Self-custodial wallet / non-custodial software in United Kingdom
Publisher of software where users hold their own private keys. The publisher never holds, controls, or has access to user funds.
Self-custodial wallet is conditionally permitted in United Kingdom without local incorporation, subject to AML obligations and low licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- No
- Licensing burden
- Low
- Last updated
- 2026-07-13
AML Obligations
- No direct AML registration required — the publisher of non-custodial wallet software does not fall within the definition of 'custodian wallet provider' under MLR 2017 (which covers firms that safeguard private keys on behalf of customers)
- However, if the software generates revenue via integrated exchange/on-ramp services, such ancillary services may trigger FCA registration obligations
- If the wallet software publishes financial promotions (e.g., marketing itself as an investment tool), the Financial Promotions Order (crypto amendment, Oct 2023) classifies crypto as restricted mass-market investments, triggering FCA authorization for the promotion
- Sanctions screening obligations under OFSI may apply if the publisher has any UK nexus and processes transactions (e.g., via integrated swap features) — must freeze assets of designated persons and report to OFSI
Key Restrictions
- Must not offer any custody or control over user private keys, or it will trigger custodian wallet provider classification under MLR 2017
- If the software includes integrated exchange/trading features (e.g., swaps), those features may be deemed exchange activity requiring FCA registration
- Financial promotions rules under FSMA 2023 and Financial Promotions Order apply to marketing of the wallet to UK residents — risk warnings required, no misleading promotions, incentive restrictions apply
- Publishing non-custodial software alone is not a regulated activity under current UK law (MLR 2017 scope is exchange providers and custodian wallet providers only)
- Future FSMA-based regime (2025-2026) may expand the regulatory perimeter to cover wider cryptoasset activities — monitoring required
Key Risks
- Regulatory perimeter ambiguity — the FCA may reinterpret what constitutes 'custodian wallet provider' broadly; any technical capability to influence transactions could attract scrutiny
- Unregistered firms face FCA enforcement actions including fines, suspensions, or closures — FCA has an ~85% rejection/withdrawal rate for registrations, indicating aggressive supervisory posture
- Financial promotions rules create risk even for non-custodial software: marketing wallet features to UK residents without FCA-approved promotions risks enforcement
- Sanctions compliance risk: if the wallet integrates any transaction routing (e.g., swaps, bridges), the publisher may be expected to block sanctioned addresses, even without custody
- Future regulatory expansion (FSMA 2025-2026) may capture non-custodial wallet publishers under new definitions — structural pivot may be needed
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
FCA — Crypto registration (MLR 2017), financial promotions, AML supervision — ~85% rejection rate
Money Laundering Regulations 2017 (amended) (2017) — AML/KYC — crypto exchanges and custodian wallet providers
Financial Services and Markets Act 2000 (amended 2023) (2023) — Crypto as regulated activity, financial promotions regime
Financial Promotions Order (crypto amendment) (2023) — Crypto classified as restricted mass-market investments — effective Oct 8, 2023
VASP: FCA registration required for all cryptoasset businesses (exchange + custodian wallet providers). ~85% rejection/withdrawal rate. Only ~40 firms registered. Future comprehensive FSMA-based regime (2025-2026) will cover trading platforms, intermediation, lending, staking, stablecoins.
CUSTODY: FCA registration + safeguarding requirements. Future regime will introduce MiCA-style tiered capital requirements.
Custodian Wallet Providers: Firms that safeguard cryptoassets or private cryptographic keys on behalf of customers.
FCA Oversight: Registered VASPs under the Financial Services and Markets Act (FSMA) must integrate sanctions screening into AML/CTF frameworks, with new rules from 2027 expanding custody definitions and requiring FCA approval by Feb 2028.
OFSI Enforcement: UK VASPs must immediately freeze and restrict assets of designated persons (DPs), report holdings or suspected sanctions evasion to OFSI (e.g., via crypto transfers by DPs), and avoid processing transactions involving sanctioned parties; OFSI's 2022 Cryptoassets Threat Assessment highlights risks like pseudonymity enabling evasion.
Civil/Criminal Fines: Unlimited fines, asset seizures, or imprisonment up to 7-10 years under Sanctions and Anti-Money Laundering Act 2018 and FSMA; OFSI can impose monetary penalties.
FCA Actions: Fines, suspensions, or permanent closures for unregistered firms missing 2027-2028 deadlines; e.g., FCA clashes with Binance over compliance.
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — publishing non-custodial (self-custodial) wallet software does not itself trigger VASP/custodian wallet provider classification under current UK law (MLR 2017), so no FCA AML registration is required for pure software publishing; however, integrated exchange/swap features, any form of key custody, or marketing the software to UK residents triggers financial promotions rules and may require FCA authorization, with an ~85% registration rejection rate and a future FSMA regime (2025-2026) that may expand the regulatory perimeter.
Questions this verdict aims to answer
- Does software publishing trigger VASP / MSB classification?
- Do AML obligations attach when no custody exists?
- What disclosure or consumer-protection rules apply?