UK Crypto License: FCA Registration Requirements, Cost & Process (2026)

MLR 2017 registration is not the same as full FCA authorisation. It confirms that a firm meets the FCA's anti-money-laundering standards: KYC/CDD procedures, transaction monitoring, suspicious activity reporting, and record-keeping. It does not cover conduct-of-business rules, capital adequacy, or consumer protection in the way that authorised-firm status does.

The FCA assesses every applicant against several criteria before granting registration:

• Fit-and-proper test — directors, beneficial owners, officers, managers, and the Money Laundering Reporting Officer (MLRO) must demonstrate integrity, competence, and financial soundness
• UK physical office — the FCA requires a bona fide UK presence under the MLRs (Regulation 8L covers cryptoasset businesses specifically); a brass-plate address will not suffice
• MLRO with UK regulatory knowledge — while no absolute statutory bar on location exists, the FCA expects the MLRO to have appropriate knowledge of UK regulation and AML/CTF practice
• AML/CTF policies and procedures — a documented risk assessment, compliance manual, staff training programme, and ongoing monitoring framework

The FCA application fee for cryptoasset registration is £11,150 (Category 6 of FCA pricing, per FEES Appendix 4 Annex 1, ORA-indexed annually). The fee is non-refundable regardless of the outcome.

Under the MLR 2017 framework, you must hold FCA registration if your business carries out any of the following cryptoasset activities in or from the UK:

• Cryptoasset exchange services — converting cryptoassets to fiat currency, fiat to cryptoassets, or one cryptoasset to another
• Custodial wallet provision — safeguarding or administering cryptoassets, or private keys, on behalf of customers
• Cryptoasset ATM operation — running machines that allow users to buy or sell cryptoassets
• ICO and token issuance facilitation — issuing or facilitating the sale of cryptoassets as part of an initial coin offering or token generation event
• Peer-to-peer exchange platforms — operating a platform that matches buyers and sellers of cryptoassets

The current MLR-only registration system is transitional. HM Treasury has enacted the Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026, which extends FSMA 2000 to cover a broad range of cryptoasset activities. The new regime takes effect on 25 October 2027.

Once active, the FSMA-based framework will replace MLR registration with full FCA authorisation. Key changes include:

• Broader scope — the new rules will cover activities beyond AML/CTF, including conduct-of-business requirements, capital adequacy, and consumer protection obligations
• Authorisation instead of registration — firms will need to meet capital and organisational requirements comparable to those applied to traditional financial services firms
• Faster processing targets — since January 2026, the FCA targets 4-month turnaround for complete applications, an improvement over the current average of approximately 5 months

If you currently hold MLR registration, you should begin preparing for the transition now. The FCA has published guidance on what firms can expect from the new regime and the steps required to convert an existing registration into full FSMA authorisation.

All packages include document preparation, FCA application filing, and ongoing communication with the regulator throughout the review process (the FCA's statutory deadline is 3 months from a complete application, though actual processing often takes longer).

The FCA charges a flat, non-refundable registration fee for cryptoasset business applications. Once registered, firms pay annual supervision fees based on their income. These fees are set by the FCA and adjusted annually.

The table below estimates total first-year costs for each service package, including government fees and key operational expenses. Actual costs depend on your business structure, MLRO arrangements, and office requirements.

The Financial Conduct Authority (FCA) is the primary regulator for crypto businesses in the UK. Since January 2020, any firm carrying on cryptoasset activity in the UK must register with the FCA under the Money Laundering Regulations. The FCA assesses whether applicants meet anti-money laundering standards, conducts fit and proper checks on directors and beneficial owners, and maintains the public Financial Services Register where all approved crypto firms appear.

The FCA’s role is expanding. Under the new regulatory framework taking effect on 25 October 2027, the FCA will move from a registration-based model to a full authorisation regime — meaning crypto firms will need to meet conduct-of-business standards, capital requirements, and ongoing supervisory obligations comparable to those of traditional financial services firms.

HM Treasury sets the policy direction for UK crypto regulation. It drafts the statutory instruments that define which cryptoasset activities become regulated, determines the timetable for new rules, and consults with industry on the shape of the future regime. The Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026 — the legal instrument extending FSMA to cover crypto — was published by HM Treasury.

The Bank of England’s role is narrow. Its Financial Policy Committee monitors crypto-related risks to financial stability, but the BoE does not regulate crypto businesses generally. The Bank will regulate systemic stablecoins once HM Treasury formally recognises specific stablecoin issuers as systemically important — a step that has not yet occurred. Do not confuse the BoE with a day-to-day crypto regulator; that function sits with the FCA.

Two statutes form the backbone of UK crypto regulation:

• Money Laundering Regulations 2017 (MLR 2017) — the current framework. Amended in January 2020 to transpose EU 5AMLD, the MLRs require crypto firms to register with the FCA, implement AML/CTF controls, appoint a Money Laundering Reporting Officer, and submit suspicious activity reports. This is the regime you must comply with today.
• Financial Services and Markets Act 2000 (FSMA 2000) — the incoming framework. The FSMA 2000 (Cryptoassets) Regulations 2026 extend FSMA’s regulated activities regime to cover cryptoassets. This does not take effect until 25 October 2027. Once live, crypto firms will need full FSMA authorisation — not just MLR registration.

If your business markets crypto products or services to UK consumers — regardless of where your company is based — the financial promotions regime applies. Under FSMA Section 21, communicating a financial promotion without authorisation is a criminal offence carrying up to 2 years’ imprisonment and an unlimited fine.

There are four lawful routes to issue a crypto financial promotion in the UK:

1. Made by an authorised person — an FCA-authorised firm issues the promotion directly as part of its own regulated business.
2. Approved by an authorised person — an FCA-authorised firm reviews and approves the promotion on behalf of an unauthorised company before it is published.
3. MLR-registered cryptoasset business — firms on the FCA’s crypto register can communicate their own promotions, provided they comply with FCA rules on risk warnings, appropriateness assessments, and a mandatory 24-hour cooling-off period for new customers.
4. Exempt under statutory order — certain promotions qualify for exemptions (e.g., communications to high-net-worth investors or sophisticated investors), but these exemptions are narrow and fact-specific.

Most competitors overlook this regime entirely. For your business, it means that FCA registration is not just about AML compliance — it also unlocks the ability to legally market your crypto services in the UK. Without registration, you cannot advertise to UK customers through any of the routes above.

The gap between now and October 2027 is your preparation window. Firms that secure MLR registration today will be better positioned to transition to the full authorisation regime — the FCA has indicated that existing registered firms will have a structured pathway to the new regime.

A bona fide UK physical presence is mandatory under Regulations 8 and 9 of the MLRs. This means a real office staffed by people who make decisions — not a virtual mailbox or a serviced-address registration. The FCA will verify that your UK establishment is operational and that key management functions are carried out from it.

Your firm does not need to be structured as a limited company. While a UK Ltd is the most common vehicle, the FCA accepts sole traders, partnerships, and other legal structures. Choose a structure that fits your business model, but be aware that the fit-and-proper assessment applies to all beneficial owners and officers regardless of entity type.

Every applicant must appoint a Money Laundering Reporting Officer (MLRO) responsible for your firm’s compliance with AML/CTF obligations. The FCA expects the MLRO to be based in the UK and will look carefully at any application where the MLRO is located elsewhere. While no statutory bar prevents a non-UK MLRO, the practical reality is that FCA interviews are conducted in person at its offices — creating a strong operational requirement for UK presence.

All directors, beneficial owners, officers, managers, and the MLRO undergo a fit and proper assessment. The FCA evaluates each individual’s honesty, integrity, reputation, competence, and financial soundness. Criminal records, prior regulatory sanctions, and undisclosed conflicts will result in rejection. Prepare detailed CVs and disclosure statements for every person in a controlled function.

Your application must include a comprehensive AML/KYC policy framework that demonstrates how the firm will identify, assess, and mitigate money laundering and terrorist financing risks. The FCA expects these policies to be specific to your business activities — generic templates copied from other sectors will not pass review. See the full documents checklist below for the complete list of required documentation.

The FCA requires applicants to demonstrate adequate financial resources to carry out their cryptoasset activities and meet ongoing regulatory obligations. Your application must include financial projections, evidence of funding sources, and a clear explanation of how the business will sustain itself through the initial period of operation.

Unlike some jurisdictions that specify a fixed minimum capital figure, the FCA takes a proportionate approach — what counts as “adequate” depends on the nature, scale, and complexity of your business. A firm offering only crypto-to-crypto exchange services may need less capital than one handling large-volume fiat-to-crypto transfers. Expect the FCA to scrutinise your financial forecasts and challenge assumptions that appear unrealistic.

The following documents form the core of your FCA cryptoasset registration application. Missing or incomplete items are the primary cause of delays — the FCA will not begin substantive review until your submission is complete.

Since 1 April 2023, UK corporation tax is no longer a single flat rate. The rate your crypto company pays depends on its taxable profits:

When your company disposes of cryptoassets — whether by selling, exchanging one token for another, or using crypto to pay for goods — any gain is subject to Capital Gains Tax. HMRC classifies tokens as property, so each disposal triggers a potential taxable event. Allowable costs (acquisition price, transaction fees) reduce the chargeable gain.

If your business holds cryptoassets as trading stock rather than as investments, profits may fall under income tax or corporation tax instead of CGT. The classification depends on the nature and frequency of your trading activity. HMRC's cryptoasset disposal guidance explains how to determine which regime applies.

VAT rules for crypto businesses are not uniform — treatment depends on what your company actually does:

• Exchanging crypto for fiat or other crypto — VAT-exempt. HMRC treats these as transactions in a financial instrument.
• Mining and transaction validation fees — VAT-exempt. There is no direct link between the service and the consideration received, so no taxable supply arises.
• Selling goods or services for crypto — normal VAT applies. The crypto payment is converted to its sterling value at the point of sale, and standard VAT rules apply to the underlying supply.
• Advisory and consultancy services paid in crypto — standard-rated. The VAT treatment follows the nature of the service, not the payment method.

The distinction matters for input VAT recovery. If your supplies are mostly exempt, your ability to reclaim VAT on costs is restricted. For full details, see the HMRC Cryptoassets Manual (CRYPTO45000).

The UK offers several features that matter for crypto companies planning their tax position:

• Small profits rate — early-stage crypto firms with profits under £50,000 pay only 19%, keeping costs lower during the growth phase.
• Extensive double taxation treaty network — the UK has treaties with over 130 jurisdictions, reducing withholding tax on cross-border income and preventing double taxation for companies operating internationally.
• R&D tax relief — crypto companies developing new technology (blockchain protocols, smart contract platforms) may qualify for enhanced deductions or tax credits on qualifying R&D expenditure.
• No VAT on core exchange activity — if your primary business model is crypto-to-fiat or crypto-to-crypto exchange, your core revenue stream carries no VAT liability.

Registered cryptoasset businesses pay annual periodic fees to the FCA. The minimum fee is approximately £2,229 per year, plus a variable component of £15.13 per £1,000 of income over £100,000 (based on the 2025/26 fee schedule). Fees are invoiced annually and must be paid within 30 days — late payment triggers administrative surcharges and may prompt supervisory enquiry.

In addition to fees, the FCA expects registered firms to submit regulatory returns on time and to notify the regulator of material changes to their business — including changes to directors, beneficial owners, the MLRO, office address, or the nature of cryptoasset activities carried on. Keeping your register entry accurate and up to date is a standing obligation, not an optional administrative task.

Registered firms must maintain and apply their AML/CTF framework on an ongoing basis. The policies submitted during registration are not static documents — they must be reviewed, updated, and enforced as part of daily operations. Core obligations include:

• Customer due diligence (CDD) — verify the identity of every customer before establishing a business relationship, and apply ongoing monitoring to detect changes in risk profile
• Enhanced due diligence (EDD) — apply additional scrutiny to high-risk customers, including politically exposed persons (PEPs), customers from high-risk jurisdictions, and unusually complex transaction patterns
• Suspicious activity reports (SARs) — file reports with the National Crime Agency (NCA) whenever there are reasonable grounds to suspect money laundering or terrorist financing, without tipping off the customer
• Travel rule compliance — transmit originator and beneficiary information with cryptoasset transfers in line with the UK’s implementation of the FATF Travel Rule, ensuring traceability across transactions

The MLRO must receive adequate training on UK AML/CTF regulation and ensure that all relevant staff understand their responsibilities under the firm’s compliance framework. Training is not a one-time induction — the FCA expects regular refresher sessions that cover regulatory updates, emerging typologies, and lessons learned from internal reviews or industry enforcement cases. New joiners must be trained before they handle customer-facing or compliance-sensitive tasks.

Record-keeping obligations require firms to retain all customer identification records, transaction data, risk assessments, and SAR-related documentation for a minimum of 5 years after the end of the business relationship or the completion of the transaction. Records must be retrievable promptly if the FCA, NCA, or law enforcement requests them. Inadequate record-keeping is one of the most common compliance failures cited in FCA supervisory findings.

The FCA has a broad range of enforcement tools at its disposal. For registered cryptoasset firms that breach AML/CTF obligations, the consequences can include public censure, financial penalties, conditions or restrictions on the firm’s registration, or complete removal from the register.

Criminal sanctions apply to the most serious breaches. Under Regulation 86 of the Money Laundering Regulations 2017, operating a cryptoasset business without FCA registration — or failing to comply with core AML/CTF requirements — can result in up to 2 years’ imprisonment and/or an unlimited fine on indictment. Directors and officers may be held personally liable where the offence was committed with their consent or connivance.

Beyond criminal liability, the FCA’s civil penalty powers allow it to impose significant financial sanctions on firms and individuals. The regulator publishes enforcement outcomes, which means a compliance failure also becomes a reputational event — visible to banking partners, customers, and competitors on the FCA’s public register and decision notices.

The FCA is one of the most recognised financial regulators globally. Holding FCA cryptoasset registration tells institutional counterparties, payment processors, and banking partners that your firm has passed a rigorous fitness-and-propriety assessment and maintains a compliant AML/CTF framework. This credibility advantage is particularly valuable when onboarding enterprise clients, negotiating correspondent banking relationships, or expanding into other common-law jurisdictions that recognise FCA standards as a benchmark.

The UK is home to one of the world’s largest fintech ecosystems, with deep pools of venture capital, specialised legal and compliance talent, and government-backed support through bodies like Innovate UK. London’s concentration of crypto-native funds, established banks exploring digital assets, and blockchain infrastructure providers creates a network effect that accelerates partnerships, hiring, and fundraising. The FCA’s regulatory sandbox programme further lowers barriers for firms testing novel products under supervised conditions.

The UK’s corporation tax structure remains competitive among major financial centres. Small profits (up to £50,000) are taxed at 19%, while the main rate of 25% applies to profits above £250,000 — with marginal relief smoothing the transition between bands. Crypto-to-crypto and crypto-to-fiat exchange services are VAT-exempt, reducing the tax burden on core business operations. The UK’s extensive double-taxation treaty network (over 130 agreements) also supports international expansion. For a full breakdown, see the taxation section above.

The Digital Securities Sandbox (DSS), launched jointly by the FCA and the Bank of England, allows firms to issue, trade, and settle digital securities using distributed ledger technology under a modified regulatory framework. Participants can test tokenised financial instruments — such as bonds, equities, and fund units — without needing to comply with legacy requirements designed for traditional settlement infrastructure. For crypto businesses looking to bridge into regulated securities markets, the DSS provides a structured path to do so while maintaining FCA oversight.