Do I Need FCA Crypto Registration in the UK? Mlrs, Application Steps & FSMA Authorisation

If you operate a crypto exchange, custody service, wallet provider, or on/off ramp touching UK customers, FCA crypto registration UK compliance is not optional it is a legal prerequisite. Under the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 (the “MLRs”), any firm carrying on relevant cryptoasset business in the United Kingdom must be registered with the Financial Conduct Authority before it begins operations. The landscape is also shifting: the new FSMA-based authorisation regime established by SI 2026/102, made on 4 February 2026 will require firms to hold full FCA authorisation from 25 October 2027. This page provides a comprehensive, step-by-step guide to help compliance teams, founders, and legal advisers navigate both the current MLR registration process and the forthcoming authorisation gateway.

Quick Answer: Do You Need to Register?

• Yes, if you provide exchange services, operate custodian wallets, or facilitate fiat-to-crypto (or crypto-to-crypto) transactions “by way of business” in the UK you must apply for FCA registration under the MLRs.
• Additionally, from 25 October 2027, firms carrying on specified cryptoasset activities will need full FSMA authorisation under the new crypto regime. The window to prepare is now.

Who Should Read This

This guide is written for compliance officers, founders, in-house legal teams, and external advisers at the following types of firm:

• Crypto exchanges centralised or decentralised platforms matching buy/sell orders for cryptoassets.
• Custodian wallet providers firms that safeguard or administer cryptoassets on behalf of customers.
• Fiat on/off ramps payment gateways converting between fiat currency and cryptoassets.
• Token projects issuers distributing tokens to UK retail or institutional investors.
• Overseas firms marketing to UK consumers any business directing cryptoasset financial promotions at UK-based individuals, regardless of where the firm is incorporated.

How to Complete FCA MLR Registration Step by Step

The FCA crypto registration UK process can be broken down into six sequential stages. Thorough preparation at each step reduces the risk of delays, information requests, and outright refusal.

Step 1 Scope Check: Identify Your Regulated Activities

Before completing any form, determine whether your business falls within the scope of Regulations 8 and 9 of the MLRs. The regulations define two primary categories of cryptoasset business:

• Cryptoasset exchange provider a firm that exchanges, or arranges the exchange of, cryptoassets for money (or other cryptoassets) by way of business.
• Custodian wallet provider a firm that safeguards, or safeguards and administers, cryptoassets on behalf of customers, or private cryptographic keys to hold, store, and transfer cryptoassets.

If your service includes fiat on/off ramps that facilitate exchange transactions systematically and with the intention to generate profit, you are likely operating “by way of business.” The FCA does not apply a strict volume or frequency threshold; instead, it considers regularity, systematisation, and commercial motive. A decision flowchart mapping each activity against the MLR definitions is the most reliable way to document your scope assessment.

Step 2 Pre-Application Preparation

The FCA has made clear in its application expectations guidance that incomplete or under-evidenced submissions are the primary cause of delays and refusals. Before you open the application form, ensure you have assembled:

• Corporate structure details full organisational chart, beneficial ownership disclosures, and proof of UK establishment or presence.
• AML/CTF policies and procedures a comprehensive manual covering customer due diligence (CDD), enhanced due diligence (EDD), suspicious activity reporting (SARs), and sanctions screening.
• Transaction-monitoring architecture documentation of your monitoring rules, alert escalation procedures, and a sample set of test alerts demonstrating the system works.
• MLRO appointment details of your nominated Money Laundering Reporting Officer, including their qualifications, experience, and reporting lines.
• Outsourcing and technology descriptions for any third-party services (KYC vendors, blockchain analytics providers, cloud infrastructure), prepare contracts and due-diligence reports showing how AML obligations are maintained.

Step 3 Complete the FCA Crypto Registration Forms

The FCA provides specific registration forms on its “How to apply for registration” page. Key points to note:

• Form selection ensure you choose the correct form for your business type (exchange provider, custodian wallet provider, or both).
• Data-validation checks common errors include mismatched company numbers, incomplete beneficial-ownership details, and missing attestation signatures. Run a full review against the FCA’s published field requirements before submission.
• Supporting narrative the form requires free-text explanations of your business model, target market, and AML risk assessment. Write these clearly and concisely; vague language invites follow-up queries.

Step 4 Required Supporting Documents (Detailed Checklist)

The following documents should be compiled into a clearly labelled application pack. This crypto registration checklist reflects the FCA’s published expectations:

1. Corporate documents certificate of incorporation, memorandum and articles of association, board/shareholder resolutions approving the application.
2. Governance materials CVs and fitness-and-propriety assessments for all directors, senior managers, and the MLRO; evidence of UK decision-making authority.
3. AML/CTF manual including your risk assessment, CDD/EDD procedures, approach to the FATF Travel Rule, and sanctions-screening protocols.
4. Customer due diligence sample redacted sample KYC files demonstrating how you identify, verify, and risk-rate customers.
5. Transaction-monitoring documentation rule sets, escalation workflows, sample alerts and outcomes, and periodic-review schedules.
6. Custody and segregation architecture for custodian wallet providers: cold wallet procedures, key-management controls, proof of reserves or control, and segregation policies.
7. Token-specific materials for token projects: token economics whitepaper, smart-contract code audits, distribution mechanics, and reserve custody arrangements.
8. Fee payment evidence the FCA charges an application fee (check the current FCA fees page for the applicable band). Retain proof of payment with your application file.

Industry observers recommend maintaining a standardised folder structure mirroring the checklist above to speed the FCA’s intake review and demonstrate professionalism.

Step 5 Submit and Manage the Application Timeline

Once submitted, the FCA’s registration process typically proceeds as follows:

• Intake and completeness check the FCA confirms receipt and verifies that all mandatory fields and documents are present.
• Substantive review a case officer reviews your AML/CTF framework, governance, and business model against regulatory expectations.
• Requests for further information (RFIs) the FCA may issue one or more RFIs. Respond promptly and thoroughly; delays at this stage extend timelines significantly.
• Decision the FCA either grants registration, grants with conditions, or refuses. Processing times for MLR registration vary from weeks to several months depending on complexity and completeness.

Note that the forthcoming FSMA authorisation process is expected to involve materially longer timelines and additional prudential and conduct assessments.

Step 6 After Registration: Ongoing Compliance and FSMA Readiness

Registration is not a one-off event. Under the MLRs, registered firms must maintain:

• Ongoing AML/CTF programmes continuous CDD, transaction monitoring, and staff training.
• Suspicious activity reporting timely SARs to the National Crime Agency.
• Record-keeping retention of CDD data and transaction records for the periods specified in the MLRs.
• Supervisory cooperation responding to FCA information requests and submitting to periodic inspections.

Simultaneously, firms should begin assembling evidence packs for FSMA authorisation covering governance frameworks, prudential resources, conduct-of-business arrangements, and consumer-protection policies well before the 25 October 2027 gateway. Preparing for FSMA authorisation in parallel with maintaining MLR compliance is widely regarded as best practice.

MLR Registration vs FSMA Authorisation Comparison Table

The table below summarises the critical differences between the current MLR registration regime and the forthcoming FCA crypto registration UK framework under FSMA. Use it to plan your compliance roadmap.

The message is clear: register now under the MLRs and prepare in parallel for FSMA authorisation to avoid a compressed, high-risk transition in 2027.

Do You Need to Register? Eligibility Checklist

Not every crypto business requires FCA crypto registration UK. The following checklist, derived from the FCA’s eligibility guidance and the MLRs, will help you determine your obligations:

• “By way of business” test you provide exchange or custody services with regularity, systematisation, and the intention to generate profit. There is no bright-line volume threshold; the FCA takes a holistic view.
• UK nexus you carry on relevant cryptoasset activity within the United Kingdom, or you establish a UK presence (branch, office, agent) from which such activity is directed.
• Exchange provider activities you exchange, or arrange the exchange of, cryptoassets for money or other cryptoassets on behalf of customers.
• Custodian wallet activities you safeguard or administer cryptoassets, or hold private cryptographic keys on behalf of customers.
• On/off ramp services you facilitate fiat-to-crypto or crypto-to-fiat conversion as a regular business function.

Exclusions: The MLRs contain limited exclusions. Firms that merely provide software, hardware, or infrastructure without taking custody or facilitating exchange transactions may fall outside scope, but this assessment is fact-specific. If in doubt, seek specialist advice.

Borderline cases overseas firms: Even if you are not UK-established, directing cryptoasset financial promotions at UK consumers triggers separate obligations under the financial-promotions regime (see below). The scope of “marketing to UK consumers” is broad and captures digital advertising, social-media content, and affiliate promotions targeted at UK-based individuals.

How PS23/6 and FG23/3 Affect Your Marketing to UK Consumers

Since October 2023, the FCA’s financial-promotions regime for cryptoassets (PS23/6) has applied to any firm UK or overseas communicating cryptoasset promotions to UK consumers. The accompanying guidance (FG23/3) provides practical detail on implementation.

Two routes for lawful promotions:

• Route 1 Authorised-firm approval: The promotion is made or approved by an FCA-authorised person under section 21 of FSMA. The authorised firm (the “s21 approver”) bears regulatory responsibility for the content.
• Route 2 MLR-registered firm exemption (FPO Article 73ZA): An MLR-registered cryptoasset business may communicate its own promotions without s21 approval, provided it complies in full with the FCA’s content and process rules.

Key operational requirements for marketing teams:

• Prominent risk warnings all promotions must include a prescribed risk warning (e.g., “Don’t invest unless you’re prepared to lose all the money you invest”).
• Appropriateness and categorisation firms must assess whether a consumer has sufficient knowledge and experience before permitting certain high-risk investments.
• 24-hour cooling-off period first-time investors must be given a mandatory reflection period before committing funds.
• Ban on inducements refer-a-friend bonuses, trading credits, and similar incentives to invest are prohibited.
• Approval logs and compliance sign-off every promotion must be reviewed and approved internally (or by a s21 approver), with a documented audit trail.

Overseas firms: The FCA has made explicit that firms marketing crypto to UK consumers must comply regardless of their jurisdiction of incorporation. An offshore exchange running paid search ads targeting UK IP addresses, for example, is subject to the full PS23/6 framework. Non-compliance risks enforcement action, including take-down orders and sanctions.

Common Application and Compliance Pitfalls (and How to Fix Them)

The FCA has publicly highlighted the most frequent reasons for application delays and refusals in the crypto sector. Avoid these common pitfalls:

• Weak or generic AML policies policies must be tailored to your specific business model, customer base, and risk profile. Templated documents without operational substance are routinely flagged.
• Missing beneficial-ownership data incomplete or inconsistent UBO disclosures trigger immediate RFIs. Ensure full transparency down to the ultimate individual controllers.
• Insufficient UK management or control the FCA expects to see meaningful decision-making authority located within the UK, not a token presence with all substantive governance offshore.
• Non-compliant marketing promotions lacking required risk warnings, inappropriately incentivising investment, or failing to apply the cooling-off period expose firms to enforcement action.
• Failure to evidence transaction monitoring describing a system in policy documents is not enough; provide sample alerts, escalation records, and SAR filing statistics.

Enforcement outcomes can include take-down orders for non-compliant promotions, registration restrictions, financial penalties, and criminal referrals in serious cases. The practical remedy is early, thorough preparation ideally with a structured pre-application review that identifies gaps before submission.

Short Cases Real Outcomes (Anonymised)

Case A Overseas Exchange: An exchange based outside the UK was directing promotions at UK retail consumers without complying with PS23/6. After engaging specialist advisers, the firm completed MLR registration, implemented a compliant financial-promotions workflow with proper risk warnings and cooling-off mechanisms, and avoided an FCA take-down order. Operations continued without interruption.

Case B Custody Provider: A UK custodian wallet provider submitted an FCA application that was returned due to insufficient evidence of cold-wallet controls and key-management segregation. A structured remediation plan including independent architecture review and updated custody documentation was prepared and resubmitted, resulting in successful registration within the expected timeframe.

Case C Token Issuer: A token project preparing for distribution to UK investors began assembling its FSMA authorisation evidence pack eighteen months ahead of the 25 October 2027 gateway. By front-loading governance documentation, prudential evidence, and consumer-protection policies, the issuer positioned itself to enter the authorisation process with minimal additional preparation, shortening the anticipated timeline significantly.

Free Download FCA Crypto Registration Checklist & Application Template

A comprehensive, editable crypto registration checklist covering every document, policy, and data point referenced in this guide is available for download. The checklist mirrors the FCA’s published expectations and includes a suggested folder structure and naming conventions for your application pack. Access the FCA crypto registration checklist (download) to begin your pre-application preparation immediately.

Read Next

Continue your compliance journey with these related guides:

• Crypto AML checklist detailed operational guidance for building and maintaining your AML/CTF programme.
• Crypto financial-promotions how-to a deep dive into PS23/6 and FG23/3 with worked examples for ads, social media, and affiliates.
• Preparing for FSMA authorisation evidence packs, governance templates, and prudential readiness for exchanges, custody, and stablecoin firms.
• Travel Rule and transaction monitoring for crypto firms technical and policy guidance on implementation.
• FCA fees and timelines (summary) practical guidance on fee bands, typical queries, and common application responses.

Sources

• FCA Cryptoassets: Who needs to register
• FCA Cryptoassets: How to apply for registration
• FCA What we expect to see in your application for registration
• FCA PS23/6: Financial promotion rules for cryptoassets
• FCA FG23/3: Finalised guidance on cryptoasset financial promotions
• Legislation.gov.uk Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017
• Legislation.gov.uk The Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026 (SI 2026/102)
• FCA New regime for cryptoasset regulation
• FCA Cryptoassets: Marketing to UK consumers
• FCA Cryptoasset registrations: building strong foundations (blog)