For a digital-asset business that moves money between crypto rails and traditional banking, the United Kingdom remains one of the most consequential – and most unforgiving – jurisdictions in which to operate. The Financial Conduct Authority (FCA) enforces a dual regime: cryptoasset registration under the Money Laundering Regulations (MLR) for firms carrying on specified cryptoasset activity, and a separate financial-promotion authorization framework that governs how those services are marketed to UK persons. Failing either test exposes the business to enforcement, account termination and, in some cases, criminal liability for directors. This page sets out the regulated basis for fiat on/off-ramp banking in the United Kingdom, the practical route through EMI onboarding, and the cross-border realities that typically catch inbound operators off-guard.
The Regulated Basis for Fiat On/Off-Ramp Activity in the UK
Any business providing fiat-to-crypto or crypto-to-fiat conversion services to UK users – or marketing such services into the UK – must engage with the FCA's regulatory perimeter before a single transaction settles. The MLR require cryptoasset businesses to register with the FCA before conducting in-scope activity. That registration is not a licence in the traditional sense; it is an AML/CFT gatekeeping mechanism, and the FCA uses it to assess the fitness of the entity, its controllers and its systems before granting permission to operate. Separately, the UK financial-promotion regime – one of the strictest globally – requires any communication that is a financial promotion for a qualifying cryptoasset to be approved by an FCA-authorized person or to fall within a specific exemption. The two requirements operate in parallel. An operator that registers under the MLR but fails the financial-promotion rules can still face enforcement action.
The cross-border dimension sharpens the risk. A business incorporated in Lithuania, Malta or the BVI that directs services at UK retail or professional users is subject to the UK financial-promotion rules regardless of where it is domiciled. The FCA has published consumer-protection warnings and taken action against overseas operators that failed to comply with the financial-promotion regime. In our practice, we regularly advise operators who assumed their EU or offshore authorisation covered UK distribution – it does not. The UK left the EU's passporting architecture, and MiCA CASP authorization, when it becomes the standard EU passport, will carry no automatic effect in the United Kingdom.
For operators seeking to maintain fiat rails in the UK, the practical entry point is the EMI (Electronic Money Institution) or authorized payment institution track, combined with or alongside MLR registration. Each layer serves a distinct function: MLR registration addresses the AML/CFT perimeter; an EMI or payment institution authorization addresses the ability to issue e-money, hold client funds and process payments within the FCA's prudential framework. Many crypto businesses elect to work with an existing FCA-authorized EMI as their banking counterpart rather than seek their own authorization – a model with its own structural conditions and risks, discussed below.
To map your entity's precise position against the FCA's dual perimeter, contact OBOLUS at Map your options. The process above describes the standard path. Your facts – the entity structure, the user base, the product type and the proposed banking counterpart – change the analysis materially.
Why UK Banks Terminate Crypto Company Accounts
Account termination by UK-regulated banks and EMIs is the single most common operational crisis reported by crypto businesses entering or operating in the UK market. The causes are structural, not incidental. UK deposit-taking banks carry their own FCA and Prudential Regulation Authority (PRA) obligations, including an obligation to manage financial crime risk across their customer base. A crypto business that cannot demonstrate robust AML/KYC controls, a clear source of funds for fiat inflows, and a coherent product description aligned with its regulatory status presents an unacceptable residual risk to most high-street banks.
The risk is compounded at the onboarding stage. A firm that approaches a bank before it holds MLR registration – even during the FCA's review period – is functionally unregistered. Banks conducting their own due diligence will detect that status. Worse, a firm that is on the FCA's publicly available warning list, or that is associated with a controller who has prior regulatory issues in any jurisdiction, will almost certainly be declined. We have seen operators invest months in a UK entity build before addressing the controller-vetting risk, only to have the account declined at the final KYC stage.
A subtler cause is the product-label mismatch. A business describing itself as a "crypto exchange" to a compliance officer at a traditional bank is presenting maximum perceived risk with minimum context. A business that presents as an FCA-registered cryptoasset firm with documented customer due diligence procedures, transaction monitoring aligned to the Travel Rule (the obligation to pass originator and beneficiary data with a virtual-asset transfer), and a clean controller structure occupies an entirely different risk tier in the bank's assessment. The framing of the relationship – how the business presents its product, its controls and its regulatory status – is as important as the underlying regulatory facts.
How EMI Onboarding Works for a Crypto Business in the UK
The practical path for most inbound operators is to establish a banking relationship with an FCA-authorized EMI rather than a traditional bank. Several UK-licensed EMIs have developed dedicated digital-asset onboarding desks, recognizing that FCA-registered crypto firms are a defined, assessable risk category. The onboarding process with a crypto-friendly EMI typically proceeds in three stages: a pre-KYC commercial screening, a full AML/CFT onboarding review, and an operational activation period during which transaction monitoring parameters are agreed.
At the commercial screening stage, the EMI will assess the business model, the projected fiat volumes, the source of crypto inflows and the identity of ultimate beneficial owners (UBOs). Firms that cannot produce a clear product description, a coherent compliance policy and evidence of FCA registration – or a confirmed pending registration – will not advance. At the AML review stage, the EMI applies its own risk-appetite framework. A business with significant exposure to privacy coins, unhosted wallets or high-risk jurisdictions will face enhanced scrutiny or a conditional approval with transaction-type restrictions. The operational activation stage is where terms around transaction monitoring, suspicious activity reporting obligations and periodic review cadence are agreed.
For businesses that cannot satisfy an EMI's onboarding requirements directly, the structural alternative is to operate through an FCA-authorized payment institution as a "banking-as-a-service" client, with the payment institution acting as the regulated entity and the crypto business operating under its umbrella. That model transfers regulatory risk upward to the payment institution and typically involves a more restrictive commercial framework – higher per-transaction fees, volume caps and activity restrictions. It is a viable route to market, but it is not a long-term substitute for direct authorization.
In a recent matter, a payments-adjacent digital-asset business sought to establish sterling settlement rails for its UK corporate clients. The business held an offshore registration but had not yet engaged the FCA's MLR process. We structured a two-phase approach: a bridge arrangement through an authorized partner while the MLR application was prepared, followed by a direct EMI introduction once the FCA registration was confirmed. The business maintained operational continuity throughout. The EMI relationship was activated within the same calendar quarter as registration.
Cross-Border Interaction: Entity Stack, Tax and the EU Gap
A UK-only entity is rarely sufficient for a digital-asset business with international ambitions. The UK's exit from EU passporting means that a business authorized under the FCA regime has no automatic access to EU retail or professional clients. Conversely, a business that holds a MiCA CASP authorization in, say, Malta or Lithuania cannot use that passport to conduct regulated cryptoasset activity in the UK or to market qualifying cryptoassets to UK persons without separate FCA engagement. The regulatory stacks do not communicate.
This creates a genuine design question for operators: build UK-first and add EU authorization later, or build EU-first with a UK subsidiary or appointed representative arrangement? The answer depends on where the business's user base and banking counterparts actually sit. Operators we advise routinely discover that their expected UK user volumes justify a direct UK presence, while their EU ambitions are better served by a separate CASP vehicle – typically a Lithuanian or Maltese entity given timeline and cost considerations. The two entities then interact through an intra-group services agreement, with transfer-pricing and VAT considerations that require careful structuring.
On the tax side, the UK's treatment of digital assets remains one of the more developed among major jurisdictions, but it is not settled. HMRC has issued guidance on the capital/income classification of cryptoasset receipts, on staking rewards and on the VAT treatment of exchange services – but the position continues to evolve. For a business operating fiat on/off-ramp services, the critical questions are whether fiat-to-crypto conversion constitutes an exempt financial service for VAT purposes and how stablecoin issuance or redemption interacts with the e-money framework. These are not merely academic points; they affect margin and pricing models at scale.
If a prior application stalled or a banking relationship was terminated, a structured review can identify the underlying cause and the path forward. To discuss your cross-border entity stack, write to OBOLUS at Map your options.
AML/CFT and the Travel Rule in the UK Context
AML/CFT compliance is the gateway to both banking access and regulatory standing in the UK. The MLR implement the FATF Recommendations, including Recommendation 15 (which brings virtual assets within the AML/CFT perimeter) and the Travel Rule obligation. Under the Travel Rule as implemented in the UK, a cryptoasset business that transfers virtual assets above a prescribed threshold must collect, verify and transmit originator and beneficiary data with the transfer. The threshold and specific data requirements are set out in the applicable UK legislation – consult current rules for the operative figures.
Travel Rule compliance is not merely a compliance checkbox. It is also a banking-access requirement. EMIs that onboard crypto businesses will assess whether the VASP's systems are capable of meeting the Travel Rule in practice – including the ability to handle transfers to and from unhosted wallets, and to apply the enhanced due diligence obligations that apply where the counterparty VASP is in a jurisdiction that does not implement equivalent AML/CFT standards. A business that cannot demonstrate Travel Rule readiness at onboarding will either be declined or placed in a restricted operating status until systems are in place.
The cross-border dimension of Travel Rule compliance is particularly acute for businesses operating between the UK and the EU post-MiCA transition, and between the UK and jurisdictions such as Singapore, Hong Kong and the UAE, where equivalent but structurally different Travel Rule regimes are in operation. A business that routes transfers through multiple jurisdictions must map the data requirements of each regime and design its systems to satisfy the most demanding standard on the transfer path. In our cross-border practice, we routinely identify structural gaps at precisely this layer – gaps that only become visible when the business tries to open accounts or submit its first regulatory return.
Decision Matrix: Which Entity Profile Needs What
Not every business entering the UK market faces the same regulatory and banking challenge. The path depends on the entity's activity profile, its domicile and the nature of its UK touchpoints.
An EU-domiciled CASP seeking to serve UK professional clients on a cross-border basis needs, at minimum, a clear assessment of whether its proposed activities constitute regulated activity in the UK or fall within an applicable exemption. If regulated activity is engaged, some form of FCA registration or authorization is required before UK clients can be served. The timeline for MLR registration varies depending on the complexity of the controller structure and the quality of the application – it typically runs to several months from submission of a complete application. Authorization tracks under the Payment Services Regulations are longer and require more substantive prudential engagement with the FCA.
A business building a UK-native exchange or on/off-ramp service needs both MLR registration and a banking relationship with an FCA-authorized institution. It should apply for MLR registration before entering into substantive commercial negotiations with a bank or EMI, since most institutions will not advance an onboarding until registration status is confirmed or a credible registration timeline is in place. For this profile, the typical path runs: entity incorporation, controller vetting and compliance policy build, MLR application submission, parallel EMI commercial engagement, and operational activation on registration confirmation.
A business that already holds VARA authorization in Dubai or an MAS DPT licence in Singapore seeking to extend operations into the UK sits in a third category. Its existing authorization is not recognized by the FCA, but it does provide a substantive track record of regulatory engagement that a well-prepared FCA application can use to streamline the controller-vetting and systems assessment components. For this profile, the key risk is assuming that the process will be faster than a fresh application – it will not be, unless the application is carefully constructed to leverage the existing authorization.
Common Mistakes That Cost Crypto Businesses Their UK Banking
Operating without confirmed MLR registration while accepting fiat inflows is the most direct route to enforcement and account closure. The FCA publishes a register of registered and unregistered cryptoasset businesses; a bank's compliance officer will check it. A business on the warning list or not on the register faces an almost certain account termination. The cost is not merely the lost banking relationship – it is the operational disruption, the client attrition and the regulatory record that attaches to the entity and its controllers.
A second common mistake is presenting the business to banking counterparts before the compliance documentation is in place. A policies-and-procedures pack that is incomplete, that does not reflect the actual product, or that was drafted without regard to the specific risks of the business model will fail enhanced due diligence scrutiny. Banks and EMIs have seen every template; they assess whether the policy is real. A business that cannot answer specific questions about its transaction monitoring thresholds, its sanctions screening provider or its approach to high-risk counterparty transfers will not advance through the onboarding.
A common assumption is that a single offshore licence – BVI, Cayman, or even an EU MiCA passport – is sufficient to serve UK clients and maintain UK banking. It is not. The UK maintains a fully independent regulatory perimeter. Offshore licensing reduces cost and time to market in some other jurisdictions, but it does not substitute for FCA engagement where UK persons or UK fiat rails are involved. We regularly advise businesses that discover this constraint after committing to an offshore structure – requiring a rebuild that costs more in time and resource than a UK-first approach would have done.
FAQ
Why do banks close crypto company accounts?
UK banks close crypto company accounts primarily because the business presents unquantifiable financial-crime risk. The most common triggers are absence of FCA MLR registration, inadequate AML/KYC documentation, unclear source of funds for fiat inflows, and UBO structures that cannot be satisfactorily verified. Some banks apply a blanket policy against crypto counterparties regardless of compliance quality; for those institutions, the solution is to identify an FCA-authorized EMI with a dedicated digital-asset onboarding track rather than a traditional bank.
How can a VASP onboard with an EMI?
A VASP (virtual asset service provider) seeking to onboard with a UK-authorized EMI should approach the process in three stages: a pre-engagement readiness check to confirm FCA registration status and compliance documentation, a commercial screening conversation with the EMI to assess volume profile and product fit, and a full AML onboarding submission. EMIs that specialize in digital-asset clients expect detailed transaction monitoring policies, Travel Rule readiness evidence and a clear UBO structure. Allied counsel familiar with the EMI's onboarding criteria can materially improve the probability of a successful first submission.
What does client-money safeguarding require?
Client-money safeguarding under the FCA's payment institution and EMI frameworks requires an authorized firm to hold client funds in a ring-fenced account at an approved credit institution, or to cover those funds with an appropriate insurance policy or comparable guarantee. The safeguarding obligation applies to funds received in exchange for e-money and to payment transactions in progress. For a crypto business operating through an authorized EMI partner, the safeguarding obligation sits with the EMI; for a business seeking its own authorization, safeguarding compliance must be designed into the operating model from inception.
Related at OBOLUS
- Banking, Payments & EMI Onboarding – the full practice overview for crypto banking access and payment licensing
- Client Funds Safeguarding for Early-Stage Founders – structuring safeguarding arrangements before first client money arrives
- Stablecoin Issuance Authorisation for Established Operators – navigating the EMT/ART perimeter for stablecoin issuers
OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance that sit around them. Digital assets are the whole of our practice. We map the licence stack across operating, custody and payment layers before you commit – so structural gaps surface before they cost you a banking relationship. We work alongside forensic partners to convert on-chain evidence into court-ready disclosure applications. To discuss your situation, contact info@oboluslaw.com.
By Victor Olsen, Regulatory & Compliance Analyst – specializing in FCA registration, MLR compliance and cross-border licensing for digital-asset businesses entering or operating in the UK market.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.