The transition from Money Laundering Regulations (MLR) registration to Financial Services and Markets Act (FSMA) authorisation represents the most significant regulatory change for UK cryptoasset businesses since the introduction of FCA crypto registration in 2020. The Cryptoassets Regulations 2026 establish a comprehensive regulatory framework that will transform crypto firms from AML-registered entities into fully authorised financial services firms. This article provides a practical transition roadmap.
The Current MLR Registration Regime
Under the current regime, UK cryptoasset businesses providing exchange services or custodian wallet services must register with the FCA under the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017. MLR registration is a relatively light-touch regime focused primarily on anti-money laundering controls. Registered firms must demonstrate adequate AML/CFT frameworks, fit and proper management, and sufficient financial resources — but they are not subject to the full range of FCA conduct of business rules, capital requirements, or prudential standards that apply to authorised firms.
What FSMA Authorisation Means
FSMA authorisation brings cryptoasset firms within the same regulatory framework as banks, payment institutions, EMIs and investment firms. This means:
Capital requirements. Firms will be subject to minimum initial capital and ongoing own funds requirements. The FCA is expected to set capital requirements based on the nature and scale of regulated activities, drawing on principles from MIFIDPRU and the PSRs 2017. Firms should expect significantly higher capital obligations than under MLR.
Conduct of business rules. FSMA authorisation brings firms within scope of FCA conduct rules for the first time — including fair treatment of customers, clear communications, conflicts of interest management, best execution for trading platforms, and suitability assessments for advisory services.
Consumer Duty. The FCA Consumer Duty will apply to cryptoasset firms serving retail customers. Firms must demonstrate that products deliver good outcomes, provide fair value, and are supported by effective consumer understanding and support.
Governance and SMCR. The Senior Managers and Certification Regime (SMCR) will apply, requiring firms to allocate specific responsibilities to senior managers and to certify that relevant staff are fit and proper.
Prudential reporting. Authorised firms will be subject to regular regulatory reporting requirements, providing the FCA with data on financial resources, transaction volumes, customer numbers and risk indicators.
Transition Timeline
The timeline is tight:
- February 2026 — Cryptoassets Regulations 2026 published as final statutory instrument
- September 2026 — FCA gateway opens for FSMA authorisation applications
- October 2027 — Deadline for firms to hold FSMA authorisation; MLR registration ceases to be sufficient
- Transitional provisions — Firms that have submitted a complete application before the deadline may continue operating under transitional arrangements while the FCA processes their application
This gives firms approximately 13 months from gateway opening to deadline. Given that FSMA authorisation applications are expected to take 6–12 months to process, firms that have not begun preparation by mid-2026 risk being unable to meet the deadline.
Preparing for the Transition: Step by Step
Step 1: Regulatory gap analysis (now). Compare your current MLR registration compliance framework against FSMA authorisation requirements. Identify gaps in capital, governance, conduct standards, systems and controls.
Step 2: Capital planning (Q2 2026). Determine the likely capital requirements for your authorised activities and ensure you have a clear path to meeting them — whether through retained earnings, shareholder investment, or external funding.
Step 3: Governance restructuring (Q2–Q3 2026). Implement SMCR-ready governance structures. Appoint individuals to senior management functions, establish compliance oversight, and implement a certification regime for relevant staff.
Step 4: Conduct framework development (Q2–Q3 2026). Develop policies and procedures for fair customer treatment, complaints handling, conflicts of interest, best execution (for trading platforms), and Consumer Duty compliance.
Step 5: Application preparation (Q3 2026). Prepare the FSMA authorisation application including regulatory business plan, financial projections, AML framework, conduct of business policies, governance documentation, and individual applications for senior managers.
Step 6: Gateway submission (September 2026 onwards). Submit the application as soon as the gateway opens. Early applicants are likely to benefit from shorter processing times as the FCA's assessment pipeline fills.
What Firms Should Do Now
The September 2026 gateway opening is approximately six months away. Firms that treat this as a future problem rather than an immediate priority risk missing the deadline. Begin with a gap analysis, engage specialist regulatory advisors, and establish an internal project team with clear milestones and accountability.
Regulatory Counsel manages the full MLR-to-FSMA transition for cryptoasset firms, from initial gap analysis through to authorisation. Contact us for a free initial consultation.
Frequently Asked Questions
The FCA gateway for cryptoasset FSMA authorisation applications is expected to open in September 2026.
No. From October 2027, MLR registration alone will not be sufficient to conduct cryptoasset activities in the UK. Firms must hold FSMA authorisation or be operating under transitional provisions.
Capital requirements will depend on the specific regulated activities. The FCA is expected to set requirements drawing on principles from MIFIDPRU and the PSRs 2017 — significantly higher than MLR requirements.
The conduct of business and governance requirements are typically the biggest gaps. MLR registration focuses on AML; FSMA authorisation requires comprehensive conduct rules, Consumer Duty compliance, SMCR implementation and prudential standards.