Five months sounds reasonable. The FCA’s authorisation gateway for cryptoasset permissions opens on 30 September 2026 and closes on 28 February 2027. Plenty of time? Not even close. When you work backwards from the deadline and account for what actually needs to happen, most firms will find they are already behind.
The Timeline Trap
There is a structural problem baked into the schedule. The FCA’s final rules are expected at some point during 2026, but the gateway opens on 30 September. Nobody knows whether that gap will be six months or six weeks. If the rules land in July, firms have roughly three months to digest them, adapt their frameworks and submit. If they arrive in September, you are building the plane while flying it.
The FCA has been explicit: it expects firms to prepare using the draft rules and consultation papers already published. The final rules will refine the detail, not rewrite the architecture. Firms that treat publication as their starting gun will almost certainly run out of time.
Where the Time Actually Goes
An FCA authorisation application typically takes three to six months of focused preparation:
| Workstream | Duration | Why It Takes That Long |
| Regulatory perimeter analysis | 2–4 weeks | Must come first — determines the scope of everything else |
| Governance & senior management | 4–8 weeks | May require recruiting experienced compliance professionals |
| AML/KYC policies & transaction monitoring | 4–6 weeks | Must be bespoke to your operating model, not generic templates |
| Compliance manual & procedures | 4–8 weeks | Covers conduct, conflicts, complaints, operational resilience |
| Business plan & capital modelling | 2–4 weeks | Financial projections, adequacy assessment, wind-down planning |
| Application drafting & internal sign-off | 3–6 weeks | Consolidating all workstreams into the formal application pack |
These overlap but cannot all run simultaneously — governance informs the compliance manual, which feeds into the application. A realistic timeline from standing start to submitted application is four to six months. Starting in September when the gateway opens means missing the February deadline.
What Happens If You Miss the Window?
Firms that apply during the gateway period can continue operating under transitional arrangements after 25 October 2027 while their application is considered. Firms that miss the window get no transitional relief — they must cease UK cryptoasset activities from that date, with no guaranteed timeline for a late application to be determined.
Your application does not need to be perfect. It needs to be submitted. The FCA may come back with questions or conditions, but you stay operational while that plays out. Missing the window entirely removes that safety net.
What to Do Right Now
Start this week, not this quarter. Commission a regulatory perimeter analysis to determine which permissions you need. This two-to-four-week exercise is the foundation for everything that follows.
Engage the FCA’s pre-application service. Early feedback from the regulator is invaluable and signals you are taking the process seriously.
Get governance in order. If you need experienced compliance hires, start now — recruitment in this space takes eight to twelve weeks.
Appoint specialist support. The cost of expert help is a fraction of the cost of a missed deadline, a weak application or enforcement action.
How LHI Consulting Can Help
We have 25+ years of experience guiding firms through FCA authorisation. We offer a structured programme from scoping through to submitted application: perimeter analysis, governance design, compliance build-out, AML/KYC, financial promotions review and full application drafting.
| Don’t wait for the gateway to open. Contact us for a free 30-minute consultation to assess where you stand and build a realistic timeline.
Email: info@lhiconsult.com | Phone: +44 203 319 5147 | Web: lhiconsult.com |
This article is for general information purposes only and does not constitute legal or regulatory advice. LHI Consulting is a trading style of LHI Holdings Ltd, registered in England and Wales, No. 11496647.
