UK Crypto Regulations: Hidden Pitfalls for Unwary Firms

The UK's Financial Conduct Authority has proposed new crypto regulations that could significantly broaden the definition of custody, potentially affecting platforms and software providers that do not consider themselves custodians. The FCA's Cryptoasset Perimeter Guidance, published recently, outlines several technical traps that firms handling client crypto assets must be aware of. A key aspect of the rules is the 24-hour threshold for custody, where any firm holding client assets for more than a day during trade settlement may be classified as a regulated custodian, requiring a full safeguarding license. This has implications for validators and node operators, who risk losing their exemption if they offer 'added value' features such as user dashboards or yield tools, and must seek approval for arranging staking. The regulator has also addressed 'shadow custody,' making it clear that if a crypto service provider can theoretically override a client's authority, it is considered a custodian, even if it guarantees not to exert that power. For stablecoin issuers, the rules are equally straightforward, requiring issuance to be legal only if the issuer is based in the UK and manages the entire lifecycle, from initial offering to redemption and reserve maintenance. The FCA is seeking feedback on these proposals until June 3, 2026, and intends to publish finalized rules later this summer, followed by the final perimeter guidance in September. The new regulations will require all entities providing crypto services to transition from the current money-laundering registration system to a stricter approval regime under the Financial Services and Markets Act. Firms have a five-month application window, from September 30, 2026, to February 28, 2027, to apply for the new regime, and only those who apply during this period will be allowed to continue operating while the regulator reviews their application.