Crypto firms must warn customers they should not expect protection if their investment goes wrong and introduce a “cooling off” period for first-time investors, under new rules imposed by the UK financial watchdog.