The FCA authorisation era begins for exchanges
February's UK legislation pulled cryptoasset trading platforms and custodians inside the FCA perimeter. What full authorisation means in practice, and why venues everywhere are reading it.
The registration era is over in the United Kingdom. Under legislation made in February 2026, cryptoasset trading platforms and custodians were brought inside the Financial Conduct Authority’s regulatory perimeter — meaning full authorisation, not the lighter anti-money-laundering registration that has governed UK crypto firms until now.
The difference is the difference between a licence plate and an MOT. Registration checked who you were. Authorisation, per the regulator’s published approach, checks how you run: governance, systems and controls, how client assets are held and segregated, and what happens to customers when a firm fails. Those are the questions this publication asks of every venue we review, and from this year a UK supervisor asks them with statutory force.
What changes for a trading venue
For an exchange serving UK customers, the practical shift lands in three places:
- The gate. Operating a cryptoasset trading platform or custodying customer assets for UK users becomes a regulated activity requiring FCA authorisation. Firms outside the gate face the usual perimeter consequences.
- The plumbing. Authorised firms answer for order handling, conflicts, and operational resilience under FCA rules — the same genus of obligations traditional venues carry, adapted per the regulator’s consultations over 2025.
- The failure mode. Custody rules aim to make customer assets identifiable and separable in an insolvency — precisely the point where past exchange collapses hurt customers most.
The FCA has been signalling this sequence since it published its crypto roadmap; the February legislation is the sequence arriving. Timelines for individual firms will depend on application windows and transitional arrangements, per the regulator, and we would expect the authorised population to build gradually rather than overnight.
Why it matters outside the UK
The UK now joins the EU — where MiCA has been applying to service providers since late 2024 — in treating exchanges as regulated financial infrastructure rather than registered tech companies. Two of the world’s larger capital markets asking authorisation-grade questions changes the default posture for global venues: build one compliance stack to the stricter standard, or run a jurisdiction patchwork and accept the cost. Venue product menus already differ sharply by country; expect more of that before less.
We will track which venues seek UK authorisation and which quietly geofence instead — the applications list will say more about business models than any press release. As always, a regulator at the door does not make an exchange safe or a token sound; the risk stays high and the homework stays yours.