The regulatory countdown for compliant digital asset services is now on for UK financial firms. The FCA published its final crypto-asset rules on 30 June 2026. Its authorisation gateway opened on 30th September and closes on 28th February 2027, with the new regime due to take effect on 25 October 2027.
For institutions, this timetable puts a clock on operational and compliance readiness. Market access, at least, has largely been built, since Crypto-as-a-Service (CaaS) providers, venue connectivity and custody are all commercially available. However, working across all of those parts to show how an order was executed, where an asset sits and whether the books agree is a different task. Overall, readiness is low. A July 2026 survey by crypto platform Zumo showed that only one in ten providers serving UK clients considered themselves fully prepared for the new rules.
Naming the gap
While questions of trading venues and custody are relatively easy to solve, what sits between them can be more complex. A bank that trades through several venues and holds assets with a custodial provider generates records in different formats and at different times: orders, fills, wallet movements, balances. Turning those into a single reliable picture requires orchestration, but many institutions try to tackle it with manual workarounds and patched-on reports.
Outsourcing does not transfer the responsibility. The FCA’s operational resilience guidance for cryptoasset firms is clear that operators remain fully responsible for their own resilience when they rely on third parties.
Why this matters now
The FCA doesn’t simply grant authorisation automatically – applicants must show how they will meet the rules in practice. Three areas show where the operational burden falls.
Best execution
Firms must take sufficient steps to obtain the best possible result for clients. The FCA assesses this through a firm’s arrangements rather than trade by trade. In practical terms, this means firms must have a written execution policy, operate price checks against several reliable sources, and conduct regular post-trade analysis to show the policy works. Where a fair comparison is possible, firms must be able to show outcomes at least as good as those available on UK-authorised venues. Assembling that evidence from separate venue reports is slow and hard to do consistently.
Records and reporting
Firms must keep detailed transaction records, including a standard token identifier, transaction hashes, wallet addresses and network fees, and give clients reports by the end of the same working day. Reconciliation is not the rule itself, but it is how a firm demonstrates its records are right. Unreconciled positions across venues and custodians make accurate reporting difficult, and manual reconciliation grows costlier with each added venue.
Operational resilience
Firms must identify their important business services, set a maximum tolerable disruption for each, map the people, technology and third parties behind them, and test against severe but plausible scenarios. In a market that trades 24/7, that map crosses every venue, custodian and provider in the chain.
What closing the gap looks like
Closing the gap does not mean replacing what institutions have already chosen. Some platforms are built specifically to provide orchestration, sitting above venues and custody rather than replacing an existing setup.
A digital asset orchestration layer routes orders across connected venues and captures the execution data as trades happen, rather than reassembling it afterwards. It keeps a single book of record and reconciles trades, positions, and balances continuously, so same-day client reporting draws on figures that already agree. And it maps which venues, custodians and providers each service depends on, giving resilience planning a live view of the chain.
Such solutions are increasingly in demand from banks and brokers venturing into digital assets, with Wyden as one example of an institutional digital asset trading platform that can orchestrate the full lifecycle end-to-end.
Where this leaves institutions
Access to digital asset markets is becoming easier to buy; operational maturity is not. Venues, liquidity and custody can be contracted. The discipline that connects them, and produces an auditable record of what happened to every order and every asset, has to be built.
With the regime due in October 2027 and applications already open, the institutions that scale their digital asset activity will be those that can best demonstrate how an order was executed, where an asset sits and whether their books agree. Those that cannot are likely to stall at the pilot stage, however good their market access.