UK Crypto Rules From 30 September 2026: What Changes for People Who Swap Crypto

On 30 September 2026, the Financial Conduct Authority (FCA) opened its authorisation gateway: the window in which crypto firms apply for a licence under the UK's new cryptoasset regime. The window closes on 28 February 2027, and the regime itself applies from 25 October 2027. Until then, the FCA's crypto oversight stays limited to anti-money-laundering registration and financial promotions. The new rules are aimed at firms. If you hold crypto in your own wallet, you don't apply for anything. But the platforms you use, your tax position and the adverts you see are all changing.

Last updated: 12 October 2026

Key Takeaways

• The licensing window is open. The FCA gateway opened on 30 September 2026 and closes on 28 February 2027 (FCA).
• The full regime starts on 25 October 2027. That's when trading platforms, dealers, brokers, custodians and staking providers serving UK customers need FCA authorisation (FCA, 30 June 2026).
• The law behind it is already made: the Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026 (SI 2026/102), made on 4 February 2026, with 25 October 2027 set as the "full commencement day" (legislation.gov.uk).
• Self-custody isn't licensed. Authorisation is for activities carried on "by way of business", not for individuals managing their own coins.
• Some rules already apply: the Travel Rule since 1 September 2023 and the crypto financial promotion rules since 8 October 2023.
• Tax hasn't changed, but visibility has. A crypto-to-crypto swap is a disposal for Capital Gains Tax, and since January 2026 in-scope providers collect user data for HMRC under the Cryptoasset Reporting Framework.

The UK Crypto Regime in Plain English

The UK is moving crypto from a light-touch registration model into the same framework that covers banks, brokers and investment firms: the Financial Services and Markets Act 2000 (FSMA).

Until now, most crypto firms only needed to register with the FCA for anti-money-laundering purposes under the Money Laundering Regulations (MLRs). Registration checks a firm's financial-crime controls. It doesn't set conduct, capital or custody standards. The new regime does. Firms will need full FSMA authorisation, and the FCA says existing MLR registrations will not convert automatically (FCA gateway page).

The FCA is also clear about the limits. In its 30 June 2026 announcement it said: "we can't regulate away risk." Crypto stays high-risk under the new rules.

UK Crypto Regulation Timeline: Key Dates

For the wider context of the month the gateway opened, see our crypto privacy and regulation recap for September 2026.

What Activities Need FCA Authorisation?

The 2026 Regulations add new regulated activities to the FSMA framework. Per the FCA's 30 June announcement and its perimeter guidance, firms need authorisation to carry on these activities for UK customers from 25 October 2027:

• Operating a cryptoasset trading platform
• Dealing in cryptoassets, as principal or as agent
• Arranging deals in cryptoassets
• Safeguarding (custody) of cryptoassets
• Staking arranged on a customer's behalf
• Issuing qualifying stablecoins in the UK

PS26/18 puts the scope in one line: "Anyone wishing to carry on these activities by way of business in the UK will need to apply for authorisation", unless an exemption or the saving and transitional provisions apply (FCA, 16 September 2026). The guidance names overseas firms serving UK consumers among its audiences. HM Treasury's October 2023 response states the government's position that "firms dealing directly with UK retail consumers should be required to be authorised irrespective of where they are located" (HM Treasury).

Two areas are still moving. The FCA says it will consult on decentralised finance (DeFi) guidance later in 2026 (FCA, 30 June 2026). HM Treasury is also amending the 2026 Regulations, mainly around stablecoins: it published a draft in April 2026, and law-firm summaries report a final amending instrument laid before Parliament in September 2026. Details may still change before 25 October 2027.

What Changes for You as a UK Crypto User

If you keep crypto in your own wallet

Nothing to apply for. The regime licenses firms that carry on activities "by way of business". You don't need a licence to hold, send or receive your own coins. What changes is the menu of services around you. Some firms will get authorised, some will restrict UK access, and firms that don't apply at all must wind down their UK crypto business before the regime starts, per the FCA.

If you use a platform or app

Between now and October 2027, expect notices. Your provider may tell you it has applied for authorisation, or that it's leaving the UK market. A firm that applied in the window can keep operating while the FCA decides, but it must tell the FCA it's relying on that saving provision. A firm that applies late and isn't authorised by 25 October 2027 can only service existing contracts; it can't take on new UK customers (FCA).

Practical steps:

• Check the FCA Register. Search the firm's name on the Financial Services Register. Today you'll mostly see MLR registrations. From 25 October 2027, look for full authorisation.
• Read emails about terms changes. If a provider leaves the UK, it should give you a deadline to withdraw. Act before it, not after.
• Keep your own records. Platform exits make transaction history harder to retrieve later, and you need it for tax.

Financial promotions: why crypto adverts look different

The rules from 8 October 2023 already apply to anyone promoting crypto to people in the UK. Promotions need clear risk warnings and must be "clear, fair and not misleading". "Refer a friend" bonuses are banned, first-time investors with a firm get a cooling-off period of at least 24 hours, and firms must check that you have the knowledge and experience to invest (FCA, 8 June 2023; PS23/6). Some firms had until 8 January 2024 to build the cooling-off and appropriateness steps.

A UK-facing crypto offer with sign-up bonuses or no risk warning is a red flag.

The Travel Rule: why transfers ask for more details

Since 1 September 2023, UK crypto businesses have had to "collect, verify and share information about cryptoasset transfers" under Part 7A of the Money Laundering Regulations (FCA). If a UK platform asks who owns the wallet you're sending to, this is usually why. If a transfer arrives with missing information, the FCA expects the receiving firm to decide, on a risk basis, whether to release the funds, so it can be delayed.

Tax: swaps are disposals, and HMRC sees more

• A crypto-to-crypto swap is a disposal. HMRC's Cryptoassets Manual lists "exchanging tokens for a different type of token" as a disposal for Capital Gains Tax (HMRC CRYPTO22100). Swapping BTC for ETH can create a gain even if no pounds touch your bank account.
• The tax-free allowance is £3,000 of total gains for individuals (GOV.UK).
• Gains for 2025–26 above the allowance go on your Self Assessment return, due by 31 January 2027 (HMRC, 27 August 2026).
• CARF reporting started in January 2026. In-scope cryptoasset service providers collect user and transaction details, including for UK-resident users. The first annual report, for 2026, is due to HMRC by 31 May 2027 (HMRC guidance). CARF doesn't create a new tax. It gives HMRC more data to check against returns.

Where Do Non-Custodial Instant Swaps Fit?

A non-custodial instant swap service converts one coin to another and pays the result to a wallet you control. It doesn't hold a balance for you, which makes it a different model from a custodial exchange account. The points above still apply:

• The tax treatment doesn't change. A swap through any service is still a disposal for CGT.
• AML checks can still apply. Swap services run risk-based anti-money-laundering screening and can ask for information on specific transactions.
• Whether a service needs UK authorisation depends on what it does and who it serves. That's for the firm and the FCA to determine under the perimeter guidance, not for users to guess. If UK regulatory status matters to you, check the FCA Register.
• Check the domain every time. Lookalike sites copy real swap services.

About the publisher: Godex.io is a non-custodial instant cryptocurrency exchange operating since 2017. Its only official domain is godex.io; godex.pro is a known scam site. This article is general information. It is not an offer or promotion of Godex's services, or of any crypto service, to UK users.

Frequently Asked Questions

What happened on 30 September 2026 in UK crypto regulation?

The FCA opened its authorisation gateway. Crypto firms can now apply for FSMA authorisation, or apply to vary existing permissions, for the new regulated crypto activities. The application period runs to 28 February 2027.

When does the new UK crypto regime start?

On 25 October 2027. From that date, covered crypto activities for UK customers, such as running a trading platform, dealing, arranging deals, custody and staking, need FCA authorisation.

Do I need a licence to hold or swap crypto in the UK?

No. Authorisation applies to firms carrying on regulated activities by way of business. Individuals holding, sending or swapping their own crypto don't apply for anything. You still have tax obligations.

Is my FCA-registered exchange automatically authorised under the new regime?

No. The FCA says MLR registrations won't convert automatically. Registered firms must apply for FSMA authorisation, and firms that applied in the window can keep operating while the FCA decides.

Is swapping one crypto for another taxable in the UK?

Generally yes. HMRC treats exchanging one token for another as a disposal for Capital Gains Tax. Gains above the £3,000 annual allowance are taxable, and you need records of the sterling value at the time of each swap.

What is CARF, and does it affect UK users?

The Cryptoasset Reporting Framework is an OECD standard the UK implemented from January 2026, with the first reporting period starting on 1 January 2026. In-scope crypto service providers collect user and transaction data and report it to HMRC, with the first report for 2026 due by 31 May 2027. It covers UK-resident users too.

What protections will I get under the new regime?

Authorised firms will have to meet FCA conduct, capital, custody and market-abuse standards, and the FCA applies its Consumer Duty where risks are comparable. The FCA still calls crypto high-risk. Don't assume the protections you get with a bank account apply. Check what applies to a specific firm before you use it.

What if my crypto platform leaves the UK?

Follow its instructions and withdraw before any deadline it gives. Firms that don't apply for authorisation must run off their UK crypto business before 25 October 2027. Keep your transaction history for tax.

This article is general information only. It is not financial, investment, legal or tax advice, and it is not a financial promotion or an invitation to use any crypto service. Crypto is high-risk and you could lose all the money you invest. Rules change: check the primary sources linked above and consult a qualified professional about your situation.

Disclaimer: Please keep in mind that the content of this article is not financial or investing advice. The information provided is the author’s opinion only and should not be considered as direct recommendations for trading or investment. Any article reader or website visitor should consider multiple viewpoints and become familiar with all local regulations before cryptocurrency investment. We do not make any warranties about reliability and accuracy of this information.