Crypto-funded debit card in United Kingdom
A card program where customer fiat balances are funded from crypto holdings, typically through an off-ramp at point of sale or top-up.
Crypto debit card is conditionally permitted in United Kingdom with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- FCA registration under MLR 2017 is mandatory for the cryptoasset business (exchange + custodian wallet provider) — ~85% rejection/withdrawal rate
- Full AML/KYC programme under the Money Laundering Regulations 2017 (amended) — CDD on all cardholders, ongoing transaction monitoring
- OFSI sanctions screening required — immediately freeze and report designated persons' assets; file suspicious activity reports to OFSI
- No services to sanctioned jurisdictions (Russia, North Korea, Iran, Syria) or designated persons globally where a UK nexus exists
- Financial promotions compliance under the Financial Promotions Order (crypto amendment, Oct 2023) — crypto classified as restricted mass-market investments, risk warnings mandatory
- Future FSMA-based regime (2025-2026) will expand custody definitions and require FCA approval by Feb 2028 for all activities
- Unlimited fines, asset seizures, or imprisonment (7-10 years) under Sanctions and Anti-Money Laundering Act 2018 and FSMA for non-compliance
Key Restrictions
- Must register with the FCA as a cryptoasset business under MLR 2017 — high rejection rate (~85%)
- Crypto derivatives banned for retail since 2021 — card program must not involve synthetic/derivative exposure
- Electronic money or payment institution authorisation from the FCA is required to issue fiat debit cards connected to customer balances (likely under PSR 2017 / EMR 2011)
- Crypto-to-fiat conversion at point of sale or top-up constitutes a regulated exchange activity — must be licensed as a cryptoasset exchange provider under MLR 2017
- Must integrate with a UK-regulated partner bank or BIN sponsor to issue cards (no standalone card issuance for crypto firms)
- Financial promotions must carry FCA-approved risk warnings, no misleading promotions, and no inducements to invest
- No EU passporting post-Brexit — separate EU licensing required for EEA services
Key Risks
- Extremely high FCA registration rejection/withdrawal rate (~85%) — only ~40 firms registered, creating significant execution risk
- Regulatory perimeter expansion underway (FSMA 2023) — existing MLR registration may be insufficient; new authorisation path expected 2025-2026
- Crypto derivatives ban for retail may create ambiguity around card rewards or cashback structured as crypto
- Sanctions compliance burden is heavy — UK OFSI regime is actively enforced against crypto firms (e.g., FCA clashes with Binance)
- Dual licensing (e-money/payments + cryptoasset) creates fragmented supervision by the FCA across different regulatory frameworks
- HMRC capital gains tax applies on every crypto-to-fiat conversion — creates cardholder reporting obligations and potential friction
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
FCA — Crypto registration (MLR 2017), financial promotions, AML supervision — ~85% rejection rate
Money Laundering Regulations 2017 (amended) (2017) — AML/KYC — crypto exchanges and custodian wallet providers
Financial Services and Markets Act 2000 (amended 2023) (2023) — Crypto as regulated activity, financial promotions regime
Financial Promotions Order (crypto amendment) (2023) — Crypto classified as restricted mass-market investments — effective Oct 8, 2023
VASP: FCA registration required for all cryptoasset businesses (exchange + custodian wallet providers). ~85% rejection/withdrawal rate. Only ~40 firms registered. Future comprehensive FSMA-based regime (2025-2026) will cover trading platforms, intermediation, lending, staking, stablecoins.
CUSTODY: FCA registration + safeguarding requirements. Future regime will introduce MiCA-style tiered capital requirements.
EXCHANGE: FCA registration + financial promotions rules (risk warnings mandatory, no misleading promotions, incentive restrictions). Crypto derivatives banned for retail (since 2021). No EU passporting post-Brexit.
AML Supervision: Registers and supervises cryptoasset businesses under the Money Laundering Regulations.
Financial Promotions: Enforces rules regarding the marketing and advertising of cryptoassets.
Scope: Cryptoasset businesses operating in the UK (regardless of where their customers are) are required to register with the FCA. This includes:
Cryptoasset Exchange Providers: Firms that exchange cryptoassets for fiat currency or other cryptoassets.
Custodian Wallet Providers: Firms that safeguard cryptoassets or private cryptographic keys on behalf of customers.
OFSI Enforcement: UK VASPs must immediately freeze and restrict assets of designated persons (DPs), report holdings or suspected sanctions evasion to OFSI (e.g., via crypto transfers by DPs), and avoid processing transactions involving sanctioned parties; OFSI's 2022 Cryptoassets Threat Assessment highlights risks like pseudonymity enabling evasion.
OFAC/EU/UN Sanctions: UK firms must comply with OFSI-implemented sanctions, which align with UN and EU lists but are UK-specific; primary sanctions bind all UK persons, while secondary sanctions (e.g., post-2022 Russia/Ukraine measures) restrict third-party dealings with sanctioned countries like Russia. No direct OFAC jurisdiction applies unless involving US nexus, but UK warnings echo US DOJ concerns on sanctions circumvention via crypto.
FCA Oversight: Registered VASPs under the Financial Services and Markets Act (FSMA) must integrate sanctions screening into AML/CTF frameworks, with new rules from 2027 expanding custody definitions and requiring FCA approval by Feb 2028.
Prohibited dealings with prescribed countries like Russia (post-2022 embargoes), North Korea, Iran, or Syria-linked entities; crypto transfers to/from these are high-risk and often blocked.
No services to sanctioned jurisdictions or DPs globally; UK firms must block transactions even in unregulated markets if involving UK nexus.
Civil/Criminal Fines: Unlimited fines, asset seizures, or imprisonment up to 7-10 years under Sanctions and Anti-Money Laundering Act 2018 and FSMA; OFSI can impose monetary penalties.
FCA Actions: Fines, suspensions, or permanent closures for unregistered firms missing 2027-2028 deadlines; e.g., FCA clashes with Binance over compliance.
Financial Conduct Authority (FCA): Leads authorization, supervision, rule-making, and enforcement for cryptoasset firms and activities.
HM Treasury (HMT): Oversees policy development and legislation, including consultations on the regime.
Evidence fact gb.tax not found (may have been renamed).
Exchanging one cryptocurrency for another
Using crypto to pay for goods or services
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a crypto-funded debit card can operate in the UK, but requires dual licensing: (1) FCA registration as a cryptoasset business under MLR 2017 (exchange + custodian wallet provider) for the crypto-to-fiat conversion, and (2) an e-money or payment institution authorisation from the FCA for card issuance, plus compliance with the financial promotions regime and robust AML/sanctions controls.
Questions this verdict aims to answer
- What e-money / payment-institution license is required?
- How is the crypto-to-fiat conversion regulated?
- What KYC and AML obligations apply to cardholders?
- What partner-bank or BIN-sponsor arrangements are required?