So, finally, from 30 September 2026 firms can apply for authorisation, or where already FCA-authorised, seek a variation of permission through the FCA’s cryptoasset gateway. Critically, firms wishing to benefit from the transitional arrangements must submit their applications during the FCA’s application window, which runs until 28 February 2027.
For many firms, the temptation might be to delay. Applications are complex, governance frameworks take time to build, and operational priorities often crowd out regulatory projects. However, firms that fail to submit a Part 4A permission application within the gateway window may face consequences that extend far beyond a simple administrative delay.
No Automatic Conversion of Existing Registrations
One of the most significant misconceptions in the market is that existing registration under the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 (MLRs) somehow provides a route into the new regime. It does not.
The FCA has been clear that there will be no automatic ‘grandfathering’ from MLR registration to Financial Services and Markets Act (FSMA) authorisation. Firms currently registered as cryptoasset exchange providers or custodians under the MLR framework must make a fresh application for Part 4A permission if they intend to continue carrying out regulated cryptoasset activities.
Consequently, firms that fail to submit an application during the gateway period cannot assume that their existing registration provides any regulatory continuity.
Loss of Transitional Protection
Perhaps the most immediate consequence of missing the application window is the loss of access to the transitional or “saving” provisions built into the new regime.
Firms that submit an application within the gateway period can generally continue operating whilst the FCA assesses their application, even if the authorisation decision extends beyond the implementation date of the new regime. This is particularly important given the complexity of cryptoasset authorisations and the likely volume of applications the FCA will receive.
However, firms that fail to apply before the application window closes on 28 February 2027 may not benefit from these protections. Instead, they could find themselves required to cease regulated activities once the new regime becomes fully operational on 25 October 2027.
For many businesses, this creates a stark commercial reality: submit on time or face a potential interruption to trading.
Business Disruption and Loss of Revenue
The inability to continue regulated activities would have immediate operational consequences.
Cryptoasset exchanges could be forced to suspend onboarding UK customers. Custodians may be unable to provide safeguarding services. Trading venues could lose their ability to facilitate transactions involving UK users. Firms involved in cryptoasset dealing, arranging or staking activities may similarly find themselves unable to continue operating lawfully.
For businesses with investor backing, institutional clients or banking relationships, even a temporary interruption can be highly damaging. Revenue streams may cease overnight, contractual obligations may become difficult to fulfil and counterparties may exercise termination rights.
In an increasingly competitive market, customers who are forced to move assets or activities elsewhere may never return.
Increased Authorisation Risk
A missed deadline may also create indirect regulatory risks.
The FCA consistently emphasises that firms should prepare early and engage proactively with the authorisation process. Against these messages, firms submitting late applications or entering the process after the gateway closes may face greater scrutiny regarding their readiness, governance arrangements and strategic planning.
From a supervisory perspective, a failure to engage with a well-publicised regulatory transition may be viewed as evidence of weaknesses in Senior Management oversight or regulatory awareness.
Boards and Senior Managers should therefore recognise that missing the gateway window may become a broader governance issue rather than merely a compliance oversight.
Investor and Counterparty Concerns
The regulatory ‘badge’ of a cryptoasset firm increasingly influences its ability to attract investment and maintain commercial relationships.
Institutional investors, banking providers, payment service providers and corporate clients are placing greater emphasis on regulatory certainty. An organisation that has failed to secure a position within the FCA’s transition framework may face difficult questions regarding its future operating model.
Potential investors conducting due diligence are unlikely to view favourably a business that has jeopardised its ability to continue serving UK customers because of a missed regulatory deadline.
Similarly, banks that already exercise caution when servicing cryptoasset firms may reconsider relationships where there is uncertainty regarding future permissions.
The reputational impact can be substantial and may persist long after a firm eventually obtains authorisation.
Competitive Disadvantage
Many larger participants are already investing heavily in governance structures, risk management frameworks, financial crime controls, prudential resources and operational resilience capabilities. By doing so, they position themselves to achieve authorisation promptly and market themselves as fully regulated UK cryptoasset providers.
Firms that miss the gateway window risk falling significantly behind competitors. While authorised firms build institutional credibility and expand market share, delayed applicants may spend months attempting to regain regulatory footing and customer base.
The resulting competitive gap may prove difficult to close.
Potential Enforcement Exposure
Once the new regime takes effect, carrying on regulated cryptoasset activities without the appropriate permission could constitute a criminal offence. Firms that continue operating without authorisation, whether intentionally or through misunderstanding, may expose themselves to supervisory intervention, enforcement action and potentially criminal consequences depending on the circumstances and activity involved.
What Firms Should Be Doing Now
The opening of the gateway is not the beginning of preparation; it is the culmination of preparation.
Firms should already have been conducting regulatory gap analyses, assessing which activities fall within the new perimeter, evaluating governance arrangements, reviewing financial resources and preparing comprehensive application documentation. Businesses operating under MLR registration should not underestimate the difference between registration and full Part 4A authorisation.
Where uncertainty exists, firms should engage advisers early and make use of the FCA Pre-Application Support Service (PASS). Waiting until late 2026 or early 2027 may significantly increase execution risk as demand for regulatory expertise (and FCA gateway resource) intensifies.
Conclusion
The FCA’s cryptoasset regime represents the most significant regulatory change the UK crypto sector has experienced. While much attention has focused on the requirements for obtaining authorisation, the consequences of failing to apply within the gateway window may be equally important.
Missing the deadline could mean losing transitional protection, disrupting business operations, damaging investor confidence, weakening competitive positioning and potentially preventing a firm from carrying on regulated cryptoasset activities in the UK after October 2027.
Firms that fail to act within the gateway window may discover that the real cost of delay is measured not in regulatory fees, but in lost business opportunities and an uncertain future in one of the world’s most important financial markets.
How Complyport Can Help
Complyport can support firms preparing for the FCA’s new cryptoasset regime, including:
- Regulatory perimeter and gap analysis;
- FCA authorisation and variation of permission applications;
- Governance and Senior Management arrangements;
- Policies, procedures and compliance frameworks;
- Financial crime and operational resilience requirements; and
- Application readiness reviews and ongoing regulatory support.
With the application window closing on 28 February 2027, firms should act early to ensure they are prepared to submit a complete, high-quality application.
Contact Complyport to book a meeting with one of our Subject Matter Experts and discuss how we can support your firm.
Ask ViCA, your Virtual Compliance Assistant. Claim your complimentary 20 queries today! Register here: https://vica.chat
