← Back to United Kingdom Regulations

United Kingdom Compliance Report

Generated 2026-10-28

Comprehensive Framework

Regulatory Overview

Regulatory Status
Dedicated crypto/VA legislation, licensing regime, active enforcement
Key Regulator(s)
Bank of England, Prudential Regulation Authority
Risk Level
low
Primary Legislation
Financial Services and Markets Act 2000, as amended by FSMA 2023 s.69 (in force 29 August 2023), help understanding how FCA regulation applies, HM Treasury may recognise a stablecoin issuer as systemic under the Banking Act, Under the Financial Services and Markets Act 2000 (Cryptoassets) Regulations 202
Travel Rule
Adopted — Threshold: Implemented
Tax Reporting
HMRC does not treat cryptoassets as currency or money. UK individuals pay Capital Gains Tax on gains from disposing of cryptoassets (selling, swapping token-for-token, spending, or gifting other than to a spouse or civil partner) and Income Tax on cryptoassets received as employment income or, for non-trading mining, staking or lending, as other taxable income; both are reported through Self Assessment. Separately, UK reporting cryptoasset service providers must collect user and transaction data under the Cryptoasset Reporting Framework (SI 2025/744, in force 1 January 2026) and file their first annual report with HMRC between 1 January and 31 May 2027 covering calendar year 2026.. Exchanging one type of cryptoasset token for a different type of token is a disposal for UK Capital Gains Tax purposes, so any gain measured in pound sterling at the time of the swap is chargeable even though no fiat money is received.. Using cryptoasset tokens to pay for goods or services is a disposal for UK Capital Gains Tax purposes, with the gain computed on the sterling value of the tokens at the time of payment.. Giving cryptoasset tokens to another person is a disposal for UK Capital Gains Tax purposes unless the gift is to a spouse or civil partner; gifts of tokens to charity are generally outside CGT, except tainted donations or disposals to a charity for more than acquisition cost.. Gains on cryptoasset disposals by a UK basic-rate taxpayer are charged to Capital Gains Tax at 18% for gains made from 6 April 2026, to the extent the gains fall within the basic-rate Income Tax band; the annual exempt amount for 2026 to 2027 is £3,000.

Key Facts

  • aml Cryptoasset exchange providers and custodian wallet providers have been "relevant firms" under every UK sanctions regime since 30 August 2022 (SI 2022/818) and must freeze funds and economic resources of designated persons, not make funds available to them, and report to OFSI any designated-person holdings and suspected breaches; OFSI published "Sanctions compliance in the Cryptoassets sector: Threat Assessment" on 21 July 2025 setting out the sector-specific evasion risks it expects firms to control. UK sanctions are made under the Sanctions and Anti-Money Laundering Act 2018 s.1 either to comply with UN Security Council obligations or for autonomous UK purposes such as human rights, national security and foreign policy, and are administered by OFSI within HM Treasury; they bind all persons in the UK and UK persons worldwide (s.21), and OFSI guidance treats cryptoassets as covered by the asset-freeze definitions. The UK regime contains no "secondary sanctions" instrument; US OFAC measures are not part of UK law. Cryptoasset exchange providers and custodian wallet providers registered with the FCA under the Money Laundering Regulations 2017 reg 14A have been "relevant firms" under every UK sanctions regime since 30 August 2022 (SI 2022/818) and must screen for designated persons and report to OFSI; the Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026 (SI 2026/102) bring safeguarding of qualifying cryptoassets and other cryptoasset activities into FSMA authorisation on 25 October 2027, with the FCA application window running 30 September 2026 to 28 February 2027 and no automatic conversion of MLR registrations. Prohibited dealings with prescribed countries like Russia (post-2022 embargoes), North Korea, Iran, or Syria-linked entities; crypto transfers to/from these are high-risk and often blocked. UK financial sanctions prohibitions bind all persons within the UK and United Kingdom persons for conduct anywhere in the world (SAMLA 2018 s.21), so a UK cryptoasset firm must apply asset-freeze and OFSI reporting obligations to transactions it conducts abroad, including in markets where cryptoassets are otherwise unregulated; the obligations attach to designated persons on the UK Sanctions List rather than to whole jurisdictions. UK sanctions offences created under SAMLA 2018 regulations carry a statutory maximum of 10 years imprisonment on indictment (SAMLA s.17(5)); OFSI may impose civil monetary penalties under the Policing and Crime Act 2017 s.146 of up to the greater of £1,000,000 and 50% of the estimated value of the funds or economic resources involved; carrying on unauthorised regulated activity (FSMA 2000 s.23) and contravening the Money Laundering Regulations 2017 (reg 86) each carry up to two years imprisonment and a fine on indictment. FCA cryptoasset enforcement to date comprises three actions: CB Payments Ltd (Coinbase group) fined £3,503,546 on 25 July 2024 under the Electronic Money Regulations 2011 after onboarding 13,416 high-risk customers in breach of a voluntary requirement; Olumide Osunkoya sentenced to four years at Southwark Crown Court on 28 February 2025 for running an unregistered crypto ATM network worth over £2.5m, the first UK criminal conviction for unregistered cryptoasset activity; and legal proceedings begun against HTX (formerly Huobi) on 10 February 2026 for illegal financial promotions to UK consumers. Firms that do not apply for FSMA authorisation in the 30 September 2026 to 28 February 2027 window must run off UK cryptoasset business before the regime commences on 25 October 2027 or breach the FSMA s.19 general prohibition. On 14 October 2025 the UK, jointly with the US, sanctioned the Prince Group and its chairman Chen Zhi under the Global Human Rights Sanctions Regulations 2020 for operating scam centres in Cambodia, alongside Byex Exchange, a cryptocurrency platform linked to the group; on 26 March 2026 the UK became the first country to sanction Xinbi, a cryptocurrency-based marketplace serving Southeast Asian scam centres, and a number of London properties were frozen.
  • cross border The UK's regulatory landscape for cryptocurrencies and digital assets is evolving, with multiple authorities involved in overseeing different aspects of these financial instruments. The Financial Conduct Authority (FCA) is the primary regulator for crypto asset firms operating in the UK, overseeing activities such as exchange services and custodial arrangements. The UK government has issued guidance on the taxation of crypto assets, classifying them as "artificial currency" for tax purposes and outlining reporting obligations. Crypto asset firms providing exchange services must register with the FCA and obtain a suitable licence, such as an E-money licence or a P2P lending licence, depending on their business model. Custodial services for crypto assets are subject to similar licensing requirements, with firms required to adhere to stringent security and anti-money laundering (AML) standards. Crypto asset firms are obligated to implement robust customer due diligence (CDD) and ongoing monitoring processes to mitigate the risk of money laundering and terrorist financing. The FCA has issued specific guidance on AML/KYC requirements for crypto asset firms, emphasizing the need for comprehensive risk assessments and regular reviews of customer identification procedures. The FCA has taken enforcement action against several crypto asset firms for non-compliance with regulatory requirements, including failure to maintain adequate AML/KYC controls and insufficient risk management practices.
  • custody UK Custody Integration (FCA) | Block Intelligence Solutions United Kingdom Tax Guide for American Expats | dual.tax Best Crypto Custodians in 2026: A Complete Guide
  • general As an alternative to Self Assessment, UK individuals can report and pay Capital Gains Tax on cryptoasset disposals using the HMRC Capital Gains Tax real time service. UK individuals report and pay Capital Gains Tax on cryptoasset disposals, and Income Tax on cryptoassets received, by completing a Self Assessment tax return in pound sterling at the end of the tax year. Broad Definition for Share Identification Rules: Scope: Includes shares, securities of a company, and any other assets that can be dealt with without identifying specific units (fungible assets). Purpose: Applies to fungible assets like shares, securities, and foreign currency where individual units cannot be distinguished within a larger holding. Example: All ICI ordinary shares or all €100 notes are interchangeable for practical purposes. Scope: Specifically includes loan stock or similar securities from governments, public authorities, companies, etc., whether secured or unsecured. Purpose: Determines if a debt is a chargeable asset and applies to share reorganisation rules where conversions of these securities are treated without disposals.
  • licensing FCA — MLR registration and AML/CTF supervision of cryptoasset businesses (since 10 January 2020), supervision of cryptoasset financial promotions (since 8 October 2023), and authorisation, conduct and prudential regulation under SI 2026/102 from 25 October 2027. Of 393 MLR applications determined since January 2020, 68 were registered, 46 rejected, 265 withdrawn and 14 refused (as at 1 October 2026). Bank of England / PRA — on 22 June 2026 the Bank published its policy statement and draft Code of Practice for sterling systemic stablecoins, moving from proposed holding limits to a temporary issuance guardrail and revising backing-asset composition; it regulates recognised systemic stablecoin issuers jointly with the FCA (approach of 30 June 2026), and the PRA set interim expectations for banks' tokenised-asset, stablecoin and cryptoasset exposures in a Dear CEO letter of 18 May 2026. HM Treasury — policy and legislation for cryptoassets: made the Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026 (SI 2026/102) as a single-phase regime after announcing on 21 November 2024 that stablecoin activities would follow the same timetable as the rest of the regime; also made SI 2023/612 (promotions) and SI 2025/17 (staking not a CIS); recognises systemic stablecoin issuers under the Banking Act 2009. Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 (SI 2017/692), as amended by SI 2019/1511 with effect from 10 January 2020 — AML/CTF registration and supervision of cryptoasset exchange providers and custodian wallet providers (regs 14A, 56, 58A); travel rule in Part 7A from 1 September 2023 (SI 2022/860). Financial Services and Markets Act 2000, as amended by FSMA 2023 s.69 (in force 29 August 2023) — s.22 extended so regulated activities may relate to cryptoassets and s.417 given a cryptoasset definition; the regulated activities themselves are created by SI 2026/102 from 25 October 2027, and the crypto financial-promotions regime came from SI 2023/612 (7 October 2023). Financial Services and Markets Act 2000 (Financial Promotion) (Amendment) Order 2023 (SI 2023/612, made 7 June 2023, in force for all purposes 7 October 2023) — adds "qualifying cryptoasset" as a controlled investment and creates the art 73ZA exemption for MLR-registered firms' own promotions; the FCA classifies qualifying cryptoassets as restricted mass market investments in COBS 4.12A and has applied the regime since 8 October 2023. FCA MLR registration is required for cryptoasset exchange providers and custodian wallet providers. Since January 2020 the FCA has received 427 applications and determined 393: 68 registered (17%), 46 rejected (12%), 265 withdrawn (67%) and 14 refused (4%) as at 1 October 2026. The FSMA-based regime under SI 2026/102 (trading platforms, dealing, arranging, safeguarding, staking, qualifying stablecoin issuance) starts 25 October 2027. Custodian wallet providers currently need MLR registration, which imposes AML/CTF duties only and no safeguarding rules; from 25 October 2027 safeguarding qualifying cryptoassets is a regulated activity (RAO art 9N, SI 2026/102) requiring FCA authorisation, the FCA applies CASS 17 to client cryptoassets, and CRYPTOPRU prudential requirements apply (PS26/12, 30 June 2026).
  • marketing Digital Asset Service Providers: Requires registration under the FCA's Consolidated Tender System (CTS) or Alternative Investment Market (AIM). Capital Requirements: 15% capital buffer for digital asset firms. Oversees risk management, internal controls, and liquidity requirements for financial institutions operating in the cryptocurrency space. Application Process: Submit an application to the FCA via CREST system through a digital asset service provider (DASP) or directly by the firm itself. Timeline: 20 business days from submission, subject to review. Capital Requirements: DASPs must maintain 15% capital buffer as stipulated under FSMA and PRA regulations. Customer Due Diligence (CDD): Firms are required to conduct customer due diligence, including understanding the client's purpose for using digital assets and associated risks. Enhanced Customer Due Diligence (EDD): For high-risk customers or those in regulated activities, additional verification measures must be implemented.
  • ongoing Financial Conduct Authority (FCA): Oversees the conduct side of financial services. Prudential Regulation Authority (PRA): Monitors bank stability and insurance firms. Financial Services and Markets Act 2023 (FSMA 2023): Updates the regulatory framework, including provisions for crypto assets. Money Laundering Regulations 2017 (MLRs): Governs anti‑money laundering obligations for crypto asset businesses. Providers of regulated investment products or services (e.g., crypto‑ETFs, stablecoins) must obtain FCA authorisation. The MLRs do not prescribe specific capital thresholds for crypto‑asset businesses. However, firms offering regulated products may face minimum net asset value (NAV) requirements under the FCA’s rules on authorised arrangements. Register with the FCA via the “Register and apply for authorisation” portal. The timeline typically ranges from 12 to 24 months for full authorisation. Firms must appoint a Senior Manager approved by the FCA and implement robust risk management systems under the Senior Managers Certification Regime (SM&CR).
  • sandbox The FCA's Regulatory Sandbox allows firms to experiment with new approaches to products, processes, business models, or delivery channels in a supervised environment (Source: Regulatory Sandbox | FCA). The sandbox aims to accelerate the market entry of innovative financial services while safeguarding consumers and maintaining the integrity of the financial system. Participating firms must apply for permission from the FCA to use the sandbox (Source: Regulatory Sandbox | FCA). Applicants need to demonstrate that their innovation is novel, beneficial to consumers, and does not pose undue risk to the financial system. Even within the sandbox, firms must comply with anti-money laundering (AML) and know your customer (KYC) regulations to prevent illicit activities (Source: SEC.gov | Comment on Digital Securities Sandbox Joint Bank of...). The FCA expects sandbox participants to implement robust AML/KYC measures appropriate to the risks associated with their specific innovations. The FCA monitors sandbox activities closely and may impose conditions or restrictions if it identifies potential risks (Source: SEC.gov | Comment on Digital Securities Sandbox Joint Bank of...). Non-compliance with regulatory expectations can lead to enforcement actions, including fines or the withdrawal of sandbox permission.
  • securities Until 25 October 2027 the FCA does not authorise cryptoasset activities as such: it registers cryptoasset exchange and custodian wallet providers under MLRs 2017 regulation 14A (since 10 January 2020) and supervises cryptoasset financial promotions (since 8 October 2023); from 25 October 2027, the full commencement day under SI 2026/102 regulation 1(2), issuing qualifying stablecoins, safeguarding, operating a trading platform, dealing, arranging and staking become FSMA regulated activities requiring Part 4A authorisation. Practical Law UK Practice Note w-034-9122 – Provides an overview of the regulatory framework for securities transactions in the United Kingdom, referencing the Market Abuse Regulation (596/2014), the Transparency Directive (2004/109/EU), and the Public Offers and Admissions to Trading Regulations (SI 2024/105). Source: https://uk.practicallaw.thomsonreuters.com/w-034-9122?transitionType=Default&contextData=%28sc.Default%29 UK MAR (EU Regulation 596/2014, onshored into UK law on 31 December 2020 by the European Union (Withdrawal) Act 2018) applies to financial instruments admitted to or traded on UK trading venues, which includes tokenised securities that are financial instruments; it does not reach qualifying cryptoassets, whose market-abuse regime is SI 2026/102 Part 2 Chapter 2 from 25 October 2027. Transparency Directive (EU) 2004/109/EU, implemented in the UK. From 25 October 2027 it is unlawful under SI 2026/102 regulation 10 for a qualifying cryptoasset to be offered to the public in the United Kingdom unless the offer falls within an exception in Part 1 of Schedule 1, with admission and disclosure rules in FCA PS26/9 (30 June 2026); the securities-only Public Offers and Admissions to Trading Regulations 2024 (SI 2024/105) do not apply to qualifying cryptoassets. Dealing in qualifying cryptoassets as principal (RAO article 9T) or as agent (article 9W) and arranging deals in them (article 9Y) become specified kinds of activity on 25 October 2027 under SI 2026/102 regulation 40; tokens that are specified investments under the Regulated Activities Order (security tokens) were already inside the FCA perimeter under PS19/22 (July 2019). Cryptoasset custody becomes a regulated activity on 25 October 2027: RAO article 9N, inserted by SI 2026/102 regulation 40, specifies the safeguarding of a qualifying cryptoasset or a relevant specified investment cryptoasset, with FCA custody and stablecoin rules in PS26/10 (30 June 2026); until then custodian wallet providers need only MLR registration under regulation 14A. Offering investment management services involving cryptoassets.
  • stablecoin Issuing a qualifying stablecoin — a qualifying cryptoasset that references a fiat currency (RAO article 88G) — becomes a specified kind of activity under RAO article 9M from 25 October 2027 (SI 2026/102 regulation 40), with FCA issuance, backing-asset and redemption rules in PS26/10 Stablecoin issuance (30 June 2026); sums received in exchange for a qualifying stablecoin are not deposits (article 9AZA). Sterling systemic stablecoins: the Bank of England policy statement and draft Code of Practice of 22 June 2026 replace holding limits with a temporary issuance guardrail on each systemic stablecoin and are to be finalised by end-2026; an issuer becomes systemic only once recognised by HM Treasury under the Banking Act 2009, after which the Bank leads prudential regulation while the FCA, regulator of all UK-issued qualifying stablecoins from 25 October 2027, leads on conduct.
  • status United Kingdom regulatory status: three stacked regimes — FCA anti-money-laundering registration of cryptoasset exchange and custodian wallet providers under MLRs 2017 regulation 14A since 10 January 2020; the cryptoasset financial-promotions regime under SI 2023/612 (made 7 June 2023, in force for all purposes four months later, applied by the FCA from 8 October 2023); and full FSMA authorisation under the Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026 (SI 2026/102, made 4 February 2026) commencing 25 October 2027, with the FCA application gateway open from 30 September 2026 to 28 February 2027.
  • tax HMRC does not treat cryptoassets as currency or money. UK individuals pay Capital Gains Tax on gains from disposing of cryptoassets (selling, swapping token-for-token, spending, or gifting other than to a spouse or civil partner) and Income Tax on cryptoassets received as employment income or, for non-trading mining, staking or lending, as other taxable income; both are reported through Self Assessment. Separately, UK reporting cryptoasset service providers must collect user and transaction data under the Cryptoasset Reporting Framework (SI 2025/744, in force 1 January 2026) and file their first annual report with HMRC between 1 January and 31 May 2027 covering calendar year 2026. Exchanging one type of cryptoasset token for a different type of token is a disposal for UK Capital Gains Tax purposes, so any gain measured in pound sterling at the time of the swap is chargeable even though no fiat money is received. Using cryptoasset tokens to pay for goods or services is a disposal for UK Capital Gains Tax purposes, with the gain computed on the sterling value of the tokens at the time of payment. Giving cryptoasset tokens to another person is a disposal for UK Capital Gains Tax purposes unless the gift is to a spouse or civil partner; gifts of tokens to charity are generally outside CGT, except tainted donations or disposals to a charity for more than acquisition cost. Gains on cryptoasset disposals by a UK basic-rate taxpayer are charged to Capital Gains Tax at 18% for gains made from 6 April 2026, to the extent the gains fall within the basic-rate Income Tax band; the annual exempt amount for 2026 to 2027 is £3,000. Gains on cryptoasset disposals by a UK higher-rate or additional-rate taxpayer are charged to Capital Gains Tax at 24% for gains made from 6 April 2026; basic-rate taxpayers also pay 24% on the part of their gains that exceeds the basic-rate band. Cryptoassets received by a UK individual as employment income count as money's worth and are subject to Income Tax and National Insurance contributions on their sterling value; tokens received from non-trading mining, staking or lending are treated by HMRC as other taxable income and reported through Self Assessment. 0% on income up to £12,570 (personal allowance)
  • travel rule Travel Rule adopted — MLRs 2017 Part 7A (regulations 64A–64H, inserted by SI 2022/860 and in force 1 September 2023): the originator's cryptoasset business must send the originator and beneficiary information in regulation 64C(5) with every inter-cryptoasset-business transfer, and where regulation 64C(3) does not apply must add the fuller originator identifiers in regulation 64C(6) for transfers equal to or exceeding £800 in value, a sum substituted with effect from 30 June 2026 by SI 2026/621 regulation 32.

Sources

This report is AI-generated from publicly available regulatory sources. Last updated: 2026-10-28. View full profile