offshore incorporation alone does not place a firm outside the perimeter: the FCA assesses whether the activity is carried on in the UK based on substance and customer location, not formal residence of the operating entity.
Why choose the UK for your crypto business?
The UK combines a mature common-law system, the FCA’s transparent registration framework, and one of Europe’s deepest fintech ecosystems — making it a strategic choice for crypto firms that prioritise regulatory clarity and access to institutional capital. Unlike offshore jurisdictions, FCA registration carries international recognition that strengthens banking relationships and investor due-diligence outcomes.
Mature legal system
UK common law provides predictable contract enforcement, well-developed crypto-asset case law, and clear FCA guidance updated through regular consultation papers.
Competitive corporate tax
19% on profits up to £50,000 (~$63,500), tapering to 25% on profits above £250,000 (~$317,500). Capital gains treatment for crypto disposals rather than income tax.
Two regulatory paths
Full FCA registration for UK-resident teams, or the S21 Financial Promotions partnership for non-UK companies marketing services to UK clients.
Fintech ecosystem
London hosts the highest concentration of crypto VCs, accelerators, and digital-asset banks in Europe, giving licensed firms direct access to capital and banking infrastructure.
FCA Innovation Hub
The FCA’s regulatory sandbox allows early-stage crypto firms to test products in a supervised environment before full registration, lowering go-to-market risk.
International credibility
FCA registration is recognized globally, supporting cross-border banking applications and easier partnerships with regulated counterparties in the EU, US, and APAC.
Service packages for obtaining a crypto license in the UK
Ideal for companies looking to quickly enter the UK crypto market with essential compliance.
- Turnkey Company Formation
- Registration as VASP with the Regulator (FCA)
- Registered legal company address for 1 year
- Basic (mandatory) AML/KYC Policy
Best suited for teams that need full guidance through compliance and setup, with banking and regulatory support.
- ALL services from Basic Package
- Full communication with the FCA/VASP authority during authorization process
- Translated and apostilled set of corporate documents
- Assistance with opening a business bank account for crypto-related operations
- AML/MLRO officer selection support (requirements, sourcing, interviewing, contract assistance)
Full end-to-end crypto company setup and tailored compliance solutions. Ideal for institutional-level clients or complex business models.
- ALL services from Advanced Package
- In-depth analysis of your business model, website, and internal documentation
- Full customization of AML/CFT policies and risk matrix
- Preparation of legal memorandums or opinions if needed
- Ongoing legal support during and post-registration (FCA correspondence, reporting, etc.)


What are the requirements for a UK crypto license?
Part 4A FSMA authorization requires a UK-incorporated or UK-establishment entity, an FCA-approved Senior Management Function structure under SMCR, a fully documented regulatory business plan, AML/CTF policies, safeguarding arrangements, operational-resilience framework, Consumer Duty implementation, and prudential financial resources. There is no formal minimum capital figure across all permissions — the FCA’s prudential rules for cryptoasset firms are being finalized through consultation paper CP25/42 and will set capital requirements per activity category.
- Legal entity and UK establishment: a UK-incorporated Ltd or PLC, or a UK establishment of an overseas company. The new regime explicitly excludes the general overseas-person exclusion — offshore incorporation alone is not sufficient.
- Senior Management Functions (SMCR): each pre-defined senior role (CEO, Chair, Compliance Oversight, MLRO, etc.) must be approved by the FCA before appointment. Senior managers carry personal accountability for prescribed responsibilities.
- Threshold Conditions: the firm must demonstrate adequate resources, suitability of staff and owners, effective oversight, and a business model viable in the UK regulatory environment.
- Regulatory business plan: a detailed plan covering activities sought, target customers, revenue model, governance, capital plan, and three-year financial projections — the FCA assesses against the proposed permissions.
- AML/CTF and MLR obligations: the MLRs 2017 obligations continue to apply alongside Part 4A authorization. Documented risk assessment, CDD/EDD, transaction monitoring, source-of-funds checks, SAR escalation to the National Crime Agency (NCA), and Travel Rule compliance — all cryptoasset transfers must be accompanied by originator and beneficiary information under Part 7A of the MLRs 2017. Below the €1,000 (~$1,080) de minimis threshold only basic information (name and account number) is required; at or above €1,000 full details apply, including address and date of birth or customer identification number.
- Safeguarding arrangements: for firms holding cryptoassets or money on behalf of customers, the FCA’s amended CASS rules require segregation, reconciliation, and operational arrangements that ensure customer assets are returnable on insolvency.
- Operational resilience: identification of important business services, impact tolerances, severe-but-plausible scenario testing, and mapping of resources and third-party dependencies.
- Consumer Duty: documented monitoring of customer outcomes across products, price and value, customer understanding, and customer support. Cryptoasset Consumer Duty guidance is being finalized by the FCA.
- Prudential capital: regulatory capital requirements per activity, set by CP25/42 consultation. Firms must hold capital proportionate to scale and risk, with capital plans demonstrating viability for at least 12 months.
Application package via FCA Connect
The Part 4A application is submitted through the FCA Connect online portal. The package includes: regulatory business plan, risk framework, AML/CTF policies, safeguarding arrangements, fit and proper documentation for senior managers and beneficial owners, IT and cybersecurity policy, operational resilience framework, Consumer Duty implementation plan, three-year financial projections, and prudential capital plan. The FCA’s Pre-Application Support Service (PASS) is available from 11 May 2026 to test the package before formal submission.
Common rejection grounds (Gofaizen & Sherle practice observation)
The most frequent rejection causes are: (1) inadequate SMCR appointments — proposed Senior Managers without verifiable regulatory experience or cryptoasset depth; (2) AML/CTF documentation depth — templates without UK-specific risk assessment for the specific perimeter of regulated activities; (3) operational resilience and safeguarding mapped at a generic level rather than to the firm’s actual technology and counterparty stack; (4) financial projections that do not align with the proposed permissions. Pre-submission review and PASS engagement typically reduce revision cycles from three or four rounds to one.
It should be noted that the FCA continually updates its approach to assessing applicants — we recommend legal review before submission to maximize approval chances.

Expert view
From 25 October 2027, the FCA expects firms to be 'willing and organized' with credible Senior Management appointments under SMCR. An application without verified UK-resident senior managers and demonstrable cryptoasset operating experience is the most common rejection cause we observe. Two weeks of pre-submission review and PASS engagement materially reduce FCA information request rounds and protect the saving provision.
Senior Partner, Head of Consulting
How to obtain a UK crypto license?
Obtaining a UK crypto license from 25 October 2027 means applying for Part 4A FSMA permission via the FCA authorization gateway. The seven stages below cover the FCA-side application path — from perimeter analysis through Part 4A permission issuance; full end-to-end engagement with Gofaizen & Sherle typically runs from 18 months (see CTA above for the complete service timeline).
Step 1: Preparation for registration
Before applying, the applicant must study the new regulatory framework under SI 2026/102, map activities against the nine new regulated cryptoasset categories, identify Senior Management Functions to appoint under SMCR (CEO, Chair, Compliance Oversight, MLRO), and develop a complete set of internal policies including AML/CTF, safeguarding, operational resilience, and Consumer Duty. Engagement with the FCA’s Pre-Application Support Service (PASS) is strongly recommended — pre-application meetings begin July 2026.
Step 2: Company registration in the UK
Only a company registered in the UK as a limited company can obtain a cryptocurrency license in the UK. The company must have a physical office and appointed directors.
Step 3: Collection and preparation of documentation
At this stage, an extensive package of documents is prepared, including:
- business plan, marketing strategy, description of types of crypto activities;
- information about key shareholders, directors, and beneficiaries;
- corporate structure and description of IT systems and cybersecurity policy;
- AML/CTF policy, staff training program;
- public keys/wallets used in operations;
- internal monitoring and reporting procedures.
The FCA requires complete transparency and accuracy in the information provided.
Step 4: Submission of application via FCA Connect
The Part 4A application is submitted via the FCA Connect online system during the authorization gateway window (30 September 2026 – 28 February 2027). The application must specify the cryptoasset regulated activities sought, proposed Senior Managers and Certification staff, safeguarding arrangements for customer assets, operational resilience framework, AML/CTF policies, and Consumer Duty implementation. All documents and forms must be up to date and signed by authorized persons.
Step 5: Payment of the registration fee
The FCA application fee depends on the company’s annual turnover:
- Turnover under £250,000 (~$317,500): £2,000 (~$2,540).
- Turnover above £250,000: £10,000 (~$12,700).
The application fee is non-refundable when the application is voluntarily withdrawn. If the FCA rejects the application, the rejection reason is provided in writing and the registration fee is refunded. Most voluntary withdrawals occur because the applicant cannot complete the documentation or meet response deadlines during FCA review.
Step 6: FCA review and verification
The FCA appoints a responsible specialist who analyzes the application and verifies the information provided against internal databases and international sources. Additional information may be requested if necessary.
Step 7: Approval and license issuance
If all requirements are met, the FCA issues a license to conduct crypto activities. The company is entered into the Financial Services Register, and the applicant receives an official notification with the terms of the license and a description of the permitted activities.
After receiving a license, authorized companies are required to pay periodic fees. These are calculated using a special formula that takes into account the registration fee, the company’s valuation, and the number of calendar months. The exact amount of the fee will be determined by the Financial Conduct Authority (FCA) on a case-by-case basis. In the first year of authorization, companies pay only a portion of this fee. The amount will depend on the number of months remaining in the current payment year.
How Gofaizen & Sherle can help you obtain a crypto license in the UK
Gofaizen & Sherle prepares Part 4A FSMA applications, structures s.21 approver partnerships in transition, and runs MLR-to-FSMA migration strategy for crypto exchanges, custodians, OTC desks, payment processors, and stablecoin issuers. We work across the full regulatory perimeter: the nine new regulated activities under SI 2026/102, designated activities under Part 5A FSMA, the Consumer Duty, the Senior Managers and Certification Regime (SMCR), operational resilience, and the FCA Cryptoassets Sourcebook (CRYP) as it is finalized through 2026.
- Perimeter and permission mapping: we map your business model against the nine regulated cryptoasset activities and identify the exact Part 4A permissions required — including territorial assessment for non-UK operations under the amended section 418 FSMA.
- Pre-application support (PASS) engagement: we prepare your firm for FCA pre-application meetings from July 2026 — test the business model, perimeter analysis, and proposed permissions with the FCA before formal submission.
- SMCR appointments and approvals: identification, vetting, and FCA approval of Senior Management Functions — including pre-approval of CEO, Chair, Compliance Oversight, and MLRO. We close the experience gaps that lead to FCA refusal of Senior Manager applications.
- Full Part 4A application package: regulatory business plan, AML/CTF policies, safeguarding arrangements, operational resilience framework, Consumer Duty implementation plan, prudential capital plan, and three-year financial projections — drafted to FCA expectations rather than from templates.
- FCA Connect submission and information rounds: formal submission via FCA Connect, management of the FCA review process, response to information requests, and engagement with case officers until determination.
- S21 approver structuring (transition route): for non-UK firms, identification and contracting of FCA-authorized s.21 approvers, structuring of the approval workflow for cryptoasset financial promotions, and migration planning to Part 4A authorization.
- MLR-to-FSMA migration: for firms currently MLR-registered, gap analysis against the Part 4A standard, prioritisation of remediation work, and timing of the application against the FCA gateway window (dates in Quick Facts above).
- Post-authorization supervision: ongoing FCA notifications, SMCR certification, Consumer Duty monitoring, annual financial-crime reports, prudential reporting, and Cryptoassets Sourcebook (CRYP) compliance from day one of authorization.
Why teams choose Gofaizen & Sherle for the FSMA 2023 transition
- Active casework across the perimeter: Part 4A applications, MiCA CASP licensing in seven plus EU jurisdictions, s.21 approver structures, and MLR-to-FSMA migrations — we sequence the optimal path against the gateway timeline.
- FCA engagement before submission: documented pre-submission review and PASS engagement reduces FCA revision cycles from three or four rounds to one, and protects the saving provision by ensuring a clean application during the gateway window.
- Regulatory horizon tracking: active monitoring of FCA consultations (CP25/14, CP25/40, CP25/41, CP25/42, CP26/13), HM Treasury policy notes, and the Cryptoassets Sourcebook (CRYP) — clients receive structured updates on changes that affect their application.
- End-to-end delivery: incorporation, SMCR appointments, documentation, submission, banking, and post-authorization compliance handled by one team — no handoffs between specialists.
Whether your path is direct Part 4A authorization, the s.21 transition route, or a parallel MiCA CASP license, we structure the sequence against your target market, capital constraints, and the gateway window.
How is crypto regulated in the UK?
UK crypto regulation rests on the Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026 (SI 2026/102), with three regulators sharing oversight: the Financial Conduct Authority (FCA) (authorization, conduct, prudential rules), HM Treasury (HMT) (perimeter and policy via statutory instruments), and the Bank of England (BoE) (systemic stablecoins and financial stability). The Regulations were made by HM Treasury on 4 February 2026 under powers conferred by the Financial Services and Markets Act 2023 (FSMA 2023, Schedule 6) — for commencement dates and the application window see Quick Facts above.
The nine regulated cryptoasset activities
SI 2026/102 amends the FSMA (Regulated Activities) Order 2001 to designate the following as new regulated activities, each requiring Part 4A FSMA permission:
- Issuing a qualifying stablecoin in the UK.
- Safeguarding qualifying cryptoassets and relevant specified investment cryptoassets.
- Arranging for another person to safeguard qualifying cryptoassets.
- Operating a qualifying cryptoasset trading platform (QCATP).
- Dealing in qualifying cryptoassets as principal.
- Dealing in qualifying cryptoassets as agent.
- Arranging deals in qualifying cryptoassets.
- Qualifying cryptoasset staking.
Public offers of qualifying cryptoassets and admissions to a regulated trading platform are designated activities under Part 5A FSMA, alongside a new market abuse framework with insider dealing, market manipulation, and disclosure obligations.
Authorization timeline and the gateway
The FCA authorization gateway opens on 30 September 2026 and closes on 28 February 2027. Firms wishing to undertake any of the nine regulated activities must hold Part 4A permission before 25 October 2027. Pre-application support (PASS) is available from 11 May 2026, with FCA pre-application meetings scheduled from July 2026 onward. Existing FCA-authorized firms intending to undertake new cryptoasset activities apply via Variation of Permission (VoP) rather than a full new authorization.
MLR registration is not Part 4A authorization
Firms registered under the Money Laundering Regulations 2017 (MLRs) do not automatically transition to FSMA authorization — each firm must submit a separate Part 4A application. The MLR regime continues to apply to anti-money laundering and counter-terrorism financing obligations alongside the new FSMA permission. Firms applying for MLR registration after 31 July 2027 are unlikely to receive a determination before the new regime commences, so new applicants are encouraged to focus directly on the FSMA gateway.
Saving and transitional provisions
Part 7 of SI 2026/102 establishes two protective mechanisms during the transition. The saving provision applies to firms that submit a Part 4A application during the gateway window (30 September 2026 – 28 February 2027) — these firms continue operating under the existing regime until the application is finally determined, with a backstop date of 25 October 2029. The transitional provision applies to firms whose application is refused (and no longer open to review) or that do not apply at all — these firms enter a wind-down regime allowing them to service pre-existing UK contracts only.
Use of s.21 approvers in transition
Until 25 October 2027, non-UK crypto firms and firms without Part 4A permission may continue using an FCA-authorized s.21 approver to approve their financial promotions to UK consumers under section 21 of FSMA 2000. After commencement of the new regime, firms that have not applied for authorization lose access to s.21 approval and may only communicate promotions relating to pre-existing contracts.
Property (Digital Assets etc) Act 2025
Adjacent to the FCA regime, the Property (Digital Assets etc) Act 2025 (Royal Assent 2 December 2025) recognises certain digital assets as a distinct form of personal property in English law. This gives English courts clearer ground to treat crypto tokens as property that can be owned, transferred, and enforced against — strengthening the legal basis for custody contracts, insolvency proceedings, and cross-border disposal.
Register of cryptoasset firms
Authorized firms appear on the Financial Services Register, the FCA’s public register of authorized persons. The Register lists Part 4A permissions held, any conditions imposed, and disciplinary history. The FCA publishes a separate warning list of unauthorized firms targeting UK consumers, updated regularly. Once the new regime commences, firms must monitor the Register to verify their counterparties’ permissions before contracting.
What changes for UK crypto firms under the FSMA 2023 transition?
The FSMA 2023 transition replaces narrow AML-only MLR registration with full Part 4A FSMA authorization, expanding scope from a handful of MLR-defined activities to nine regulated cryptoasset activities plus two Part 5A designated activities under SI 2026/102. Three structural changes drive firm-level planning: regulatory scope, prudential and conduct standards, and senior-management accountability under SMCR. The shift transforms supervision from anti-money laundering compliance into full financial-services oversight — capital adequacy, governance, operational resilience, conduct, consumer protection, and market integrity all enter the supervisory perimeter.
What changes at commencement on 25 October 2027
- From AML supervision to FSMA authorization: the FCA assesses the firm as a regulated financial-services entity, not as an AML-regulated business. Threshold Conditions apply — adequate resources, suitability, effective oversight.
- Senior Managers and Certification Regime (SMCR): senior managers carry personal accountability for prescribed responsibilities. Each Senior Management Function must be pre-approved by the FCA. Certification staff must be assessed annually as fit and proper.
- Consumer Duty: firms must deliver good outcomes for retail customers across products, price, customer understanding, and support. Documented monitoring of customer outcomes becomes mandatory.
- Operational resilience: identification of important business services, impact tolerances, mapping of resources, and severe-but-plausible scenario testing — supervised by the FCA from day one of authorization.
- Prudential capital and safeguarding: regulatory capital requirements (subject to the FCA’s prudential consultation), safeguarding of qualifying cryptoassets and customer money, and dedicated CRYP rules in the FCA Handbook.
- Market abuse framework: insider dealing, market manipulation, and disclosure obligations apply to relevant qualifying cryptoassets under Part 5A FSMA, with insider lists and surveillance obligations on trading platforms.
The gateway window and how to use it
The authorization gateway opens 30 September 2026 and closes 28 February 2027. The FCA expects to determine applications submitted during this window before regime commencement, in submission order. Firms that submit a complete application during the window benefit from the saving provision in Part 7 of SI 2026/102: they continue operating under the existing regime while the application is under review, up to a backstop of 25 October 2029.
Pre-application support is available from 11 May 2026 through the FCA Pre-Application Support Service (PASS). Pre-application meetings begin July 2026 and are scheduled on request — these meetings allow firms to test their business model, perimeter analysis, and proposed permissions with the FCA before formal submission.
Firms registered under the Money Laundering Regulations 2017 do not transition automatically. Each MLR-registered firm must submit a separate Part 4A application. The FCA’s MLR registration window closes for new applications on 31 July 2027 — applications submitted after this date are unlikely to be determined before the new regime starts.
What happens if a firm misses the gateway
Firms that do not apply during the gateway window (or that apply later) lose access to the saving provision. Three outcomes are possible:
- Apply outside the window: permitted, but the scope of authorized activities may be limited until determination. The saving provision does not apply.
- Refused application: entry into the transitional provision — a wind-down regime allowing the firm to service pre-existing UK contracts only, until obligations are discharged.
- No application: the firm must exit UK cryptoasset business by 25 October 2027. Continuing without Part 4A permission is a criminal offence under section 19 of FSMA 2000.
Linked consultations and FCA Handbook
The detailed FCA rulebook is being finalized through 2026 across multiple consultations: CP25/14 (stablecoin issuance and cryptoasset custody), CP25/40 (regulating cryptoasset activities), CP25/41 (admissions, disclosures, and market abuse), CP25/42 (prudential regime for cryptoasset firms), and CP26/13 (perimeter guidance, April 2026). Final FCA rules will be set out in 2026 and codified in a new Cryptoassets Sourcebook (CRYP) within the FCA Handbook, with rule sets from CASS (client assets), SYSC (systems and controls), and Consumer Duty extended to cryptoasset firms.
UK crypto license vs MiCA: which to choose?
The UK FCA license and the EU’s MiCA CASP license are the two leading European routes for crypto businesses, but they serve fundamentally different strategic positions: FCA gives global recognition and direct access to UK institutional investors without EU passporting, while MiCA grants a single CASP authorization valid across all 27 EU and EEA member states.
| Parameter | UK FCA license | MiCA CASP license (EU) |
|---|---|---|
| Regulator | Financial Conduct Authority (FCA) | National regulators under MiCA framework |
| Market access | UK and global (no EU passporting) | All 27 EU + EEA member states (single passport) |
| Application fee | To be confirmed for Part 4A. Current MLR fees: £2,000–10,000 (~$2,540–12,700). | €5,000–50,000 (~$5,400–54,000), country-dependent |
| Minimum capital | None (case-by-case) | €50,000 (~$54,000) for execution. €125,000 (~$135,000) for custody. €150,000 (~$162,000) for trading platform. |
| Timeline | Gateway 30 Sep 2026 – 28 Feb 2027. Regime starts 25 Oct 2027. FCA expects to determine in-window applications before commencement. | 3–6 months (varies by country) |
| AML/KYC | Very strict (FATF-aligned) | Strict and harmonised (EU AML Directive) |
| Corporate tax | 19% (under £50,000 (~$63,500)). 25% (above £250,000 (~$317,500)). | 15–25% (varies by member state) |
| Legal certainty | Very high (mature common law) | High (new harmonised framework) |
When the UK FCA license is the better fit
- Target market is the UK: direct access to the UK’s deep capital market, sterling banking, and institutional investors.
- Global recognition matters: FCA registration carries strong international weight in banking due-diligence and partner onboarding.
- UK-resident leadership: founders or directors based in the UK can satisfy the residency and physical-office tests without re-domiciliation.
When the MiCA CASP license is the better fit
- EU-wide scaling priority: single authorization covers 27 markets without re-licensing in each.
- Lower capital/cost in some jurisdictions: MiCA CASP via Lithuania, Cyprus, or Czech Republic can be cheaper to set up than UK FCA.
- Time pressure: straightforward MiCA applications close in 3–4 months versus 6–12 months for FCA.
For firms targeting both markets, the practical sequence is to obtain the MiCA CASP license first (faster, EU-wide) and add UK FCA registration later — or use the S21 Financial Promotions alternative (see below) to lawfully reach UK clients without a UK incorporation.

Expert view
The choice between UK FCA and MiCA CASP is rarely binary. Most of our clients with cross-border ambitions sequence both: MiCA via a fast EU jurisdiction first, then UK as a second layer once revenue justifies it. We map the optimal path against your target customer base, capital constraints, and 12-month go-to-market timeline.
Partner, Head of Sales (Crypto and Blockchain)
How does the s.21 financial promotions route work for non-UK firms?
The s.21 financial promotions route lets non-UK crypto firms reach UK customers without holding their own FCA authorization, by partnering with an FCA-authorized s.21 approver that signs off each financial promotion under section 21 of FSMA 2000. The route remains available until regime commencement on 25 October 2027 — after which only pre-existing-contract promotions can be communicated without authorization. Under section 21 of the Financial Services and Markets Act 2000, a firm without Part 4A permission can communicate financial promotions to UK consumers only if those promotions are approved by an FCA-authorized s.21 approver. The FCA has confirmed transitional rules for s.21 use during the gateway window and at regime commencement.
Who can use an s.21 approver
Cryptoasset firms that are not authorized under FSMA and not registered under the MLRs 2017 (including overseas firms) may use an s.21 approver to approve their cryptoasset financial promotions and communicate legally to UK consumers. The s.21 approver remains responsible to the FCA for the approved promotion under the financial-promotions perimeter — approvers cannot lawfully approve promotions for firms conducting regulated activities without the necessary permissions.
How the s.21 route works in the transition
- Foreign-licensed entity: the cryptoasset firm operates under a recognized license in another jurisdiction (CASP under MiCA, MSB in Canada, or similar).
- FCA-authorized approver: the firm contracts an FCA-authorized UK firm holding s.21 approver status to review and approve its financial promotions.
- Promotion approval per campaign: each marketing communication intended for UK consumers is reviewed and approved by the s.21 approver before publication; the approver is liable for the promotion’s compliance.
- FCA reporting by the approver: the s.21 approver reports approved cryptoasset promotions to the FCA on the schedule required by the FCA’s financial-promotions regime.
What changes at the gateway window and at commencement
The FCA has published direct guidance on s.21 use for cryptoasset firms. Three scenarios:
- Firm applies during the gateway window (30 September 2026 – 28 February 2027): may continue using its s.21 approver until the Part 4A application is finally determined.
- Firm does not apply during the gateway window: may continue using the s.21 approver until the new regime commences on 25 October 2027. After commencement, if the firm has not been authorized, it enters the transitional provision and can communicate promotions only relating to pre-existing UK contracts.
- Firm becomes authorized under Part 4A: may communicate its own financial promotions directly and no longer requires an s.21 approver.
S21 vs full Part 4A authorization: trade-offs
- Faster setup: contracting an s.21 approver typically takes 4–8 weeks versus the multi-month Part 4A application process.
- Lower regulatory load: no UK office, no UK-resident SMCR appointments, no Threshold Conditions assessment — but ongoing approver fees, typically £3,000–10,000 (~$3,800–12,700) per month plus per-campaign approval costs.
- Strict scope: s.21 covers financial promotions to UK consumers only. The firm cannot hold customer money or cryptoassets in the UK or carry on regulated activities through the s.21 route.
- Approver dependency: business continuity depends on the s.21 approver’s continued FCA authorization; if the approver is restricted or loses status, the firm loses its UK promotions channel.
- Transitional ceiling: s.21 is not a long-term substitute for Part 4A authorization. After 25 October 2027, firms without Part 4A permission lose access to new-customer promotions in the UK.
When the s.21 route fits
The s.21 route works best for non-UK firms that already hold a recognized cryptoasset license elsewhere (MiCA CASP, MSB, VASP), want to test or scale UK customer acquisition while preparing a Part 4A application, or operate a business model that does not require holding UK customer assets directly. It is not a substitute for Part 4A authorization if the firm intends to operate as a UK qualifying cryptoasset trading platform, hold qualifying cryptoassets in custody, issue qualifying stablecoin in the UK, or build a UK-resident team.
S21 / FinPromotions
Operating from outside the UK? S21 might be your fastest route.
We assess your existing license, identify suitable UK FCA-authorized partners, and structure the partnership end-to-end. Setup in 4–8 weeks.
Setup
4–8 weeks
No UK incorporation
required
How to register a UK company for crypto business?
UK company formation for a crypto business is a separate procedure from FCA registration — it precedes the cryptoasset application and follows the standard Companies House workflow. The complete process takes 1–2 weeks and consists of 8 steps: name selection, company-type determination, director and shareholder appointment, legal address, constituent documents, Companies House registration, SIC code specification, and business account opening.
Step 1: Choosing a company name
The name must be unique and not identical to any already registered names. It must also comply with legal requirements.
Step 2: Determining the type of company
A private limited company (Ltd) is the standard structure for crypto businesses, as it protects the personal assets of the founders.
Step 3: Appointing a director and shareholder
At least one director and one shareholder are required. Their full details must be provided: name, address, date of birth, and citizenship.
Step 4: Choosing a legal address
This is the official address of the company, which will be used for correspondence. It must be located in the UK and will be displayed in the public register.
Step 5: Preparation of constituent documents
It is necessary to draw up a memorandum and articles of association, which set out the structure and internal rules of the company.
Step 6: Registration with Companies House
The application can be submitted online at GOV.UK or by post using form IN01. Registration usually takes one working day.
Step 7: Specifying the SIC code
This code defines the company’s field of activity. For crypto companies, a code corresponding to financial or IT services is selected.
Step 8: Opening a business account
After registration, it is advisable to open a corporate account to separate personal and business finances.
Once registration is complete, the company obtains legal status, and the next step is to comply with the requirements of the FCA regulator and prepare to apply for a crypto license.
How are crypto companies taxed in the UK?
UK-licensed crypto companies pay corporate tax on profits at 19% under £50,000 (~$63,500) and 25% above £250,000 (~$317,500), with a tapered rate between thresholds. HMRC (Her Majesty’s Revenue and Customs) treats cryptocurrencies as property rather than currency, so capital gains tax applies to disposals and income tax applies to mining and payment income. Most cryptoasset trading services are exempt from VAT.
- Corporate tax: 19% (profits under £50,000 (~$63,500)). 25% (profits above £250,000 (~$317,500)). Tapered rate between thresholds.
- HMRC asset treatment: cryptocurrencies are treated as assets, not currency. Tax treatment depends on activity (investing, mining, trading, payment). HMRC publishes the Cryptoassets Manual covering all common scenarios.
- Capital Gains Tax (CGT): applies on disposal of cryptoassets — selling, exchanging for fiat, or swapping for another asset. Calculated on the gain over base cost.
- Income Tax: applies when cryptocurrency is received as payment for goods or services. Value calculated at market price on receipt date.
- Mining income: taxable as income at the cryptocurrency’s market value at the time of receipt.
- VAT: sale and purchase of cryptocurrencies generally exempt. Use of crypto to pay for goods or services may attract VAT depending on transaction type.
- Stamp duty: may apply on shares, land, or real-estate purchases settled in cryptocurrency.
UK crypto tax vs other jurisdictions
The UK’s 19–25% corporate tax sits in the middle range for major crypto jurisdictions — higher than Switzerland’s canton-dependent rates and Singapore’s flat 17%, comparable to most EU MiCA states, lower than several US states.
| Jurisdiction | Corporate tax | VAT on crypto services | Special crypto rules |
|---|---|---|---|
| United Kingdom | 19–25% | Mostly exempt | CGT on disposal. Income tax on mining and payment income. |
| EU (MiCA states) | 15–25% | Mostly exempt | Country-specific. MiCA compliance required. |
| Switzerland | 12–18% (canton-dependent) | Exempt | Cryptoassets treated as legal property. |
| Singapore | 17% | Exempt | Favorable for international crypto businesses. |
| BVI (offshore) | 0% | Exempt | No local taxation. Reputational and banking limitations. |
Tax rules and HMRC guidance evolve. We recommend consulting a Gofaizen & Sherle tax adviser before structuring cross-border crypto operations or material disposals.
What are the ongoing obligations for crypto businesses in the UK?
FCA-registered crypto firms must maintain ongoing AML/CTF compliance, file annual financial-crime reports to the FCA, submit Suspicious Activity Reports (SARs) to the National Crime Agency (NCA), conduct continuous customer due diligence, train staff on financial-crime risks, and notify the FCA of any material change in operations or beneficial ownership.
- FCA notifications: any material change in business model, beneficial ownership, MLRO, directors, or service scope must be reported to the FCA within statutory timeframes.
- AML/CTF system: functioning internal compliance system covering risk assessment, transaction monitoring, EDD on high-risk customers, and source-of-funds verification.
- Customer due diligence: KYC at onboarding plus continuous monitoring against the customer’s stated profile and updated risk indicators.
- SAR filing: Suspicious Activity Reports submitted to the NCA promptly when suspicion of money laundering or terrorist financing arises.
- Annual financial-crime report: mandatory annual return to the FCA covering AML/CTF performance and red-flag statistics.
- MLRO oversight: the MLRO must have direct authority, regular board reporting, and independent audit of compliance procedures.
- Staff training: documented periodic training on AML/CTF, sanctions, and crypto-specific financial-crime typologies.
- Travel Rule compliance: all cryptoasset transfers require originator and beneficiary information under Part 7A of the MLRs 2017. Below the €1,000 (~$1,080) de minimis threshold only basic information (name and account number) is required; at or above €1,000 full details apply (address and date of birth or customer identification number). Inbound transfers with missing information trigger additional verification before crediting customer accounts.
- Recordkeeping: complete transaction records and customer files retained for at least 5 years (MLRs requirement) at the place of business.
Responsibility for non-compliance
Operating without FCA registration or breaching AML/CTF requirements carries criminal liability for individuals and corporate sanctions: unlimited fines, asset freezes, business closure, and director disqualification. The FCA actively pursues unauthorized firms — its public warning list of unauthorized crypto operators is updated weekly. Repeat or wilful breaches may also lead to prosecution under the Proceeds of Crime Act 2002 and the Terrorism Act 2000.
Conclusion
UK crypto regulation has now crossed its defining threshold. The Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026 (SI 2026/102) bring cryptoasset activities within the FSMA perimeter for the first time — nine regulated activities now require Part 4A FSMA authorization from the FCA, replacing the AML-only MLR registration that defined the UK regime since 2020.
Three decisions define UK crypto strategy for any firm serving UK customers: whether to pursue full Part 4A authorization for direct UK market access, the s.21 financial promotions route as an interim path for non-UK firms with existing licensing elsewhere, or a parallel MiCA CASP license for EU access. Timing is finite — the application window is open for a defined period (see Quick Facts for exact dates), and the saving provision protects only firms that apply within it.
Whichever path you choose, the regulatory horizon shifts fast. Our team tracks FCA consultations (CP25/14 stablecoins and custody, CP25/40 cryptoasset activities, CP25/41 admissions and market abuse, CP25/42 prudential regime, CP26/13 perimeter guidance), HM Treasury policy notes, and the FCA Cryptoassets Sourcebook (CRYP) as it is finalized.
FAQ about crypto license in the UK
Is cryptocurrency regulated in the UK?
Yes — UK cryptoasset activities are regulated by the Financial Conduct Authority (FCA), with full Part 4A FSMA authorization becoming mandatory from 25 October 2027 under The Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026 (SI 2026/102). Until commencement, AML and counter-terrorism financing obligations under the Money Laundering Regulations 2017 continue to apply, and financial promotions to UK consumers are restricted under section 21 of FSMA 2000 — meaning unauthorized promotions are a criminal offence.
What is a crypto license in the UK?
A UK crypto license is Part 4A FSMA permission from the FCA under the Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026. From 25 October 2027, it is mandatory for nine cryptoasset regulated activities: issuing qualifying stablecoin, safeguarding cryptoassets, arranging safeguarding, operating a qualifying cryptoasset trading platform (QCATP), dealing as principal or agent, arranging deals, and qualifying staking. UK statute does not use the word “license” — Part 4A authorization is the legal instrument. The authorization gateway opens 30 September 2026 and closes 28 February 2027.
What types of crypto asset activities require registration with the FCA?
Nine activities require Part 4A FSMA permission from 25 October 2027: (1) issuing qualifying stablecoin in the UK, (2) safeguarding qualifying cryptoassets, (3) arranging for another to safeguard, (4) operating a qualifying cryptoasset trading platform (QCATP), (5) dealing in qualifying cryptoassets as principal, (6) dealing as agent, (7) arranging deals, (8) qualifying cryptoasset staking, plus (9) safeguarding relevant specified investment cryptoassets. Public offers and admissions to trading become designated activities under Part 5A FSMA with separate disclosure and market abuse rules.
Can I provide crypto services while my application for registration is pending?
It depends on your status. Under SI 2026/102 Part 7, firms that apply for Part 4A authorization during the gateway window (30 September 2026 – 28 February 2027) benefit from a saving provision: they continue operating under the existing regime until the application is finally determined, with a 25 October 2029 backstop. Firms refused authorization enter a transitional wind-down regime allowing them to service pre-existing UK contracts only. Operating new business without Part 4A permission after 25 October 2027 is a criminal offence under section 19 of FSMA 2000.
How do I obtain a UK crypto license?
Apply for Part 4A FSMA permission via the FCA authorization gateway, open from 30 September 2026 to 28 February 2027. The process: incorporate or maintain a UK legal entity, define which of the nine cryptoasset regulated activities you will undertake, prepare a full Part 4A application (regulatory business plan, AML/CTF policies, safeguarding arrangements, SMCR appointments, financial projections), engage with the FCA Pre-Application Support Service (PASS) from 11 May 2026, and submit via FCA Connect. Non-UK firms can use an FCA-authorized s.21 approver as an interim route to market UK customers until 25 October 2027.
How much does a UK crypto license cost?
The FCA application fee depends on annual turnover: £2,000 (~$2,540) for companies with turnover under £250,000 (~$317,500), and £10,000 (~$12,700) for turnover above £250,000. Beyond the application fee, total cost includes UK incorporation, MLRO compensation, AML/CTF policy preparation, and ongoing FCA periodic supervision fees calculated on company valuation. For a complete cost breakdown for your specific case, request a Gofaizen & Sherle quote.
How long is a UK crypto license valid?
Part 4A FSMA permission has no fixed expiration date. The authorization remains valid as long as the firm meets the FCA’s ongoing Threshold Conditions, complies with the Cryptoasset Sourcebook (CRYP) rules, the Senior Managers and Certification Regime (SMCR), the Consumer Duty, operational-resilience standards, and pays periodic fees. The FCA may vary, suspend, or cancel permission for non-compliance. Annual reporting and notification obligations are continuous from the date of authorization.
What is the S21 Financial Promotions alternative?
An s.21 approver is an FCA-authorized firm that approves financial promotions for non-authorized cryptoasset firms under section 21 of FSMA 2000. Until 25 October 2027, non-UK crypto firms can use an s.21 approver to lawfully market services to UK customers without holding Part 4A permission directly. Firms applying during the authorization gateway (30 September 2026 – 28 February 2027) may continue using their s.21 approver until the application is determined. Firms that do not apply lose access to s.21 approval at commencement and may only communicate promotions relating to pre-existing UK contracts.
What challenges might you face when getting a UK crypto license?
Three main challenges define the FSMA 2023 transition: meeting FCA expectations on governance and operational resilience, timing the gateway window correctly, and resourcing SMCR-approved senior management. Each requires substantial step-up from MLR-era documentation. (1) Application quality — Part 4A demands operational resilience policies, Consumer Duty implementation, prudential capital plans, and SMCR appointments far beyond MLR scope. (2) Gateway timing — applying within 30 September 2026 – 28 February 2027 keeps the saving provision; missing the window means losing UK market access at 25 October 2027 commencement. (3) Senior management — finding FCA-approvable candidates with cryptoasset experience for SMF roles is the most-cited rejection driver in PASS feedback. Pre-submission review by experienced UK regulatory counsel and use of the FCA Pre-Application Support Service (PASS) significantly improve outcomes.
Explore other Crypto Licenses
Connect with our experts
Our experts will tell you how to do it as quickly and easily as possible.


By clicking the button, I confirm that I have read the privacy policy and consent to the collection and processing of my personal data in accordance with the GDPR rules.