← Regulations / United Kingdom / Operating Models / Remote VASP

Remote VASP serving residents in United Kingdom

Foreign-incorporated entity that offers exchange, custody, or transfer services to residents of a jurisdiction without establishing a local entity or office.

Conditional AI-Generated · Unreviewed

Remote VASP is conditionally permitted in United Kingdom without local incorporation, subject to AML obligations and high licensing burden.

Verdict Details

Permitted
conditional
Local entity required
No
Licensing burden
High
Last updated
2026-07-13

AML Obligations

  • FCA registration required under MLR 2017 for all cryptoasset businesses (exchange + custodian wallet providers) — ~85% rejection rate, only ~40 firms registered
  • Full AML/CTF/KYC obligations under the Money Laundering Regulations 2017 (amended) — no threshold applies
  • Travel Rule adopted with GBP 0 threshold — beneficiary originator information required on all transfers
  • Sanctions screening required — must freeze and restrict assets of designated persons, report to OFSI immediately
  • Financial promotions regime applies — crypto classified as restricted mass-market investments under Financial Promotions Order (crypto amendment) 2023
  • OFSI reporting obligation for suspected sanctions evasion or crypto transfers by designated persons
  • Civil/criminal penalties: unlimited fines, asset seizures, imprisonment up to 7-10 years under Sanctions and Anti-Money Laundering Act 2018 and FSMA

Key Restrictions

  • Crypto derivatives banned for retail (since 2021)
  • No EU passporting post-Brexit — must register directly with FCA
  • Financial promotions rules apply — risk warnings mandatory, no misleading promotions, incentive restrictions
  • Future comprehensive FSMA-based regime (2025-2026) will expand scope to trading platforms, intermediation, lending, staking, stablecoins
  • No services to sanctioned jurisdictions or designated persons globally — UK nexus triggers obligations

Key Risks

  • High enforcement risk: FCA has ~85% rejection/withdrawal rate for crypto registrations; only ~40 firms registered
  • Prior precedent: FCA has clashed with Binance over compliance — unregistered remote operators are actively targeted
  • Unlimited fines and potential imprisonment for operating without FCA registration
  • Regulatory ambiguity around scope of 'carrying on business in the UK' for foreign-incorporated remote VASPs
  • Upcoming regime expansion (2025-2026) may impose additional requirements on currently unregistered activities

Evidence

This verdict synthesizes the following facts. Each fact links to its primary source(s).

licensing 80% confidence

FCA — Crypto registration (MLR 2017), financial promotions, AML supervision — ~85% rejection rate

[primary] FCA
licensing 20% confidence

Money Laundering Regulations 2017 (amended) (2017) — AML/KYC — crypto exchanges and custodian wallet providers

licensing 20% confidence

Financial Services and Markets Act 2000 (amended 2023) (2023) — Crypto as regulated activity, financial promotions regime

licensing 20% confidence

Financial Promotions Order (crypto amendment) (2023) — Crypto classified as restricted mass-market investments — effective Oct 8, 2023

licensing 20% confidence

VASP: FCA registration required for all cryptoasset businesses (exchange + custodian wallet providers). ~85% rejection/withdrawal rate. Only ~40 firms registered. Future comprehensive FSMA-based regime (2025-2026) will cover trading platforms, intermediation, lending, staking, stablecoins.

licensing 20% confidence

EXCHANGE: FCA registration + financial promotions rules (risk warnings mandatory, no misleading promotions, incentive restrictions). Crypto derivatives banned for retail (since 2021). No EU passporting post-Brexit.

aml 60% confidence

OFSI Enforcement: UK VASPs must immediately freeze and restrict assets of designated persons (DPs), report holdings or suspected sanctions evasion to OFSI (e.g., via crypto transfers by DPs), and avoid processing transactions involving sanctioned parties; OFSI's 2022 Cryptoassets Threat Assessment highlights risks like pseudonymity enabling evasion.

[primary] legislation.gov.uk [primary] assets.publishing.service.gov.uk — OFSI Cryptoassets Threat Assessment [primary] legislation.gov.uk — Contents
aml 60% confidence

FCA Oversight: Registered VASPs under the Financial Services and Markets Act (FSMA) must integrate sanctions screening into AML/CTF frameworks, with new rules from 2027 expanding custody definitions and requiring FCA approval by Feb 2028.

[primary] legislation.gov.uk [primary] assets.publishing.service.gov.uk — OFSI Cryptoassets Threat Assessment [primary] legislation.gov.uk — Contents
aml 60% confidence

No services to sanctioned jurisdictions or DPs globally; UK firms must block transactions even in unregulated markets if involving UK nexus.

[primary] legislation.gov.uk [primary] assets.publishing.service.gov.uk — OFSI Cryptoassets Threat Assessment [primary] legislation.gov.uk — Contents
aml 60% confidence

Civil/Criminal Fines: Unlimited fines, asset seizures, or imprisonment up to 7-10 years under Sanctions and Anti-Money Laundering Act 2018 and FSMA; OFSI can impose monetary penalties.

[primary] legislation.gov.uk [primary] assets.publishing.service.gov.uk — OFSI Cryptoassets Threat Assessment [primary] legislation.gov.uk — Contents
aml 90% confidence

FCA Actions: Fines, suspensions, or permanent closures for unregistered firms missing 2027-2028 deadlines; e.g., FCA clashes with Binance over compliance.

[primary] legislation.gov.uk [primary] assets.publishing.service.gov.uk — OFSI Cryptoassets Threat Assessment [primary] legislation.gov.uk — Contents
travel-rule 20% confidence

Travel Rule adopted — threshold: GBP 0 (no threshold)

licensing 20% confidence

Scope: Cryptoasset businesses operating in the UK (regardless of where their customers are) are required to register with the FCA. This includes:

aml 80% confidence

Financial Conduct Authority (FCA): Leads authorization, supervision, rule-making, and enforcement for cryptoasset firms and activities.

[primary] legislation.gov.uk — Made [secondary] fca.org.uk — New Regime Cryptoasset Regulation
licensing 20% confidence

AML Supervision: Registers and supervises cryptoasset businesses under the Money Laundering Regulations.

licensing 20% confidence

Financial Promotions: Enforces rules regarding the marketing and advertising of cryptoassets.

Verdict Attribution

Source:
AI-Generated · Unreviewed
AI synthesized:
2026-07-13 (deepseek-chat)
Last updated:
2026-07-13
Confidence:
high

This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.

Conditional — a foreign-incorporated remote VASP may serve UK residents only if it registers with the FCA under MLR 2017 (high burden, ~85% rejection rate), complies with AML/KYC/Travel Rule obligations (GBP 0 threshold), and adheres to the financial promotions regime; operating without FCA registration carries severe enforcement risk including unlimited fines and imprisonment.

Questions this verdict aims to answer

  • May a non-resident provider serve residents from abroad?
  • Does cross-border service trigger licensing, registration, or AML obligations?
  • What enforcement risk exists for unlicensed remote operators?