← Regulations / United Kingdom / Operating Models / DeFi frontend

DeFi protocol frontend in United Kingdom

Operates a web frontend or aggregator that interacts with permissionless smart contracts on behalf of users. May or may not screen users / restrict regions.

Conditional AI-Generated · Unreviewed

DeFi frontend is conditionally permitted in United Kingdom with a local entity, subject to AML obligations and high licensing burden.

Verdict Details

Permitted
conditional
Local entity required
Yes
Licensing burden
High
Last updated
2026-07-13

AML Obligations

  • FCA registration under MLR 2017 as a cryptoasset business if the frontend involves exchange or custody functions (gb.licensing.anti-money-laundering-aml-counter-terrorist-financing, gb.licensing.scope-cryptoasset-businesses-operating-in)
  • Transaction screening against UK sanctions lists (OFSI) and asset freezing obligations for designated persons (gb.aml.ofsi-enforcement-uk-vasps-must)
  • Prohibition on servicing sanctioned jurisdictions or designated persons globally where a UK nexus exists (gb.aml.no-services-to-sanctioned-jurisdictions)
  • Financial promotions compliance: risk warnings mandatory, no misleading promotions, incentive restrictions for crypto classified as restricted mass-market investments (gb.licensing.financial-promotions-enforces-rules-regarding, gb.licensing.legislation-financial-promotions-order-crypto-amendment)
  • AML/CTF framework integration with sanctions screening as required under FSMA for registered VASPs (gb.aml.fca-oversight-registered-vasps-under)

Key Restrictions

  • If the frontend takes fees or facilitates exchange/custody, it is likely a regulated cryptoasset activity requiring FCA registration under the MLR 2017 (gb.licensing.vasp)
  • Retail crypto derivatives are banned since 2021 — if the frontend facilitates derivatives, it cannot serve UK retail users (gb.licensing.exchange)
  • Financial promotions rules apply — crypto classified as restricted mass-market investments; risk warnings required, no misleading promotions (gb.licensing.legislation-financial-promotions-order-crypto-amendment)
  • Future FSMA-based regime (2025-2026) will cover trading platforms, intermediation — likely capturing frontend operators more explicitly (gb.licensing.legislation-financial-services-and-markets-act-2000-amended-2023, gb.licensing.regulator-hm-treasury)
  • Geofencing / IP-blocking UK users may be necessary if the operator is not FCA-registered and cannot comply with financial promotions rules

Key Risks

  • High regulatory ambiguity — FCA perimeter guidance on 'decentralized' vs 'centralized' activity is not fully settled; frontends interacting with permissionless contracts may be deemed regulated activity if they exercise control or take fees (gb.licensing.guidance-provides-guidance-on-how)
  • ~85% FCA registration rejection/withdrawal rate — very low success rate for crypto registrations; operating without registration exposes to enforcement action with unlimited fines (gb.licensing.vasp, gb.aml.civilcriminal-fines-unlimited-fines-asset)
  • Unregistered firms missing 2027-2028 compliance deadlines face fines, suspensions, or permanent closures (gb.aml.fca-actions-fines-suspensions-or)
  • Fee-taking (frontend fees, commissions, or MEV-related revenue) strengthens the argument that the frontend is conducting regulated activity, increasing enforcement risk (gb.licensing.cryptoasset-exchange-providers-firms-that)
  • Sanctions compliance risk is acute — UK OFSI enforcement against crypto firms is active; failure to block sanctioned parties can result in criminal liability up to 7-10 years imprisonment (gb.aml.civilcriminal-fines-unlimited-fines-asset)

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

licensing 80% confidence

FCA — Crypto registration (MLR 2017), financial promotions, AML supervision — ~85% rejection rate

licensing 20% confidence

Money Laundering Regulations 2017 (amended) (2017) — AML/KYC — crypto exchanges and custodian wallet providers

licensing 20% confidence

Financial Services and Markets Act 2000 (amended 2023) (2023) — Crypto as regulated activity, financial promotions regime

licensing 20% confidence

Financial Promotions Order (crypto amendment) (2023) — Crypto classified as restricted mass-market investments — effective Oct 8, 2023

licensing 20% confidence

VASP: FCA registration required for all cryptoasset businesses (exchange + custodian wallet providers). ~85% rejection/withdrawal rate. Only ~40 firms registered. Future comprehensive FSMA-based regime (2025-2026) will cover trading platforms, intermediation, lending, staking, stablecoins.

licensing 20% confidence

EXCHANGE: FCA registration + financial promotions rules (risk warnings mandatory, no misleading promotions, incentive restrictions). Crypto derivatives banned for retail (since 2021). No EU passporting post-Brexit.

licensing 20% confidence

Guidance: Provides guidance on how existing regulations apply to cryptoassets (e.g., perimeter guidance).

licensing 20% confidence

Financial Promotions: Enforces rules regarding the marketing and advertising of cryptoassets.

licensing 20% confidence

Scope: Cryptoasset businesses operating in the UK (regardless of where their customers are) are required to register with the FCA. This includes:

licensing 20% confidence

Cryptoasset Exchange Providers: Firms that exchange cryptoassets for fiat currency or other cryptoassets.

licensing 20% confidence

Custodian Wallet Providers: Firms that safeguard cryptoassets or private cryptographic keys on behalf of customers.

licensing 20% confidence

Anti-Money Laundering (AML) & Counter-Terrorist Financing (CTF) – The Money Laundering Regulations 2017 (MLRs):

aml 60% confidence

OFSI Enforcement: UK VASPs must immediately freeze and restrict assets of designated persons (DPs), report holdings or suspected sanctions evasion to OFSI (e.g., via crypto transfers by DPs), and avoid processing transactions involving sanctioned parties; OFSI's 2022 Cryptoassets Threat Assessment highlights risks like pseudonymity enabling evasion.

aml 60% confidence

FCA Oversight: Registered VASPs under the Financial Services and Markets Act (FSMA) must integrate sanctions screening into AML/CTF frameworks, with new rules from 2027 expanding custody definitions and requiring FCA approval by Feb 2028.

aml 60% confidence

No services to sanctioned jurisdictions or DPs globally; UK firms must block transactions even in unregulated markets if involving UK nexus.

aml 60% confidence

Civil/Criminal Fines: Unlimited fines, asset seizures, or imprisonment up to 7-10 years under Sanctions and Anti-Money Laundering Act 2018 and FSMA; OFSI can impose monetary penalties.

aml 90% confidence

FCA Actions: Fines, suspensions, or permanent closures for unregistered firms missing 2027-2028 deadlines; e.g., FCA clashes with Binance over compliance.

aml 80% confidence

Financial Conduct Authority (FCA): Leads authorization, supervision, rule-making, and enforcement for cryptoasset firms and activities.

aml 60% confidence

HM Treasury (HMT): Oversees policy development and legislation, including consultations on the regime.

Evidence fact gb.regulatory.regulatory-approach-uk-adopts-a-phased not found (may have been renamed).

Evidence fact gb.regulatory.regulatory-timeline-phased-implementation not found (may have been renamed).

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
medium

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — a DeFi protocol frontend targeting UK users is likely a regulated cryptoasset activity requiring FCA registration (MLR 2017) and financial promotions compliance if it takes fees, facilitates exchange, or provides custodial elements; the ~85% rejection rate and unsettled perimeter guidance for decentralized protocols create significant operational risk.

Questions this verdict aims to answer

  • Is operating the frontend a regulated activity even if the protocol is decentralized?
  • What geofencing or KYC obligations apply?
  • Does fee-taking change classification?