The United Kingdom is building one of the world's most comprehensive crypto regulatory frameworks. Rather than creating standalone crypto legislation, the UK integrates cryptoasset activities into the existing Financial Services and Markets Act 2000 (FSMA) architecture — applying the principle of "same risk, same regulatory outcome." This page compares the licensing requirements for three activity types side-by-side: custody (termed "safeguarding"), stablecoin issuance, and mining.
1. Regulatory Architecture
Single Regulator, Dual Oversight for Systemic Risk
The Financial Conduct Authority (FCA) is the sole regulator for all cryptoasset activities in the UK. The Bank of England (BoE) assumes additional oversight only for systemic stablecoins — those designated as posing risks to financial stability.
| Institution | Role |
|---|---|
| FCA | Conduct and prudential regulation for all cryptoasset firms — custody, stablecoin issuance, trading, dealing, arranging, staking |
| Bank of England | Prudential supervision of systemic stablecoin issuers only (reserve composition, holding limits, capital adequacy) |
| HM Treasury | Legislative framework via statutory instruments under FSMA |
| PRA | Potential role for systemically important firms (not yet activated for crypto) |
| HMRC | Tax authority — treats all cryptoassets as property |
| Ofgem | Energy regulator relevant to mining operations |
The Two-Regime Transition
The UK currently operates a limited MLR registration (Money Laundering Regulations 2017) regime focused on AML/CTF compliance. This is being replaced by a full FSMA authorization regime that brings conduct, prudential, and market abuse regulation into scope.
| Milestone | Date |
|---|---|
| MLR registration regime | Active since January 2020 |
| Cryptoassets Regulations 2026 passed by Parliament | 4 February 2026 |
| Pre-application support (PASS) — request meetings from | 11 May 2026 (meetings held from July 2026) |
| FSMA application window opens | 30 September 2026 |
| Application window closes | 28 February 2027 |
| Full FSMA regime commencement | 25 October 2027 |
| Transitional protection expires | 25 October 2029 |
Consultation Paper Architecture
The FCA has published an extensive set of consultation papers forming the detailed rulebook for the new regime:
| Paper | Subject | Status |
|---|---|---|
| CP25/14 | Stablecoin issuance and cryptoasset custody | Closed; final rules expected 2026 |
| CP25/15 | Prudential regime for stablecoin issuers and custodians | Superseded in part by CP25/42 |
| CP25/25 | Application of FCA Handbook for regulated cryptoasset activities | Closed |
| CP25/40 | Platforms, intermediaries, lending, staking, DeFi | Closed 12 Feb 2026 |
| CP25/41 | Admissions, disclosures, and market abuse regime (MARC) | Closed 12 Feb 2026 |
| CP25/42 | Prudential regime for all cryptoasset firms | Closed 12 Feb 2026 |
| CP26/4 | Application of FCA Handbook — Part 2 | Published January 2026 |
| CP26/8 | CASS adaptations for cryptoassets | Closed 13 Apr 2026 |
| CP26/13 | Cryptoasset perimeter guidance (PERG) — who needs authorisation | Published 15 Apr 2026; closed 3 Jun 2026; final guidance autumn 2026 |
Legal Foundation: Property Rights
The Property (Digital Assets etc) Act 2025 established that digital assets constitute a distinct category of personal property under English and Welsh common law — a "third thing" beyond choses in possession and choses in action. This provides the common law foundation for custody trust arrangements that no other major jurisdiction has yet matched.
2. Activity Comparison Table
| Dimension | Custody (Safeguarding) | Stablecoin Issuance | Mining | RWA / Security Token Platform | DeFi Protocol Operations |
|---|---|---|---|---|---|
| Regulated activity? | Yes — "safeguarding" under FSMA from Oct 2027 | Yes — "issuing qualifying stablecoins" under FSMA from Oct 2027 | No — mining itself is not a regulated activity | Yes — security tokens are specified investments under RAO 2001 | Yes — DeFi platforms, intermediaries, lending, staking covered by CP25/40 (from Oct 2027) |
| Current regime | FCA MLR registration (AML/CTF only) | FCA MLR registration (if providing exchange/custody alongside) | No crypto-specific license required | FCA Part 4A authorization (investment firm); DSS for DLT-based settlement | FCA MLR registration (if operating exchange/custody); unregulated for purely decentralized protocols |
| Future regime | Part 4A FSMA authorization | Part 4A FSMA authorization + BoE oversight if systemic | Unchanged unless miner also conducts regulated activities | FCA Part 4A authorization + future cryptoasset authorization (FSMA 2025 Regulations) | Part 4A FSMA authorization; "truly decentralized" exemption proposed; CP25/40 DeFi-specific rules |
| Primary regulator | FCA | FCA (+ BoE for systemic issuers) | Ofgem (energy), local planning authorities, Environment Agency | FCA (+ Bank of England for DSS) | FCA (conduct + prudential); BoE if systemic DeFi stablecoin component |
| Capital requirement (PMR) | GBP 150,000 | GBP 350,000 | None for mining-only operations | GBP 75,000 (dealing as agent); GBP 750,000 (dealing as principal/MTF/OTF) | GBP 75,000--750,000 (depends on activity: dealing, arranging, lending, staking) |
| Variable capital | K-CSG: 0.04% of average client assets safeguarded | K-factor regime + BoE capital requirement (higher of 6 months' opex or largest plausible loss recovery cost) for systemic | N/A | FOR + K-factor requirement (K-COH, K-CMG) under MIFIDPRU | K-factor regime under CP25/42; specific K-factors depend on DeFi activities conducted |
| Application fee | GBP 2,000–10,000 (current MLR); GBP 11,150 (FSMA Category 6) | GBP 11,150 (FSMA Category 6) | N/A | GBP 11,150 (Cat 6 investment firm); GBP 55,740 (Cat 8 MTF/OTF) | GBP 2,000--10,000 (current MLR); GBP 11,150--55,740 (future FSMA, depends on activity) |
| Total setup cost | Average GBP 287,500 (including legal, compliance, systems) | GBP 50,000–250,000+ (legal/advisory) + FCA fee + SM&CR implementation | Planning permission + grid connection costs only | GBP 500,000--1,500,000+ (authorization, legal, DLT infrastructure, prospectus) | GBP 300,000--800,000+ (authorization, legal, smart contract audit, compliance systems, SM&CR) |
| Annual compliance cost | Average GBP 142,300 (small firms) to GBP 490,000 (mid-sized) | "Hundreds of thousands to low millions" (industry estimate; exact fees deferred to Nov 2026 consultation) | Standard business rates; SECR reporting if qualifying | GBP 300,000--800,000+ (compliance, FCA reporting, audit, SM&CR) | GBP 200,000--600,000+ (compliance, FCA reporting, audit, smart contract monitoring, SM&CR) |
| Application timeline | 6–12 months (FCA estimate for FSMA regime) | 6–12 months (same FSMA gateway) | N/A | 6--12 months (statutory); median 106 days actual (2024-25); DSS: rolling admissions | Current MLR: 6--12 months; future FSMA: 6--12 months (applications open Sep 2026) |
| SM&CR applies? | Yes — minimum 6 Senior Management Functions for Core Tier firms | Yes — same SM&CR framework; minimum 3–4 UK-based senior individuals | No | Yes — same SM&CR framework as other FCA-authorized firms | Yes — same SM&CR framework; DeFi protocol operators must identify responsible senior managers |
| Passporting / cross-border | UK domestic only; no EU passporting post-Brexit | UK domestic only; no MiCA equivalence agreement | N/A | UK domestic only; no EU passporting post-Brexit | UK domestic only; no EU passporting; no MiCA equivalence |
| Banking access difficulty | High — 80% of exchanges report increased bank blocks | High — same banking environment; stablecoin issuers face additional scrutiny | Moderate — standard business banking | Moderate -- FCA-authorized investment firms have established banking relationships | High -- DeFi-specific firms face significant banking challenges; FCA authorization expected to improve access |
3. Multi-Activity Licensing
Combining Custody and Stablecoin Issuance
A firm seeking to both safeguard client cryptoassets and issue qualifying stablecoins applies for a single Part 4A FSMA authorization with multiple permissions. The key structural implications:
Capital requirements stack to the highest PMR. Where a firm conducts multiple activities, the highest applicable Permanent Minimum Requirement applies — not the sum. A custody-plus-issuance firm would face a PMR of GBP 350,000 (the stablecoin issuance floor), not GBP 500,000.
However, K-factor requirements are additive. A firm safeguarding GBP 1 billion in client assets (K-CSG = GBP 400,000) while also issuing stablecoins faces both the K-CSG capital charge and the BoE's systemic issuer capital requirement if designated as systemic.
CASS framework creates parallel trust structures. The FCA has established distinct CASS chapters for each activity:
| Activity | CASS Chapter | Trust Type |
|---|---|---|
| Custody (safeguarding) | CASS 17 | Non-statutory (bare) trust |
| Stablecoin backing assets | CASS 16 | Statutory trust |
| Client money arising from either | CASS 7 | Client money rules |
CASS 16 and CASS 7 funds cannot be commingled — stablecoin backing assets must be segregated by stablecoin product and kept separate from client money pools.
SM&CR Implications for Multi-Activity Firms
The Senior Managers and Certification Regime applies uniformly. Core Tier firms must allocate at minimum:
| SMF | Role |
|---|---|
| SMF1 | Chief Executive |
| SMF3 | Executive Director |
| SMF9 | Chair |
| SMF16 | Compliance Oversight |
| SMF17 | Money Laundering Reporting Officer (MLRO) |
| SMF27 | Partner (where applicable) |
Enhanced Tier firms (GBP 50bn+ AUM or CASS Large designation) must allocate up to 17 SMFs including Chief Finance Officer, Chief Risk Officer, and Head of Internal Audit. A multi-activity firm combining custody and stablecoin issuance at scale is more likely to trigger Enhanced Tier classification.
Each SMF holder is subject to the duty of responsibility — personal accountability for regulatory failures within their area. This is a meaningful deterrent that does not exist in most competing jurisdictions.
Adding Mining to the Mix
Mining itself requires no FCA authorization. However, a mining operation that also provides custody or exchange services triggers registration/authorization requirements. The key triggers:
- Exchanging mined crypto for fiat on behalf of others
- Holding cryptoassets on behalf of third parties
- Operating an exchange or trading platform
- Providing staking-as-a-service (under new regime)
Mining and selling mined coins on a third-party exchange for the firm's own account does not trigger FCA registration.
4. The Transition Challenge
From Registration to Authorization (Sep 2026 – Oct 2027)
The transition from MLR registration to full FSMA authorization is the defining operational challenge for UK crypto firms. There is no grandfathering — all firms must apply fresh through the new gateway regardless of existing MLR registration status.
Timeline pressure is severe:
| Phase | Window | Duration |
|---|---|---|
| Pre-application support (PASS) | Request meetings from 11 May 2026; held from July 2026 | ~3-4 months before window |
| Application window | 30 Sep 2026 – 28 Feb 2027 | 5 months |
| FCA determination target | Before 25 Oct 2027 | ~8–12 months from submission |
| Transitional protection (if pending) | Until 25 Oct 2029 | 2 years maximum |
What happens if you miss the window:
- Firms that apply during the window may continue operating while their application is pending
- If the FCA has not determined the application by commencement (25 Oct 2027), the firm may continue under a saving provision
- Late applicants enter a transitional provision that permits only servicing pre-existing contracts — no new customers or contracts
- Firms that do not apply at all must wind down cryptoasset activities
Practical preparation requirements:
The FCA estimates average implementation costs per firm of GBP 100,000 (with an additional GBP 65,000 for custodians specifically) to prepare for the new regime. Firms must:
- Map all SM&CR senior management functions and prepare Statements of Responsibilities
- Build or adapt CASS-compliant segregation and reconciliation systems
- Implement the CRYPTOPRU prudential framework (capital adequacy, ICARA process, wind-down planning)
- Establish daily reconciliation capability for 24/7 crypto markets
- Prepare for the Market Abuse Regime for Cryptoassets (MARC) under CP25/41
The FCA has stated it "will not provide advice to firms" and "pre-application meetings do not guarantee a successful application."
5. Consolidated Banking Access
Banking access remains the single largest practical obstacle for crypto firms operating in the UK, cutting across all activity types.
Bank-by-Bank Landscape
| Bank / Provider | Stance |
|---|---|
| Revolut | Crypto-friendly; offers in-app trading for 80+ digital assets with full banking |
| BCB Group | Specialist crypto banking infrastructure; serves 30+ digital asset companies |
| ClearBank | Clearing bank processing transactions for numerous crypto businesses |
| Starling Bank | Mixed — blocks some retail crypto transfers but offers business accounts for crypto enterprises |
| HSBC, Standard Chartered | Welcomed 2026 rules for institutional crypto custody; historically restrictive on retail |
| Chase UK | Fully blocks crypto-related transfers |
| Metro Bank | Fully blocks crypto-related transfers |
| TSB | Fully blocks crypto-related transfers |
| Barclays, NatWest | Impose caps or restrictions on crypto-related transactions |
Industry Survey Data (UK Cryptoasset Business Council, 2025)
| Metric | Finding |
|---|---|
| Exchanges reporting increased customer blocks | 80% |
| Transactions blocked or delayed | 40% |
| Exchanges describing banking environment as more hostile than prior year | 70% |
| Declined transactions at one exchange | ~USD 1.4 billion in 2025 |
HM Treasury stated in January 2026 that banks must stop blocking FCA-licensed crypto firms from fair access if the UK is to become a digital asset hub. However, no binding regulatory action has been taken. One FCA-registered exchange stated: "If we are registered with the FCA, it should not be this challenging" and reported prioritizing other markets as a result.
Implications by Activity Type
- Custody firms need client money accounts under CASS 7 — blocked banking relationships directly impair the ability to operate a compliant custody business
- Stablecoin issuers need reserve accounts and redemption settlement capability — the BoE's November 2025 proposal for 40% of systemic stablecoin backing at the central bank may partially mitigate commercial banking dependency, but issuers still need commercial banking for the remaining backing (short-term UK government debt custody) and for processing fiat redemptions. NOTE: on 19 May 2026 (City Week speech) BoE Deputy Governor Sarah Breeden signalled the BoE is prepared to lower the 40% unremunerated central-bank-deposit requirement (see Section 7, Recent Developments)
- Mining firms face the least banking friction as standard business accounts suffice, though converting mined assets to fiat remains challenging
Practical Recommendation
Firms entering the UK market should engage BCB Group or ClearBank as primary banking partners from the outset, as these specialist providers have demonstrated willingness to serve FCA-registered crypto businesses. Revolut offers a crypto-friendly retail and business banking layer. Approaching high-street banks (HSBC, Barclays, NatWest) is viable for large institutional entrants with established compliance track records — as evidenced by BlackRock and Standard Chartered receiving FCA registration in 2025.
6. Total Cost: Multi-Activity Operation
Year 1: Setup and Authorization
| Cost Component | Custody Only | Stablecoin Issuance Only | Custody + Stablecoin Issuance | Mining Only |
|---|---|---|---|---|
| FCA application fee | GBP 11,150 | GBP 11,150 | GBP 11,150 (single application) | N/A |
| Legal and compliance advisory | GBP 100,000–300,000 | GBP 50,000–250,000 | GBP 200,000–400,000 | N/A |
| AML/KYC systems integration | GBP 50,000–185,000 | GBP 50,000–185,000 | GBP 75,000–200,000 | N/A |
| SM&CR implementation | GBP 30,000–80,000 | GBP 30,000–80,000 | GBP 40,000–100,000 | N/A |
| FCA-estimated implementation cost | GBP 165,000 (100k + 65k custody) | GBP 100,000 | GBP 165,000+ | N/A |
| Planning permission + grid connection | N/A | N/A | N/A | Variable (site-dependent) |
| Estimated total Year 1 | GBP 300,000–600,000 | GBP 250,000–500,000 | GBP 400,000–750,000 | GBP 10,000–50,000 (business registration only) |
Ongoing Annual Costs
| Cost Component | Custody Only | Stablecoin Issuance Only | Custody + Stablecoin Issuance | Mining Only |
|---|---|---|---|---|
| Minimum capital held (PMR) | GBP 150,000 | GBP 350,000 | GBP 350,000 (highest PMR) | None |
| Variable capital (K-factor) | 0.04% of client assets | BoE capital regime | Both apply | None |
| FCA periodic fees | TBD (Nov 2026 consultation) | TBD (Nov 2026 consultation) | TBD (single firm fee) | N/A |
| Compliance staffing | GBP 80,000–150,000 | GBP 100,000–200,000 | GBP 150,000–300,000 | N/A |
| AML/KYC monitoring tools | GBP 30,000–80,000 | GBP 30,000–80,000 | GBP 40,000–100,000 | N/A |
| External audit (CASS + prudential) | GBP 20,000–50,000 | GBP 30,000–70,000 | GBP 50,000–100,000 | N/A |
| Business rates + energy costs | N/A | N/A | N/A | Site-dependent |
| SECR reporting (if qualifying) | N/A | N/A | N/A | Required if meeting 2 of 3: turnover >GBP 36m, balance sheet >GBP 18m, >250 employees |
| Estimated total annual | GBP 142,300–490,000 | GBP 200,000–1,000,000+ | GBP 350,000–1,200,000+ | GBP 10,000–50,000 (regulatory only) |
7. Regulatory Direction
Overall Trajectory: Significant Tightening and Formalization
The UK is moving decisively from light-touch AML registration to full FSMA authorization. Every signal points to a more demanding regulatory environment.
| Signal | Detail |
|---|---|
| Scope expansion | Staking, custody, trading, dealing, arranging, stablecoin issuance all brought into FSMA scope |
| Personal accountability | SM&CR extending to crypto — senior managers personally liable for failures |
| Prudential requirements | Bespoke CRYPTOPRU capital regime being introduced for the first time |
| Market abuse regime | FCA consulting on crypto-specific market abuse rules (MARC, CP25/41) |
| Financial promotions | 1,702 alerts issued to non-compliant crypto promoters (Oct 2023–Oct 2024); 54% resulted in takedowns |
| Enforcement escalation | FCA seized 7 unregistered crypto ATMs; added 143 entities to warning list |
| BoE systemic stablecoin rules | November 2025 proposal: 40% backing at central bank, GBP 20,000 individual / GBP 10m business holding limits — criticized as potentially making sterling stablecoin market "commercially unviable." POLICY REVERSAL (19 May 2026, City Week): BoE abandoning individual holding limits in favour of temporary aggregate issuance caps, signalling it will lower the 40% requirement; revised draft rules due June 2026, final Codes of Practice late 2026 |
| Minor softening | FCA stepped back from stablecoin-only lending restrictions and from bespoke group prudential regime; BoE materially eased systemic stablecoin proposals (May 2026) |
| Government stance | Pro-innovation but pro-regulation — aiming to make UK a "global crypto hub" while maintaining consumer protection |
Approval Rate History
| Period | Applications | Approved | Approval Rate |
|---|---|---|---|
| January 2020 – April 2025 (cumulative) | 359 | 44 | ~12% |
| FY 2023–24 | 35 | 4 | ~11% |
| Year to April 2025 | 26 | ~5 (incl. BlackRock, Standard Chartered) | ~45% |
The approval rate has improved from ~11% to ~45%, but the absolute number of approvals remains very low. Processing time has dropped from 17 months to ~5 months. The FCA has publicly stated that "protecting crypto users is more important than faster UK registration."
No data has been published on projected approval rates for the new full FSMA authorization regime.
Tax Treatment Across Activities
HMRC treats all cryptoassets — including stablecoins — as property, not currency. The tax framework applies uniformly regardless of activity type:
| Tax | Rate | Notes |
|---|---|---|
| Income tax (mining income, staking rewards, employment in crypto) | 20%–45% depending on band | Mining income taxed as earned income |
| Capital gains tax (disposal of any cryptoasset) | 18% or 24% depending on income band | Stablecoin-to-stablecoin swaps are taxable events |
| Annual CGT allowance | GBP 3,000 | Applies to all crypto disposals |
| Deductible expenses (mining) | Electricity costs, equipment depreciation | Standard business expense rules |
From 1 January 2026, crypto platforms must proactively report all relevant transactions to HMRC under the OECD Crypto-Asset Reporting Framework (CARF). First reports are due by May 2027.
Key Risks for Operators
- Compressed timeline — final rules may not be published until H2 2026, leaving firms months to prepare before the September 2026 application window
- Banking access — despite government rhetoric, 80% of exchanges still face banking blocks with no binding regulatory action taken
- No EU passporting — UK authorization provides zero access to EU/EEA markets; firms must obtain separate MiCA authorization
- FSCS coverage uncertain — it remains under consultation whether the Financial Services Compensation Scheme (up to GBP 85,000 per claimant in traditional finance) will extend to cryptoassets. FCA CP25/33 (Regulatory fees and levies: policy proposals for 2026/27, published 21 November 2025), para 2.24, confirms the FCA "will consult on the periodic fee structure, and (if applicable) the FSCS levies and Financial Ombudsman industry block for firms with cryptoasset activity permissions in November 2026" — the "if applicable" framing signals FSCS extension to cryptoassets is not yet decided. FCA CP25/33
- BoE systemic stablecoin regime in flux — the November 2025 proposal of a GBP 20,000 per-individual holding limit and 40% central-bank backing drew heavy criticism; on 19 May 2026 the BoE confirmed it is abandoning individual holding limits in favour of temporary aggregate issuance caps and is prepared to lower the 40% requirement. Revised draft rules (June 2026) and final Codes of Practice (late 2026) remain pending, leaving systemic-issuer requirements uncertain
8. Tax Reporting Obligations
Licensing-Taxation Nexus
CARF tax reporting obligations operate independently of and in addition to FCA authorization. The two regimes intersect but do not substitute for one another:
| Regime | Authority | Scope |
|---|---|---|
| FCA MLR registration (current) / FSMA authorization (from Oct 2027) | FCA | Conduct, prudential, AML/CTF regulation of cryptoasset activities |
| CARF reporting (from Jan 2026) | HMRC | Tax information collection and reporting by crypto service providers |
A firm holding FCA MLR registration (or future FSMA authorization) that conducts exchange transactions as a business is also a Reporting Cryptoasset Service Provider (RCASP) under CARF — meaning it must comply with both regimes simultaneously. Mining-only operations that do not conduct exchange transactions on behalf of others are not RCASPs.
CARF Implementation (SI 2025/744)
The Reporting Cryptoasset Service Providers (Due Diligence and Reporting Requirements) Regulations 2025 (SI 2025/744), enacted 24 June 2025, implements the OECD Crypto-Asset Reporting Framework into UK law, effective 1 January 2026.
Domestic extension: The UK extended CARF to cover all customers including UK residents — going beyond the OECD minimum requirement, which only mandated reporting on non-resident users for international exchange purposes. This was confirmed in the Autumn Budget 2025.
Reporting entities: Approximately 50 UK RCASPs are subject to initial compliance obligations.
Information reported:
- User identity information (name, address, TIN/NI number, date of birth)
- Tax residency of users
- Activity summaries for in-scope transactions
- Aggregate transaction values
Reporting timeline:
| Milestone | Date |
|---|---|
| Data collection begins | 1 January 2026 |
| First reports due to HMRC | 1 January – 31 May 2027 (covering 2026 calendar year) |
| International exchange of data between tax authorities | Later in 2027 |
Penalties for non-compliance:
| Failure | Penalty |
|---|---|
| Failure to register (reg. 10) | Up to GBP 300/day |
| Failure to submit report (reg. 6(1)) | Up to GBP 600/day |
| Failure to notify reportable users (reg. 8) | Up to GBP 100 per person affected |
Revenue impact: HMRC estimates a total exchequer benefit of GBP 315 million over four years (GBP 40–110 million annually from 2026–2028), against an implementation cost of GBP 69 million.
Self Assessment Obligations for Individuals
Regardless of CARF provider reporting, individual taxpayers remain responsible for reporting crypto gains and income via the Self Assessment tax return:
- From the 2024/25 tax year onwards, a dedicated cryptoasset section exists on the capital gains pages of the Self Assessment form
- All gains must be reported in pound sterling
- Filing deadline: 31 January following the end of the tax year (e.g., 31 January 2027 for 2025/26)
- Capital losses should be reported within four years even if below the GBP 3,000 Annual Exempt Amount, to preserve the right to carry them forward
- Taxpayers can also use the Capital Gains Tax real-time service for reporting disposals
Record-Keeping Requirements (CRYPTO10400)
HMRC requires individuals to maintain their own records for every cryptoasset transaction (CRYPTO10400), including:
- Type of cryptoasset and date of transaction
- Whether a purchase or sale, and number of units involved
- Value in pound sterling at the date of transaction
- Cumulative total of units held
- Bank statements and wallet addresses
- Blockchain transaction records linked to public keys
HMRC warns that exchanges may only keep records for a short period. If an individual cannot prove their cost basis, HMRC may treat it as zero, making the entire disposal proceeds a taxable gain.
Implications by Activity Type
| Activity | CARF Reporting? | Self Assessment? | Notes |
|---|---|---|---|
| Custody (safeguarding) | Yes, if conducting exchange transactions as a business | N/A (entity) | RCASP obligations apply alongside FCA authorization |
| Stablecoin issuance | Yes, if facilitating exchange transactions | N/A (entity) | Stablecoin-to-stablecoin swaps are reportable events |
| Mining | No (unless also operating an exchange) | Yes (individuals) | Mining income taxed as earned income; equipment and electricity deductible |
| Individual investors | N/A (reported on by RCASPs) | Yes | Must file Self Assessment and maintain CRYPTO10400 records |
9. RWA / Security Token Platform Licensing
The UK regulates tokenized real-world assets through existing financial services legislation. Security tokens are classified as specified investments under the Regulated Activities Order (RAO) 2001, meaning firms dealing in, advising on, or operating platforms for tokenized securities require FCA authorization. The Digital Securities Sandbox (DSS) provides a dedicated pathway for DLT-based settlement infrastructure.
9.1 License Details
| Attribute | Detail |
|---|---|
| License name(s) | FCA Part 4A authorization (investment firm dealing in security tokens); FCA authorization as MTF/OTF operator; DSS participant status |
| Regulatory authority | FCA (primary); Bank of England (DSS co-regulator) |
| Legal basis | FSMA 2000, RAO 2001, MIFIDPRU, FSMA 2023 (DSS), SI 2023/1398 |
9.2 Requirements
| Requirement | Detail |
|---|---|
| Capital (investment firm -- dealing as agent) | GBP 75,000 PMR under MIFIDPRU 4.4 |
| Capital (investment firm -- dealing as principal) | GBP 750,000 PMR under MIFIDPRU 4.4 |
| Capital (MTF/OTF operator) | GBP 750,000 PMR (full); GBP 150,000 (limited OTF operators) |
| Variable capital | Own Funds Requirement = highest of PMR, FOR (one quarter of preceding year's fixed overheads), and K-factor requirement |
| Application fee | GBP 11,150 (Category 6 investment firm); GBP 55,740 (Category 8 MTF/OTF) |
| MLR registration (AML/CTF) | GBP 10,880 (Category 6); approval rate ~45% (recent), up from <15% over prior five years |
| Staffing | SM&CR applies; minimum 3--4 UK-based senior individuals; fit-and-proper requirements |
9.3 Application Process
| Route | Timeline | Notes |
|---|---|---|
| FCA Part 4A authorization | 6 months statutory (complete application); 12 months (incomplete); median 106 days actual (2024-25) | FCA target: 4 months for complete applications (from 2025) |
| DSS participant status | Rolling admissions; Gate 1 time-limited; operational period until December 2028 | 16 firms admitted as of December 2025; Gate 4 provides transition to permanent regime |
| MLR cryptoasset registration | 3 months statutory; ~5 months actual (year to April 2025) | ~55 firms on FCA cryptoasset register as of mid-2025 |
9.4 Ongoing Obligations
- FCA regulatory reporting and transaction reporting
- SM&CR compliance (Senior Management Functions, Certification Regime, Conduct Rules)
- MIFIDPRU prudential requirements (ongoing capital adequacy, concentration risk)
- AML/CTF obligations under MLR 2017
- CARF reporting (from April 2027)
- Client money and assets rules (CASS) for firms holding client assets
9.5 Passporting
No EU/EEA passporting post-Brexit. UK firms cannot passport into the EU or EEA. No MiCA equivalence agreement exists. Cross-border services require separate authorization in each jurisdiction.
9.6 Banking Access
FCA-authorized investment firms dealing in security tokens benefit from established banking relationships. DSS participants (including Archax, which partnered with abrdn on tokenized money market funds) have demonstrated institutional credibility. Broader crypto banking challenges (80% of exchanges reporting increased bank blocks) are less acute for firms operating in the regulated securities space.
9.7 Key Holders
| Firm | Status | Activity |
|---|---|---|
| Archax | FCA-authorized; DSS participant; FCA cryptoasset registered | Tokenized securities exchange; partnered with abrdn on tokenized fund |
| BlackRock | FCA cryptoasset registered | Digital asset services in the UK |
| Standard Chartered | FCA-authorized | Digital asset custody and services |
| 16 DSS entrants | DSS participant status | DLT-based settlement infrastructure (as of December 2025) |
9.8 Transition
The UK is expanding its digital securities framework through three concurrent initiatives: (1) the DSS operational period running until December 2028 with transition to a permanent regime; (2) the FSMA 2000 (Cryptoassets) Regulations 2025 introducing broader cryptoasset authorization requirements; and (3) planned legislation for standalone VA custodian and dealer licensing (2026 target). The FCA has committed to faster processing times (4-month target) and increased the MLR approval rate to ~45%.
See UK RWA Regulation for full details on security token classification, FCA authorization pathways, DSS framework, and the FSMA 2025 Cryptoassets Regulations.
DeFi Protocol Licensing
Regulatory Approach
The UK is building a comprehensive DeFi regulatory framework through CP25/40 (Platforms, Intermediaries, Lending, and Staking), which will bring DeFi activities under FSMA authorization from 25 October 2027. The approach applies the principle of "same risk, same regulatory outcome" -- DeFi protocols performing the same economic functions as traditional financial intermediaries will require the same authorizations. A proposed "truly decentralized" exemption would exclude protocols where no identifiable person exercises material control.
Available License Types
| License/Registration | Regulator | Relevance to DeFi | Capital/Cost |
|---|---|---|---|
| FCA MLR registration (current) | FCA | AML/CTF registration for DeFi front-end operators with UK customers | GBP 2,000--10,000 application fee |
| Part 4A FSMA authorization (from Oct 2027) | FCA | Full conduct + prudential regulation for DeFi lending, staking, dealing, arranging | PMR GBP 75,000--750,000 depending on activity |
| "Truly decentralized" exemption (proposed) | N/A | Protocols where no person exercises material control; criteria under CP25/40 | N/A |
DeFi-Specific Requirements
- Smart contract audits: CP25/40 proposes that operators of DeFi platforms must conduct and publish independent smart contract audits. The FCA's approach treats smart contract risk as equivalent to operational risk under SYSC requirements.
- Governance framework: DeFi protocol operators must identify responsible individuals under SM&CR. DAO governance structures must map to FCA's governance expectations, including clear accountability for compliance decisions.
- Decentralization threshold: CP25/40 proposes a "truly decentralized" exemption where no identifiable person or group exercises material control over the protocol. The FCA acknowledges this is a spectrum and proposes factors including: control over smart contract upgrades, ability to halt or modify the protocol, concentration of governance tokens, and reliance on centralized front-ends.
- Property Act 2025: The Property (Digital Assets etc) Act 2025 established digital assets as a distinct category of personal property, providing legal certainty for DeFi smart contract interactions, custody arrangements, and collateralization under English law.
- DeFi lending and staking: CP25/40 brings crypto lending and staking under regulation. Platforms offering lending pools or staking services must obtain FSMA authorization and comply with conduct rules including disclosure, fair treatment, and risk warnings.
Application Timeline
- Current MLR registration: 6--12 months
- Pre-application support (PASS): Firms can request meetings from 11 May 2026; meetings held from July 2026
- FSMA application window: Opens 30 September 2026, closes 28 February 2027
- Full FSMA regime commencement: 25 October 2027
- Transitional protection: Existing MLR-registered firms have until 25 October 2029
Cross-Reference
See United Kingdom DeFi Regulation for full details on CP25/40 DeFi rules, FSMA authorization pathway, "truly decentralized" exemption criteria, Property Act 2025, SM&CR requirements, and the FCA's approach to DeFi lending and staking.
Sources: FCA CP25/40, Platforms, Intermediaries, Lending, and Staking (2025); Property (Digital Assets etc) Act 2025; FCA Cryptoasset Roadmap (November 2025)
Insurance / Risk Transfer Licensing
Overview
The United Kingdom is the global epicentre of digital asset insurance, anchored by Lloyd's of London -- the world's oldest and most specialised insurance marketplace. The UK's insurance regulatory framework is technology-neutral: insurers and intermediaries writing digital asset policies must hold the same authorisations as those covering any other risk class. There is no mandatory insurance requirement for crypto custody or exchange operations under either the current MLR regime or the forthcoming FSMA authorization framework, though the FCA has consulted on whether the Financial Services Compensation Scheme (FSCS) should extend to cryptoassets.
Regulatory Authority
| Body | Role |
|---|---|
| PRA (Prudential Regulation Authority) | Prudential supervision of insurers and reinsurers writing digital asset policies; Solvency II compliance |
| FCA | Conduct regulation of insurance intermediaries under the Insurance Distribution Directive (IDD); authorisation of managing general agents (MGAs) |
| Lloyd's of London | Marketplace regulation; syndicate oversight; sets minimum standards for digital asset classes |
Insurance Provider Licensing
Entities seeking to underwrite digital asset insurance in the UK require:
- PRA authorisation as an insurer or reinsurer under FSMA 2000 (Solvency II regime applies)
- Lloyd's syndicate membership for participation in the Lloyd's marketplace -- Lloyd's syndicates writing digital asset policies must comply with Lloyd's Performance Management Directorate requirements and Lloyd's minimum standards
- FCA authorisation for intermediaries (brokers, MGAs) distributing digital asset insurance products under the IDD
| Requirement | Detail |
|---|---|
| Capital (Solvency II) | Solvency Capital Requirement (SCR) calculated under standard formula or internal model; no crypto-specific capital add-on but operational risk loading may apply |
| Application timeline | PRA insurer authorisation: 6-12 months; Lloyd's syndicate approval: 12-18 months; FCA intermediary authorisation: 3-6 months |
| Passporting | No EU/EEA passporting post-Brexit; UK-authorised insurers cannot passport into EU markets; Lloyd's operates separately through Lloyd's Brussels for EU business |
Insurance Requirements for Crypto Businesses
| Dimension | Detail |
|---|---|
| Mandatory custody insurance | No -- there is no statutory requirement for FCA-registered or future FSMA-authorised crypto custodians to hold insurance against loss of client assets |
| FSCS coverage | Under consultation -- the FCA has not confirmed whether the FSCS (up to GBP 85,000 per claimant for traditional financial services) will extend to cryptoasset activities under the new FSMA regime. CP25/42 (prudential regime) addresses capital adequacy but does not mandate insurance. FCA CP25/33 (published 21 Nov 2025, para 2.24) confirms a November 2026 consultation will address the periodic fee structure "and (if applicable) the FSCS levies" for firms with cryptoasset activity permissions — the "if applicable" framing means FSCS extension to crypto is not yet decided (CP25/33) |
| Voluntary insurance | Strongly recommended by institutional counterparties; most FCA-registered custodians carry crime/specie policies as a competitive differentiator |
| Professional indemnity (PI) | Not specifically required for crypto custodians under current or proposed rules, but PI insurance is standard for FCA-authorised firms conducting investment activities |
| Directors & officers (D&O) | Standard requirement under SM&CR; senior managers face personal liability, making D&O coverage essential |
Named Insurance Providers Active in the UK
| Provider | Type | Digital Asset Activity |
|---|---|---|
| Lloyd's of London | Insurance marketplace | Multiple syndicates writing digital asset policies; crime, specie, errors & omissions, D&O; global hub for crypto insurance capacity |
| Arch Insurance | PRA-authorised insurer | Crime/specie policies for institutional crypto custodians |
| Evertas | Lloyd's coverholder (MGA) | Specialist digital asset insurance; crime, custody, and staking coverage |
| Superscript (formerly Digital Risks) | FCA-authorised MGA | Digital asset business insurance including cyber, PI, D&O |
| Canopius | Lloyd's syndicate | Digital asset crime and custody coverage |
| Relm Insurance | Bermuda-domiciled, Lloyd's capacity | Crypto-native policies; directors & officers, professional liability, crime/theft |
| Aon, Marsh, Howden | FCA-authorised brokers | Major intermediaries placing digital asset insurance in the Lloyd's and London market |
Lloyd's as Global Hub
Lloyd's of London remains the dominant marketplace for digital asset insurance globally. Key features:
- Syndicate structure allows specialist underwriters to allocate capacity to digital asset risks without requiring a standalone insurer
- Lloyd's minimum standards require syndicates to demonstrate underwriting expertise and risk assessment capability for new classes including digital assets
- Lloyd's Brussels provides a separate EU-facing entity for post-Brexit cross-border business
- Lloyd's Asia (Singapore) extends the marketplace's reach into Asia-Pacific digital asset markets
- Estimated 60-70% of global crypto insurance capacity originates from or passes through the Lloyd's market
Estimated Insurance Costs for Crypto Businesses
| Coverage Type | Estimated Annual Premium | Notes |
|---|---|---|
| Crime / specie (custody) | 0.5%-2.0% of insured assets | Varies by cold/hot storage ratio, key management, and security controls |
| Professional indemnity | GBP 5,000-50,000+ | Depends on firm size and revenue |
| Directors & officers | GBP 10,000-100,000+ | SM&CR personal liability drives demand |
| Cyber / technology E&O | GBP 5,000-30,000+ | Standard for all technology businesses |
Regulatory Direction
- The FCA's decision on FSCS extension to cryptoassets remains the most consequential pending development -- if coverage is extended, it could create an implicit insurance mandate for the industry
- Lloyd's is expected to continue expanding digital asset underwriting capacity as the FSMA regime takes effect and institutional participation increases
- The PRA has not issued crypto-specific guidance for insurers, relying on the technology-neutral Solvency II framework
- SM&CR personal liability under the new FSMA regime will increase demand for D&O coverage among crypto firm senior managers
Cross-Reference
See UK Digital Asset Insurance for full details on Lloyd's syndicate structure, PRA/FCA authorisation for digital asset insurers, FSCS consultation status, and the UK's role as the global hub for crypto insurance capacity.
NFT & Digital Collectibles
Activity type: NFT marketplace operation, NFT issuance, fractionalized NFT platforms
| Dimension | Details |
|---|---|
| Applicable license(s) | No FCA authorization required for unique NFTs (excluded from "qualifying cryptoasset" definition as non-fungible). FCA MLR registration as cryptoasset exchange provider or custodian wallet provider may apply if platform exchanges NFTs for money/crypto or provides custody. HMRC art market participant (AMP) registration if NFTs qualify as "works of art" at EUR 10,000+ threshold. Full FSMA Part 4A authorization required from October 2027 if dealing in fractionalized/fungible NFT derivatives. |
| Regulatory authority | FCA (financial services, AML for crypto); HMRC (AMP registration, taxation); ASA (advertising standards); Trading Standards (consumer protection) |
| Capital requirements | MLR registration: GBP 2,000--10,000 application fee; future FSMA authorization: PMR GBP 75,000--750,000 depending on activity; no capital requirement for pure unique NFT marketplaces outside regulatory perimeter |
| Timeline (actual) | FCA MLR registration: 6--12 months; future FSMA authorization: 6--12 months (application window opens September 2026, closes February 2027); full regime commencement 25 October 2027 |
| Key requirements | Substance-over-form classification (PS19/22 taxonomy); AML/KYC compliance under MLR 2017; Travel Rule for crypto transfers; CARF tax reporting from January 2026; ASA/CAP advertising standards for NFT promotions |
| NFT-specific notes | Unique NFTs excluded from both FCA financial promotions regime and qualifying cryptoasset definition; fractionalized NFTs may become qualifying cryptoassets or security tokens; Property (Digital Assets etc) Act 2025 recognises NFTs as personal property ("third category"); NFT CGT at 18%/24% (no pooling -- each NFT tracked individually); no UK case law confirming Consumer Rights Act 2015 applies to NFTs; AMP classification of NFTs as "works of art" remains unresolved |
| Cross-reference | Full NFT regulation details |
Payment / Transfer Service License
Overview
The UK operates three distinct licensing regimes relevant to crypto payments: (1) the current FCA MLR registration for AML/CTF (since January 2020), (2) Payment Institution (PI) authorization under the Payment Services Regulations 2017 (PSRs 2017) and E-Money Institution (EMI) authorization under the Electronic Money Regulations 2011, and (3) the forthcoming full FSMA authorization under the Cryptoassets Regulations 2026 (commencing 25 October 2027). Stablecoins are not currently within the PSRs; they will be regulated under FSMA 2000 via the new Cryptoassets Regulations. Post-Brexit, UK-authorized PIs and EMIs have lost EU/EEA passporting rights.
License Details
| Attribute | Detail |
|---|---|
| License name(s) | FCA MLR cryptoasset registration (current); FCA Part 4A FSMA authorization (from October 2027); Payment Institution (PI) authorization (PSRs 2017); E-Money Institution (EMI) authorization (EMRs 2011) |
| Enabling statutes | Money Laundering Regulations 2017 (SI 2017/692); Payment Services Regulations 2017 (SI 2017/752); Electronic Money Regulations 2011 (SI 2011/99); FSMA 2000; FSMA 2023; Cryptoassets Regulations 2026 |
| Regulatory authority | FCA (primary -- conduct, prudential, AML/CTF); Bank of England (systemic stablecoin oversight); HM Treasury (legislative framework); PSR (competition for designated payment systems) |
| License scope | MLR: AML/CTF registration for crypto exchange and custodian wallet providers. PI: payment execution, money remittance, payment initiation. EMI: e-money issuance and payment services. FSMA (from 2027): all cryptoasset activities including stablecoin issuance, custody, trading, dealing, staking, lending |
Requirements
| Requirement | Detail |
|---|---|
| Who can apply | MLR: any entity providing crypto exchange or custodian wallet services in/from the UK. PI: firms providing regulated payment services. EMI: firms issuing e-money. FSMA: firms conducting regulated cryptoasset activities |
| Capital — MLR registration | No minimum capital requirement specific to MLR |
| Capital — PI | Small PI: none specified. Authorized PI (money remittance): EUR 20,000. PI (payment initiation): EUR 50,000. PI (full): EUR 125,000 |
| Capital — EMI | Small EMI: EUR 50,000--100,000 (tiered by volume). Authorized EMI: EUR 350,000 initial; 2% of average outstanding e-money ongoing |
| Capital — FSMA (from 2027) | GBP 150,000 PMR (custody); GBP 350,000 PMR (stablecoin issuance); GBP 75,000--750,000 (dealing, arranging, intermediating); plus K-factor variable capital |
| Staffing requirements | SM&CR applies to all FCA-authorized firms: minimum 6 Senior Management Functions for Core Tier firms (SMF1 CEO, SMF3 Executive Director, SMF9 Chair, SMF16 Compliance, SMF17 MLRO, SMF27 Partner). At least 3--4 UK-based senior individuals |
| Physical presence | Head office and registered office in the UK required for EMIs and PIs. UK-based compliance officer and senior management |
| Technology requirements | NYDFS-equivalent cybersecurity not applicable, but FSMA firms must meet FCA operational resilience requirements and CASS (Client Assets Sourcebook) for custody. PS25/12 safeguarding rules for PI/EMI from 7 May 2026 |
| Insurance requirements | PI: must safeguard customer funds via segregation or insurance/guarantee. EMI: same safeguarding. No mandatory insurance for crypto custody under MLR or forthcoming FSMA. FSCS coverage under consultation for cryptoassets |
Application Process
| Step | Detail |
|---|---|
| MLR registration | Apply to FCA; GBP 2,000 application fee; 3 months statutory; ~5 months actual (2024-25) |
| PI authorization | Apply to FCA; GBP 1,500 (authorized PI) or GBP 500 (small PI); 3--12 months |
| EMI authorization | Apply to FCA; GBP 5,000 (authorized EMI) or GBP 1,000 (small EMI); 9--15 months |
| FSMA authorization | Gateway opens 30 September 2026, closes 28 February 2027; GBP 11,150 (Category 6) to GBP 55,740 (Category 8 MTF/OTF); 6--12 months FCA estimate |
| Pre-application support (PASS) | Request meetings from 11 May 2026; held from July 2026 |
| Typical total setup cost | GBP 250,000--500,000 (PI/EMI); GBP 300,000--600,000 (FSMA custody); GBP 400,000--750,000 (combined custody + stablecoin) |
| Approval data | MLR: ~368 applications since January 2020; ~51 firms registered (~14% overall approval rate); improved to ~45% in 2024-25. Processing time: ~5 months (from 17 months historically). Notable registrants: BlackRock, Standard Chartered, Fidelity, PayPal UK |
Ongoing Obligations
| Obligation | Detail |
|---|---|
| Annual fees | FCA periodic fees (TBD for FSMA crypto regime; consultation expected November 2026). PI/EMI: annual FCA periodic fee based on revenue |
| Audit requirements | PI/EMI: annual safeguarding audit with reasonable assurance reporting (PS25/12, from 7 May 2026); daily reconciliation of customer funds. FSMA: CASS audit for custody; prudential ICARA process |
| Reporting | CARF tax reporting (from January 2026, first reports due May 2027); FCA regulatory returns; SM&CR compliance reporting; suspicious activity reports to NCA |
| Compliance program | AML/CTF policies and procedures; nominated officer (MLRO); independent AML audit function; 5-year record retention; Travel Rule compliance (no minimum threshold, all transfers) |
| Annual compliance cost estimate | GBP 142,300--490,000 (custody); GBP 200,000--1,000,000+ (stablecoin issuance); GBP 350,000--1,200,000+ (combined) |
Passporting & Cross-Border
| Dimension | Detail |
|---|---|
| EU/EEA passporting | Lost post-Brexit (1 January 2021). UK PIs and EMIs cannot passport into EU/EEA. No MiCA equivalence agreement exists |
| UK domestic only | FCA authorization covers UK domestic market only |
| Overseas Persons Exemption | Restrictive -- available only where overseas firm interacts solely with UK broker-dealer meeting gateway conditions. Not broadly available for crypto |
| Reverse solicitation | Cross-border activity directed at UK consumers brings overseas providers within UK jurisdiction. B2B exemption available for non-consumer activity |
Banking Access
| Dimension | Detail |
|---|---|
| Difficulty level | High -- 80% of exchanges report increased customer blocks; 40% of transactions blocked or delayed |
| Known banking partners | Revolut (crypto-friendly, full banking); BCB Group (specialist crypto banking infrastructure, 30+ clients); ClearBank (clearing bank for crypto businesses); Starling Bank (mixed -- blocks some retail, offers business accounts) |
| Major banks | HSBC, Standard Chartered: welcomed 2026 rules for institutional custody. Chase UK, Metro Bank, TSB: fully block crypto transfers. Barclays, NatWest: caps or restrictions |
| Onboarding timeline | HM Treasury stated (January 2026) banks must stop blocking FCA-licensed crypto firms, but no binding regulatory action taken |
Key License Holders
| Firm | License Type | Activity |
|---|---|---|
| eToro | FCA MLR registered | Crypto exchange and investment platform |
| BlackRock | FCA MLR registered (April 2025) | Digital asset services |
| Standard Chartered | FCA-authorized; MLR registered (2025) | Digital asset custody and services |
| Crypto.com | FCA EMI authorized | E-money products alongside crypto services |
| Archax | FCA-authorized; DSS participant; MLR registered | Tokenized securities exchange |
| PayPal UK | FCA MLR registered | Crypto trading services |
Transition / Grandfathering
| Dimension | Detail |
|---|---|
| Can you operate while applying? | Yes -- firms that apply during the gateway window (30 Sep 2026--28 Feb 2027) may continue operating pending FCA decision. If undecided by 25 Oct 2027, saving provision applies. Late applicants: servicing pre-existing contracts only, no new customers |
| No grandfathering | All firms must apply fresh through the new gateway regardless of existing MLR registration |
| Key dates | PASS meeting requests from 11 May 2026 (meetings from July 2026); gateway 30 Sep 2026--28 Feb 2027; full regime 25 October 2027; transitional protection expires 25 October 2029 |
Cross-Reference
See UK Crypto Payment Regulation for full details on FCA MLR registration, PI/EMI authorization, PSRs 2017, stablecoin regulation (CP25/14, BoE systemic regime), Travel Rule, financial promotions, and the transition to FSMA authorization.
Sources: FCA: New Regime for Cryptoasset Regulation; FCA: Payment Institution Applicants; FCA: EMI Applicants; PSRs 2017 (SI 2017/752); EMRs 2011 (SI 2011/99); BoE: Systemic Stablecoin Consultation (November 2025)
Recent Licensing Developments (20 March 2026 – 4 June 2026)
| Date | Development | Primary source |
|---|---|---|
| 15 April 2026 | FCA publishes CP26/13 — Cryptoasset perimeter guidance (PERG). Sets out the FCA's interpretation of the boundary of the regulated cryptoasset activities (issuing qualifying stablecoins, operating a trading platform, dealing, arranging, safeguarding, staking) to help firms determine whether they need authorisation before the 30 September 2026 gateway. Consultation closed 3 June 2026; final perimeter guidance expected autumn 2026. The FCA confirmed Policy Statements on its broader crypto ruleset (incl. CP25/14 stablecoin issuance and custody) will be published Summer 2026. The guidance makes no mention of mining/proof-of-work, confirming mining remains outside the FCA perimeter. | FCA press release (CP26/13) |
| 21 April 2026 | HM Treasury payment-services modernisation package — HMT reversed its earlier position and confirmed it will bring UK-issued qualifying stablecoins used for payments into the regulated payments perimeter (consultation expected Q2 2026), alongside broader PSRs 2017 reform. | HM Treasury / Freshfields analysis |
| 11 May 2026 | PASS opens for meeting requests — firms can request Pre-Application Support Service meetings with the FCA from 11 May 2026 (meetings held from July 2026), ahead of the 30 September 2026 gateway. | FCA: A new regime for cryptoasset regulation |
| 7 May 2026 | PS25/12 safeguarding rules take effect for payment and e-money institutions — mandatory qualified-auditor safeguarding audits (reasonable assurance) and daily reconciliation of customer funds. Relevant to crypto-payment PI/EMI licensees. | FCA PS25/12 |
| 18 May 2026 | FCA / Bank of England joint Call for Input on tokenisation — shared vision for tokenisation in UK wholesale markets (prudential treatment, tokenised collateral/settlement instruments, DSS pathway; 16 firms in the live sandbox; BoE synchronisation service targeted 2028). Responses due 3 July 2026. | FCA — Call for Input: The future of tokenisation |
| 19 May 2026 | BoE abandons individual systemic-stablecoin holding limits. At City Week, Deputy Governor Sarah Breeden confirmed the Bank is dropping the proposed GBP 20,000 individual / GBP 10m business holding limits in favour of temporary aggregate issuance caps on token providers, and signalled it is prepared to lower the 40% unremunerated central-bank-deposit backing requirement. Revised draft rules due June 2026; final Codes of Practice late 2026. | BoE — Modernising money and markets (Breeden, City Week, 19 May 2026) |
| 3 June 2026 | House of Lords report — "Stablecoins: waiting for regulation" (HL Paper 6, ordered to be printed 20 May 2026, published 3 June 2026). The Financial Services Regulation Committee (chaired by Baroness Noakes) recommended reconsidering holding limits (monitor market growth and impose limits only if financial-stability risk clearly warrants), the 40% unremunerated central-bank-deposit backing requirement, and the PRA's restrictions on commercial banks issuing stablecoins; it also recommended the FCA reconsider whether a volume-increasing K-factor for stablecoin issuers is appropriate, and that HM Treasury detail how it will determine which stablecoins are systemic. Noted the UK lags the US and EU. | UK Parliament — FSRC publishes report (committee/697); report PDF: HL Paper 6 |
<!-- related-coverage:BEGIN — auto-generated by related_coverage.py; edit via --apply re-run, not by hand -->
Related coverage
United Kingdom — License Map in other research domains:
- CBDC Frameworks
- Crypto Mining Regulations
- DeFi Regulation & Liability Frameworks
- Digital Asset Insurance & Risk Transfer
- Digital Asset Taxation
- Institutional Crypto Custody Regulations
- NFT & Digital Collectibles Regulations
- Payment Services & Crypto Payment Regulation
- Stablecoin Regulations & License Regimes
- Tokenized Real-World Assets (RWA) Regulation
Verification Notes
This page is an aggregator; licensing facts are reconciled against the nine refreshed source-domain files for the UK (all modified: 2026-06-04) under content/deep-research/<domain>/regulations/europe/united-kingdom.md, then against primary regulator sources.
Corrections made this refresh (Correction Protocol):
- BoE systemic stablecoin holding limits & 40% backing — corrected from stated fact to "under revision/superseded." The prior version presented "40% backing at central bank, GBP 20,000 individual holding limits" as settled rules (Sections 5, 7). Per the BoE's 19 May 2026 City Week speech (Deputy Governor Sarah Breeden) and the 2 June 2026 House of Lords report, individual holding limits are being abandoned in favour of temporary aggregate issuance caps, and the 40% requirement is being reconsidered/lowered. Reconciled to match
stablecoin-regulationsandcrypto-payment-regulationsource files. Revised BoE draft rules were due June 2026; final Codes of Practice late 2026. - PASS date — corrected. Prior version stated "PASS opens July 2026." Per the FCA and the
crypto-custody/nft-digital-collectiblessource files, firms can request PASS meetings from 11 May 2026, with meetings held from July 2026. Updated across all milestone tables (Sections 1, 4, payment, DeFi, transition). - CP26/13 added to the consultation-paper architecture table (published 15 April 2026, closed 3 June 2026), and CP26/4 / CP26/8 statuses updated to reflect closure/publication.
Reconciliation confirmations (no change required): Custody PMR GBP 150,000 and K-CSG 0.04%; stablecoin issuance PMR GBP 350,000; trading-platform/staking PMR GBP 150,000; dealing/arranging PMR GBP 75,000–750,000; FSMA application fees GBP 11,150 (Cat 6) / GBP 55,740 (Cat 8); MLR fee GBP 2,000–10,000; regime dates (gateway 30 Sep 2026–28 Feb 2027, commencement 25 Oct 2027, transitional protection to 25 Oct 2029); CARF SI 2025/744 effective 1 Jan 2026, first reports due 31 May 2027; CGT 18%/24%, AEA GBP 3,000; DSS 16 Gate 1 entrants, operational to December 2028; mining = no crypto-specific licence — all verified consistent with the refreshed source domains.
Flagged as self-reported / estimated: All "total setup cost," "annual compliance cost," banking-survey figures (UK Cryptoasset Business Council 2025: 80%/40%/70%), insurance premium ranges, and FCA-estimated implementation costs (GBP 100,000 + GBP 65,000 custody) are industry-reported or estimates, not regulator-fixed fee schedules. FCA periodic fees for the crypto regime remain TBD pending the November 2026 consultation.
Not verified / pending: FSCS extension to cryptoassets remains under consultation (custody source: not confirmed; insurance/payment sources: FSCS currently does NOT cover cryptoassets). Final FSMA periodic fee rates and final BoE systemic-stablecoin Codes of Practice are not yet published.
Targeted gap-closure pass (2026-06-06)
Operated under verification-standards.md Standard version: 2026-06-04. Four gaps worked from the license-map gap register.
Gap CLOSED — FSCS extension / November 2026 fees & levies consultation. Fetched FCA primary CP25/33, "Regulatory fees and levies: policy proposals for 2026/27" (published 21 November 2025), PDF text-extracted. Para 2.24 states verbatim: the FCA "will consult on the periodic fee structure, and (if applicable) the FSCS levies and Financial Ombudsman industry block for firms with cryptoasset activity permissions in November 2026." This confirms (a) the November 2026 consultation is real and pending, and (b) the "if applicable" framing means FSCS extension to cryptoassets is not yet decided — consistent with the file's existing "under consultation" wording. CP25/33 also sets out proposed cryptoasset application fees (Category 4 £2,790 up to Category 7 £27,870 range per fee-block, Question 8). Citation added to Section 7 risk #4 and the Insurance FSCS-coverage row. Source: https://www.fca.org.uk/publication/consultation/cp25-33.pdf
Gap STILL OPEN — final BoE systemic-stablecoin Codes of Practice / revised draft rules. The BoE consultation page and the Breeden City Week speech page both returned HTTP 403 to the fetcher; archive.org is unreachable from this fetcher. Fetched corroborating secondary (Skadden, "Bank of England Revises Its Proposed Regime…", 13 Nov 2025) confirms the BoE "intends to consult on and finalise its draft Codes of Practice during the course of next year," with the "final rules instrument and supervisory approach in the second half of 2026." No primary confirms a published revised draft as of 2026-06-06; the file's honest wording (revised draft due June 2026, final Codes of Practice late 2026, both pending) is retained. Per fetch-blocker protocol, the BoE primary pages are recorded as primary-known-but-unfetchable; the gap is not closed.
Gap STILL OPEN — House of Lords committee/697 page & report PDF (bot-block). Both the committee news page (committees.parliament.uk/committee/697/.../news/214040) and the report PDF (publications.parliament.uk/pa/ld5902/ldselect/ldfsrc/6/6.pdf) returned HTTP 403 to the fetcher; archive.org unreachable. Report existence, title ("Stablecoins: waiting for regulation", HL Paper 6), chair (Baroness Noakes), and dates confirmed via WebSearch result snippets ("Ordered to be printed 20 May 2026 and published 3 June 2026") plus corroborating secondaries (regulationtomorrow.com, coindesk.com). CORRECTION applied: publication date 2 June 2026 → 3 June 2026 (the 2 June secondary-reporting date was the pre-publication press date; the report was formally published 3 June 2026). Recommendation detail expanded. The primary pages remain unfetchable; gap not closed per the standard.
Gap STILL OPEN — BoE Breeden City Week speech / DSS deep-links (bot-block). BoE speech URL returns HTTP 403; archive.org unreachable. The 19 May 2026 policy signals (abandon individual holding limits → temporary aggregate issuance caps; prepared to lower the 40% requirement) are corroborated by fetched/snippet secondaries but the BoE primary was not fetchable this run; carried forward from the refreshed stablecoin/payment source files. Gap not closed per the standard.
Correction (Correction Protocol): House of Lords report publication date 2 June 2026 → 3 June 2026 (Recent Licensing Developments table), per UK Parliament publication metadata surfaced in WebSearch ("Ordered to be printed 20 May 2026 and published 3 June 2026"); report PDF URL (HL Paper 6) added alongside the committee/697 news URL.
10. For Full Details
| Activity | Source Page |
|---|---|
| Crypto Custody | UK Custody Regulations |
| Stablecoin Issuance | UK Stablecoin Regulations |
| Crypto Mining | UK Mining Regulations |
| Digital Asset Taxation | UK Digital Asset Taxation -- CARF reporting, CGT treatment, Self Assessment obligations |
| RWA Regulation | UK RWA Regulation -- security token classification, FCA authorization, DSS framework, MTF/OTF licensing, FSMA 2025 Regulations |
| DeFi Regulation | UK DeFi Regulation -- CP25/40, FSMA authorization, "truly decentralized" exemption, Property Act 2025, lending/staking rules |
| Digital Asset Insurance | UK Digital Asset Insurance -- Lloyd's syndicate system, PRA/FCA insurer authorisation, FSCS consultation, crime/specie/D&O coverage, global insurance hub |
| Crypto Payment Regulation | UK Crypto Payment Regulation -- FCA MLR registration, PI/EMI authorization, PSRs 2017, stablecoin regulation, Travel Rule, FSMA authorization transition |