Is Crypto Legal in the United Kingdom?
Cryptocurrency is legal and regulated in the United Kingdom. The jurisdiction has a comprehensive, dedicated crypto framework with licensing and active enforcement, and an active legislative process underway. Bank of England is among the 2 regulators with oversight. The FATF Travel Rule is adopted.
Derived from 189 sourced facts for United Kingdom · last updated · primary sources
Overview
The United Kingdom regulates crypto through a dual-track framework anchored in the Financial Services and Markets Act 2000 (as amended): firms currently require FCA registration under Money Laundering Regulations for exchange and custody activities, with a transition to full FCA authorization as a regulated activity underway, triggering requirements for exchanges, custodians, and crypto financial promotions. The FCA serves as the primary regulator, imposing robust AML/KYC obligations, transaction monitoring, sanctions screening against OFSI-administered lists, MLRO appointment, and a UK-incorporated local presence with qualified personnel; existing MLR registrations do not automatically convert to FSMA authorization, requiring new applications. The most critical near-term decision point is the 2027–2028 deadline for full FCA authorization, after which unregistered firms face fines, suspension, or permanent closure. (gov.uk, legislation.gov.uk, assets.publishing.service.gov.uk)
Regulatory Bodies
Bank of England / PRA — on 22 June 2026 the Bank published its policy statement and draft Code of Practice for sterling systemic stablecoins, moving from proposed holding limits to a temporary issuance guardrail and revising backing-asset…
Bank of England (BoE) / Prudential Regulation Authority (PRA):
Operating Models
9/9 verdictsCan specific business models operate in United Kingdom? Each card answers the operational question for one kind of operator. Curated cells reflect counsel-grade review; AI-generated cells should be confirmed before relying on them.
Conditional · high burden.
AI · UnreviewedConditional · high burden.
AI · UnreviewedConditional · low burden.
AI · UnreviewedConditional · high burden.
AI · UnreviewedConditional · high burden.
AI · UnreviewedConditional · high burden.
AI · UnreviewedConditional · high burden.
AI · UnreviewedConditional · high burden.
AI · UnreviewedConditional · high burden.
AI · UnreviewedPrimary Legislation
| Law / Regulation | Year | Scope |
|---|---|---|
| Financial Services and Markets Act 2000, as amended by FSMA 2023 s.69 (in force 29 August 2023) | 2000 | Financial Services and Markets Act 2000, as amended by FSMA 2023 s.69 (in force 29 August 2023) — s.22 extended so regulated activities may relate to cryptoassets and s.417 given a cryptoasset definition; the regulated activities… |
Licensing Requirements
FCA — MLR registration and AML/CTF supervision of cryptoasset businesses (since 10 January 2020), supervision of cryptoasset financial promotions (since 8 October 2023), and authorisation, conduct and prudential regulation under SI 2026/102 from 25 October 2027. Of 393 MLR applications determined since January 2020, 68 were registered, 46 rejected, 265 withdrawn and 14 refused (as at 1 October 2026).
Bank of England / PRA — on 22 June 2026 the Bank published its policy statement and draft Code of Practice for sterling systemic stablecoins, moving from proposed holding limits to a temporary issuance guardrail and revising backing-asset composition; it regulates recognised systemic stablecoin issuers jointly with the FCA (approach of 30 June 2026), and the PRA set interim expectations for banks' tokenised-asset, stablecoin and cryptoasset exposures in a Dear CEO letter of 18 May 2026.
HM Treasury — policy and legislation for cryptoassets: made the Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026 (SI 2026/102) as a single-phase regime after announcing on 21 November 2024 that stablecoin activities would follow the same timetable as the rest of the regime; also made SI 2023/612 (promotions) and SI 2025/17 (staking not a CIS); recognises systemic stablecoin issuers under the Banking Act 2009.
Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 (SI 2017/692), as amended by SI 2019/1511 with effect from 10 January 2020 — AML/CTF registration and supervision of cryptoasset exchange providers and custodian wallet providers (regs 14A, 56, 58A); travel rule in Part 7A from 1 September 2023 (SI 2022/860).
2017Financial Services and Markets Act 2000, as amended by FSMA 2023 s.69 (in force 29 August 2023) — s.22 extended so regulated activities may relate to cryptoassets and s.417 given a cryptoasset definition; the regulated activities themselves are created by SI 2026/102 from 25 October 2027, and the crypto financial-promotions regime came from SI 2023/612 (7 October 2023).
2023Financial Services and Markets Act 2000 (Financial Promotion) (Amendment) Order 2023 (SI 2023/612, made 7 June 2023, in force for all purposes 7 October 2023) — adds "qualifying cryptoasset" as a controlled investment and creates the art 73ZA exemption for MLR-registered firms' own promotions; the FCA classifies qualifying cryptoassets as restricted mass market investments in COBS 4.12A and has applied the regime since 8 October 2023.
2023FCA MLR registration is required for cryptoasset exchange providers and custodian wallet providers. Since January 2020 the FCA has received 427 applications and determined 393: 68 registered (17%), 46 rejected (12%), 265 withdrawn (67%) and 14 refused (4%) as at 1 October 2026. The FSMA-based regime under SI 2026/102 (trading platforms, dealing, arranging, safeguarding, staking, qualifying stablecoin issuance) starts 25 October 2027.
Custodian wallet providers currently need MLR registration, which imposes AML/CTF duties only and no safeguarding rules; from 25 October 2027 safeguarding qualifying cryptoassets is a regulated activity (RAO art 9N, SI 2026/102) requiring FCA authorisation, the FCA applies CASS 17 to client cryptoassets, and CRYPTOPRU prudential requirements apply (PS26/12, 30 June 2026).
EXCHANGE: MLR registration plus the financial-promotions rules in COBS 4.12A (prescribed risk warnings, fair clear and not misleading, incentive ban). The retail ban on cryptoasset derivatives (CFDs, futures, options) has applied since 6 January 2021 (PS20/10) and remains; retail access to crypto exchange-traded notes traded on an FCA-approved UK exchange reopened on 8 October 2025.
HM Treasury sets UK cryptoasset policy and makes the legislation: it consulted on the future regime from 1 February to 30 April 2023 (response 30 October 2023), published the draft statutory instrument and policy note that became SI 2026/102, and made SI 2023/612 (financial promotions) and SI 2025/17 (staking).
HM Treasury consulted on the future cryptoasset regime (1 February to 30 April 2023, response 30 October 2023), published an update on fiat-backed stablecoin regulation on 30 October 2023, and published the draft SI and policy note for the regulated-activities regime (updated 16 December 2025) that was made as SI 2026/102.
The FCA is the UK conduct regulator for financial services and the regulator for cryptoassets: AML/CTF supervisor of cryptoasset businesses since 10 January 2020, supervisor of the cryptoasset financial-promotions regime since 8 October 2023, and from 25 October 2027 the authorising, conduct and prudential regulator for the activities in SI 2026/102.
The FCA registers and supervises cryptoasset exchange providers and custodian wallet providers for AML/CTF under the Money Laundering Regulations 2017 (regs 14A and 56), a regime in force since 10 January 2020 (SI 2019/1511).
The FCA supervises and enforces the cryptoasset financial-promotions regime that applies since 8 October 2023 under FSMA 2000 s.21 and SI 2023/612, issuing 146 alerts about illegal promotions in the regime's first 24 hours; its rules are in COBS 4.12A and its guidance in FG23/3.
The FCA's perimeter guidance on cryptoassets is PS19/22 Guidance on Cryptoassets (23 January 2019), setting out where tokens are specified investments, e-money, within the Payment Services Regulations or outside regulation, supplemented by PS26/18 Cryptoasset perimeter guidance (16 September 2026) on when the new regulated activities need FCA authorisation.
The FCA Innovation Hub supports innovative firms through the Regulatory Sandbox (live testing with real consumers, applications accepted at any time of year), Innovation Pathways (help understanding how FCA regulation applies), the Digital Sandbox (synthetic data sets) and the AI Lab.
The Bank of England is responsible for monetary and financial stability and, with the FCA, regulates stablecoin issuers recognised as systemic by HM Treasury (Bank leading on prudential matters, FCA on conduct); the PRA, part of the Bank, supervises banks and designated investment firms including their cryptoasset exposures; the Bank and FCA jointly run the Digital Securities Sandbox for DLT in financial market infrastructure.
The Bank of England published its policy statement and draft Code of Practice for sterling-denominated systemic stablecoins on 22 June 2026, replacing proposed holding limits with a "temporary issuance guardrail" per systemic stablecoin and revising backing-asset composition; it intends to finalise the Code of Practice by end-2026, applying to issuers recognised as systemic by HM Treasury.
DLT in financial market infrastructure is tested in the Digital Securities Sandbox, an FMI sandbox established by SI 2023/1398 (in force 8 January 2024) and run jointly by the Bank of England and the FCA; it is open to firms legally established in the UK and operational until December 2028.
The PRA set out its expectations for banks' and designated investment firms' prudential treatment of tokenised assets, stablecoins and other cryptoasset exposures in a Dear CEO letter dated 18 May 2026.
MLR registration is required for cryptoasset exchange and custodian wallet services provided by way of business in the UK, and registration must be obtained before any in-scope service starts; the presence of a crypto ATM in the UK is treated as business carried on in the UK.
A "cryptoasset exchange provider" under MLRs 2017 reg 14A is a firm or sole practitioner that by way of business exchanges or arranges the exchange of cryptoassets for money or money for cryptoassets, exchanges one cryptoasset for another, or operates a machine (crypto ATM) that exchanges cryptoassets for money — including where it is the creator or issuer of the cryptoassets involved.
A "custodian wallet provider" under MLRs 2017 reg 14A is a firm or sole practitioner that by way of business provides services to safeguard, or to safeguard and administer, cryptoassets on behalf of its customers, or private cryptographic keys on behalf of its customers in order to hold, store and transfer cryptoassets.
MLRs 2017 reg 28(2) requires a registered cryptoasset business to identify each customer and verify the customer's identity before or during the business relationship, unless already verified by that firm.
MLRs 2017 reg 28(11) requires a registered cryptoasset business to conduct ongoing monitoring of each business relationship, including scrutiny of transactions undertaken throughout the course of the relationship.
Under MLRs 2017 Part 7A (regs 64A–64H, in force 1 September 2023 via SI 2022/860) the originator's cryptoasset business must ensure every inter-cryptoasset-business transfer carries the names and account numbers of originator and beneficiary; fuller originator identifiers are required on transfers equal to or exceeding £800 (threshold substituted from 30 June 2026 by SI 2026/621) and on all transfers where every cryptoasset business in the chain carries on business in the UK.
Under MLRs 2017 reg 58A the FCA must refuse to register a cryptoasset business unless the applicant and each of its officers, managers and beneficial owners is a fit and proper person to carry on the business of a cryptoasset exchange provider or custodian wallet provider; a conviction for a Schedule 3 offence is disqualifying, and the FCA otherwise weighs compliance history, money-laundering risk of the business, and the skills, experience and probity of those persons.
Since 8 October 2023 the promotion of qualifying cryptoassets to UK consumers has been subject to the financial promotion restriction in FSMA 2000 s.21, following the Financial Services and Markets Act 2000 (Financial Promotion) (Amendment) Order 2023 (SI 2023/612, made 7 June 2023), with FCA rules in COBS 4.12A.
Qualifying cryptoassets are "restricted mass market investments" under FCA Handbook COBS 4.12A.11R(1)(d): promotions must carry a prescribed risk warning (4.12A.10R), must not offer monetary or non-monetary incentives to retail clients (4.12A.7R), and direct-offer promotions require a 24-hour cooling-off period (4.12A.18R), client categorisation as restricted, high net worth or sophisticated investor (4.12A.21R) and an appropriateness assessment (4.12A.28R).
A cryptoasset financial promotion to UK consumers is lawful only if it is communicated by an FCA-authorised person, approved by an FCA-authorised person, communicated by a cryptoasset business registered with the FCA under the MLRs (Financial Promotion Order art 73ZA, own promotions only), or falls within an exemption in the Financial Promotion Order.
Cryptoasset financial promotions must be fair, clear and not misleading, as set out in the FCA's finalised guidance FG23/3 (2 November 2023) on how firms meet the PS23/6 rules.
Under FCA Handbook COBS 4.12A.10R a firm must not communicate or approve a financial promotion relating to a restricted mass market investment, including qualifying cryptoassets, unless it carries the prescribed prominent risk warning.
Under FCA Handbook COBS 4.12A.7R a firm must not communicate or approve a promotion of a restricted mass market investment, including qualifying cryptoassets, that offers a retail client any monetary or non-monetary incentive to invest; guidance at COBS 4.12A.8G gives bonuses for referring another person as an example.
Under FCA Handbook COBS 4.12A.21R a firm may communicate a direct-offer promotion of a qualifying cryptoasset to a retail client only after taking reasonable steps to establish that the client is a high net worth investor, a sophisticated investor or a restricted investor, and COBS 4.12A.28R requires an appropriateness assessment before processing the order.
The FCA enforces the cryptoasset financial-promotions regime and issued finalised guidance FG23/3 (2 November 2023) on compliance; communicating a promotion in breach of FSMA 2000 s.21 is a criminal offence punishable on indictment by up to two years' imprisonment, an unlimited fine, or both (FSMA s.25).
Under PS19/22 (January 2019) the FCA applies existing regulation to cryptoassets that are specified investments under the Regulated Activities Order, e-money under the Electronic Money Regulations 2011 or captured by the Payment Services Regulations 2017, with other tokens outside regulation; from 25 October 2027 SI 2026/102 adds bespoke regulated activities for "qualifying cryptoassets" that are not specified investments or e-money.
A cryptoasset that is a specified investment under the Regulated Activities Order (for example a share, debt instrument or unit in a collective investment scheme) is within the FSMA 2000 perimeter and carrying on regulated activities in relation to it without authorisation breaches the general prohibition in FSMA s.19; the FCA's PS19/22 sets out when tokens fall into this category.
Cryptoassets that meet the definition of electronic money in the Electronic Money Regulations 2011 reg 2 — electronically stored monetary value represented by a claim on the issuer, issued on receipt of funds for making payment transactions and accepted by a person other than the issuer — are regulated as e-money, and the FCA's PS19/22 identifies which tokens fall under those Regulations.
Cryptoassets such as Bitcoin and Ether that are neither specified investments nor e-money sit outside the existing FSMA perimeter (PS19/22) and are covered today only by MLR registration and the promotions regime; from 25 October 2027 they are "qualifying cryptoassets" and dealing, arranging, safeguarding, operating a trading platform and staking in relation to them are regulated activities under SI 2026/102.
HM Treasury's 2023 "phase 1" plan to regulate fiat-backed payment stablecoins first (update of 30 October 2023; FCA DP23/4) was dropped on 21 November 2024 in favour of a single phase; issuing a qualifying stablecoin is instead a regulated activity (RAO art 9M) under SI 2026/102 from 25 October 2027, with FCA final rules in PS26/10 (30 June 2026).
Issuing a qualifying stablecoin from an establishment in the UK (RAO art 9M) and safeguarding qualifying cryptoassets including stablecoins (art 9N) are regulated activities under SI 2026/102 from 25 October 2027; a "qualifying stablecoin" is a qualifying cryptoasset that seeks to maintain a stable value by reference to fiat currency (art 88G).
The FCA will authorise and supervise issuers of UK qualifying stablecoins from 25 October 2027 under RAO art 9M and PS26/10 (30 June 2026); HM Treasury decided not to amend the Payment Services Regulations 2017 for UK-issued stablecoins "at this time", so use of stablecoins for payments is not yet separately regulated.
HM Treasury may recognise a stablecoin issuer as systemic under the Banking Act 2009 (as amended by FSMA 2023) after consulting the Bank of England, FCA and PSR; a recognised issuer is then regulated jointly, with the Bank leading on prudential matters and the FCA on conduct, under the approach published 30 June 2026 and the Bank's policy statement of 22 June 2026.
The former "phase 2" was merged into a single regime: SI 2026/102 (in force 25 October 2027) regulates public offers and admissions to trading, market abuse, safeguarding (art 9N), operating a trading platform (art 9S), dealing as principal and agent (arts 9T, 9W), arranging (art 9Y), staking (art 9Z6) and qualifying stablecoin issuance (art 9M) in one instrument.
SI 2026/102 Part 2 Chapter 1 (regs 3–16) regulates qualifying cryptoasset public offers and admissions to trading on a qualifying cryptoasset trading platform as designated activities from 25 October 2027, with FCA admissions and disclosures rules in PS26/9 (30 June 2026).
From 25 October 2027 exchange services are regulated beyond AML: operating a qualifying cryptoasset trading platform (RAO art 9S) and dealing in qualifying cryptoassets as principal or agent (arts 9T, 9W) require FCA authorisation under SI 2026/102, with final FCA rules in PS26/11 (30 June 2026).
From 25 October 2027 safeguarding of qualifying cryptoassets is a regulated activity (RAO art 9N, SI 2026/102) and the FCA applies CASS 17 client-asset rules to client cryptoassets under its final rules of 30 June 2026.
Staking: arrangements for qualifying cryptoasset staking are not a collective investment scheme (SI 2025/17, in force 31 January 2025) and qualifying cryptoasset staking becomes a regulated activity (RAO art 9Z6) on 25 October 2027. Lending and borrowing are captured within dealing as principal and arranging under SI 2026/102. DeFi: the SI has no special provisions for decentralised models; the FCA decides case by case whether a controlling party needs authorisation and plans a further perimeter consultation in late 2026.
SI 2026/102 Part 2 Chapter 2 (regs 17–34) creates a market abuse regime for qualifying cryptoassets and related instruments — inside information, market manipulation and related designated-activity rules — in force 25 October 2027, with FCA rules in PS26/9 (30 June 2026).
The regime was delivered by secondary legislation: FSMA 2023 s.69 (in force 29 August 2023) amended FSMA 2000 s.22 so regulated activities may relate to cryptoassets, and the Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026 (SI 2026/102) create the new regulated and designated activities, in force 25 October 2027.
The Digital Securities Sandbox, established by the Financial Services and Markets Act 2023 (Digital Securities Sandbox) Regulations 2023 (SI 2023/1398, in force 8 January 2024), is an FMI sandbox in which firms legally established in the UK can use developing technology such as distributed ledger technology to issue, trade and settle digital securities under modified rules, operated jointly by the Bank of England and the FCA until December 2028.
Consumer protection in the new regime: the FCA applies key Handbook obligations including the Consumer Duty to regulated cryptoasset activities from 25 October 2027 (PS26/13, FG26/5, 30 June 2026); MLR registration confers no Financial Ombudsman or FSCS protection and registered firms must tell customers so under MLRs reg 60A.
The FCA published finalised guidance FG26/6 Cryptoasset Operational Resilience on 30 June 2026 alongside its final rules for the regime that applies from 25 October 2027.
Cryptoasset exchanges currently need only MLR registration; from 25 October 2027, operating a qualifying cryptoasset trading platform (RAO art 9S), dealing in qualifying cryptoassets as principal (art 9T) or as agent (art 9W), and arranging deals (art 9Y) are regulated activities under SI 2026/102 requiring FCA authorisation.
There is no "24-hour rule" for cryptoasset custody in UK law: SI 2026/102 reg 40 makes safeguarding qualifying cryptoassets a regulated activity (RAO art 9N) from 25 October 2027, subject to exclusions for group arrangements (art 9O), introductions (art 9P), temporary settlement arrangements (art 9Q) and other cases (art 9R); overseas firms serving UK consumers need UK authorisation.
Cryptoassets are not "funds" under the Payment Services Regulations 2017 (reg 2: banknotes and coins, scriptural money and electronic money), so pure cryptoasset payment processing is not a payment service; the fiat-crypto exchange element requires MLR registration as a cryptoasset exchange provider, and HM Treasury decided not to amend the PSRs for UK-issued stablecoins "at this time".
As of October 2026, cryptoasset exchange providers and custodian wallet providers carrying on business in the UK must be registered with the FCA under the Money Laundering Regulations 2017 for AML/CTF purposes (mandatory since 10 January 2020); MLR registration covers only AML/CTF supervision, confers no FOS or FSCS protection, and remains required until the FSMA regime starts on 25 October 2027.
Under the Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026 (SI 2026/102) cryptoasset activities become FSMA regulated activities requiring full FCA authorisation from 25 October 2027; MLR registration does not automatically convert — registered firms must obtain FSMA authorisation through the application window of 30 September 2026 to 28 February 2027, and must stay MLR-registered until the new regime starts.
MLR registration is triggered by carrying on cryptoasset business in the UK (a UK crypto ATM counts); under SI 2026/102, from 25 October 2027, operating a trading platform, dealing or arranging for UK consumers requires UK authorisation regardless of whether the firm is based in the UK or overseas, while overseas firms serving only UK institutional customers (not intermediaries to UK consumers) are not required to be authorised.
MLR registration carries no minimum capital requirement; from 25 October 2027 FSMA-authorised cryptoasset firms must meet the FCA's CRYPTOPRU prudential regime (PS26/12, 30 June 2026, consulted in CP25/42), including capital and stress-testing requirements.
MLR-registered cryptoasset businesses must appoint a nominated officer (MLRO) under reg 21(3), identify and verify customers under reg 28(2), conduct ongoing monitoring including scrutiny of transactions under reg 28(11), and the FCA expects evidenced transaction-monitoring rules and sanctions-specific controls in the registration application.
For MLR registration the FCA expects a described UK compliance function with named role-holders and an MLRO appointed under reg 21(3); under SI 2026/102 firms serving UK consumers through a trading platform, dealing or arranging must be authorised in the UK regardless of where they are based, and the FCA published its approach to international cryptoasset firms as FG26/7 on 30 June 2026.
The FCA's MLR registration assessment covers beneficial owners (as defined in MLRs regs 5 and 6), officers and managers, each of whom must pass the reg 58A fit and proper test; the FCA expects a Money Laundering Reporting form for every such individual and an MLRO appointed under reg 21(3).
MLR registration applications are submitted to the FCA through its Connect system with the Category 6 application fee paid on submission; the fee is not refunded on withdrawal or refusal, and the FCA has 3 months to decide once it holds all the information needed for a determination.
For FSMA authorisation under the new cryptoasset regime (SI 2026/102): the application period opened 30 September 2026 and closes 28 February 2027, applications are made via the FCA Connect system, and the regime commences 25 October 2027; firms that apply within the window and are undetermined at commencement benefit from a saving provision allowing them to continue providing cryptoasset services.
The FCA application fee for cryptoasset MLR registration falls in FCA pricing Category 6, is payable via Connect on submission, and is not refunded if the application is withdrawn or refused; a rejected (incomplete) submission may be refunded.
The FCA published its final rules and guidance for the cryptoasset regime on 30 June 2026 (PS26/9 to PS26/13, FG26/5 to FG26/7) and final perimeter guidance PS26/18 on 16 September 2026; the rules apply to firms granted FSMA permission on or after 25 October 2027, and the FCA plans a further perimeter-guidance consultation in late 2026 with final guidance in early 2027.
AML/KYC Requirements
Cryptoasset exchange providers and custodian wallet providers have been "relevant firms" under every UK sanctions regime since 30 August 2022 (SI 2022/818) and must freeze funds and economic resources of designated persons, not make funds available to them, and report to OFSI any designated-person holdings and suspected breaches; OFSI published "Sanctions compliance in the Cryptoassets sector: Threat Assessment" on 21 July 2025 setting out the sector-specific evasion risks it expects firms to control.
UK sanctions are made under the Sanctions and Anti-Money Laundering Act 2018 s.1 either to comply with UN Security Council obligations or for autonomous UK purposes such as human rights, national security and foreign policy, and are administered by OFSI within HM Treasury; they bind all persons in the UK and UK persons worldwide (s.21), and OFSI guidance treats cryptoassets as covered by the asset-freeze definitions. The UK regime contains no "secondary sanctions" instrument; US OFAC measures are not part of UK law.
Cryptoasset exchange providers and custodian wallet providers registered with the FCA under the Money Laundering Regulations 2017 reg 14A have been "relevant firms" under every UK sanctions regime since 30 August 2022 (SI 2022/818) and must screen for designated persons and report to OFSI; the Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026 (SI 2026/102) bring safeguarding of qualifying cryptoassets and other cryptoasset activities into FSMA authorisation on 25 October 2027, with the FCA application window running 30 September 2026 to 28 February 2027 and no automatic conversion of MLR registrations.
UK financial sanctions prohibitions bind all persons within the UK and United Kingdom persons for conduct anywhere in the world (SAMLA 2018 s.21), so a UK cryptoasset firm must apply asset-freeze and OFSI reporting obligations to transactions it conducts abroad, including in markets where cryptoassets are otherwise unregulated; the obligations attach to designated persons on the UK Sanctions List rather than to whole jurisdictions.
UK sanctions offences created under SAMLA 2018 regulations carry a statutory maximum of 10 years imprisonment on indictment (SAMLA s.17(5)); OFSI may impose civil monetary penalties under the Policing and Crime Act 2017 s.146 of up to the greater of £1,000,000 and 50% of the estimated value of the funds or economic resources involved; carrying on unauthorised regulated activity (FSMA 2000 s.23) and contravening the Money Laundering Regulations 2017 (reg 86) each carry up to two years imprisonment and a fine on indictment.
FCA cryptoasset enforcement to date comprises three actions: CB Payments Ltd (Coinbase group) fined £3,503,546 on 25 July 2024 under the Electronic Money Regulations 2011 after onboarding 13,416 high-risk customers in breach of a voluntary requirement; Olumide Osunkoya sentenced to four years at Southwark Crown Court on 28 February 2025 for running an unregistered crypto ATM network worth over £2.5m, the first UK criminal conviction for unregistered cryptoasset activity; and legal proceedings begun against HTX (formerly Huobi) on 10 February 2026 for illegal financial promotions to UK consumers. Firms that do not apply for FSMA authorisation in the 30 September 2026 to 28 February 2027 window must run off UK cryptoasset business before the regime commences on 25 October 2027 or breach the FSMA s.19 general prohibition.
On 14 October 2025 the UK, jointly with the US, sanctioned the Prince Group and its chairman Chen Zhi under the Global Human Rights Sanctions Regulations 2020 for operating scam centres in Cambodia, alongside Byex Exchange, a cryptocurrency platform linked to the group; on 26 March 2026 the UK became the first country to sanction Xinbi, a cryptocurrency-based marketplace serving Southeast Asian scam centres, and a number of London properties were frozen.
The FCA has been the anti-money laundering and counter-terrorist financing supervisor of UK cryptoasset businesses since 10 January 2020, and such businesses must register with the FCA under the Money Laundering Regulations 2017 before starting in-scope services; FSMA authorisation, supervision, rule-making and enforcement for regulated cryptoasset activities under SI 2026/102 begin on 25 October 2027, with applications accepted from 30 September 2026 to 28 February 2027.
HM Treasury sets UK cryptoasset policy and makes the implementing legislation: it published the draft cryptoasset regulated-activities statutory instrument with a policy note (near-final version 16 December 2025) and made the Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026 (SI 2026/102) on 4 February 2026, which come into force on 25 October 2027.
Travel Rule
Travel Rule adopted — MLRs 2017 Part 7A (regulations 64A–64H, inserted by SI 2022/860 and in force 1 September 2023): the originator's cryptoasset business must send the originator and beneficiary information in regulation 64C(5) with every inter-cryptoasset-business transfer, and where regulation 64C(3) does not apply must add the fuller originator identifiers in regulation 64C(6) for transfers equal to or exceeding £800 in value, a sum substituted with effect from 30 June 2026 by SI 2026/621 regulation 32.
GBP 0 (no threshold)Tax Reporting
HMRC does not treat cryptoassets as currency or money. UK individuals pay Capital Gains Tax on gains from disposing of cryptoassets (selling, swapping token-for-token, spending, or gifting other than to a spouse or civil partner) and Income Tax on cryptoassets received as employment income or, for non-trading mining, staking or lending, as other taxable income; both are reported through Self Assessment. Separately, UK reporting cryptoasset service providers must collect user and transaction data under the Cryptoasset Reporting Framework (SI 2025/744, in force 1 January 2026) and file their first annual report with HMRC between 1 January and 31 May 2027 covering calendar year 2026.
Exchanging one type of cryptoasset token for a different type of token is a disposal for UK Capital Gains Tax purposes, so any gain measured in pound sterling at the time of the swap is chargeable even though no fiat money is received.
Using cryptoasset tokens to pay for goods or services is a disposal for UK Capital Gains Tax purposes, with the gain computed on the sterling value of the tokens at the time of payment.
Giving cryptoasset tokens to another person is a disposal for UK Capital Gains Tax purposes unless the gift is to a spouse or civil partner; gifts of tokens to charity are generally outside CGT, except tainted donations or disposals to a charity for more than acquisition cost.
Gains on cryptoasset disposals by a UK basic-rate taxpayer are charged to Capital Gains Tax at 18% for gains made from 6 April 2026, to the extent the gains fall within the basic-rate Income Tax band; the annual exempt amount for 2026 to 2027 is £3,000.
Gains on cryptoasset disposals by a UK higher-rate or additional-rate taxpayer are charged to Capital Gains Tax at 24% for gains made from 6 April 2026; basic-rate taxpayers also pay 24% on the part of their gains that exceeds the basic-rate band.
Cryptoassets received by a UK individual as employment income count as money's worth and are subject to Income Tax and National Insurance contributions on their sterling value; tokens received from non-trading mining, staking or lending are treated by HMRC as other taxable income and reported through Self Assessment.
Custody Requirements
UK Custody Integration (FCA) | Block Intelligence Solutions
United Kingdom Tax Guide for American Expats | dual.tax
Best Crypto Custodians in 2026: A Complete Guide
Stablecoin Regulation
Issuing a qualifying stablecoin — a qualifying cryptoasset that references a fiat currency (RAO article 88G) — becomes a specified kind of activity under RAO article 9M from 25 October 2027 (SI 2026/102 regulation 40), with FCA issuance, backing-asset and redemption rules in PS26/10 Stablecoin issuance (30 June 2026); sums received in exchange for a qualifying stablecoin are not deposits (article 9AZA).
Sterling systemic stablecoins: the Bank of England policy statement and draft Code of Practice of 22 June 2026 replace holding limits with a temporary issuance guardrail on each systemic stablecoin and are to be finalised by end-2026; an issuer becomes systemic only once recognised by HM Treasury under the Banking Act 2009, after which the Bank leads prudential regulation while the FCA, regulator of all UK-issued qualifying stablecoins from 25 October 2027, leads on conduct.
Securities Classification
Until 25 October 2027 the FCA does not authorise cryptoasset activities as such: it registers cryptoasset exchange and custodian wallet providers under MLRs 2017 regulation 14A (since 10 January 2020) and supervises cryptoasset financial promotions (since 8 October 2023); from 25 October 2027, the full commencement day under SI 2026/102 regulation 1(2), issuing qualifying stablecoins, safeguarding, operating a trading platform, dealing, arranging and staking become FSMA regulated activities requiring Part 4A authorisation.
UK MAR (EU Regulation 596/2014, onshored into UK law on 31 December 2020 by the European Union (Withdrawal) Act 2018) applies to financial instruments admitted to or traded on UK trading venues, which includes tokenised securities that are financial instruments; it does not reach qualifying cryptoassets, whose market-abuse regime is SI 2026/102 Part 2 Chapter 2 from 25 October 2027.
From 25 October 2027 it is unlawful under SI 2026/102 regulation 10 for a qualifying cryptoasset to be offered to the public in the United Kingdom unless the offer falls within an exception in Part 1 of Schedule 1, with admission and disclosure rules in FCA PS26/9 (30 June 2026); the securities-only Public Offers and Admissions to Trading Regulations 2024 (SI 2024/105) do not apply to qualifying cryptoassets.
Dealing in qualifying cryptoassets as principal (RAO article 9T) or as agent (article 9W) and arranging deals in them (article 9Y) become specified kinds of activity on 25 October 2027 under SI 2026/102 regulation 40; tokens that are specified investments under the Regulated Activities Order (security tokens) were already inside the FCA perimeter under PS19/22 (July 2019).
Cryptoasset custody becomes a regulated activity on 25 October 2027: RAO article 9N, inserted by SI 2026/102 regulation 40, specifies the safeguarding of a qualifying cryptoasset or a relevant specified investment cryptoasset, with FCA custody and stablecoin rules in PS26/10 (30 June 2026); until then custodian wallet providers need only MLR registration under regulation 14A.
Tokenised securities that are financial instruments admitted to trading or traded on a UK regulated market, MTF or OTF fall within UK MAR, so the insider-dealing, unlawful-disclosure and market-manipulation prohibitions apply to them exactly as to conventionally issued securities.
Holding and trading cryptoassets is lawful in the UK; SI 2026/102 regulation 40 inserts RAO articles 9M–9Z11 so that from 25 October 2027 issuing a qualifying stablecoin (article 9M), safeguarding qualifying cryptoassets (9N), operating a qualifying cryptoasset trading platform (9S), dealing as principal (9T) or agent (9W), arranging deals (9Y) and qualifying cryptoasset staking (9Z6) are specified kinds of activity requiring FCA authorisation.
Market abuse in qualifying cryptoassets is governed not by MAR but by SI 2026/102 Part 2 Chapter 2 (regulations 17–39: inside information, insider dealing, unlawful disclosure, public disclosure, market manipulation, insider lists), in force from 25 October 2027, with FCA rules in PS26/9 Admissions and Disclosures and Market Abuse Regime for Cryptoassets (MARC) published 30 June 2026.
No firm yet holds FSMA authorisation for cryptoasset activities: the FCA application window opened on 30 September 2026 and closes on 28 February 2027 ahead of the 25 October 2027 commencement, and MLR-registered firms get no automatic conversion; as at 1 October 2026 the FCA had registered 68 of the 393 MLR cryptoasset applications determined since January 2020 (265 withdrawn, 46 rejected, 14 refused).
Cryptoasset exchange providers and custodian wallet providers are within the Money Laundering Regulations 2017 under regulation 14A (inserted by SI 2019/1511, in force 10 January 2020) and must register with the FCA before starting any in-scope services; FCA registration confers no Financial Ombudsman Service or FSCS protection on their customers.
Sanctions & Restrictions
Sanctions data collection in progress.
Research & Articles
Regulatory Forecast
high confidenceLikely enforcement action expected around 2026-11-08
Based on 101 historical regulatory events for United Kingdom, averaging every 11 days, with increasing regulatory activity.
Recent Updates
UK FCA Crypto Financial Promotions Regime Takes Effect
The FCA's crypto financial promotions regime classified most cryptoassets as 'restricted mass-market investments' under FSMA. All promotions must include prominent risk warnings, be clear/fair/not misleading, and restrict incentives like referral bonuses. FCA has maintained an ~85% rejection rate for crypto registrations with only ~40 firms currently registered.
AML/KYC: Robust policies, KYC, transaction monitoring, sanctions screening, MLRO appointment; ongoing supervision...
AML/KYC: Robust policies, KYC, transaction monitoring, sanctions screening, MLRO appointment; ongoing supervision.
OFSI Enforcement: UK VASPs must immediately freeze and restrict assets of designated persons (DPs), report holdin...
OFSI Enforcement: UK VASPs must immediately freeze and restrict assets of designated persons (DPs), report holdings or suspected sanctions evasion to OFSI (e.g., via crypto transfers by DPs), and avoid processing transactions involving sanctioned parties; OFSI's 2022 Cryptoassets Threat Assessment highlights risks like pseudonymity enabling evasion.
FCA Oversight: Registered VASPs under the Financial Services and Markets Act (FSMA) must integrate sanctions scre...
FCA Oversight: Registered VASPs under the Financial Services and Markets Act (FSMA) must integrate sanctions screening into AML/CTF frameworks, with new rules from 2027 expanding custody definitions and requiring FCA approval by Feb 2028.
Civil/Criminal Fines: Unlimited fines, asset seizures, or imprisonment up to 7-10 years under Sanctions and Anti-...
Civil/Criminal Fines: Unlimited fines, asset seizures, or imprisonment up to 7-10 years under Sanctions and Anti-Money Laundering Act 2018 and FSMA; OFSI can impose monetary penalties.
FCA Actions: Fines, suspensions, or permanent closures for unregistered firms missing 2027-2028 deadlines; e.g., ...
FCA Actions: Fines, suspensions, or permanent closures for unregistered firms missing 2027-2028 deadlines; e.g., FCA clashes with Binance over compliance.
Examples include sanctions on crypto networks (e.g., Prince Group-linked in 2023).
Examples include sanctions on crypto networks (e.g., Prince Group-linked in 2023).
Export Control Act 2012 (IOM): Governs trade sanctions and controls.
Export Control Act 2012 (IOM): Governs trade sanctions and controls.
Reference: UN Security Council Sanctions Committees
Reference: UN Security Council Sanctions Committees
Relevance to Crypto: UK sanctions include asset freezes and prohibitions on making funds or economic resources av...
Relevance to Crypto: UK sanctions include asset freezes and prohibitions on making funds or economic resources available, which explicitly extends to crypto assets. The UK has issued guidance on crypto asset sanctions compliance.
Reference: UK Financial Sanctions Guidance (OFSI)
Reference: UK Financial Sanctions Guidance (OFSI)
Reference: OFSI Consolidated List of Financial Sanctions Targets (This list is paramount for screening in the IOM).
Reference: OFSI Consolidated List of Financial Sanctions Targets (This list is paramount for screening in the IOM).
Reference: EU Sanctions Map
Reference: EU Sanctions Map
Reference: OFAC Sanctions Programs and Information
Reference: OFAC Sanctions Programs and Information
Proceeds of Crime Act 2008 (IOM): Breaching AML/CFT obligations related to sanctions can also lead to penalties u...
Proceeds of Crime Act 2008 (IOM): Breaching AML/CFT obligations related to sanctions can also lead to penalties under this Act.
Regulatory Penalties: The IOM FSC can impose significant administrative penalties, fines, and remedial actions fo...
Regulatory Penalties: The IOM FSC can impose significant administrative penalties, fines, and remedial actions for regulatory breaches, including failure to implement adequate sanctions controls, under the Designated Business (Registration and Oversight) Act 2015.
OFSI Consolidated List (UK): This list is comprehensive and includes all individuals and entities designated unde...
OFSI Consolidated List (UK): This list is comprehensive and includes all individuals and entities designated under UK financial sanctions regimes, which cover numerous countries and themes such as:
UN Sanctions: TCI, through its implementation of UK law, is legally bound to enforce all UN Security Council reso...
UN Sanctions: TCI, through its implementation of UK law, is legally bound to enforce all UN Security Council resolutions imposing sanctions. These are automatically incorporated into UK domestic law and, by extension, TCI law.
UK Sanctions: VASPs in TCI must comply with the full scope of UK financial sanctions. This includes asset freezes...
UK Sanctions: VASPs in TCI must comply with the full scope of UK financial sanctions. This includes asset freezes, travel bans, trade restrictions, and other measures against designated persons, entities, and regimes. The UK's autonomous sanctions regime, established post-Brexit under the Sanctions and Anti-Money Laundering Act 2018 (SAMLA), is comprehensive.
EU Sanctions: While TCI is not directly bound by EU sanctions post-Brexit, the UK's autonomous sanctions regime o...
EU Sanctions: While TCI is not directly bound by EU sanctions post-Brexit, the UK's autonomous sanctions regime often mirrors or aligns with EU sanctions. Therefore, compliance with UK sanctions will often cover the intent of EU sanctions.
OFAC Sanctions: While OFAC sanctions are not directly enacted by TCI law, any VASP operating in TCI that deals wi...
OFAC Sanctions: While OFAC sanctions are not directly enacted by TCI law, any VASP operating in TCI that deals with U.S. dollar transactions, has U.S. customers, or interacts with U.S. financial institutions (e.g., through correspondent banking relationships) must comply with OFAC sanctions to avoid severe penalties from U.S. authorities and potential de-risking by financial partners. This is a critical practical compliance requirement for VASPs with any U.S. nexus.
Practical Screening: Given the global nature of virtual assets and correspondent banking relationships, most VASP...
Practical Screening: Given the global nature of virtual assets and correspondent banking relationships, most VASPs will also screen against:
Sectoral Sanctions: Restrictions may also apply to specific sectors or types of activity within certain countries...
Sectoral Sanctions: Restrictions may also apply to specific sectors or types of activity within certain countries, rather than a full embargo.
United Nations Security Council (UNSC) Sanctions: All persons and entities designated by the UNSC for asset freez...
United Nations Security Council (UNSC) Sanctions: All persons and entities designated by the UNSC for asset freezes are automatically included.
United Kingdom Autonomous Sanctions: Designations made unilaterally by the UK government under the Sanctions and ...
United Kingdom Autonomous Sanctions: Designations made unilaterally by the UK government under the Sanctions and Anti-Money Laundering Act 2018 (SAMLA) and subsequent regulations.
No Services to Sanctioned Jurisdictions: UK firms must block transactions even in unregulated markets if involvin...
No Services to Sanctioned Jurisdictions: UK firms must block transactions even in unregulated markets if involving a UK nexus. The SAMLA 2018 provides the legal authority for these prohibitions, requiring all UK persons and entities to comply regardless of where transactions occur UK Legislation. Civil and criminal penalties apply for violations, including unlimited fines and asset seizures MarketWatch.
FCA Actions: The FCA can impose fines, suspensions, or permanent closures for unregistered firms missing the 2027...
FCA Actions: The FCA can impose fines, suspensions, or permanent closures for unregistered firms missing the 2027–2028 deadlines under the new cryptoasset regime. For instance, the FCA has previously clashed with Binance over compliance failures, issuing warnings and requiring the exchange to cease regulated activities in the UK. The FCA's enforcement powers include unlimited fines for breaches of the Financial Services and Markets Act 2000 (FSMA) and the Money Laundering Regulations 2017 USA Today.
HM Treasury (HMT): HMT oversees policy development and legislation, including consultations on the cryptoasset re...
HM Treasury (HMT): HMT oversees policy development and legislation, including consultations on the cryptoasset regime. HMT is responsible for designating sanctions under SAMLA and issuing guidance on financial sanctions. HMT also coordinates with OFSI on sanctions implementation and with the FCA on regulatory matters 9to5Mac. The Treasury has published multiple consultations on cryptoasset regulation, including the 2025 consultation on extending the financial promotions regime USA Today.
AML/KYC Requirements: Robust policies include KYC, transaction monitoring, sanctions screening, and MLRO appointm...
AML/KYC Requirements: Robust policies include KYC, transaction monitoring, sanctions screening, and MLRO appointment. Ongoing supervision by the FCA requires firms to implement risk-based AML/CTF measures, including customer due diligence (CDD) for all transactions over £1,000, enhanced due diligence (EDD) for high-risk customers, and ongoing transaction monitoring. The Money Laundering Regulations 2017 require VASPs to appoint a Money Laundering Reporting Officer (MLRO) and maintain records for at least five years UK Legislation. The FCA's supervision includes thematic reviews and enforcement actions for AML failures MarketWatch.
The UK uses sanctions to fulfil a range of purposes, including supporting foreign policy and national security object...
The UK uses sanctions to fulfil a range of purposes, including supporting foreign policy and national security objectives, as well as maintaining international peace and security, and preventing terrorism. UK government guidance on trade sanctions and arms embargoes
The Foreign, Commonwealth & Development Office (FCDO) is responsible for overall UK policy on sanctions. UK governmen...
The Foreign, Commonwealth & Development Office (FCDO) is responsible for overall UK policy on sanctions. UK government guidance on trade sanctions and arms embargoes
The Department for Business and Trade (DBT) implements trade sanctions and other trade restrictions and has overall r...
The Department for Business and Trade (DBT) implements trade sanctions and other trade restrictions and has overall responsibility for trade sanctions licensing. UK government guidance on trade sanctions and arms embargoes
The UK implements a range of UK sanctions regimes through regulations established under the Sanctions and Anti-Money ...
The UK implements a range of UK sanctions regimes through regulations established under the Sanctions and Anti-Money Laundering Act 2018 (the Sanctions Act). UK government guidance on trade sanctions and arms embargoes
Trade sanctions, arms embargoes, and other trade restrictions – GOV.UK
Trade sanctions, arms embargoes, and other trade restrictions – GOV.UK
UK government guidance on trade sanctions and arms embargoes
UK government guidance on trade sanctions and arms embargoes
UK Banking Regulatory and Market Framework
UK Banking Regulatory and Market Framework
AML/KYC Standards: Banks engaged in cryptocurrency transactions must implement robust AML/KYC frameworks to identify,...
AML/KYC Standards: Banks engaged in cryptocurrency transactions must implement robust AML/KYC frameworks to identify, verify, and monitor customers' identities and transaction patterns, aligning with international best practices UK Banking Regulatory and Market Framework: Post-Crisis Reform.
UK Banking Regulatory and Market Framework: Post-Crisis Reform
UK Banking Regulatory and Market Framework: Post-Crisis Reform
The United Kingdom has implemented sanctions against Burundi, targeting individuals and entities involved in human ri...
The United Kingdom has implemented sanctions against Burundi, targeting individuals and entities involved in human rights abuses and undermining democratic processes.
UK-Bermuda Joint Statement on Sanctions: The United Kingdom and Bermuda have aligned their sanction regimes to ensure...
UK-Bermuda Joint Statement on Sanctions: The United Kingdom and Bermuda have aligned their sanction regimes to ensure coordinated enforcement against entities involved in illicit activities. This joint statement underscores the commitment to mutual legal assistance and harmonized financial sanctions, impacting cryptocurrency service providers operating within Bermuda. UK-Bermuda Joint Statement on Sanctions - GOV.UK
Banking Laws and Regulations 2026 | United Kingdom
Banking Laws and Regulations 2026 | United Kingdom
This profile is maintained by AI research workers and updated regularly. Connect via MCP for programmatic access.