← Regulations / United Kingdom / Operating Models / CEX

Centralized exchange in United Kingdom

Order-book exchange that takes custody of user assets and matches trades between users.

Conditional AI-Generated · Unreviewed

CEX is conditionally permitted in United Kingdom with a local entity, subject to AML obligations and high licensing burden.

Verdict Details

Permitted
conditional
Local entity required
Yes
Licensing burden
High
Last updated
2026-07-13

AML Obligations

  • FCA registration under Money Laundering Regulations 2017 (amended) — mandatory for all cryptoasset exchange providers and custodian wallet providers operating in the UK
  • Customer due diligence (CDD) and ongoing monitoring under MLR 2017
  • Travel Rule (GBP 0 threshold) — must transmit originator and beneficiary info on all crypto transfers with no de minimis exemption
  • Sanctions screening — immediately freeze and restrict assets of designated persons, report to OFSI; comply with OFSI-implemented sanctions (UN/EU-aligned but UK-specific)
  • Prohibited dealings with prescribed countries (Russia post-2022 embargoes, North Korea, Iran, Syria) — crypto transfers to/from these are high-risk and often blocked
  • Financial promotions compliance — crypto classified as restricted mass-market investments, risk warnings mandatory, no misleading promotions, incentive restrictions
  • Transaction monitoring and suspicious activity reporting (SAR) to FCA/NCA
  • Record-keeping obligations under MLR 2017
  • Unlimited fines, asset seizures, or imprisonment (7-10 years) for non-compliance under Sanctions and Anti-Money Laundering Act 2018 and FSMA

Key Restrictions

  • Must register with FCA as a cryptoasset business — ~85% rejection/withdrawal rate, only ~40 firms registered
  • Local legal entity required — cryptoasset businesses operating in the UK must register with FCA regardless of where customers are
  • Crypto derivatives banned for retail customers since 2021
  • No EU passporting post-Brexit — separate UK authorization required
  • Financial promotions rules apply: crypto is a restricted mass-market investment, risk warnings mandatory, no misleading promotions, incentive restrictions
  • Future FSMA-based regime (2025-2026) will introduce tiered capital requirements, trading platform rules, lending/staking/stablecoin regimes — structural changes expected
  • Safeguarding requirements apply for custody of user assets under current FCA registration + future MiCA-style tiered capital requirements

Key Risks

  • Very high FCA rejection rate (~85%) for crypto registration creates significant execution risk — most applicants fail to obtain or maintain registration
  • Regulatory regime in transition — current AML-only registration is being replaced by a comprehensive FSMA-based regime (2025-2026), creating uncertainty and potential re-authorization burden
  • No services to sanctioned jurisdictions or designated persons globally if UK nexus exists — broad extra-territorial reach of UK sanctions
  • FCA enforcement track record includes clashes with major exchanges (e.g., Binance) — fines, suspensions, or permanent closures for unregistered firms
  • Travel Rule at GBP 0 threshold means every single withdrawal must carry originator/beneficiary info — significant operational lift for all on-chain transactions
  • Unlimited fines and asset seizures for non-compliance with AML/sanctions obligations

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

licensing 80% confidence

FCA — Crypto registration (MLR 2017), financial promotions, AML supervision — ~85% rejection rate

[primary] FCA
licensing 20% confidence

VASP: FCA registration required for all cryptoasset businesses (exchange + custodian wallet providers). ~85% rejection/withdrawal rate. Only ~40 firms registered. Future comprehensive FSMA-based regime (2025-2026) will cover trading platforms, intermediation, lending, staking, stablecoins.

licensing 20% confidence

EXCHANGE: FCA registration + financial promotions rules (risk warnings mandatory, no misleading promotions, incentive restrictions). Crypto derivatives banned for retail (since 2021). No EU passporting post-Brexit.

licensing 20% confidence

CUSTODY: FCA registration + safeguarding requirements. Future regime will introduce MiCA-style tiered capital requirements.

licensing 20% confidence

Money Laundering Regulations 2017 (amended) (2017) — AML/KYC — crypto exchanges and custodian wallet providers

licensing 20% confidence

Financial Services and Markets Act 2000 (amended 2023) (2023) — Crypto as regulated activity, financial promotions regime

licensing 20% confidence

Financial Promotions Order (crypto amendment) (2023) — Crypto classified as restricted mass-market investments — effective Oct 8, 2023

licensing 20% confidence

Anti-Money Laundering (AML) & Counter-Terrorist Financing (CTF) – The Money Laundering Regulations 2017 (MLRs):

licensing 20% confidence

Scope: Cryptoasset businesses operating in the UK (regardless of where their customers are) are required to register with the FCA. This includes:

licensing 20% confidence

Cryptoasset Exchange Providers: Firms that exchange cryptoassets for fiat currency or other cryptoassets.

licensing 20% confidence

Custodian Wallet Providers: Firms that safeguard cryptoassets or private cryptographic keys on behalf of customers.

aml 60% confidence

OFSI Enforcement: UK VASPs must immediately freeze and restrict assets of designated persons (DPs), report holdings or suspected sanctions evasion to OFSI (e.g., via crypto transfers by DPs), and avoid processing transactions involving sanctioned parties; OFSI's 2022 Cryptoassets Threat Assessment highlights risks like pseudonymity enabling evasion.

[primary] legislation.gov.uk [primary] assets.publishing.service.gov.uk — OFSI Cryptoassets Threat Assessment [primary] legislation.gov.uk — Contents
aml 60% confidence

OFAC/EU/UN Sanctions: UK firms must comply with OFSI-implemented sanctions, which align with UN and EU lists but are UK-specific; primary sanctions bind all UK persons, while secondary sanctions (e.g., post-2022 Russia/Ukraine measures) restrict third-party dealings with sanctioned countries like Russia. No direct OFAC jurisdiction applies unless involving US nexus, but UK warnings echo US DOJ concerns on sanctions circumvention via crypto.

[primary] legislation.gov.uk [primary] assets.publishing.service.gov.uk — OFSI Cryptoassets Threat Assessment [primary] legislation.gov.uk — Contents
aml 60% confidence

FCA Oversight: Registered VASPs under the Financial Services and Markets Act (FSMA) must integrate sanctions screening into AML/CTF frameworks, with new rules from 2027 expanding custody definitions and requiring FCA approval by Feb 2028.

[primary] legislation.gov.uk [primary] assets.publishing.service.gov.uk — OFSI Cryptoassets Threat Assessment [primary] legislation.gov.uk — Contents
aml 60% confidence

Prohibited dealings with prescribed countries like Russia (post-2022 embargoes), North Korea, Iran, or Syria-linked entities; crypto transfers to/from these are high-risk and often blocked.

[primary] legislation.gov.uk [primary] assets.publishing.service.gov.uk — OFSI Cryptoassets Threat Assessment [primary] legislation.gov.uk — Contents
aml 60% confidence

No services to sanctioned jurisdictions or DPs globally; UK firms must block transactions even in unregulated markets if involving UK nexus.

[primary] legislation.gov.uk [primary] assets.publishing.service.gov.uk — OFSI Cryptoassets Threat Assessment [primary] legislation.gov.uk — Contents
aml 60% confidence

Civil/Criminal Fines: Unlimited fines, asset seizures, or imprisonment up to 7-10 years under Sanctions and Anti-Money Laundering Act 2018 and FSMA; OFSI can impose monetary penalties.

[primary] legislation.gov.uk [primary] assets.publishing.service.gov.uk — OFSI Cryptoassets Threat Assessment [primary] legislation.gov.uk — Contents
aml 90% confidence

FCA Actions: Fines, suspensions, or permanent closures for unregistered firms missing 2027-2028 deadlines; e.g., FCA clashes with Binance over compliance.

[primary] legislation.gov.uk [primary] assets.publishing.service.gov.uk — OFSI Cryptoassets Threat Assessment [primary] legislation.gov.uk — Contents
travel-rule 20% confidence

Travel Rule adopted — threshold: GBP 0 (no threshold)

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
high

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — centralized exchanges may operate in the UK only after obtaining FCA registration (high bar, ~85% rejection rate), complying with full AML/CTF/Travel Rule obligations (GBP 0 threshold), adhering to financial promotions rules, and facing a transitioning regime toward comprehensive FSMA-based authorization by 2025-2026.

Questions this verdict aims to answer

  • What exchange / VASP license applies?
  • What custody segregation rules apply to user assets?
  • What market-conduct and listing rules apply?
  • What travel-rule obligations apply on withdrawals?