FCA Cryptoasset AML Registration — UK
Expert advisory on FCA cryptoasset AML registration under MLRs 2017. One of the highest FCA rejection rates. Specialist crypto compliance support.
Get Expert Advice
Whether you need licensing support, compliance advice or regulatory strategy, our team is ready to help. Free initial consultation — no obligation.
Get Expert Advice
What is the FCA Cryptoasset AML Registration?
The FCA cryptoasset AML registration is a mandatory requirement under the Money Laundering Regulations 2017 (as amended) for any firm carrying on cryptoasset business in the United Kingdom. This includes crypto exchanges (fiat-to-crypto and crypto-to-crypto), custodian wallet providers, peer-to-peer trading platforms, crypto ATM operators and over-the-counter (OTC) desks.
Operating a cryptoasset business in the UK without FCA registration is a criminal offence. The FCA assesses the quality of the applicant's AML programme, the fitness and propriety of key persons — particularly the MLRO — and the credibility of the business plan.
The FCA's rejection rate for cryptoasset registrations has risen significantly — from approximately 1 in 14 in 2021 to 1 in 5 by 2023, one of the highest rejection rates of any FCA registration process. This reflects the FCA's increasingly stringent approach to cryptoasset supervision.
Who Needs FCA Cryptoasset AML Registration?
Registration is required by any firm carrying on cryptoasset business in the UK as a business, regardless of the size or scale of operations.
- —Crypto exchanges (fiat-to-crypto and crypto-to-crypto trading)
- —Custodian wallet providers
- —Peer-to-peer cryptocurrency trading platforms
- —Crypto ATM operators
- —Over-the-counter (OTC) crypto desks
- —Firms providing crypto transfer or settlement services
- —Any firm carrying on cryptoasset business targeting UK customers
A common misconception is that firms operating solely in crypto-to-crypto markets (without fiat on/off ramps) do not require registration. The FCA has made clear that crypto-to-crypto exchanges and custodians are within scope. Another frequent error is assuming that operating from outside the UK but serving UK customers exempts a firm from registration — it does not.
Key Requirements
AML Programme
The AML programme must be specifically tailored to cryptoasset business risks. This means chain analysis tool integration (TRM, Chainalysis or equivalent), Travel Rule compliance framework, crypto-specific customer risk typologies, enhanced due diligence procedures for high-risk crypto activities (mixing services, privacy coins, high-value transfers) and transaction monitoring calibrated to crypto-specific red flags. Generic AML frameworks from other financial services sectors will not pass FCA assessment.
MLRO Requirements
The MLRO must be UK-based, have specific cryptoasset AML knowledge and experience, and be demonstrably involved in the application preparation process. The FCA assesses MLRO fitness and propriety as a separate element — a general AML practitioner without crypto-specific experience will be challenged extensively.
Travel Rule Compliance
Firms must demonstrate compliance with the UK Travel Rule (effective September 2023). This requires collecting, verifying and transmitting originator and beneficiary information for cryptoasset transfers. The technical implementation — including interoperability with counterparty VASPs — must be documented and operational.
Business Plan
A credible, internally consistent regulatory business plan covering the business model, target market, product architecture, revenue model and financial projections. Revenue and customer projections must align with the stated business model and go-to-market strategy.
Key Person Assessment
All directors, senior managers and qualifying shareholders (10%+) undergo fitness and propriety assessment. The FCA conducts thorough background checks including international regulatory databases, credit reference agencies, adverse media screening and open-source intelligence.
Transition to FSMA Regime (2026–2027)
The FSMA 2000 (Cryptoassets) Regulations 2026 were made by Parliament in February 2026. Full FSMA authorisation regime commences October 2027. FCA cryptoasset gateway opens September 2026. Currently registered firms should begin preparing for the significantly more onerous FSMA authorisation requirements now.
The Application Process
Business Model Mapping and Registration Category Confirmation
Regulatory Counsel confirms which MLR 2017 cryptoasset business categories apply to your business model. We identify all key persons requiring fitness and propriety assessment and conduct a preliminary review of their disclosure profiles. Timeline: 1–2 weeks.
MLRO Appointment and Competence Evidencing
We appoint a UK-based MLRO with specific cryptoasset AML knowledge and prepare comprehensive MLRO documentation — CV, competence evidence demonstrating crypto-specific AML expertise, and Individual Questionnaire. The quality of the MLRO submission is a critical success factor. Timeline: 2–3 weeks.
Crypto-Specific AML Programme Build
We prepare a purpose-built AML programme addressing chain analysis tool integration, Travel Rule compliance framework, crypto-specific customer risk typologies, enhanced due diligence for high-risk crypto activities and transaction monitoring calibrated to crypto red flags. This is the most scrutinised element of the application. Timeline: 4–6 weeks.
Business Plan and Financial Projections
We prepare a credible, internally consistent regulatory business plan. Revenue and customer projections are aligned with the stated business model. The FCA cross-references all sections — inconsistencies trigger information requests that extend the assessment by months. Timeline: 2–3 weeks.
FCA Connect Submission
The completed application is submitted via FCA Connect. The FCA checks completeness within 5 working days. Regulatory Counsel conducts a final quality assurance review before submission. Timeline: 1 week.
FCA Assessment
The FCA may issue multiple rounds of information requests. Regulatory Counsel manages all correspondence and prepares detailed responses. Firms with strong, crypto-specific AML programmes and clean key person profiles are assessed at the lower end of the 3–12 month range. Timeline: 3–12 months.
Total expected timeline: 5–14 months from instruction to registration.
Why Applications Fail — and How We Prevent It
Generic AML Programme
The most common rejection reason. The FCA requires a crypto-specific AML programme that addresses chain analysis, Travel Rule compliance, crypto-specific customer risk assessment and transaction monitoring calibrated to crypto red flags. Adapting a generic financial services AML framework — even a good one — without crypto-specific content is insufficient.
Unqualified MLRO
An MLRO with general AML experience but no specific cryptoasset knowledge will be challenged extensively during assessment. The FCA expects the MLRO to demonstrate practical understanding of blockchain analytics, Travel Rule implementation, crypto-specific money laundering typologies and the regulatory treatment of different crypto-asset categories.
Business Plan Inconsistencies
Projected revenues that do not align with the stated business model or customer acquisition strategy. For example, projecting significant trading volumes from institutional clients while describing a retail-focused marketing strategy. The FCA cross-references all sections of the application systematically.
Undisclosed Key Person History
Non-UK regulatory sanctions, prior crypto firm closures, adverse media or undisclosed directorships that applicants assume the FCA will not discover. The FCA conducts thorough international background checks. Non-disclosure is treated far more seriously than the underlying issue and can result in immediate refusal.
How Regulatory Counsel Can Help
End-to-End Application Management
We manage the complete cryptoasset registration process from business model mapping through to FCA registration, including MLRO appointment, AML programme build and all FCA correspondence.
Crypto-Specific AML Programme
We build purpose-designed AML programmes for cryptoasset businesses — chain analysis integration, Travel Rule framework, crypto risk typologies and transaction monitoring calibrated to crypto-specific red flags.
FSMA Transition Planning
We help currently registered firms prepare for the transition to full FSMA authorisation (gateway September 2026, regime October 2027) — a significantly more onerous regulatory framework.
Regulatory Counsel has a strong track record in FCA cryptoasset registrations — one of the most challenging registration processes in the UK regulatory landscape. Our crypto-specific expertise, combined with deep FCA relationship management experience, ensures applications are positioned for success from the outset.
Frequently Asked Questions
Firms carrying on cryptoasset business in the UK as a business must register — including crypto exchange businesses (fiat-to-crypto and crypto-to-crypto), custodian wallet providers, peer-to-peer trading platforms, crypto ATM operators, and OTC desks. The test is whether the activity is carried on commercially — even occasional commercial crypto activity may trigger the obligation.
The FCA's rejection and withdrawal rate has risen from approximately 1 in 14 in 2021 to 1 in 5 by 2023. Many additional firms withdraw applications during assessment rather than face outright rejection. The FCA describes its approach to cryptoasset registration as robust gatekeeping.
The UK Travel Rule came into force in September 2023. Registered firms must collect, verify and transmit originator and beneficiary information for all cryptoasset transfers — the UK applies no de minimis threshold. Firms must use a compliant Travel Rule solution and have documented procedures for unhosted wallet transfers.
No. MLR registration does not automatically convert. All registered firms must apply for FSMA cryptoasset authorisation through the FCA gateway opening September 2026 before the regime commences on 25 October 2027. FSMA requirements are substantially more demanding — firms should begin preparation now.
Application preparation takes 6–10 weeks with Regulatory Counsel. The FCA's assessment period ranges from 3 to 12 months depending on application quality and key person profile. Each FCA information request effectively resets the assessment clock — well-prepared applications minimise information requests.