UK Crypto Regulations: Hidden Pitfalls for Unwary Firms

The UK's Financial Conduct Authority has introduced proposed crypto regulations that may broaden the definition of custody, potentially ensnaring platforms and software providers who do not identify as custodians. The FCA's Cryptoasset Perimeter Guidance, published recently, outlines several technical complexities that firms handling client crypto assets must be aware of. A key aspect of the rules is the 24-hour threshold for custody, where any firm holding client assets for more than a day during trade settlement may be classified as a regulated custodian, necessitating a full safeguarding license. Furthermore, validators and node operators must exercise caution, as providing 'added value' features such as user dashboards or yield tools may lead to the loss of their pure tech exemption, requiring them to seek approval for arranging staking. The FCA has stated that its new perimeter provides the necessary tools to enhance consumer protections and support fair, transparent markets as the sector evolves. Notably, the regulator has addressed the 'shadow custody' issue, clarifying that if a crypto service provider can theoretically override a client's authority, it is considered a custodian, regardless of whether it guarantees not to exert that power. The document also notes that the use of smart contracts, public blockchains, or decentralized elements does not determine the perimeter position or exempt an arrangement from regulation. Stablecoin issuers are subject to a similar mandate, with issuance only considered legal if the issuer is established in the UK and manages the entire lifecycle, including the initial offering, redemption, and reserve maintenance. The FCA is seeking feedback on these proposals until June 3, 2026, and intends to publish finalized rules and perimeter guidance later this year. The new regulations will require all entities providing crypto services to transition from the current money-laundering registration systems to a stricter approval regime under the UK's Financial Services and Markets Act. Firms that fail to apply during the designated five-month window, from September 30, 2026, to February 28, 2027, risk facing fines, suspensions, and potential closures. Only those who apply during this period will be eligible for 'savings provisions' that allow them to continue operating while the regulator reviews their applications.