UK Crypto Regulations: Hidden Pitfalls for Unprepared Firms

The UK's Financial Conduct Authority has unveiled proposed crypto regulations that could significantly broaden the definition of custody, potentially ensnaring platforms and software providers who do not consider themselves custodians. The FCA's Cryptoasset Perimeter Guidance, published recently, outlines several technical intricacies that firms handling client crypto assets must be aware of. A key provision is the 24-hour threshold for custody, where any firm or platform holding client assets for more than a day during trade settlement is likely to be classified as a regulated custodian, requiring a full safeguarding license. Validators and node operators must also exercise caution, as providing 'added value' features such as user dashboards or yield tools may necessitate full approval for arranging staking, thereby losing their pure tech exemption. The FCA aims to bolster consumer protection and support fair, transparent markets with these new regulations. Notably, the authority has addressed the issue of 'shadow custody,' clarifying that if a crypto service provider can theoretically override a client's authority, it is considered a custodian, even if it guarantees never to exert that power. For stablecoin issuers, the rules are straightforward: issuance is only permissible if the issuer is established in the UK and manages the entire lifecycle, from initial offering to redemption and reserve maintenance. The FCA is seeking feedback on these proposals until June 3, 2026, and plans to publish finalized rules and perimeter guidance later this year. The regulatory roadmap requires all entities providing crypto services to transition from the current money-laundering registration system to a stricter approval regime under the UK's Financial Services and Markets Act. Firms have a five-month window, from September 30, 2026, to February 28, 2027, to apply for approval, and only those who apply during this period will be allowed to continue operating while the regulator reviews their applications.