United Kingdom

Firms currently operating in the UK crypto sector are, for now, still subject to the pre-existing regime: registration with the FCA under the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 remains the operative registration requirement, and the FCA's current oversight of the sector is limited to financial promotions and anti-money-laundering controls until the new rules take effect in October 2027. This creates an extended dual-regime period in which firms must simultaneously track their existing MLR obligations and prepare for the incoming FSMA authorisation requirements.

The near-term compliance-critical date for firms is not the October 2027 commencement itself but the authorisation application window that precedes it: firms currently holding MLR registration, FSMA authorisation for other purposes, EMR/PSR authorisation, or approval as a section 21 financial-promotion approver must apply for new authorisation within the window running from 30 September 2026 to 28 February 2027 in order to benefit from savings and transitional provisions. Existing registrations and authorisations do not convert automatically into the new cryptoasset authorisation -- a firm that fails to apply within the window loses transitional protection independent of whether the wider regime has yet commenced.

The scope of firms captured is wide: trading platforms, intermediaries, custodians, stablecoin issuers, and firms arranging staking are all named as requiring FCA authorisation to operate under the new regime. This signals that the FCA has deliberately drawn the licensing perimeter to capture the full spectrum of commercial crypto activity rather than limiting authorisation to exchanges or custodians alone.

Outlook

The defining feature of the UK licensing timeline over the coming quarters is the layering of three distinct dates: the already-passed legislative finalisation (February 2026), the approaching application window (opening 30 September 2026 and closing 28 February 2027), and the substantive commencement of the regime (25 October 2027). Operative compliance pressure should be expected to build well before the October 2027 headline date, concentrated instead around the application window in which existing registrants must re-apply or lose transitional protection. The FCA's final PERG perimeter guidance, expected in the final quarter of 2026, will materially affect how firms assess whether particular activities fall inside or outside the newly drawn licensing perimeter ahead of that application window opening.

The regime also draws exclusions at the boundary of the taxonomy: electronic money, fiat currency, central bank digital currencies, and limited-network cryptoassets are all excluded from the definition of 'qualifying cryptoassets,' keeping them outside the new perimeter entirely. At the other end of the spectrum, 'specified investment cryptoassets' -- cryptoassets falling within pre-existing specified investment categories such as security tokens -- are defined as already within the FCA's perimeter under existing rules, meaning the new regime does not change their treatment.

What remains unresolved is the classification of harder cases: tokens involving smart contracts, decentralisation, or hybrid features sit in an area where the FCA's final PERG perimeter guidance is still pending, expected in autumn 2026. Until that guidance is published, market participants building products with decentralised or hybrid characteristics are working against a taxonomy that is settled at its core but unclear at its edges.

Outlook

The autumn 2026 PERG perimeter guidance is the key date to track for this module. Its publication will determine how the boundaries between qualifying cryptoassets, qualifying stablecoins, and specified investment cryptoassets are applied to smart-contract-based and hybrid token structures -- an area presently left open by the core legislation. Until that guidance lands, classification decisions for novel token designs carry residual uncertainty that the core October 2027 commencement date does not, by itself, resolve.

The treatment of the underlying infrastructure layer -- validators and node operators -- is more delicately drawn, and is currently sourced to a narrower evidentiary base than the core legislative claims in this module. Reporting indicates that validators and node operators will lose their 'pure tech' exemption from regulation at the point they provide added-value features such as dashboards, yields, or reward-compounding tools, at which point they must seek full approval for arranging staking. This creates a meaningful compliance trap: a validator that begins as a purely technical service provider can cross into regulated territory simply by adding functionality that market participants would otherwise consider a routine service enhancement.

The FCA has separately amended its staking rules to avoid unintended restrictions on auto-staking arrangements, allowing consent to cover ongoing staking of current and future holdings subject to conditions and annual notification, and clarifying record-keeping requirements for liquid staking models. This suggests the regulator is alert to the operational friction a strict consent-per-transaction model would create for automated and liquid staking products, and has built in flexibility accordingly.

On lending, borrowing, and decentralised finance business models, the FCA has consulted under CP25/40 and will treat cryptoasset lending and borrowing as requiring authorisation for 'dealing as principal' or 'dealing as agent,' rather than creating a standalone regulated activity for DeFi lending itself. Reporting also indicates that smart contracts, public blockchains, or decentralisation do not by themselves determine the perimeter position or place an arrangement outside of regulation -- meaning the FCA's approach is functional rather than technological, assessing what an arrangement does rather than how it is technically implemented.

Outlook

Two FCA consultations flagged for later in 2026 will materially shape this module: separate decentralised finance guidance, and operational resilience guidance for firms using distributed ledger technology. Neither had been launched at the time of this research pass. Because several of this module's most consequential findings -- the validator 'pure tech' exemption boundary and the perimeter-neutrality of decentralisation -- are currently sourced to a single T4 outlet rather than a primary FCA publication, this module's findings should be treated as provisional pending either the DeFi guidance consultation or corroborating primary-source confirmation.

Two dimensions of the stablecoin regime remain unsettled even as the core issuance rules have been finalised. First, the Bank of England and FCA have published a joint approach to regulating systemic stablecoin issuers, explaining how UK stablecoin issuers may move from FCA supervision to joint regulation once recognised as systemic by HM Treasury -- but the detailed rulebook implementing that joint regime has not yet been published, and this finding rests on a comparatively thinner evidentiary base than the core PS26/10 findings. Second, and more consequentially, the UK Government published in April 2026 a draft Statutory Instrument proposing to exclude activities involving UK-issued qualifying stablecoins from arranging and dealing, moving them instead under a modernised future payments regime. This would represent a structural redirection of where UK stablecoin activity sits within the regulatory architecture, but the outcome is not yet settled, and this finding is treated as genuinely uncertain rather than a confirmed policy direction.

Outlook

The FCA/Bank of England systemic stablecoin rulebook consultation, flagged as expected 'later this year' as of the 30 June 2026 joint statement, is the next concrete milestone to watch, expected in the final quarter of 2026. Separately, and of potentially greater structural significance, the fate of the April 2026 draft Statutory Instrument on payments-regime carve-out for stablecoin arranging/dealing activity remains genuinely open -- its enactment or withdrawal would determine whether UK stablecoin distribution activity is governed by the cryptoasset regime or migrates into the payments regulatory architecture instead. Core issuance obligations (UK establishment, core backing assets, T+1 redemption, disclosure) take effect alongside the wider regime on 25 October 2027.

The protection gap on the other side of this regime is stark: consumers using cryptoasset or unauthorised cryptoasset firms cannot make a claim to the Financial Services Compensation Scheme if the firm fails, nor an eligible complaint to the Financial Ombudsman Service if the firm is unauthorised or only MLR-registered. This means the marketing-side protections are already live, while the safety-net protections that would matter if a firm actually failed remain absent for the large population of firms operating under MLR registration alone, pending the wider authorisation regime.

Looking toward the future regime, the FCA is proceeding with applying CASS 7 (with targeted adjustments) to client money and client assets arising from the safeguarding of client cryptoassets once the future regime takes effect, though firms issuing qualifying stablecoins will not be subject to CASS 7 given their separate reserve and redemption obligations under the stablecoin regime. The FCA has also demonstrated active enforcement of the existing financial promotions regime, having taken enforcement action, including legal proceedings, against the exchange HTX for illegally promoting cryptoasset services to UK consumers via websites and social media in breach of the financial promotions regime.

Outlook

The consumer protection module illustrates the UK's bifurcated timeline most clearly: marketing restrictions and risk-disclosure obligations have applied since October 2023 and are actively enforced, as the HTX action demonstrates, while custody segregation (CASS 7) and the broader safety-net implications of full authorisation remain tied to the October 2027 commencement of the wider regime. Continued FCA enforcement activity against unauthorised promotion should be expected in the interim, given the regulator's demonstrated willingness to pursue such cases under the existing regime.

Reporting infrastructure is also tightening: UK crypto exchanges, as Reporting Cryptoasset Service Providers, must from 1 January 2026 collect detailed transaction data from users to comply with HMRC rules aligned with the OECD Crypto-Asset Reporting Framework, with full reporting to HMRC beginning from 2027. This module's transaction-reporting and enforcement-volume findings, together with the 'no gain, no loss' reform itself, rest on a comparatively thinner sourcing base than the core CGT findings and should be read with that caveat.

On enforcement, a quantitative correction was applied this cycle: HMRC issued approximately 65,000 crypto-related nudge letters to crypto investors in the 2024/25 tax year, a 134% year-on-year increase, up from 27,700 the prior year. An earlier draft figure of 650,000 letters was identified as a tenfold overstatement and corrected against the verified underlying disclosure; the 134% year-on-year growth rate itself was independently correct and has been retained. Separately, HMRC reclassified cryptocurrency ETNs as qualifying instruments only for Innovative Finance ISAs rather than mainstream stocks-and-shares ISAs, from the start of the 2026/27 tax year -- narrowing the tax-wrapper options available to UK retail investors holding crypto exposure via exchange-traded notes.

Outlook

Two tax-treatment dates carry forward: the 6 April 2027 commencement of the 'no gain, no loss' DeFi disposal reform, and the move to full CARF reporting to HMRC from 2027, following the transaction-data-collection phase that began 1 January 2026. VAT and GST treatment of cryptoasset activities -- exchange, mining, and staking services -- was not located in this research pass and remains an open gap requiring direct review of HMRC's VAT manual. Enforcement intensity, evidenced by the corrected nudge-letter volume and its 134% year-on-year growth, should be expected to continue rising as CARF data flows begin populating HMRC's compliance pipeline from 2027 onward.

Separately from the Travel Rule, the treatment of international and overseas cryptoasset firms operating in or into the UK remains under active development. The FCA is consulting on its Approach to International Cryptoasset Firms (AICF, under CP26/4), addressing branch-versus-subsidiary expectations and the treatment of foreign-authorised firms, including MiCA-authorised CASPs, under the new cryptoasset regime. This consultation remains open, and the final cross-border treatment for overseas firms is not yet settled.

A standalone outbound capital-restriction or cross-border movement rule specific to UK cryptoassets, distinct from the general Travel Rule, was not identified in this research pass; confirming whether this reflects a genuine negative finding or an under-researched gap requires targeted follow-up.

Outlook

The FCA's AICF consultation under CP26/4 is the key near-term development to track for this module, as its outcome will settle how branch, subsidiary, and MiCA-equivalence questions are resolved for international firms seeking to operate in the UK cryptoasset market. The Travel Rule itself is stable and unlikely to change materially in the near term, but its interaction with the wider FSMA authorisation perimeter -- and with financial-integrity's parallel AML/CTF analysis of the same transfers -- is worth monitoring as the October 2027 commencement approaches.