The UK is finalising a comprehensive cryptoasset regime under the Financial Services and Markets Act that draws a sharp line between genuinely decentralised DeFi and protocols with identifiable controlling entities.
The UK has drawn its line on DeFi. Under the cryptoasset regime now being finalised — built on the Financial Services and Markets Act 2000 — protocols that are "truly decentralised" with no identifiable operator will fall outside the FCA's regulatory perimeter. Everything else gets pulled in.
That distinction sounds clean. In practice, it will be anything but. The FCA's approach hinges on a "controlling entity" test: regulators will examine whether a DeFi service has an identifiable person or group conducting specified activities by way of business. Large front-ends, foundation-backed DAOs, and protocol teams that set parameters and capture fees are all likely to be treated as regulated firms once the regime commences on 25 October 2027. The application window opens on 30 September 2026 and closes on 28 February 2027.
The statutory instrument underpinning the regime — the Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2025 — was laid before Parliament in December. Multiple FCA consultation papers followed, covering trading platforms, intermediaries, lending and borrowing, staking, and the thorny question of how to handle decentralised finance without either crushing it or pretending it doesn't exist.
On trading platforms, the FCA will require cryptoasset trading platforms to obtain authorisation and maintain a UK legal entity, with nondiscriminatory access rules and risk-neutral systems that legally separate credit-exposing activities. In a notable shift from its earlier position, the regulator will now permit principal dealing on these venues — an acknowledgement, perhaps, that banning market-making from crypto exchanges would simply push liquidity offshore.
For intermediaries, the rules impose a gatekeeping function: cryptoassets (except UK-issued stablecoins) must be admitted to at least one UK-authorised platform before they can be offered to retail investors. Retail and professional client orders will execute only on UK-authorised venues, a requirement that crypto-native firms operating from offshore jurisdictions will find difficult to satisfy without establishing a genuine UK presence.
The lending and borrowing provisions are more permissive than some expected. Retail clients will be permitted to participate in crypto lending — a reversal of earlier signals that suggested the FCA might restrict the activity to professional investors only — but over-collateralisation requirements will apply.
The SEC in Washington took a different approach last week, issuing guidance that allows DeFi front-end providers to skip broker-dealer registration provided they meet twelve specific conditions, including not handling user funds or soliciting transactions. The UK's framework is broader in scope but arguably more pragmatic in its treatment of the grey zone between full decentralisation and traditional financial intermediation.
Stablecoins fall under a separate but parallel track. The Bank of England is developing a prudential regime for sterling-denominated systemic stablecoins, while the FCA's rules cover non-systemic stablecoins and their use in trading and payments. The GENIUS Act framework now taking shape in the US follows a broadly similar split between systemic and non-systemic issuers, though the British approach gives the central bank, rather than a banking regulator, primary oversight of the largest stablecoins.
The real test will come when the FCA starts applying the controlling entity test to specific protocols. Uniswap Labs, which operates the most-used DeFi front-end while the underlying protocol runs autonomously on Ethereum, is the obvious case study. The company captures fees from its front-end, employs staff, and makes product decisions — all factors that could bring it within scope. Whether the protocol itself remains outside the perimeter, even as the front-end gets regulated, is the kind of question that will keep compliance lawyers busy well into 2028.
For the UK's ambitions to position itself as a serious jurisdiction for digital assets, the regime's success depends less on the rules themselves and more on the speed and predictability of the authorisation process. If the FCA takes three years to approve applications — as it did with some firms under the temporary registration regime for anti-money-laundering compliance — the framework will function as a de facto ban regardless of its stated intentions.
