In the UK, the rule most likely to shape a consumer crypto product is not a license; it is the financial promotions regime, which since October 2023 has controlled how cryptoassets can be marketed to UK consumers. Add FCA anti-money-laundering registration for custody and exchange, and a full authorisation regime on the way, and you have a market where compliance decisions show up directly in UX.
The current rules
FCA registration under the Money Laundering Regulations
Since January 2020, businesses carrying on cryptoasset exchange or custodian wallet activity in the UK must register with the FCA for anti-money-laundering supervision. The FCA has been demanding: many applications were withdrawn or refused, typically over weak AML controls, unclear ownership or governance. Registration is not authorisation; it does not let you run regulated investment activity, and the FCA's register is public.
Financial promotions
Since 8 October 2023, cryptoassets have been treated as restricted mass market investments. A promotion to UK consumers must be made or approved by an FCA-authorised firm, or by an MLR-registered cryptoasset business using a specific exemption, and must meet detailed requirements:
- prescribed risk warnings, displayed prominently;
- a 24-hour cooling-off period for first-time investors with a firm;
- client categorisation and an appropriateness assessment before investment;
- a ban on incentives to invest, such as refer-a-friend bonuses.
These are product requirements as much as legal ones. Your onboarding flow, email sequences, app store copy and even influencer posts are promotions. Overseas firms are caught too if they market to UK consumers, which is why some foreign platforms restricted UK sign-ups in 2023.
Securities and stablecoins
Security tokens are specified investments under FSMA, regulated like their traditional equivalents. The Bank of England and FCA run a Digital Securities Sandbox, opened in 2024, for firms testing DLT-based issuance, trading and settlement. Separately, the government and regulators have been building a regime for fiat-backed stablecoins, with the Bank of England responsible for systemic ones.
What is coming
The Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026, made in February 2026, bring cryptoasset trading platforms, dealing, custody, staking and stablecoin issuance into full FCA authorisation, including a market abuse regime for crypto. The regime goes live on 25 October 2027, and the FCA's application window runs from 30 September 2026 to 28 February 2027; firms that miss it lose transitional protection. If you are building now, design for the incoming conduct rules (operational resilience, client asset segregation, disclosure) rather than only today's registration.
English law has also clarified the legal nature of digital assets: the Property (Digital Assets etc) Act 2025, which followed Law Commission work, confirms that crypto tokens can be objects of personal property rights. This matters for custody, insolvency and collateral arrangements.
The UK ecosystem and talent
London's strength is the overlap between crypto and traditional finance: banks, asset managers, market infrastructure, payments firms and a large fintech sector. That makes the UK a good base for institutional products, tokenization, custody technology, compliance tooling and payments, and a harder base for consumer speculation products given the promotions regime.
Engineering talent is concentrated in London, with strong pockets in Cambridge, Edinburgh, Manchester and Bristol, and universities such as Imperial, UCL, Cambridge and Edinburgh produce cryptography and distributed systems researchers. Experienced engineers are cheaper than in the US but more expensive than in most of the EU. Overseas hires need a Skilled Worker or Global Talent visa, which adds lead time and sponsor-license obligations. The UK's R&D tax relief can offset part of eligible development costs; check the merged scheme's current rules with an adviser.
Choosing a development partner
A UK-based partner is worth paying for when your product touches the promotions regime or FCA processes, because the expensive mistakes are in onboarding flows, risk warnings and record-keeping, not smart contract syntax. For back-end, protocol and contract work, remote teams in Europe or Asia are common and can work well if someone in the UK owns compliance requirements.
Things to check
- Has the team built a UK consumer flow that passed a compliance review under the October 2023 rules: risk warnings, cooling-off, appropriateness tests?
- Can they produce records the FCA expects, such as audit trails of promotions shown to each user?
- Do they understand UK GDPR obligations for on-chain data, where personal data cannot be deleted from a public ledger?
- Is the custody design compatible with client asset segregation rules being proposed?
Related guides: exchange marketing for the growth side, STO marketing for securities promotions, and wallet development for custody architecture. To compare nearby options, see Switzerland.
Frequently asked questions
Does a non-custodial wallet need FCA registration?
MLR registration targets exchange and custodian wallet providers. Pure self-custody software is generally outside it, but marketing that invites UK consumers to buy cryptoassets can still be a financial promotion. Get advice on your specific flows.
Can we offer referral bonuses to UK users?
Not as an incentive to invest in cryptoassets under the promotions rules. Many firms removed such schemes for UK users in 2023.
Is the UK good for tokenization projects?
Yes for institutional work, given the depth of traditional finance and the Digital Securities Sandbox. Retail-facing security token offerings face the usual prospectus and promotion rules.
When does the new UK crypto regime apply?
From 25 October 2027, under regulations made in February 2026. Existing MLR registrations do not carry over, so firms must apply in the FCA's window, which closes on 28 February 2027.