HM Treasury Crypto Regulations Explained for UK Businesses (2026)

Introduction

On April 29, 2025, the HM Treasury crypto regulations were finalized, bringing crypto assets under the same oversight as traditional finance. Now in 2026, these rules are in effect. The Financial Services and Markets Act 2000 amendments mean crypto firms must meet the same standards as banks. What does this mean for your business? Let’s walk through what matters most.

Key regulated activities

Five specific crypto activities now require FCA authorization:

1. Operating a cryptoasset trading exchange
2. Issuing stablecoin
3. Dealing in qualifying cryptoassets
4. Providing custody arrangements for cryptoassets
5. Arranging transactions in cryptoassets

Any firm serving UK customers must comply. For example, if you run a crypto exchange used by UK residents, you need FCA approval. This isn’t just about being a tech startup anymore. The FCA expects the same transparency, security, and consumer protection as banks. No more "just a tech company" excuses.

Territorial scope: UK vs. global

Here’s where it gets practical. For stablecoins, only UK-based issuers fall under these rules. If a stablecoin is issued in the US but used by UK residents, the UK rules don’t regulate the US issuer directly. However, other laws might still apply. For other crypto activities-like trading or custody-non-UK firms that serve UK customers must comply. This creates a clear boundary: UK issuers get strict oversight, while foreign firms only face regulation if they target UK users. It’s a smart way to protect consumers without stifling global innovation.

What about DeFi?

Decentralized finance projects like Uniswap or Aave don’t need FCA authorization. Why? Because there’s no single company controlling them. The FCA only steps in if a project has a controlling entity-like a company behind the code. If it’s truly decentralized, the UK says it’s outside the regulatory perimeter. This approach acknowledges the technical reality of DeFi while focusing oversight where it matters most. For example, if a DeFi protocol has a central team managing upgrades, that team would need authorization. But if it’s fully community-governed? No FCA involvement.

UK vs EU: How does it compare to MiCA?

The UK’s approach is more flexible than the EU’s MiCA. For stablecoins, MiCA regulates all issuers serving EU customers, regardless of location. The UK only regulates UK-based issuers. For DeFi, MiCA has broader requirements for decentralized systems, while the UK explicitly excludes true DeFi. This gives UK-based crypto firms a competitive edge. It also means businesses already familiar with traditional finance rules find it easier to adapt. No need to build entirely new compliance systems from scratch.

What do businesses need to do?

If you’re a crypto firm operating in the UK, check if your activities fall under the new rules. For example, if you issue stablecoins in the UK, apply for FCA authorization. The process mirrors traditional finance: prove your financial health, security measures, and compliance systems. Crypto-native companies might need to build new infrastructure, while banks or traditional finance firms may find the transition smoother. The FCA published a discussion paper in May 2025 detailing its approach. Expect more guidance later in 2026. Start preparing now-delaying could mean fines or shutdowns.

What’s next for UK crypto regulation?

HM Treasury is already working on updates. In September 2025, they released draft amendments to anti-money laundering rules for crypto firms. These address customer checks, pooled client accounts, and trust registration. Stakeholders had until September 30, 2025, to give feedback. The government also promised market abuse and disclosure rules "in due course." Expect more clarity throughout 2026. The goal? Balance innovation with consumer protection while positioning London as a global crypto hub. Industry observers say this framework could set a global standard for English-speaking countries.

Future-proofing your business

Don’t wait for regulators to come knocking. Start by mapping your activities against the five regulated areas. If you’re a stablecoin issuer in the UK, begin the FCA authorization process immediately. For DeFi projects, assess whether you have a controlling entity. If not, you’re likely exempt-but keep an eye on changes. Traditional finance firms should review how crypto fits into their existing compliance frameworks. Smaller crypto companies might need help from legal experts to navigate the new rules. The key is action now: the FCA is ready to enforce these regulations, and penalties for non-compliance can be severe.