HM Treasury Crypto Policy: UK Regulations Explained

For years, the UK’s stance on digital assets felt like a moving target. One day it was "watch and wait," the next it was "we’re thinking about rules." But as of late 2025, the fog has lifted. HM Treasury has finally laid out the concrete blueprint for how cryptocurrency will be regulated in the United Kingdom. If you run a crypto business, trade digital assets, or just want to know if your favorite exchange is going to vanish overnight, this new framework changes everything.

The core shift here isn’t that the UK banned crypto-it didn’t. Instead, HM Treasury brought cryptoassets inside the existing financial regulatory perimeter. This means the wild west days are over for firms serving British customers. The goal? To treat crypto with the same seriousness as stocks or bonds, ensuring consumer protection without strangling innovation. Let’s break down what this actually means for you, step by step.

The Big Shift: Bringing Crypto Into the Fold

The pivotal moment came when HM Treasury published the draft Financial Services and Markets Act 2000 (Regulated Activities and Miscellaneous Provisions) (Cryptoassets) Order 2025. Think of this document as the rulebook update. It amends the old Financial Services and Markets Act to explicitly include specific types of cryptoassets as "specified investments."

This legal change matters because it gives the Financial Conduct Authority (FCA) the power to license and supervise crypto firms. Before this, many activities existed in a gray area. Now, if you do certain things with crypto, you need a license. Period.

The regulation targets two main categories:

• Qualifying Cryptoassets: These are tokens that function like traditional investments (e.g., security tokens).
• Qualifying Stablecoins: Digital currencies pegged to fiat money, but only if issued by UK entities.

If your token doesn’t fit these definitions, it might fall outside the immediate scope of this specific order, though other laws still apply. But for the vast majority of trading platforms and issuers, the clock is ticking.

Five Activities That Require an FCA License

You don’t need a license just because you hold Bitcoin in your wallet. You need one if you provide services to others. The HM Treasury policy identifies five distinct activities that trigger regulatory requirements. If your business model touches any of these, you must seek authorization from the FCA.

1. Operating a Cryptoasset Trading Exchange: Running a platform where buyers and sellers meet.
2. Stablecoin Issuance: Creating and managing stablecoins for UK users.
3. Dealing in Qualifying Cryptoassets: Buying and selling for your own account or clients.
4. Custody Arrangements: Holding private keys for customers (think "crypto bank vaults").
5. Arranging Transactions: Facilitating trades between parties without taking ownership.

Notice the focus on service provision. A developer building a decentralized protocol isn’t necessarily caught unless they control the front-end interface and interact with users in a way that resembles traditional intermediation. This distinction is crucial for keeping the door open for true decentralization.

What About DeFi? The Exclusion Clause

One of the smartest moves in the HM Treasury policy is how it handles Decentralized Finance (DeFi). Regulators globally struggle with DeFi because there’s often no central company to sue or fine. The UK approach acknowledges this reality.

The framework explicitly excludes truly decentralized models from authorization requirements. If there is no "controlling party"-meaning no single entity can pause the contract, change the code, or take custody of funds-the activity may remain unregulated under this specific order. The FCA will assess each case individually to see if a controlling party exists. If you’re running a DAO with distributed governance and no admin keys, you might be safe. If you’re running a "DeFi" platform that secretly controls the liquidity pools, expect scrutiny.

This nuanced approach prevents the UK from becoming a graveyard for innovation while still protecting consumers who think they’re using decentralized tools but are actually dealing with centralized intermediaries.

Stablecoins: A UK-First Approach

Stablecoins get special treatment. The regulation distinguishes between UK-issued and foreign-issued stablecoins. Only UK issuers face the full weight of the new licensing regime for issuance. Why? Because the government wants to encourage domestic stability and oversight.

If you use a US-issued stablecoin like Tether or USDC, you aren’t directly regulating the issuer through this specific order. However, exchanges offering these coins to UK users still need to comply with transparency and conduct standards. This creates a competitive advantage for London-based stablecoin projects, potentially attracting capital that wants regulatory certainty.

Anti-Money Laundering (AML) Updates

Regulation isn’t just about market integrity; it’s also about stopping illicit finance. On September 2, 2025, HM Treasury released draft amendments to the Money Laundering Regulations specifically for crypto firms. These updates aim to make AML checks more risk-based rather than one-size-fits-all.

Key changes include stricter rules on customer due diligence and pooled client accounts. If you’re a small crypto startup, this could mean higher compliance costs. Larger firms with established compliance teams will find it easier to adapt. The deadline for stakeholder feedback on these AML drafts was September 30, 2025, signaling that final rules are imminent.

How Does This Compare to Europe’s MiCA?

Many ask if the UK is copying the European Union’s Markets in Crypto-Assets Regulation (MiCA). The short answer: yes, but with tweaks. Both frameworks regulate similar activities and define assets similarly. However, the UK leverages its existing Financial Services and Markets Act structure, whereas MiCA created a standalone system.

This integration offers benefits. Firms already licensed in traditional finance can expand into crypto with less friction. They don’t need a completely new regulatory stack. For pure-play crypto firms, however, the transition is steeper. They must build infrastructure that meets traditional banking standards, including operational resilience and capital adequacy.

Practical Steps for Businesses

If you operate in the UK crypto space, waiting until the law passes completely is risky. Here’s what you should do now:

• Audit Your Activities: Map every service you offer against the five regulated activities. Do you arrange transactions? Hold custody? If yes, start preparing for FCA application.
• Assess Territorial Scope: Are you a non-UK firm serving UK customers? You likely fall under the new rules. Check if your home country has an equivalence agreement with the UK.
• Review DeFi Claims: Be honest about your decentralization. If you have an admin key that can freeze user funds, you’re likely not "truly decentralized" in the eyes of the regulator.
• Budget for Compliance: Expect increased costs for legal advice, audit trails, and reporting systems. Small firms should consider consortium approaches to share compliance burdens.

The FCA has already begun publishing discussion papers and guidance. Keep an eye on their website for specific rulebooks. The statutory instrument is "near-final," meaning major structural changes are unlikely, but technical details may still shift based on industry feedback.

Why This Matters for Investors

For regular investors, this clarity is good news. Regulatory uncertainty drives volatility. When rules are clear, institutional money feels safer entering the market. We’ve already seen signs of this as pension funds and family offices begin exploring crypto allocations again.

However, some smaller, non-compliant exchanges may exit the UK market. If you use a niche platform, check if they have applied for FCA authorization. If they haven’t by the implementation date, they might stop serving UK residents. Always verify the status of your provider before depositing large sums.