Briefing
HM Treasury published the draft Financial Services and Markets Act 2000 (Regulated Activities and Miscellaneous Provisions) (Cryptoassets) Order 2025, a watershed action that fully integrates core crypto activities into the UK’s robust financial services perimeter. This move immediately mandates that Cryptoasset Service Providers (CASPs) must seek full Financial Conduct Authority (FCA) authorization, shifting the operational paradigm from a loosely supervised sector to one subject to the full panoply of UK securities law, including capital, conduct, and governance requirements. The legislation establishes six new regulated activities , a clear signal that the UK is pursuing a depth-over-breadth regulatory strategy that is more intensive than the European Union’s MiCA framework.
Context
Before the Draft Order, the UK’s regulatory approach to cryptoassets was piecemeal, largely limited to Anti-Money Laundering (AML) registration and financial promotions rules, creating significant uncertainty for institutional adoption and market participants. The prevailing compliance challenge centered on the lack of a clear, unified legal classification for most tokens and activities, forcing firms to navigate a grey area where core functions like operating a trading venue or providing custody were outside the formal regulatory perimeter. This lack of clear statutory authority also prevented the application of core investor protection and market integrity standards from the existing Financial Services and Markets Act (FSMA).
Analysis
The Draft Order fundamentally alters the operational architecture for all in-scope firms, requiring a complete overhaul of their compliance frameworks to align with traditional finance standards. The new requirement for FCA authorization triggers the application of the Senior Managers and Certification Regime (SMCR), mandating individual accountability for regulatory breaches, and necessitates the creation of a full prudential sourcebook (CRYPTOPRU) to manage capital and liquidity risk. Firms must now implement sophisticated market surveillance tooling capable of detecting wash-trading and insider dealing to comply with the extension of the Market Abuse Regulation (UK-MAR) to qualifying cryptoassets.
This shift elevates the cost and complexity of compliance, simultaneously increasing institutional credibility and access to deeper capital pools. The legislation’s focus on bringing core activities like dealing and custody into the perimeter means that risk mitigation controls must be integrated directly into a firm’s trading and asset management systems.
Parameters
- New Regulated Activities → Six new activities, including operating a trading platform and staking, now require FCA authorization.
- Regulatory Framework → The Financial Services and Markets Act 2000 (FSMA) is the primary statute the new rules are being woven into.
- Consultation Deadline → Technical comments on the draft Statutory Instrument were due by May 23, 2025, indicating a swift legislative timeline.
Outlook
The immediate next phase involves the FCA and Bank of England drafting the detailed secondary rules (Handbooks) on capital, custody, and governance, which will be subject to further consultation later this year. The second-order effect will be a flight to quality, where smaller, non-compliant firms will face wind-down or acquisition, while well-capitalized firms gain a significant competitive advantage by operating within a robust, institutionally-ready legal structure. This UK approach sets a strong precedent for other major financial centers seeking to regulate digital assets with the rigor of existing securities law, positioning the UK as a jurisdiction prioritizing market integrity over regulatory speed.
Verdict
The UK’s full integration of cryptoasset activities into the FSMA perimeter is a decisive strategic move, establishing a high-bar regulatory standard that validates the sector’s institutional maturity while imposing immediate, material compliance costs.
