UK Crypto Regulations: Hidden Pitfalls for Unwary Firms

The UK's Financial Conduct Authority has introduced proposed crypto regulations that could significantly broaden the definition of custody, potentially impacting platforms and software providers that do not consider themselves custodians. The recently published Cryptoasset Perimeter Guidance outlines several technical complexities that firms handling client crypto assets must be aware of. A key aspect of the rules is the 24-hour threshold for custody, where any firm holding client assets for more than a day during trade settlement may be classified as a regulated custodian, requiring a full safeguarding license. Validators and node operators must also exercise caution, as providing 'added value' features such as user dashboards or yield tools may lead to the loss of their tech exemption, necessitating full approval for arranging staking. The FCA has emphasized its commitment to strengthening consumer protections and supporting fair, transparent markets as the sector evolves. Notably, the regulator has addressed the issue of 'shadow custody,' clarifying that if a crypto service provider can theoretically override a client's authority, it is considered a custodian, regardless of whether it intends to exert that power. The guidance also stipulates that stablecoin issuance is only permissible if the issuer is established in the UK and manages the entire lifecycle, including initial offering, redemption, and reserve maintenance. The FCA is seeking feedback on these proposals until June 3, 2026, and plans to publish finalized rules in the summer, followed by the final perimeter guidance in September. The new regulations will require all entities providing crypto services to transition from the current money-laundering registration system to a more stringent approval regime under the UK's Financial Services and Markets Act. Firms intending to continue operating under the new regulations must apply within a five-month window, from September 30, 2026, to February 28, 2027, to avoid potential fines, suspensions, and permanent closures.