Crypto License in the UK: FCA Registration & the New FSMA Regime

Why Operators Consider the UK for Crypto Licensing

One of the world’s deepest financial centres, the United Kingdom runs a bespoke cryptoasset regime outside the EU’s MiCA single market. An FCA permission carries premium global credibility, the legal system is English common law with a transparent regulator that publishes detailed guidance, and the regime is moving from a narrow anti-money-laundering registration to a full conduct and prudential framework from 25 October 2027. The UK suits operators with UK customer bases or institutional counterparties who value an FCA credential over a passport.

An FCA Permission Carries Premium Credibility

Institutional counterparties treat an FCA permission as a recognised regulatory credential in their due diligence. Gatekeeping at the FCA is demonstrably selective: since it became the cryptoasset anti-money-laundering supervisor on 10 January 2020, it had received 417 registration applications by 1 September 2026; of the 391 it had determined, 68 firms (about 17%) secured registration, while 263 were withdrawn, 46 rejected and 14 refused.^[1]

For operators selling to banks, asset managers, and listed institutions, that scarcity is the point: an FCA permission shortens institutional due diligence in a way a lighter registration cannot.

A Statutory FSMA Regime Replaces the Narrow AML Registration

The Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026 were made by HM Treasury on 4 February 2026 as SI 2026/102, after both Houses of Parliament approved the draft published on 15 December 2025, and the new regime commences on 25 October 2027.^[2][22] The Regulations amend the Regulated Activities Order to bring stablecoin issuance, custody, trading platforms, dealing, arranging, and staking inside the FCA authorisation perimeter as fully regulated activities, replacing the narrow Money Laundering Regulations registration with a conduct and prudential framework.

For operators planning a multi-year build, the move to a full Part 4A permission provides a depth of legal certainty the registration regime never offered.

A Real GBP Market and Established Promotions Regime

FCA consumer research found that 8% of UK adults held cryptoassets in 2025, so the UK gives stablecoin issuers and exchanges a genuine domestic GBP market rather than a brass-plate base.^[19] The cryptoasset financial promotions regime has been in force since 8 October 2023, so the rules for marketing to UK consumers are settled and well-documented in the FCA’s PS23/6 and FG23/3.^[3]

Operators that build to the UK promotions standard inherit a mature compliance baseline. In practice, this means a UK-authorised firm arrives into an ecosystem with a defined marketing perimeter, an FCA that engages through pre-application support, and a settled tax treatment: operational context that newer jurisdictions cannot yet match.

Settled Tax Treatment and Broad Treaty Network

Tax treatment of cryptoassets in the UK is settled: HMRC treats exchange tokens as property within Capital Gains Tax for individuals and Corporation Tax for companies, and the buying and selling of exchange tokens for fiat is exempt from VAT following the Court of Justice ruling in Skatteverket v Hedqvist.^[4] The UK has one of the world’s widest double-taxation treaty networks, covering more than 130 jurisdictions, which reduces withholding leakage on cross-border interest, royalty, and dividend flows.

For a UK-domiciled crypto operator, the combination of a clear domestic charge and deep treaty coverage is a structural advantage over jurisdictions with narrower treaty networks.

Regulatory Framework

Crypto businesses in the United Kingdom answer to one regulator running two regimes in transition. The FCA supervises anti-money-laundering obligations under the Money Laundering Regulations 2017 today, and from 25 October 2027 it supervises a full conduct and prudential regime for regulated cryptoasset activities under the Financial Services and Markets Act 2000. HMRC administers tax, and the Bank of England, jointly with the FCA, will regulate any stablecoin that HM Treasury recognises as systemic.

One Regulator, Two Regimes (and the Tax Authority)

The FCA is the Financial Conduct Authority, the UK’s conduct regulator for financial services and the anti-money-laundering supervisor for cryptoasset businesses since 10 January 2020.^[5] Under the MLRs 2017, cryptoasset exchange providers and custodian wallet providers must be registered before carrying on business; the FCA assesses the firm’s AML and counter-terrorist-financing systems and controls, beneficial ownership, and the fitness of key individuals. Its enforcement powers include refusal, cancellation, public censure, and referral. Operating without the required registration, or making an unlawful financial promotion, is a criminal offence.

The FSMA regime is the new conduct and prudential framework. The Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026 specify the regulated activities, with commencement on 25 October 2027. The FCA published its core final rules on 30 June 2026, including PS26/12 on capital and PS26/10 on stablecoin issuance. Further policy work remains on specific topics; the core prudential requirements are no longer consultation proposals.^[16]

The final perimeter guidance followed on 16 September 2026 (PS26/18), and the FCA has said further consultations and policy statements will follow before the 25 October 2027 commencement.^[6] The Senior Managers and Certification Regime and the Consumer Duty will apply to authorised cryptoasset firms.

HM Treasury, the Bank of England, and HMRC complete the architecture. HM Treasury is the policy lead and laid the Cryptoassets Regulations; the final draft statutory instrument was published on 15 December 2025.^[2] Stablecoins that HM Treasury recognises as systemic will be regulated jointly by the Bank of England and the FCA; the Bank published its policy statement and draft Code of Practice on 22 June 2026 and intends to finalise the Code by the end of 2026.^[24]

HMRC administers tax, treating exchange tokens as property under its Cryptoassets Manual rather than as currency, and from 1 January 2026 requires UK cryptoasset service providers to collect and report user data under the OECD Cryptoasset Reporting Framework.^[7]

Recent Regulatory Developments

• September 2026: The FCA sets the FSMA cryptoasset application fees (£2,820, £11,260 or £28,150 by permission) in an instrument in force from 30 September 2026, and on 16 September 2026 publishes its final perimeter guidance, PS26/18.^[23][6]
• 30 June 2026: The FCA publishes its final rules for the regime, PS26/9 to PS26/13, including PS26/12 on prudential requirements and PS26/10 on stablecoin issuance.^[16]
• 22 June 2026: The Bank of England publishes its policy statement for systemic stablecoins, which it will regulate jointly with the FCA once HM Treasury recognises them.^[24]
• 4 February 2026: HM Treasury makes the Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026 (SI 2026/102) after approval by both Houses of Parliament, bringing cryptoassets within the FCA’s regulatory remit with full commencement on 25 October 2027.^[2]
• 1 January 2026: The OECD Cryptoasset Reporting Framework takes effect in the UK; the first reporting period runs to 31 December 2026, with reports due to HMRC by 31 May 2027.^[7]
• 16 December 2025: The FCA publishes CP25/42, the second prudential consultation, alongside CP25/40 on regulating cryptoasset activities, proposing own funds requirements for trading platforms, staking, dealing, and arranging.^[6]
• 15 December 2025: HM Treasury publishes the final draft statutory instrument for the cryptoasset regulatory regime.^[2]
• June 2025: The FCA publishes CP25/14 (stablecoin issuance and cryptoasset custody) and CP25/15 (a prudential regime for cryptoasset firms), proposing permanent minimum capital of £350,000 for stablecoin issuers and £150,000 for custodians.^[8]
• April 2025: HM Treasury publishes its first draft statutory instrument setting out the new cryptoasset regulated activities and a near-final policy approach.^[2]
• 8 October 2023: The cryptoasset financial promotions regime takes effect: marketing qualifying cryptoassets to UK consumers is restricted under section 21 of FSMA, breach being a criminal offence.^[3]
• 10 January 2020: The FCA becomes the anti-money-laundering supervisor for UK cryptoasset businesses under the MLRs 2017.^[5]

How the Two Regimes Overlap

The MLR-to-FSMA Perimeter Question

What defines the UK regime in 2026 is that it is mid-transition, and the two regimes do not connect automatically. An MLR registration confirms only that a firm’s AML controls meet the standard; it is not a prudential or conduct authorisation, and it will not convert into an FSMA permission. The FCA encourages firms to focus on FSMA authorisation now that the gateway is open. MLR registration remains available before the new regime starts on 25 October 2027, if it can be obtained early enough to be worthwhile. Applicants seeking MLR registration during the open gateway should first discuss their plans with the FCA Pre-Application Support Service.^[9]

The harder analytical question is the regulatory perimeter: which activities, and which firms, fall inside the new regime. Where the line sits, including the treatment of overseas firms serving UK persons, is addressed in the FCA’s final perimeter guidance, PS26/18, and in FG26/7, whose baseline expectation is that firms needing authorisation operate from a UK legal entity.^[6][25] The editorial position: the new regime narrows the room for offshore operators to serve UK retail clients through the overseas-persons route, so firms targeting UK consumers should plan for a UK authorisation rather than relying on a cross-border carve-out.

Operators with novel structures (DeFi front-ends, staking-as-a-service, wrapped tokens) should treat perimeter classification as a first-order legal question, not a downstream one.

Tokenised securities and RWA

Tokenised securities remain subject to securities law, but custody also enters the new cryptoasset perimeter from 25 October 2027. Article 9N of the Regulated Activities Order covers safeguarding and arranging safeguarding of qualifying cryptoassets and relevant specified investment cryptoassets (RSICs), including qualifying tokenised shares, bonds, and fund interests.^[31]

An existing Article 40 custodian wishing to continue safeguarding RSICs must seek a variation of permission to include Article 9N. The FCA’s final PS26/11 policy applies CASS 6 to RSIC custody at commencement; CASS 17 applies to qualifying-cryptoasset custody. Other securities activities still need their applicable permissions.^[31]

HM Treasury is also piloting a digital-gilt instrument (DIGIT). The FCA published PS26/7 on 30 April 2026, with guidance on tokenised authorised funds and optional direct-to-fund dealing rules effective immediately.^[18]

Regulatory Transition: MLR Registration to the FSMA Regime

On a defined timetable, the United Kingdom is moving from a narrow anti-money-laundering registration to a full conduct and prudential regime. The Money Laundering Regulations registration remains live, but the Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026 introduce a new authorisation regime that commences on 25 October 2027, reached through a time-limited authorisation gateway set out below.

The Authorisation Gateway and How It Operates

A sequenced timetable for the transition has been published by the FCA. Firms have been able to request a pre-application meeting through the FCA Pre-Application Support Service (PASS) since 11 May 2026, with meetings running from July 2026, the point at which the FCA said it would publish the application forms and open PASS more fully.^[10] The application period itself runs from 30 September 2026 to 28 February 2027.

Where a firm applies during this window, the FCA expects to determine the application before the regime commences; if it cannot, a saving provision allows the firm to continue providing cryptoasset services until the application is finally determined.

Two transitional positions sit outside the main window. A firm that applies after the window closes but before commencement, and is not authorised by 25 October 2027, enters a transitional status under which it may conduct the new regulated cryptoasset activities only to the extent necessary to perform a pre-existing contract. A firm that does not intend to apply at all must run off its UK cryptoasset business before the new regime begins.^[10]

The New Regulated Activities

The Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026 amend the Regulated Activities Order 2001 to specify the following cryptoasset activities as regulated:

• Issuing a qualifying stablecoin: offering or arranging the offer of, and undertaking to redeem, a qualifying stablecoin.
• Safeguarding and arranging safeguarding: custody of qualifying cryptoassets or relevant specified investment cryptoassets on behalf of another, and arranging for another to do so.^[31]
• Operating a qualifying cryptoasset trading platform: running a system that brings together multiple third-party buying and selling interests in qualifying cryptoassets.
• Dealing as principal and dealing as agent: buying, selling, subscribing for, or underwriting qualifying cryptoassets on the firm’s own account or on behalf of another.
• Arranging deals: making arrangements for another person to buy, sell, subscribe for, or underwrite qualifying cryptoassets.
• Qualifying cryptoasset staking: making arrangements for another person’s qualifying cryptoassets to be used in staking.

A qualifying cryptoasset is, broadly, one that is fungible and transferable and is not solely a record of value or contractual rights; a qualifying stablecoin is a cryptoasset that seeks to maintain a stable value by referencing one or more fiat currencies.^[11] By design the regime captures firms providing these activities to UK persons, narrowing the room to rely on the overseas-persons exclusion for retail-facing business.

Key Deadlines

Practical implications. Firms targeting UK customers after 25 October 2027 should (i) decide early whether their activity falls inside the new perimeter, particularly for custody, stablecoins, and staking; (ii) use the Pre-Application Support Service from 11 May 2026 to test novel structures with the FCA before lodging; (iii) lodge the authorisation application inside the gateway window to secure the saving provision; and (iv) build the prudential and Consumer Duty package in parallel with the application rather than after it.

A firm seeking to trade before the new regime starts may pursue MLR registration if it can be obtained early enough to be worthwhile. The opening of the FSMA gateway does not end MLR registration; applications under the two regimes are determined separately.^[9]

License Types and Activities Covered

No single “crypto licence” exists in the United Kingdom. It has a layered authorisation perimeter that shifts on 25 October 2027. Today, FCA registration under the MLRs applies to cryptoasset exchange providers and custodian wallet providers. From the FSMA commencement date, separate authorisations apply by activity: issuing a qualifying stablecoin, safeguarding (custody), operating a trading platform, dealing, arranging, and staking.

Covered Activities

• FCA cryptoasset registration under the MLRs 2017. Required since 10 January 2020 for cryptoasset exchange providers (exchanging cryptoassets for money or for other cryptoassets, arranging such exchanges, or operating an automated machine) and custodian wallet providers (safeguarding or administering cryptoassets or private keys on behalf of customers). This is an AML registration, not a conduct or prudential authorisation.
• FSMA authorisation: issuing a qualifying stablecoin. From 25 October 2027, offering or arranging the offer of, and undertaking to redeem, a qualifying stablecoin is a regulated activity. Backing assets are subject to asset-eligibility and liquidity rules and held on statutory trust for holders. Appointed third parties safeguard them; same-group placements are permitted subject to CASS 16.6 limits and controls.^[17]
• FSMA authorisation: safeguarding and arranging safeguarding. Article 9N covers qualifying cryptoassets and relevant specified investment cryptoassets; arranging their custody is also within scope, subject to the statutory exclusions.^[31]
• FSMA authorisation: operating a qualifying cryptoasset trading platform. Running a system that brings together multiple third-party buying and selling interests in qualifying cryptoassets.
• FSMA authorisation: dealing as principal, dealing as agent, and arranging deals. Buying, selling, subscribing for, or underwriting qualifying cryptoassets, on own account or for another, and making arrangements for another to do so.
• FSMA authorisation: qualifying cryptoasset staking. Making arrangements for another person’s qualifying cryptoassets to be used in staking.

Activities That Need Separate Perimeter Analysis

• Holding or trading cryptoassets for one’s own account as a non-business activity. Personal investment is outside the perimeter, although disposals are within Capital Gains Tax.
• Pure software and infrastructure provision where the firm never takes custody, deals, or arranges deals in qualifying cryptoassets.
• Cryptoassets that are not “qualifying cryptoassets”. Assets that are solely a record of value or contractual rights, or are non-fungible or non-transferable, fall outside the qualifying-cryptoasset definition, though other regimes (for example securities or e-money rules) may still apply.
• Native validation by an asset holder may sit outside the staking activity where there is no arrangement made for another person; the FCA’s perimeter guidance is the controlling source.
• Tokenised securities. Existing securities rules continue to govern the relevant investment activities, but safeguarding and arranging safeguarding of relevant specified investment cryptoassets fall within Article 9N from October 2027.^[31]

DeFi, Staking, and Tokenised RWA Treatment

The FCA’s final perimeter guidance, PS26/18 of 16 September 2026, sets out when cryptoasset activities need authorisation, and the FCA plans to consult on further perimeter changes in late 2026.^[6] Staking and arranging staking are expressly within the new perimeter where arrangements are made for another person. For tokenised securities, distinguish the investment activity from custody: the new Article 9N safeguarding permission includes relevant specified investment cryptoassets.^[31] For genuinely decentralised arrangements, the controlling question is whether an identifiable person carries on a regulated activity by way of business: front-ends, interface operators, and parties making arrangements for others are the most likely to fall inside the perimeter, and operators with novel structures should obtain a written perimeter analysis before launch.

Requirements

UK crypto requirements depend on the regime. MLR registration has no minimum capital but demands robust AML systems and controls, beneficial ownership disclosure, fitness testing of key individuals, and a Money Laundering Reporting Officer. Forthcoming under FSMA are an own funds requirement that scales by activity (£350,000 PMR for stablecoin issuance, effective October 2027), the Senior Managers and Certification Regime, the Consumer Duty, and client-asset safeguarding rules.^[16][21]

Fit-and-Proper and Senior Management

Under the MLRs, the FCA assesses the fitness of beneficial owners, officers, and managers, including the Money Laundering Reporting Officer, as part of registration. Criminal-record and adverse-information checks apply, and the FCA expects the MLRO to have genuine knowledge of UK regulation and of cryptoassets, plus the authority and independence to manage compliance. Under the FSMA regime, the Senior Managers and Certification Regime applies: named senior managers hold statements of responsibility, the certification regime covers staff who can cause significant harm, and the FCA can refuse authorisation where it is not satisfied a firm meets the threshold conditions. The common mistake is treating fitness as a paperwork exercise: the FCA’s assessment weighs prior regulatory history, the substance of UK decision-making, and the quality of the firm’s own due diligence on its people.

Local Presence and Substance

A UK company (typically a private company limited by shares) must have at least one director and a registered office in the UK under the Companies Act 2006; there is no nationality or residence requirement for directors, but substance matters. For MLR registration the FCA considers where the MLRO will be based, ideally at the firm’s principal place of business in the UK.^[26] For FSMA authorisation its baseline expectation is a UK legal entity, with an appropriate amount of the firm’s control functions, leadership, and decision-making (its “mind and management”) in the UK.^[25]

For tax residence, a company incorporated in the UK is UK tax resident, and central management and control in the UK can make a non-UK company resident too. Experienced applicants treat the MLRO and senior-management appointments as critical-path items and begin sourcing well before lodgement, because the FCA weighs where the MLRO and the firm’s mind and management sit.

AML, Travel Rule, and Sanctions

The AML framework must include a firm-wide risk assessment, customer due diligence, and enhanced due diligence, ongoing monitoring, suspicious activity reporting to the National Crime Agency, record keeping, and staff training, all under the Money Laundering Regulations 2017. Since 1 September 2023 the UK cryptoasset travel rule has applied under the Money Laundering and Terrorist Financing (Amendment) Regulations 2022: the originating cryptoasset business must collect and transmit originator and beneficiary information on transfers, and the beneficiary business must verify it.

Sanctions compliance must cover the UK Sanctions List, published by the Foreign, Commonwealth & Development Office: since the OFSI Consolidated List closed on 28 January 2026, it is the only source of UK designations under the Sanctions and Anti-Money Laundering Act 2018.^[30] The Office of Financial Sanctions Implementation still implements and enforces UK financial sanctions, including the applicable freezing and reporting obligations, and firms serving US-resident customers must additionally screen against US OFAC lists.

Capital and Financial Requirements (FSMA detail)

The final prudential rules in PS26/12 apply from 25 October 2027. Own funds must meet the highest of the permanent minimum requirement (PMR), the fixed overhead requirement and the K-factor requirement. PMRs are £75,000 for dealing as agent or arranging, £150,000 for custody, platform operation or staking, £350,000 for stablecoin issuance and £750,000 for dealing as principal. A firm with several permissions uses the highest applicable PMR.^[16]

Applicable K-factors are aggregated to calculate the K-factor requirement, which is compared with the PMR and fixed overhead requirement. They are not simply added to the PMR. K-SII is 1% of average stablecoins in issuance; the renamed custody factor K-RCS is 0.04% of average relevant cryptoassets safeguarded.^[16]

The final stablecoin rules in PS26/10 require a backing pool held on statutory trust for holders, subject to asset-eligibility and liquidity requirements. Third-party safeguarding arrangements may include same-group firms. CASS 16.6 generally limits same-group placements to 20% of the pool; relying on the specified proportionality exception requires an assessment, FCA notification and periodic review. These are final rules for the regime commencing 25 October 2027.^[17]

Application Process

Which regime the firm enters determines the UK application process. MLR registration runs through the FCA Connect portal and, on observed timelines, takes 9–18 months because the FCA returns applications that do not meet the AML standard. FSMA authorisation runs through the authorisation gateway described under Regulatory Transition above.

Application language: English.

Pre-application engagement: the FCA offers pre-application meetings on the FSMA regime through its Pre-Application Support Service (PASS) from 11 May 2026, with meetings from July 2026, and engages on MLR applications through the registration team. Use the available channels: novel structures benefit most from early FCA contact.

Compliance documentation is the most time-intensive component of any UK application: 8 to 16 weeks of specialist work that cannot be shortcut with generic templates, because the FCA assesses whether the AML, prudential, and safeguarding frameworks reflect the firm’s actual business model rather than an adapted template.

Required Documents

Required documents for UK crypto licensing span four categories: corporate and constitutional documents for the UK entity, personal documents for directors, the MLRO, and beneficial owners, an extensive compliance documentation pack, and a regulatory business plan with financial projections. Lodgement is accepted digitally by the FCA through FCA Connect (MLR) and the FSMA gateway, with all supporting evidence uploaded as part of the structured application.

Corporate Documents

Certificate of incorporation and Companies House registration, articles of association, statement of capital, register of members, register of persons with significant control, and registered-office details. CT registration with HMRC and, where the firm exceeds the threshold or chooses to register, VAT registration. For foreign-controlled entities, FCA controller-approval analysis where the relevant thresholds are met. A UK company must have at least one director and a UK registered office under the Companies Act 2006.

Personal Documents (Directors, MLRO, UBOs)

Certified copies of passports for all directors, the Money Laundering Reporting Officer, and beneficial owners. Disclosure and Barring Service or equivalent criminal-record checks. Adverse-information, bankruptcy, and disqualified-director checks. CVs and evidence of relevant experience for the MLRO and senior managers, including knowledge of cryptoassets and UK regulation. Where an individual has held a regulated-sector role, regulatory references covering conduct under the SM&CR reference requirements.

Compliance Documentation

The compliance documentation is the most heavily scrutinised component of any UK application. Each document must be bespoke and UK-specific, not a template adapted from another jurisdiction, and must reflect the applicant’s specific business model, risk profile, and operational structure. Applications whose documentation is generic, or does not match the firm’s actual activities, are returned by the FCA.

Business Plan and Financial Projections

A regulatory business plan with financial projections covering revenue, expenses, capital expenditure, and cash flow. Own funds documentation showing compliance with the final FSMA requirement from October 2027 (the highest of PMR, fixed overhead requirement and the applicable K-factor requirement). Funding evidence (capital injection, parent-company support, or debt). An operating-model description including business lines, customer segments, jurisdictional reach, and growth assumptions.

Technology and Operational Documentation

IT infrastructure description (architecture, hosting, third-party providers). Operational resilience and cybersecurity framework aligned with ISO 27001 or equivalent. Business continuity and disaster-recovery plans. Custody procedures (hot and cold wallet segregation, key management, multi-signature controls) and, for stablecoins, backing-asset safeguarding. Outsourcing arrangements and material service-provider register. Data-protection and incident-response plans under UK GDPR.

Costs and Pricing

UK cost divides in two, and the statutory half is small. On the MLR cryptoasset registration route it is £11,360: an FCA application fee of £11,260, the rate for pricing Category 6 to which FEES App 4 Annex 1 assigns cryptoasset business and non-refundable if the application is withdrawn or refused, plus £100 of Companies House incorporation.

FSMA authorisation application fees, in force from 30 September 2026, depend on the permission: £2,820 (Category 4) for arranging deals, dealing as agent or staking; £11,260 (Category 6) for dealing as principal, safeguarding or issuing a qualifying stablecoin; and £28,150 (Category 7) for operating a trading platform. A firm pays one fee at the highest applicable category, including where it applies under both regimes.^[23] The build on top, quoted per case, runs £185,500 to £563,000.

FSMA own funds sit outside both figures. From October 2027, the final PMR is £150,000 for custody and £350,000 for stablecoin issuance; the highest applicable PMR applies where both permissions are held. The fixed overhead or K-factor requirement can require more. This capital is held rather than spent.^[16]

Government / Regulator Fees

Fee note: FCA application and periodic fees are set by the FCA fee tariff and are revised annually; the FSMA cryptoasset application fees were set by the Cryptoasset Activities (Periodic and Application Fees) Instrument 2026, in force from 30 September 2026, and annual fees and levies for authorised cryptoasset firms start in 2028/29.^[12][23]

Statutory Cost: Regulator and Registry Fees

On the FSMA route, statutory Year 1 is £2,920–£28,250: an FCA application fee of £2,820, £11,260 or £28,150 by permission plus £100 of Companies House incorporation. FCA annual fees for fee-block A.26 and the Financial Ombudsman Service levy are not charged until 2028/29.^[23] HMRC CARF reporting carries no fee, though penalties reach £300 per user for inaccurate or incomplete reports.

Typical Build, Quoted Per Case

Own Funds: Final PMRs, Held Rather Than Spent

These are final PMRs under PS26/12, effective from 25 October 2027. They are capital floors, held rather than spent, and sit outside the statutory and build-cost figures above. The fixed overhead or K-factor requirement may be higher.^[16]

Regulatory capital is a funding commitment, not a fee. For a stablecoin issuer, £350,000 is the PMR; the fixed overhead or K-factor requirement may require more. The required own funds must be planned into the funding round rather than treated as ordinary working capital.^[16]

Capital planning must follow the activities and the higher-of calculation. A single permanent minimum does not establish the full own funds requirement for the business.

Timeline

Realistic UK timelines diverge by route. MLR registration has run 9–18 months on observed experience, because the FCA returns applications that do not meet the AML standard. FSMA authorisation runs to the published gateway: the application window opened on 30 September 2026 and closes on 28 February 2027, with the regime commencing on 25 October 2027 and a saving provision for in-window applications not yet determined.

The FCA states that it must determine an MLR registration application within three months of receiving the application form or any further information required. This clock is distinct from the end-to-end preparation and assessment period. For that reason, the FCA advises firms not to apply for MLR registration after 31 July 2027, when a determination before commencement is unlikely. For FSMA authorisation, plan against the published application window and transitional provisions.^[9]

Taxation

A standard-rate corporate jurisdiction, the United Kingdom has settled crypto tax treatment. HMRC treats exchange tokens as property rather than currency: companies pay Corporation Tax on profits and gains, individuals pay Capital Gains Tax on disposals, and the buying and selling of exchange tokens for fiat is exempt from VAT. The main Corporation Tax rate is 25%, with a 19% small profits rate and marginal relief in between.

The £50,000 and £250,000 profit limits assume a full annual accounting period and no associated companies. Short periods and associated companies reduce both limits. Non-UK-resident companies and close investment-holding companies cannot claim marginal relief; profits including certain distributions count toward the limit (HMRC).

Crypto Asset Taxation Specifics (HMRC Treatment)

HMRC’s Cryptoassets Manual treats exchange tokens as property, not as currency or money.^[13] For individuals, a disposal (selling for fiat, exchanging one token for another, spending, or gifting other than to a spouse or civil partner) is a Capital Gains Tax event, taxed above the £3,000 annual exempt amount; where activity amounts to a trade, profits are taxed as income with National Insurance.

For companies, gains and profits fall within Corporation Tax. Staking and mining rewards are generally taxable as income at market value when received, with later disposals within the gains regime; airdrops attract specific HMRC guidance. The badges of trade determine whether activity is investing or trading.

VAT on Exchange Tokens

Buying and selling exchange tokens for fiat is exempt from VAT under Item 1, Group 5, Schedule 9 of the Value Added Tax Act 1994, following the Court of Justice of the European Union ruling in Skatteverket v David Hedqvist.^[14] Charges made over and above the value of the tokens for arranging transactions are similarly exempt as financial intermediation. This avoids a double-VAT outcome on crypto trading. VAT continues to apply on the normal principles to goods and services paid for in crypto, and to fees for services that are not exempt financial intermediation.

CARF Reporting

From 1 January 2026, the OECD Cryptoasset Reporting Framework applies in the UK: reporting cryptoasset service providers must collect user information and report transaction data to HMRC.^[7] The first reporting period runs to 31 December 2026, with reports due by 31 May 2027, after which HMRC begins exchanging the data with partner tax authorities. Penalties of up to £300 per user apply for inaccurate, incomplete, or unverified reports, and HMRC has expanded its nudge-letter campaign and voluntary-disclosure facility for undeclared crypto gains.

Pillar Two (Global Minimum Tax)

Implementation of the OECD Pillar Two rules came through the multinational top-up tax and domestic top-up tax in the Finance (No. 2) Act 2023. The 15% global minimum tax applies to in-scope multinational groups with consolidated revenue of at least EUR 750 million: a threshold unlikely to affect a standalone UK-domiciled cryptoasset firm but relevant to subsidiaries of larger crypto groups.

Ongoing Compliance & Post-Registration

UK registration and authorisation create a permanent compliance infrastructure obligation. MLR-registered firms must maintain their AML systems and controls, file annual reports and the financial-crime data return, operate the travel rule, and report suspicious activity to the National Crime Agency. FSMA-authorised firms additionally face the FCA’s Principles for Businesses, the Consumer Duty, the Senior Managers and Certification Regime, client-asset rules, and regulatory reporting through RegData.

Annual Reporting Obligations

MLR-registered firms submit the annual financial-crime data return and respond to FCA information requests. FSMA-authorised firms submit periodic regulatory returns through RegData (financial, prudential, and client-asset returns), an annual audit, and Consumer Duty board reports. All firms file annual accounts at Companies House and a Corporation Tax return with HMRC, plus, from 1 January 2026, the annual CARF report due by 31 May 2027. VAT-registered firms file periodic VAT returns.

Periodic and Supervision Fees

Annual periodic fees are set by the FCA’s fee tariff: a minimum fee plus a variable component scaling with the firm’s activities and income, and FSMA-authorised firms additionally contribute to the Financial Ombudsman Service and, where applicable, the Financial Services Compensation Scheme. Recurring costs typically include the MLRO and compliance salaries (£70,000 to 180,000), annual audit and assurance (£15,000 to 50,000), professional indemnity insurance (£10,000 to 40,000), and technology and monitoring tooling.

Regulatory Supervision

The FCA conducts thematic reviews and targeted supervision, with a documented focus on cryptoasset AML controls, the financial promotions regime, and consumer-facing risk. It uses its information-gathering and skilled-persons powers (section 165 and section 166 of FSMA) and can impose requirements, vary permissions, and pursue enforcement. Firms should maintain audit-ready documentation across all registered and authorised activities, and treat the annual financial-crime return and any skilled-persons review as high-stakes supervisory touchpoints.

Enforcement

FCA enforcement powers include public censure, financial penalties, restitution orders, cancellation of registration or permission, and criminal prosecution. Carrying on a regulated activity without authorisation breaches the general prohibition in section 19 of FSMA, and making an unlawful financial promotion breaches section 21: both are criminal offences, the promotions offence carrying up to two years’ imprisonment, an unlimited fine, or both.^[3] The FCA has publicly warned and taken action against unregistered cryptoasset firms and non-compliant promotions, and it maintains a public warning list of firms operating without the required status.

Operational Resilience and Cyber

FSMA-authorised firms are subject to the FCA’s operational resilience rules: they must identify important business services, set impact tolerances, and be able to remain within those tolerances during severe-but-plausible disruption. Material cyber incidents must be reported to the FCA under Principle 11, and a personal-data breach must be notified to the Information Commissioner’s Office under UK GDPR. Operational resilience and cyber posture should be assessed on launch and reviewed at least annually.

Financial Promotions Rules

Any invitation or inducement to engage in cryptoasset investment activity capable of having effect in the UK falls within the cryptoasset financial promotions regime, even from offshore. A promotion is lawful only through one of four routes: an FCA-authorised person, a section 21 approver with FCA permission, an MLR-registered firm complying with the FCA’s rules, or a Financial Promotion Order exemption.^[3] The PS23/6 rules require clear risk warnings, a ban on incentives to invest, a 24-hour cooling-off period for first-time investors, personalised risk warnings, and an appropriateness assessment.

Influencer and affiliate marketing has been an active FCA enforcement area: each promotion needs documented compliance against the chosen section 21 route.

Banking

Banking access is the practical bottleneck for UK crypto operators, despite the United Kingdom having one of the deepest banking systems in the world. High-street banks restricted access to crypto businesses through 2023–2025, with several imposing payment limits or declining transactions to crypto exchanges. No statute prevents banking; the constraint is internal bank risk appetite.

Debanking of legitimate businesses became a UK political issue in 2023–2024, and for payment-service contracts entered into from 28 April 2026 a provider must now give at least 90 days’ notice, with reasons, before terminating, subject to exceptions.^[28] A business customer that is not a micro-enterprise or a charity can agree to disapply these requirements.^[29] No rule, however, compels a bank to onboard a particular cryptoasset customer, and access remains a real and ongoing operational risk. Several major UK banks publicly limited card and faster-payment transactions to crypto platforms, citing fraud and AML risk, and some declined cryptoasset business customers outright.

More reliable counterparties for serious operators are crypto-aware challenger banks and electronic money institutions, fintech-friendly business-banking providers, and specialist banking platforms in adjacent jurisdictions. For an FSMA-authorised custodian or stablecoin issuer, safeguarding and client-money arrangements must meet the FCA’s client-asset rules, which raises the bar on the choice of banking partner and on the legal structure of the accounts.

In practice, the operators that secure UK banking are those that arrive with a complete compliance package, a named MLRO, ideally UK-based as the FCA expects,^[26] and a documented sanctions and CDD framework in production, not those that arrive with a registration certificate and expect onboarding to follow. The 2–6 month banking timeline runs in parallel with the application process for a reason: it is rarely faster.

For an overview of how banking placement works for crypto and high-risk businesses, see the Banking service page.

FATF Status & International Standing

A founding member of the Financial Action Task Force, the United Kingdom maintains clear standing in the FATF mutual evaluation process. Its most recent FATF mutual evaluation was published in December 2018; the UK government reported that it rated the UK’s regime the strongest of the more than 60 countries then assessed, with the highest rating in four of the eleven effectiveness areas.^[27]

EU Market Access

A UK FCA registration or authorisation confers no MiCA passporting rights, and MiCA contains no third-country equivalence regime that would let the European Commission recognise a non-EU permission as equivalent. MiCA Article 61 permits third-country firms to serve EU clients only when the client initiates contact entirely on their own initiative. ESMA’s Guidelines on reverse solicitation under MiCA (ESMA35-1872330276-2030, published 26 February 2025 and applicable from 27 April 2025) interpret the exemption restrictively.^[15]

The guidelines list signs that a firm is likely to be regarded as soliciting, judged on all the facts: EU-targeted marketing, advertising and promotion, including through mobile applications, are among them, and a website in an EU language counts where that language is not customary in international finance. A firm that solicits EU clients cannot rely on the exemption, which does not support systematic EU market access.^[15]

For a detailed analysis of what constitutes solicitation and the documentation requirements, see Reverse Solicitation Under MiCA →.

Advantages and Limitations

The United Kingdom offers premium regulatory credibility, a settled tax treatment, a genuine domestic GBP market, and an English common law system; it pays for that in a long and uncertain MLR registration record, a regime mid-transition, and the absence of any EU passport. Trade-offs are clear: choose the UK for the standing of an FCA permission and a UK customer base, not for pan-EU access or speed.

• ✓ An FCA permission carries premium global credibility. Recognised across the Anglophone and institutional market; the FCA’s selective registration (about 17% of determined applications) makes the credential scarce and valuable.
• ✓ A statutory FSMA regime is arriving. The Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026 move the UK from a narrow AML registration to a full conduct and prudential framework from 25 October 2027, with legal certainty across the activity set.
• ✓ Settled tax treatment and VAT exemption. HMRC treats exchange tokens as property, exchange-token sales for fiat are VAT-exempt, and the UK has one of the world’s widest treaty networks.
• ✓ A real domestic GBP market. FCA consumer research found that 8% of UK adults held cryptoassets in 2025, giving stablecoin issuers and exchanges genuine demand rather than a brass-plate base.
• ✓ An established financial promotions regime. The marketing rules have been settled since 8 October 2023, so the compliance baseline for reaching UK consumers is well-documented.
• × The MLR registration record is long and selective. Observed timelines run 9–18 months and most applications are withdrawn or rejected. Mitigation: prepare a complete, UK-specific AML package before lodging, and use the FSMA gateway from 30 September 2026 if the objective is to operate after 2027.
• × No EU passporting. A UK registration or authorisation provides no MiCA equivalence or passporting rights to the EU/EEA. Mitigation: operators targeting EU clients should obtain a separate CASP authorisation in an EU member state (full market access via passporting) or rely on the narrow reverse solicitation exemption under MiCA Article 61 only where a client’s request is genuinely on its own exclusive initiative, judged on all the facts.
• × The regime is mid-transition with no automatic conversion. An MLR registration does not roll into FSMA authorisation, and the core final FSMA rules take effect in October 2027. Mitigation: decide the route early, use the FCA Pre-Application Support Service from 11 May 2026, and budget against the final prudential rules while monitoring further FCA policy developments.
• × Debanking risk remains material. UK banks have variable risk appetite and have limited or declined crypto business accounts. Mitigation: engage crypto-aware challenger banks and EMIs in parallel, and build banking conversations on a complete compliance package, not a registration certificate alone.

How the UK Compares

Natural comparators for the United Kingdom are the other premium European venues that operators weigh against it: Switzerland (the other major non-MiCA European centre), Malta, and Cyprus (established EU crypto centres under MiCA), with Estonia as a lower-cost EU cross-reference. Each operates under a substantial regulator; the decisive divide is whether the firm needs an EU passport.

Malta, Cyprus, and Estonia grant a MiCA CASP authorisation that passports across the EEA (the 27 EU states plus Iceland, Liechtenstein and Norway);^[20] the UK and Switzerland do not.

Compare every crypto jurisdiction side by side →

Across this peer group, the UK and Switzerland share the premium non-MiCA profile: strong credibility and a genuine market. For operators whose objective is the single market, Malta and Cyprus offer MiCA CASP authorisation with different cost components: Malta’s typical build alone starts at EUR 490,000 before statutory fees, above Cyprus’s EUR 217,000–462,000 setup subtotal before pro-rata annual fees. Compare the applicable scope and statutory fees before drawing a cost ranking against the UK.

Jagelski & Partners scopes your written brief and introduces an independent specialist for UK crypto licensing: UK company formation, the FCA registration, and FSMA authorisation, banking, and post-authorisation compliance. If the objective is a single-market passport, we can scope a MiCA CASP route in Malta, Cyprus, or Estonia and introduce a specialist for that route. See the full Malta crypto licensing guide →

When the UK Is the Right Choice

Choose the UK if:

• The standing of an FCA permission is the priority, and the firm is selling to UK banks, asset managers, or institutional counterparties who value the credential.
• The customer base is genuinely UK-resident, so a domestic permission and GBP settlement matter more than an EU passport.
• The firm is issuing a GBP-referenced stablecoin and wants to build to the FCA’s stablecoin and safeguarding rules.
• The operator wants a premium non-MiCA venue deliberately separate from the EU regulatory perimeter.

Consider alternatives if:

• Pan-EU market access is the objective: a MiCA CASP authorisation in Malta or Cyprus passports across the EEA, which no UK permission can.
• Cost and speed matter: Estonia offers the same MiCA passport with statutory fees of €3,250–€4,500 and a 6–12 month timeline, against 9–18 months on the UK MLR route.
• The firm wants a premium non-EU venue but with a settled licensing regime today: Switzerland’s FINMA framework is operational now, whereas the UK FSMA regime commences only on 25 October 2027.
• The business is primarily an EU-facing exchange or stablecoin issuer: an EU member-state CASP authorisation is the better natural fit than relying on UK status and reverse solicitation.

Not sure which column is you? Ask Emma. She compares these jurisdictions in seconds, in your language.

Common Mistakes in UK Applications

Published FCA guidance and its registration record point consistently to a small set of recurring application errors. The high withdrawal and rejection rate under the MLRs, and the FCA’s perimeter and prudential consultations, flag the same misconceptions. Across the MLR and FSMA tracks, the highest-frequency mistakes cluster around AML quality, perimeter classification, capital, and UK substance.

• Treating MLR registration as a light-touch tick-box. The FCA returns or rejects the majority of applications. The assessment is substantive: it weighs whether the firm-wide risk assessment, CDD, and monitoring genuinely reflect the business, and applications with generic AML frameworks are routinely withdrawn or refused.
• Assuming MLR registration carries over to FSMA. There is no automatic conversion. A firm intending to operate after 25 October 2027 must secure FSMA authorisation through the gateway, and time spent only on MLR registration does not advance the FSMA application.
• Misclassifying the activity against the new perimeter. Operators assume an activity sits outside the FSMA regime when it is in fact custody, dealing, arranging, or staking for UK persons. The FCA’s final PS26/18 perimeter guidance explains the activity boundaries, and novel structures (DeFi front-ends, staking-as-a-service, wrapped tokens) need a written perimeter analysis.^[6]
• Underestimating the prudential and safeguarding build. The final PMR (£350,000 for stablecoin issuers, effective October 2027) is the headline, but the surrounding evidence (own funds calculation, K-factor analysis, backing-asset, and client-asset safeguarding) is weeks of specialist work that generic templates do not satisfy.
• Generic AML policies adapted from another jurisdiction. The FCA’s assessment is whether the policies reflect the firm’s actual customer base, jurisdictional exposure, and product mix. Policies adapted from a MiCA, MAS, or BVI template attract requests for information and rejection; UK-specific risk-assessment language is required.
• Thin UK substance and an underqualified MLRO. The FCA considers where the MLRO and senior management are based, whether they are genuinely engaged, and whether decision-making sits in the UK. Nominee or pass-through structures attract substance questions during assessment.

Frequently Asked Questions

References