UK Crypto Regulations: Hidden Traps for Unwary Firms

The UK's Financial Conduct Authority has introduced proposed crypto regulations that could significantly broaden the definition of custody, potentially ensnaring platforms and software providers that do not consider themselves custodians. The FCA's Cryptoasset Perimeter Guidance, published recently, outlines several technical traps for firms handling clients' crypto assets. A key aspect of the rules is the 24-hour threshold for custody, whereby any firm or crypto platform holding client assets for more than a day during trade settlement will likely be classified as a regulated custodian, requiring a full safeguarding license. Validators and node operators must also exercise caution, as providing 'added value' features such as user dashboards or yield tools may necessitate seeking approval for arranging staking, thus losing their pure tech exemption. The FCA has emphasized that its new perimeter is designed to enhance consumer protections and support fair, transparent markets as the sector evolves. Notably, the regulator has addressed the issue of 'shadow custody,' clarifying that if a crypto service provider can theoretically override a client's authority, it will be considered a custodian, regardless of whether it guarantees not to exert that power. For stablecoin issuers, the FCA's mandate is clear: issuance is only permissible if the issuer is established in the UK and manages the entire lifecycle, from initial offering to redemption and reserve maintenance. The regulator has invited feedback on these proposals until June 3, 2026, and intends to publish finalized rules in policy statements this summer, followed by the final perimeter guidance in September. The new regulations will require all entities providing crypto services to transition from the current money-laundering registration systems to a stricter approval regime under the UK's Financial Services and Markets Act. Firms intending to continue operating under the new regulations face a five-month application window from September 30, 2026, to February 28, 2027, and risk potential fines and suspensions if they miss this deadline. Only those who apply during the application period will benefit from the 'savings provisions' that allow them to continue operating while the regulator deliberates.