International cryptoasset firms looking to enter the UK need to consider more than whether their existing overseas licence is recognised. The UK’s new cryptoasset regime creates its own regulatory perimeter, and firms carrying on regulated activities in scope will need FCA authorisation regardless of whether they already hold licences in the European Union, United States, Middle East, Singapore or another major financial centre.
The FCA published its final approach to international cryptoasset firms in June 2026. Its baseline expectation is that a solo-regulated international firm requiring UK authorisation will carry on its regulated cryptoasset activities through a UK legal entity, supported by sufficient UK governance, management and operational substance for the FCA to supervise the business effectively.
There are important exceptions, particularly for certain overseas operators of qualifying cryptoasset trading platforms and some dual-regulated firms. However, a foreign licence, overseas office or UK branch does not automatically provide a route into the UK market. The regulatory structure needs to be designed around the activities being provided, the customers being served and the legal entity responsible for those activities.
Do overseas crypto firms need FCA authorisation?
The answer depends on the activities performed and how the UK regulatory perimeter applies to them.
The new UK regime brings activities including operating a qualifying cryptoasset trading platform, safeguarding cryptoassets, dealing, arranging transactions, qualifying cryptoasset staking, certain lending and borrowing activities and issuing qualifying stablecoins within FCA regulation. Issuer-specific requirements are set out in our FCA stablecoin authorisation guide.
For international firms, an important distinction is whether services are being provided to UK consumers. The UK perimeter is designed so that certain cryptoasset services provided to UK consumers can require FCA authorisation even where the service provider itself is established overseas.
An overseas firm should therefore not assume that it is outside FCA regulation merely because it has no UK office or legal entity. Where the activity falls within the cross-border scope of the UK regime, serving UK consumers from abroad can still trigger authorisation requirements.
The perimeter can operate differently for firms serving only institutional or other non-consumer clients. The regulatory analysis should therefore identify both the activity and the category of UK customer being served before the firm commits to a UK market-entry strategy.
UK market entry at a glance
| Business model | Likely UK regulatory consideration |
|---|---|
| Overseas crypto firm serving UK consumers | FCA authorisation may be required depending on the regulated activity |
| Overseas firm serving only UK institutional clients | Certain cross-border activities may remain outside the consumer-facing perimeter, subject to detailed analysis |
| International crypto custodian | FCA generally expects regulated custody to operate through a UK legal entity |
| Overseas crypto exchange / QCATP | Special branch structures may be available in defined circumstances |
| UK subsidiary of an international crypto group | Can apply for FCA authorisation for the relevant cryptoasset activities |
| Existing FCA-authorised international group | May require a Variation of Permission to add cryptoasset activities |
| Dual FCA/PRA-regulated firm | Branch-based structure may be possible case by case |
| Overseas stablecoin issuer | UK treatment depends on where issuance occurs and what UK activities are provided |
The regulatory perimeter should always be considered before deciding whether a UK subsidiary, branch or purely cross-border structure is appropriate.
The FCA generally expects a UK legal entity
For solo-regulated international cryptoasset firms that require FCA authorisation, the FCA’s baseline expectation is that regulated activities will be carried on through a UK legal entity.
This is a significant policy position.
The FCA considers cryptoasset activities capable of creating particular consumer, client-asset and market risks where services are provided by international businesses operating primarily outside the UK. Overseas insolvency regimes, different property-law treatment of cryptoassets, regulatory cooperation and access to supervisory information can all make customer protection and FCA intervention more difficult.
A UK-incorporated entity gives the FCA a clearer legal and supervisory relationship with the regulated business. It also gives UK customers a more direct contractual and legal relationship with the entity responsible for the regulated service.
For most international crypto businesses planning a substantial UK consumer proposition, the practical starting point should therefore be to assess whether a dedicated UK subsidiary is required and which activities that entity will perform.
A UK company alone is not enough
Creating a UK subsidiary does not by itself satisfy the FCA’s expectations.
The FCA assesses the threshold conditions when deciding whether to authorise a firm, including effective supervision, appropriate resources, suitability and whether the business model is appropriate and sustainable.
An international group cannot simply create a dormant UK company, appoint nominal directors and leave all meaningful decision-making, staffing and controls overseas. The FCA needs to be able to supervise the UK-regulated business effectively.
The level of UK substance required depends on the nature, scale and complexity of the firm. A large trading platform or custodian serving significant numbers of UK retail customers will generally need a more substantial UK governance and operational framework than a smaller or lower-risk business.
Senior managers directly involved in UK activities are normally expected to spend an adequate and proportionate amount of time in the UK. The firm should also have sufficient local knowledge, resources and control to meet its UK regulatory obligations independently of the wider group.
What does the FCA mean by UK presence?
UK presence is broader than having a Companies House registration or postal address.
The FCA considers where the business is actually managed, where key decision-makers are located, whether it can access records and information promptly and whether senior management responsible for UK activities is sufficiently engaged with the UK-regulated entity.
The firm must also consider operational resources. Compliance, risk, financial crime, finance, technology and customer support functions can be provided partly through the wider group or outsourced arrangements, but the UK firm remains responsible for satisfying its regulatory obligations.
Group support can be entirely legitimate. International financial groups routinely use shared technology, treasury, compliance and operational infrastructure.
The key issue is whether the UK entity retains sufficient governance, oversight and control to operate as a genuine authorised firm rather than functioning merely as a regulatory shell for an overseas business.
International group structures need careful design
A common international structure involves establishing a UK subsidiary that contracts with UK customers while relying on a parent or group company for technology, liquidity, custody infrastructure or operational support.
This structure can work, but responsibilities need to be clear.
The FCA will consider which entity performs each regulated activity, who controls customer assets, who contracts with customers, where decisions are made and whether outsourcing or intra-group arrangements allow the UK entity to meet its regulatory responsibilities.
A UK entity should not obtain authorisation for an activity that is, in substance, being carried on entirely by an unauthorised overseas affiliate.
Intra-group service agreements, outsourcing controls, data access, governance and escalation arrangements therefore form an important part of the authorisation framework.
The regulatory business plan should explain the group structure in practical terms rather than relying solely on a corporate organisation chart.
Does an overseas crypto firm need a UK subsidiary or can it use a branch?
For most solo-regulated cryptoasset activities, the FCA’s baseline expectation is a UK legal entity rather than a UK branch of an overseas company.
A branch is not a separate legal person. It remains part of the overseas legal entity, which can create greater complexity around insolvency, supervision, client assets and regulatory enforcement.
The FCA has nevertheless recognised that a branch structure can be appropriate in specific circumstances.
The most important exception concerns certain international operators of qualifying cryptoasset trading platforms, where access to global liquidity may produce better execution outcomes for UK customers. In these cases, the FCA can consider authorising the overseas platform operator through a UK branch where the structure meets the threshold conditions and the home regulatory framework provides sufficiently comparable protections.
This is an exception rather than the general rule.
Special treatment for overseas crypto trading platforms
International crypto exchanges often depend on global liquidity.
Requiring every UK customer order to trade only against liquidity isolated inside a separate UK legal entity could fragment the order book, reduce liquidity and worsen pricing.
The FCA has therefore created a more flexible approach for certain Qualifying Cryptoasset Trading Platform operators.
An international group may, depending on its model, use a structure combining a UK legal entity with a UK branch of the overseas-incorporated QCATP operator. The branch can allow UK customer orders to interact with wider global liquidity while the UK legal entity undertakes other regulated activities.
The FCA will assess these structures individually.
The applicant needs to explain why the branch structure is appropriate, how UK customers are protected, how the FCA can supervise the overseas entity and how responsibilities are divided between the branch, UK subsidiary and wider group.
Home-state regulation matters for branch applicants
Where an overseas QCATP seeks UK authorisation through a branch, the FCA expects the firm’s home regulator to provide comparable levels of regulatory protection and regulatory requirements.
A simple letter confirming that the firm is in good standing overseas is not enough.
The FCA will consider the nature of the home regulatory regime, supervisory cooperation and whether the overall structure allows it to achieve appropriate regulatory outcomes in the UK.
This can make branch authorisation more practical for firms headquartered in mature regulated jurisdictions with established cryptoasset frameworks and effective regulator-to-regulator cooperation.
Even then, approval is not automatic.
The FCA assesses each structure on its own merits and will consider whether a UK subsidiary would provide more effective supervision and customer protection.
Branch authorisation can bring the wider overseas firm into scope
International firms considering the branch route should understand an important consequence.
Where the FCA authorises an overseas legal entity through a UK branch, the authorisation assessment applies to the legal entity rather than only to a small ring-fenced UK office.
Threshold conditions and certain prudential or governance requirements can therefore apply at the level of the overseas firm operating the platform.
This can have wider consequences for group governance, capital, systems and regulatory reporting.
The branch route should therefore not be viewed simply as a lighter alternative to creating a UK subsidiary.
For a large international exchange, the right answer depends on the existing group structure, regulatory licences, global liquidity model and activities intended for UK customers.
Custody generally requires a UK legal entity
The FCA’s general expectation is particularly important for cryptoasset safeguarding.
Except for specific restricted arrangements connected with QCATP settlement, firms providing regulated cryptoasset custody are generally expected to carry on that activity through a UK legal entity.
This reflects the importance of client-asset protection and the complexity that can arise where customer cryptoassets are held through overseas legal and insolvency regimes.
A UK custodian will need to comply with the FCA’s CASS 17 requirements, including trust arrangements, record keeping, reconciliations, private key controls and third-party custody requirements.
An international exchange that combines trading and custody may therefore use different entities for different parts of the UK operating model.
For example, an overseas QCATP may potentially operate through an authorised branch in an appropriate structure while custody for UK customers is provided by a separately authorised UK subsidiary.
Matched principal trading and settlement arrangements
The FCA has also introduced limited flexibility for certain activities closely connected with an overseas QCATP.
A branch-authorised QCATP operator may, subject to the relevant conditions, obtain a restricted principal dealing permission where the activity is limited to matched principal trading on its own platform.
This differs from broader proprietary trading. An overseas firm seeking to deal as principal for its own account outside the restricted matched-principal model will generally remain subject to the expectation that the activity should be carried on through a UK legal entity.
Certain QCATP settlement-wallet arrangements can also receive restricted safeguarding treatment where the conditions of the FCA regime are met.
These are specialist exceptions designed around the practical operation of global trading platforms. Firms should not extrapolate them into a general right for overseas crypto businesses to provide regulated activities through branches.
Dual-regulated firms can be treated differently
International banks and other firms regulated by both the FCA and PRA can have greater flexibility.
The FCA’s final guidance recognises that some dual-regulated firms already operate substantial UK financial-services businesses through branches and are subject to intensive prudential supervision.
Such firms will not necessarily be required to establish a separate UK legal entity solely to add cryptoasset activities.
A branch-based structure can be considered where the PRA, as lead prudential regulator, is satisfied and the firm can demonstrate that the FCA threshold conditions and ongoing regulatory requirements will be met.
This is assessed case by case.
International banking groups should therefore consider both FCA and PRA expectations when structuring UK cryptoasset activities.
Can an overseas crypto firm serve UK institutional clients without FCA authorisation?
The geographic perimeter can differ depending on whether the overseas firm is serving UK consumers or only institutional clients.
The FCA’s final policy confirms that the new perimeter specifically brings certain services provided by overseas firms to UK consumers within scope, while overseas firms serving only institutional clients may not be caught by the same cross-border authorisation requirement in certain circumstances.
This does not create a blanket institutional-client exemption from all UK financial-services regulation.
The precise regulated activity, where it is carried on, the category of customer, how services are marketed and whether another UK regulatory provision applies all need to be considered.
An overseas institutional crypto business should therefore complete a perimeter analysis before deciding that UK authorisation is unnecessary.
For some firms, remaining genuinely offshore and serving only institutional counterparties may be possible. For others, the intended activities or UK operating footprint may still bring the business inside the FCA perimeter.
UK financial promotions rules can apply even without authorisation
International firms should distinguish the authorisation perimeter from the UK cryptoasset financial promotions regime.
The financial promotions rules can apply to cryptoasset promotions made to UK consumers regardless of where the firm is established.
An overseas crypto firm that does not require full FCA authorisation for a particular activity can still breach UK law if it communicates unlawful financial promotions to UK consumers.
Websites, apps, social-media campaigns, affiliate marketing and other digital communications should therefore be reviewed before targeting the UK.
The regulatory strategy needs to consider both whether the underlying activity requires authorisation and whether the way the product is marketed complies with UK promotion rules.
An international firm cannot treat geographic distance as a general exemption from UK consumer protection requirements.
Existing overseas licences do not passport into the UK
A MiCA authorisation, US state licence, Dubai VARA licence, Singapore MAS licence or another overseas crypto permission does not automatically provide authority to conduct regulated business in the UK.
The UK is establishing its own FSMA-based cryptoasset regime.
Existing overseas regulation can nevertheless be highly relevant to the FCA assessment.
A mature regulatory history—including recent transitions from MLR registration to FSMA authorisation—can help demonstrate governance, competence, financial resources and the effectiveness of the firm’s systems and controls. It can also support supervisory cooperation where the firm proposes a branch structure.
However, the FCA will assess the UK application against UK threshold conditions and Handbook requirements.
International firms should therefore treat UK authorisation as a distinct regulatory project rather than an administrative passporting exercise.
Capital and financial resources for international firms
International applicants are subject to the same core prudential requirements as domestic cryptoasset firms where the relevant rules apply.
The required own funds depend on the permissions sought, fixed overheads, K-factors and the wider risk profile of the business.
For a UK subsidiary, capital should be available to the authorised entity and meet FCA requirements on eligible own funds.
A promise of future support from an overseas parent does not automatically substitute for regulatory capital held by the UK firm.
Where an overseas legal entity is authorised through a branch, the prudential treatment can operate differently because the FCA is authorising the overseas legal entity itself.
The capital structure should therefore be designed alongside the legal-entity strategy rather than after the authorisation route has been selected.
Our guide to FCA Crypto Prudential Requirements 2026 explains the wider CRYPTOPRU framework.
Governance and senior management in the UK
International firms frequently underestimate the FCA’s expectations around local governance.
The UK business must have sufficient senior management capacity, regulatory expertise and decision-making authority to operate compliantly.
The FCA generally expects senior managers directly involved in UK activities to spend an adequate and proportionate amount of time in the UK.
This does not mean every global executive needs to relocate.
It does mean that responsibility for the UK-regulated business cannot exist only nominally while all meaningful decisions are made by individuals who have little practical involvement in UK operations.
The board and senior management structure should reflect the scale and complexity of the UK business, with clear responsibility for financial crime, customer outcomes, prudential risk, operational resilience, client assets and other material regulatory areas.
Outsourcing to the global group
International firms can use group technology, infrastructure and specialist teams.
The FCA does not require every operational capability to be duplicated in the UK.
However, the UK-authorised entity remains responsible for meeting its regulatory obligations and must retain sufficient oversight and control over outsourced or intra-group functions.
The application should explain which services are provided by the wider group, how performance and risk are monitored, where data is held and how the UK entity can intervene when necessary.
Critical dependencies should also be reflected in operational resilience and business continuity arrangements.
A UK entity that depends entirely on overseas affiliates without adequate contractual rights, information access or management control may struggle to demonstrate that it has appropriate resources and can be supervised effectively.
What documents will an international applicant need?
An international cryptoasset application requires the standard FCA authorisation documentation together with a clear explanation of the international group structure.
The regulatory business plan should describe the global business, the proposed UK activities, target customers, legal entities, regulated permissions, customer journeys, revenue model and the allocation of responsibilities across the group.
Ownership charts should identify controllers and ultimate beneficial owners clearly.
The application should also explain governance, senior management, prudential resources, financial crime, Consumer Duty where applicable, operational resilience, outsourcing, complaints, regulatory reporting and the activity-specific controls relevant to the permissions sought.
Intra-group service arrangements and dependencies should be transparent.
Where a branch or combined branch-and-subsidiary model is proposed, the FCA will expect a clear rationale showing why the structure is appropriate and how it supports effective supervision and appropriate outcomes for UK customers.
Should an international firm establish the UK entity before applying?
In most cases where the proposed authorisation route requires a UK legal entity, the entity needs to exist before the authorisation application can be made in its name.
The wider operating model should also be sufficiently developed for the FCA to assess the firm properly.
This does not mean every commercial contract or employee must be in place before submission, but the governance, funding, senior management and operating structure need to be credible and sufficiently advanced.
International firms should therefore plan incorporation, ownership, capitalisation and senior appointments as part of the authorisation timetable.
A company created immediately before submission with no developed governance, resources or operational framework is unlikely to demonstrate readiness simply because it has a UK registered office.
Application timetable for international firms
The FCA cryptoasset authorisation gateway opens on 30 September 2026 and the main application period closes on 28 February 2027.
Existing international businesses serving UK consumers should assess their position early because restructuring into a UK-regulated model can take considerably longer than preparing the application documents alone.
A group may need to establish and capitalise a UK subsidiary, allocate intellectual property and contracts, appoint directors and senior managers, agree intra-group service arrangements and determine which customers and activities will move into the UK entity.
These decisions can also have tax, corporate, employment and operational consequences outside the FCA application itself.
The regulatory workstream should therefore begin with the target operating model.
Once the structure is clear, the authorisation documentation can be built around a business that the FCA can understand and supervise.
Choosing the right UK structure
There is no single correct structure for every international crypto firm.
A standalone custodian may require a relatively straightforward UK subsidiary.
A global trading platform may need to consider whether a UK subsidiary, a branch-authorised QCATP model or a combined subsidiary-and-branch structure best preserves access to global liquidity while meeting FCA expectations.
A diversified financial group may already have a UK-authorised entity and need to assess whether adding cryptoasset permissions through a Variation of Permission is more efficient than establishing a separate company.
The choice should consider regulation, capital, governance, customer contracts, client assets, technology, tax, operational risk and the future growth strategy.
Changing the structure during an FCA application can create substantial delay.
The legal-entity and permission strategy should therefore be settled before the application is drafted in detail.
How Regulatory Counsel can help
Regulatory Counsel supports international cryptoasset businesses entering the UK from initial perimeter analysis and market-entry strategy through to FCA authorisation and post-authorisation implementation.
We assess whether the proposed UK activities require authorisation, which permissions are needed and whether the business should operate through a UK subsidiary, an eligible branch structure or another appropriate model.
For international groups, we help map responsibilities between the UK entity and overseas affiliates, including governance, outsourcing, technology, custody, financial crime, prudential resources and operational dependencies.
Our work can include the FCA application, regulatory business plan, ownership and controller analysis, financial forecasts, CRYPTOPRU calculations, governance arrangements, Consumer Duty, financial crime, operational resilience, outsourcing, wind-down planning and activity-specific frameworks for custody, trading, staking and other regulated cryptoasset services.
Where the business already holds overseas regulatory licences, we incorporate the existing framework into the UK strategy while identifying the additional requirements needed for FCA authorisation.
Where the model also involves regulated payment services or electronic money, Buckingham Capital Consulting specialises in UK and European payment and e-money regulation.
Contact Regulatory Counsel to discuss UK market entry, FCA cryptoasset authorisation or the appropriate regulatory structure for an international crypto business.
Frequently Asked Questions
Potentially. The answer depends on the regulated activity and the customers being served. The new perimeter can require overseas firms providing certain cryptoasset services to UK consumers to obtain FCA authorisation even where the firm itself is established outside the UK.
Where FCA authorisation is required, the FCA’s baseline expectation for solo-regulated cryptoasset firms is that regulated activities will be carried on through a UK legal entity. Specific exceptions can apply, particularly to certain international QCATP operators and some dual-regulated firms.
Potentially. The FCA permits certain overseas qualifying cryptoasset trading platform operators to seek authorisation through a UK branch where the structure supports access to global liquidity and meets the FCA’s threshold conditions. The FCA assesses these arrangements case by case and expects appropriate home-state regulation and supervisory cooperation.
No. An overseas licence does not passport automatically into the UK. A firm carrying on activities within the UK regulatory perimeter must obtain the relevant FCA authorisation. Existing overseas regulation can support the FCA assessment but does not replace UK permission.
In some circumstances, the cross-border perimeter differs for overseas firms serving only institutional clients rather than UK consumers. This is not a blanket exemption, and the exact activity, customer category and UK footprint must be analysed before relying on an offshore model.