Crypto Prudential Readiness: What the FCA Is Likely to Test

What It Is

Prudential readiness is the work required to show that a cryptoasset firm has adequate financial resources, an intelligible capital and liquidity framework, and a credible plan for stress and wind-down scenarios. Under the FCA's current crypto consultation package, this is likely to become one of the most demanding parts of the authorisation build for many firms.

That is because the prudential question is not just "how much capital do we need?" It is also "how does this business actually absorb shocks, keep operating under stress, and exit the market without disorder if it has to?" For firms with volatile revenues, cross-border dependencies, customer asset responsibilities, or infrastructure concentration risk, those questions become more acute.

In practice, prudential readiness sits at the intersection of finance, governance, operating model, and risk management. It cannot be treated as a spreadsheet exercise owned only by finance.

Why the FCA Cares

The FCA has spent several years tightening its broader gateway stance on financial resilience across sectors. That approach is likely to carry into the crypto regime. Firms whose business models are operationally complex, group-dependent, or retail-facing will need to show that the UK entity can maintain appropriate resources on an ongoing basis and that senior management understands the real cost of operating, remediating, and winding down the model.

Crypto firms often introduce prudential complexity through features that are easy to underestimate. Revenue may be linked to trading volumes or market conditions. Critical infrastructure may be outsourced. Treasury and balance-sheet exposures may sit across fiat and crypto rails. Control functions may be centralised in a non-UK group entity. Wind-down may require more than simply returning cash and closing a website if custody, staking, or market-facing obligations remain live.

This is why the prudential file is likely to be treated as a core credibility test, not a supporting annex.

Which Firms Need the Most Work

The heaviest prudential build is usually required for firms that combine several operational burdens at once: trading platform or exchange models, customer-asset responsibilities, yield or staking features, or material group outsourcing. These firms often need a more developed view of liquidity needs, incident costs, customer support costs, third-party unwind costs, and the operational sequencing of a wind-down.

Early-stage firms can also struggle because their forecasts are still aspirational rather than evidenced. A prudent FCA-facing financial model needs to be more than a growth case. It needs downside logic, cost realism, and a clear link to the intended permissions and infrastructure footprint.

Overseas groups with a planned UK entity face a separate challenge. They need to show when and how funding reaches the UK entity, whether that support is discretionary or binding, and what happens if group priorities change. A prudential submission that casually assumes continuing group support is usually weaker than one that explains the support structure in detail and builds some resilience into the UK entity itself.

What Firms Get Wrong

The most common error is treating prudential readiness as a finance-only workstream. When that happens, the numbers are detached from the real operating model. Staff assumptions may not reflect the governance design. Incident-cost assumptions may ignore custody or financial crime escalation realities. Outsourcing costs may be understated. Customer support and complaints volumes may be absent from downside scenarios.

The second common error is overconfidence in base-case growth. Many firms produce forecasts that show a rapid increase in customers, trading activity, or fee income without explaining how that growth is achieved, governed, and supported. The FCA is likely to be more interested in whether the downside case is credible than whether the upside case is attractive.

The third error is using a generic wind-down template. A serious wind-down analysis for a crypto firm has to consider customer communication, complaint risk, outstanding alerts, third-party termination, custody responsibilities, retained records, governance during closure, and the real cost of returning assets or migrating customers where relevant. A short template section saying that the firm would close in an orderly way is not enough.

What Evidence the FCA Is Likely to Expect

Firms should expect prudential readiness to be tested through evidence, assumptions, and management understanding. A credible file is likely to include financial projections, scenario analysis, capital and liquidity logic, treasury assumptions, a wind-down plan, and board-level evidence showing that those materials have been reviewed and challenged.

The key question is whether the prudential documents are anchored in the actual operating model. If the permissions memo describes one model and the forecasts assume another, that inconsistency will weaken the file. The same is true if the business plan assumes a certain level of UK staffing and governance while the cost base does not fund it.

The FCA is also likely to look for evidence that senior management can explain the methodology. In practice, that means being able to answer questions such as:

1. Which revenue lines are most sensitive to market conditions?
2. What happens to liquidity in a stress event?
3. Which costs would persist during wind-down?
4. What group assumptions does the model depend on?
5. Which control failings could create a sudden capital or liquidity burden?

If those questions cannot be answered clearly, the prudential story is not yet ready.

Good Implementation Looks Like

Good prudential implementation starts with the permissions and operating model, then builds a finance view that reflects those facts honestly. The firm identifies the actual drivers of revenue and cost, models stress cases that are relevant to the business rather than generic macro shocks, and documents how capital and liquidity are monitored in management information.

The wind-down plan should be operationally believable. It should identify triggers, governance, customer communications, retained resources, critical outsourcing decisions, and the sequence in which activities would stop or be transferred. It should also link back to other control workstreams, including customer assets, complaints, financial crime, and record retention.

Most importantly, prudential readiness should have visible ownership. The board, finance leadership, and relevant senior managers should be able to explain the framework and defend the assumptions. The prudential file is stronger when it reads like a management document that could genuinely be used in a stress event, not a set of numbers prepared only for authorisation.

Current FCA Materials to Track

The most relevant official paper in this area is CP25/15: A prudential regime for cryptoasset firms, alongside the wider crypto regime consultation package and the FCA's new regime overview. Firms should also watch the FCA's final policy statements carefully because prudential design is one of the areas where implementation burden can move materially between consultation and final rules.

How MEMA Supports This Work

Our crypto readiness work helps firms connect the permissions answer to the prudential build. That includes stress-testing the business model, identifying where group assumptions create weakness, shaping the wind-down file, and helping management produce a prudential pack that is coherent, evidence-led, and defensible under FCA questioning.