UK Crypto Regulations: Hidden Dangers for Unprepared Firms

The UK's Financial Conduct Authority has unveiled proposed crypto regulations that could significantly expand the definition of custody, potentially capturing platforms and software providers that do not consider themselves custodians. The FCA's Cryptoasset Perimeter Guidance, published recently, outlines several technical pitfalls that firms handling client crypto assets must be aware of. A key aspect of the rules is the 24-hour threshold for custody, where any firm or crypto platform holding client assets for more than a day during trade settlement is likely to be classified as a regulated custodian, requiring a full safeguarding license. Validators and node operators must also exercise caution, as providing 'added value' features such as user dashboards or yield tools would necessitate seeking full approval for arranging staking, thereby losing their pure tech exemption. The regulator has emphasized that its new perimeter is designed to enhance consumer protections and support fair, transparent, and orderly markets as the sector evolves. Notably, the FCA has addressed the issue of 'shadow custody' for the first time, clarifying that if a crypto service provider can theoretically override a client's authority, it is considered a custodian, regardless of whether it intends to exert that power. For stablecoin issuers, the rules are equally straightforward, requiring issuers to be established in the UK and manage the entire lifecycle, from initial offering to redemption and reserve maintenance. The FCA is seeking feedback on these proposals until June 3, 2026, and intends to publish finalized rules later this summer, followed by the final perimeter guidance in September. The roadmap necessitates that all entities providing crypto services transition from the current money-laundering registration systems to a stricter approval regime under the UK's Financial Services and Markets Act. Firms aiming to continue operating under the new regulations have a five-month application window, from September 30, 2026, to February 28, 2027, and failure to meet this deadline may result in fines, suspensions, or permanent closures. Only those who apply during this period will benefit from the 'savings provisions' allowing them to continue operating while the regulator reviews their applications.