DeFi protocol frontend in United Kingdom
Operates a web frontend or aggregator that interacts with permissionless smart contracts on behalf of users. May or may not screen users / restrict regions.
DeFi frontend is conditionally permitted in United Kingdom with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- FCA registration under MLR 2017 as a cryptoasset business if the frontend involves exchange or custody functions (gb.licensing.anti-money-laundering-aml-counter-terrorist-financing, gb.licensing.scope-cryptoasset-businesses-operating-in)
- Transaction screening against UK sanctions lists (OFSI) and asset freezing obligations for designated persons (gb.aml.ofsi-enforcement-uk-vasps-must)
- Prohibition on servicing sanctioned jurisdictions or designated persons globally where a UK nexus exists (gb.aml.no-services-to-sanctioned-jurisdictions)
- Financial promotions compliance: risk warnings mandatory, no misleading promotions, incentive restrictions for crypto classified as restricted mass-market investments (gb.licensing.financial-promotions-enforces-rules-regarding, gb.licensing.legislation-financial-promotions-order-crypto-amendment)
- AML/CTF framework integration with sanctions screening as required under FSMA for registered VASPs (gb.aml.fca-oversight-registered-vasps-under)
Key Restrictions
- If the frontend takes fees or facilitates exchange/custody, it is likely a regulated cryptoasset activity requiring FCA registration under the MLR 2017 (gb.licensing.vasp)
- Retail crypto derivatives are banned since 2021 — if the frontend facilitates derivatives, it cannot serve UK retail users (gb.licensing.exchange)
- Financial promotions rules apply — crypto classified as restricted mass-market investments; risk warnings required, no misleading promotions (gb.licensing.legislation-financial-promotions-order-crypto-amendment)
- Future FSMA-based regime (2025-2026) will cover trading platforms, intermediation — likely capturing frontend operators more explicitly (gb.licensing.legislation-financial-services-and-markets-act-2000-amended-2023, gb.licensing.regulator-hm-treasury)
- Geofencing / IP-blocking UK users may be necessary if the operator is not FCA-registered and cannot comply with financial promotions rules
Key Risks
- High regulatory ambiguity — FCA perimeter guidance on 'decentralized' vs 'centralized' activity is not fully settled; frontends interacting with permissionless contracts may be deemed regulated activity if they exercise control or take fees (gb.licensing.guidance-provides-guidance-on-how)
- ~85% FCA registration rejection/withdrawal rate — very low success rate for crypto registrations; operating without registration exposes to enforcement action with unlimited fines (gb.licensing.vasp, gb.aml.civilcriminal-fines-unlimited-fines-asset)
- Unregistered firms missing 2027-2028 compliance deadlines face fines, suspensions, or permanent closures (gb.aml.fca-actions-fines-suspensions-or)
- Fee-taking (frontend fees, commissions, or MEV-related revenue) strengthens the argument that the frontend is conducting regulated activity, increasing enforcement risk (gb.licensing.cryptoasset-exchange-providers-firms-that)
- Sanctions compliance risk is acute — UK OFSI enforcement against crypto firms is active; failure to block sanctioned parties can result in criminal liability up to 7-10 years imprisonment (gb.aml.civilcriminal-fines-unlimited-fines-asset)
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
FCA — Crypto registration (MLR 2017), financial promotions, AML supervision — ~85% rejection rate
Money Laundering Regulations 2017 (amended) (2017) — AML/KYC — crypto exchanges and custodian wallet providers
Financial Services and Markets Act 2000 (amended 2023) (2023) — Crypto as regulated activity, financial promotions regime
Financial Promotions Order (crypto amendment) (2023) — Crypto classified as restricted mass-market investments — effective Oct 8, 2023
VASP: FCA registration required for all cryptoasset businesses (exchange + custodian wallet providers). ~85% rejection/withdrawal rate. Only ~40 firms registered. Future comprehensive FSMA-based regime (2025-2026) will cover trading platforms, intermediation, lending, staking, stablecoins.
EXCHANGE: FCA registration + financial promotions rules (risk warnings mandatory, no misleading promotions, incentive restrictions). Crypto derivatives banned for retail (since 2021). No EU passporting post-Brexit.
Guidance: Provides guidance on how existing regulations apply to cryptoassets (e.g., perimeter guidance).
Financial Promotions: Enforces rules regarding the marketing and advertising of cryptoassets.
Scope: Cryptoasset businesses operating in the UK (regardless of where their customers are) are required to register with the FCA. This includes:
Cryptoasset Exchange Providers: Firms that exchange cryptoassets for fiat currency or other cryptoassets.
Custodian Wallet Providers: Firms that safeguard cryptoassets or private cryptographic keys on behalf of customers.
Anti-Money Laundering (AML) & Counter-Terrorist Financing (CTF) – The Money Laundering Regulations 2017 (MLRs):
OFSI Enforcement: UK VASPs must immediately freeze and restrict assets of designated persons (DPs), report holdings or suspected sanctions evasion to OFSI (e.g., via crypto transfers by DPs), and avoid processing transactions involving sanctioned parties; OFSI's 2022 Cryptoassets Threat Assessment highlights risks like pseudonymity enabling evasion.
FCA Oversight: Registered VASPs under the Financial Services and Markets Act (FSMA) must integrate sanctions screening into AML/CTF frameworks, with new rules from 2027 expanding custody definitions and requiring FCA approval by Feb 2028.
No services to sanctioned jurisdictions or DPs globally; UK firms must block transactions even in unregulated markets if involving UK nexus.
Civil/Criminal Fines: Unlimited fines, asset seizures, or imprisonment up to 7-10 years under Sanctions and Anti-Money Laundering Act 2018 and FSMA; OFSI can impose monetary penalties.
FCA Actions: Fines, suspensions, or permanent closures for unregistered firms missing 2027-2028 deadlines; e.g., FCA clashes with Binance over compliance.
Financial Conduct Authority (FCA): Leads authorization, supervision, rule-making, and enforcement for cryptoasset firms and activities.
HM Treasury (HMT): Oversees policy development and legislation, including consultations on the regime.
Evidence fact gb.regulatory.regulatory-approach-uk-adopts-a-phased not found (may have been renamed).
Evidence fact gb.regulatory.regulatory-timeline-phased-implementation not found (may have been renamed).
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — a DeFi protocol frontend targeting UK users is likely a regulated cryptoasset activity requiring FCA registration (MLR 2017) and financial promotions compliance if it takes fees, facilitates exchange, or provides custodial elements; the ~85% rejection rate and unsettled perimeter guidance for decentralized protocols create significant operational risk.
Questions this verdict aims to answer
- Is operating the frontend a regulated activity even if the protocol is decentralized?
- What geofencing or KYC obligations apply?
- Does fee-taking change classification?