FCA Finalises Overall Risk Assessment Guidance (FG26/9, FG26/10) for UK Cryptoasset Firms
The FCA has finalised two non-Handbook guidance documents on the overall risk assessment under its new prudential regime for cryptoasset firms: FG26/9, on COREPRU 7, and FG26/10, on CRYPTOPRU 7. The FCA published them alongside feedback statements responding to consultations GC26/4 and GC26/5. The guidance explains how firms should run the assessment, which the FCA treats as the main tool for setting the own funds and liquid assets needed to meet the overall financial adequacy rule. Firms should identify risks, run stress tests, plan recovery actions and prepare for wind-down. FG26/9 presents risk appetite, early warning indicators and triggers as best practice. The assessment must be reviewed at least every 12 months and after any material change, and firms must keep records for at least three years. After supervisory review, the FCA may require additional own funds or liquid assets. Both documents take effect on 25 October 2027.