← Regulations / United Kingdom / Operating Models / On-shore VASP

On-shore VASP in United Kingdom

Locally-incorporated VASP that operates under full local jurisdiction, holding all required licenses and registrations.

Conditional AI-Generated · Unreviewed

On-shore VASP is conditionally permitted in United Kingdom with a local entity, subject to AML obligations and high licensing burden.

Verdict Details

Permitted
conditional
Local entity required
Yes
Licensing burden
High
Last updated
2026-07-13

AML Obligations

  • FCA registration under the Money Laundering Regulations 2017 (MLRs) is mandatory for all cryptoasset exchange providers and custodian wallet providers — applies regardless of where customers are based if the business operates in the UK
  • Ongoing AML/CTF supervision by the FCA, including full customer due diligence (CDD), enhanced due diligence (EDD), transaction monitoring, and suspicious activity reporting (SARs) to the National Crime Agency
  • Travel Rule adopted — threshold: GBP 0 (no minimum threshold), requiring originator and beneficiary information to be transmitted with all crypto transfers
  • Sanctions screening and compliance: UK VASPs must freeze/restrict assets of designated persons (DPs), report holdings or suspected sanctions evasion to OFSI, and block transactions involving sanctioned jurisdictions (Russia, North Korea, Iran, Syria, etc.)
  • Financial promotions compliance: Crypto classified as restricted mass-market investments under the Financial Promotions Order (crypto amendment, effective Oct 8, 2023) — risk warnings mandatory, no misleading promotions, incentive restrictions
  • Criminal/civil penalties apply: unlimited fines, asset seizures, imprisonment up to 7–10 years under Sanctions and Anti-Money Laundering Act 2018 and FSMA; OFSI monetary penalties may apply
  • FCA can impose fines, suspensions, or permanent closure for non-compliance; new rules from 2027 expanding custody definitions with FCA approval required by Feb 2028

Key Restrictions

  • Must register with the FCA (MLR 2017) — ~85% rejection/withdrawal rate; only ~40 firms currently registered
  • Crypto derivatives (options, futures, ETNs) banned for retail investors since 2021
  • Financial promotions strict regime: crypto classified as restricted mass-market investments — risk warnings mandatory, no misleading promotions, bans on certain incentives
  • No EU passporting post-Brexit — must comply with standalone UK regime
  • Future comprehensive FSMA-based regime (2025–2026) forthcoming, covering trading platforms, intermediation, lending, staking, stablecoins — current MLR registration is a transitional step
  • Custody: FCA registration + safeguarding requirements; future regime will introduce MiCA-style tiered capital requirements

Key Risks

  • Very high application rejection/withdrawal rate (~85%) — significant risk that a firm cannot obtain or maintain FCA registration
  • Regulatory regime is in transition: current MLR-based registration is a stepping stone to a broader FSMA-based regime expected 2025–2026, creating regulatory uncertainty and potential cost of dual compliance
  • FCA has a demonstrated enforcement appetite — e.g., public clashes with Binance over compliance
  • Unlimited fines, asset seizures, and criminal sanctions for AML/OFAC violations create severe downside risk
  • Tax reporting is self-assessed via HMRC — complex capital gains treatment for multiple crypto-to-crypto disposals, airdrops, mining, DeFi yields, etc.

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

licensing 80% confidence

FCA — Crypto registration (MLR 2017), financial promotions, AML supervision — ~85% rejection rate

[primary] FCA
licensing 80% confidence

HM Treasury — Policy and legislation — phased crypto framework under FSMA 2023

[primary] HM Treasury
licensing 20% confidence

Money Laundering Regulations 2017 (amended) (2017) — AML/KYC — crypto exchanges and custodian wallet providers

licensing 20% confidence

Financial Services and Markets Act 2000 (amended 2023) (2023) — Crypto as regulated activity, financial promotions regime

licensing 20% confidence

Financial Promotions Order (crypto amendment) (2023) — Crypto classified as restricted mass-market investments — effective Oct 8, 2023

licensing 20% confidence

VASP: FCA registration required for all cryptoasset businesses (exchange + custodian wallet providers). ~85% rejection/withdrawal rate. Only ~40 firms registered. Future comprehensive FSMA-based regime (2025-2026) will cover trading platforms, intermediation, lending, staking, stablecoins.

licensing 20% confidence

CUSTODY: FCA registration + safeguarding requirements. Future regime will introduce MiCA-style tiered capital requirements.

licensing 20% confidence

EXCHANGE: FCA registration + financial promotions rules (risk warnings mandatory, no misleading promotions, incentive restrictions). Crypto derivatives banned for retail (since 2021). No EU passporting post-Brexit.

licensing 20% confidence

AML Supervision: Registers and supervises cryptoasset businesses under the Money Laundering Regulations.

licensing 20% confidence

Financial Promotions: Enforces rules regarding the marketing and advertising of cryptoassets.

aml 60% confidence

OFSI Enforcement: UK VASPs must immediately freeze and restrict assets of designated persons (DPs), report holdings or suspected sanctions evasion to OFSI (e.g., via crypto transfers by DPs), and avoid processing transactions involving sanctioned parties; OFSI's 2022 Cryptoassets Threat Assessment highlights risks like pseudonymity enabling evasion.

[primary] legislation.gov.uk [primary] assets.publishing.service.gov.uk — OFSI Cryptoassets Threat Assessment [primary] legislation.gov.uk — Contents
aml 60% confidence

OFAC/EU/UN Sanctions: UK firms must comply with OFSI-implemented sanctions, which align with UN and EU lists but are UK-specific; primary sanctions bind all UK persons, while secondary sanctions (e.g., post-2022 Russia/Ukraine measures) restrict third-party dealings with sanctioned countries like Russia. No direct OFAC jurisdiction applies unless involving US nexus, but UK warnings echo US DOJ concerns on sanctions circumvention via crypto.

[primary] legislation.gov.uk [primary] assets.publishing.service.gov.uk — OFSI Cryptoassets Threat Assessment [primary] legislation.gov.uk — Contents
aml 60% confidence

FCA Oversight: Registered VASPs under the Financial Services and Markets Act (FSMA) must integrate sanctions screening into AML/CTF frameworks, with new rules from 2027 expanding custody definitions and requiring FCA approval by Feb 2028.

[primary] legislation.gov.uk [primary] assets.publishing.service.gov.uk — OFSI Cryptoassets Threat Assessment [primary] legislation.gov.uk — Contents
aml 60% confidence

Prohibited dealings with prescribed countries like Russia (post-2022 embargoes), North Korea, Iran, or Syria-linked entities; crypto transfers to/from these are high-risk and often blocked.

[primary] legislation.gov.uk [primary] assets.publishing.service.gov.uk — OFSI Cryptoassets Threat Assessment [primary] legislation.gov.uk — Contents
aml 60% confidence

No services to sanctioned jurisdictions or DPs globally; UK firms must block transactions even in unregulated markets if involving UK nexus.

[primary] legislation.gov.uk [primary] assets.publishing.service.gov.uk — OFSI Cryptoassets Threat Assessment [primary] legislation.gov.uk — Contents
aml 60% confidence

Civil/Criminal Fines: Unlimited fines, asset seizures, or imprisonment up to 7-10 years under Sanctions and Anti-Money Laundering Act 2018 and FSMA; OFSI can impose monetary penalties.

[primary] legislation.gov.uk [primary] assets.publishing.service.gov.uk — OFSI Cryptoassets Threat Assessment [primary] legislation.gov.uk — Contents
aml 90% confidence

FCA Actions: Fines, suspensions, or permanent closures for unregistered firms missing 2027-2028 deadlines; e.g., FCA clashes with Binance over compliance.

[primary] legislation.gov.uk [primary] assets.publishing.service.gov.uk — OFSI Cryptoassets Threat Assessment [primary] legislation.gov.uk — Contents
aml 80% confidence

Financial Conduct Authority (FCA): Leads authorization, supervision, rule-making, and enforcement for cryptoasset firms and activities.

[primary] legislation.gov.uk — Made [secondary] fca.org.uk — New Regime Cryptoasset Regulation
aml 60% confidence

HM Treasury (HMT): Oversees policy development and legislation, including consultations on the regime.

[primary] legislation.gov.uk — Made [secondary] fca.org.uk — New Regime Cryptoasset Regulation
travel-rule 20% confidence

Travel Rule adopted — threshold: GBP 0 (no threshold)

Evidence fact gb.tax not found (may have been renamed).

licensing 20% confidence

Role: Responsible for setting the overall policy direction and drafting new legislation for cryptoassets.

licensing 20% confidence

Key Activities: Has conducted several consultations (e.g., on stablecoins, broader crypto regulation, DLT in financial markets) to inform policy development. It's the primary driver behind expanding the regulatory perimeter.

licensing 20% confidence

Role: The primary conduct regulator for financial services firms and markets in the UK. It is responsible for implementing and enforcing regulations related to cryptoassets.

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
high

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — an on-shore VASP is permitted in the UK, but must obtain FCA registration under the Money Laundering Regulations 2017 (a high-burden process with ~85% rejection rate), comply with the Travel Rule (GBP 0 threshold), adhere to strict financial promotions rules, and prepare for a transition to a comprehensive FSMA-based regime expected by 2025–2026.

Questions this verdict aims to answer

  • What license(s) are required to operate locally?
  • What capital, governance, and reporting obligations apply?
  • What is the application process and timeline?