On paper, issuing a token in the United Kingdom looks manageable. In practice, the same instrument can simultaneously attract securities regulation, financial-promotion restrictions, anti-money laundering (AML) supervision and, where the token reaches EU users, the obligations of the Markets in Crypto-Assets Regulation (MiCA). A single mis-step at classification stage can reframe a product launch as an unregistered securities offering – carrying civil liability, FCA enforcement and, in the worst cases, criminal exposure. Understanding how the Financial Conduct Authority (FCA) currently treats token issuances is the prerequisite for any viable UK go-to-market plan.
Token issuance in the United Kingdom is governed primarily by the FCA under a combination of the financial-promotions regime and the broader financial-services authorisation framework, with cryptoasset-specific registration sitting under the Money Laundering Regulations (MLR). Classification drives everything: whether a token is a specified investment (attracting the full weight of securities law), a restricted mass market investment, or an unregulated asset shapes every downstream obligation. This page maps the regulatory basis, the offering process, the cross-border interaction and the decision points an issuer must resolve before launch.
How does the FCA classify tokens for regulatory purposes?
Token classification under FCA guidance turns on the substance of the rights the token confers, not the label printed on the whitepaper. The FCA applies a three-category taxonomy: security tokens (tokens that meet the definition of a specified investment, such as a share or debt instrument), e-money tokens (tokens that qualify as electronic money under the Electronic Money Regulations) and unregulated tokens (often called utility or exchange tokens). A fourth sub-set – stablecoins used as a means of payment – is the subject of an evolving HM Treasury and FCA regime that is tightening materially.
Security tokens are the highest-risk classification. If the FCA determines that a token represents a share in a company's profits, an entitlement to a debt repayment or a similar specified investment, the full weight of the Financial Services and Markets Act regime applies. Issuing or promoting such a token without FCA authorisation – or without an applicable exemption – is a criminal offence. The FCA has stated publicly that classification is a substance-over-form exercise; a utility label on a whitepaper does not, in itself, settle the question. We have seen issuers discover late that governance rights embedded in a token, combined with profit-sharing mechanics, were sufficient to tip a putative utility token into the securities category.
E-money tokens are regulated separately. A token that is issued on receipt of funds, electronically stored, accepted by parties other than the issuer and used as a means of payment will likely constitute electronic money. That triggers an FCA e-money institution authorisation (or registration) requirement that is distinct from cryptoasset MLR registration.
A common assumption is that a thorough legal opinion at launch eliminates reclassification risk permanently. It does not. Token economics evolve: secondary-market utility, staking rewards and DAO governance rights added post-launch can change the classification picture. We advise issuers to treat classification as a living assessment, revisited at each material product change.
CTA — Early-stage issuers: The analysis above describes the standard classification path. Your specific token mechanics – the rights structure, the reserve model, the governance layer – change the outcome materially. For a scoped classification assessment before you commit to a structure, contact OBOLUS at info@oboluslaw.com or map your options.
What does the FCA financial-promotions regime require for token offerings?
The financial-promotions regime is the single most immediate compliance obligation for most UK token issuances, applying regardless of whether the token is classified as a specified investment. Since October 2023, the FCA has brought cryptoassets within the scope of the financial-promotion rules. Any communication that is a financial promotion – broadly, an invitation or inducement to engage in investment activity relating to a qualifying cryptoasset – must either be made by an FCA-authorised person, approved by an FCA-authorised person, or fall within a statutory exemption.
The practical consequence is significant. A foreign token issuer targeting UK persons cannot simply publish a website, post on social media or distribute a whitepaper to UK residents without first ensuring that at least one of those routes is in place. The FCA has published explicit guidance on high-risk investment promotions, requiring prominent risk warnings, a positive framing test and cooling-off periods for first-time investors in restricted mass market investments. Non-compliance carries civil and criminal sanctions, and the FCA has exercised its powers to require the withdrawal of promotions and to issue public alerts against non-compliant issuers.
The authorised-approver route is the most commonly used path for foreign issuers. An FCA-authorised firm with the relevant permission can review and approve a promotion for distribution to UK audiences. This process takes time and involves substantive review of the promotion's accuracy, clarity and compliance with the FCA's detailed rules on risk warnings and fair presentation. Approval is not a rubber stamp; firms that approve promotions take on liability and scrutinise the underlying structure accordingly.
Exemptions from the financial-promotions regime are narrower than many issuers assume. The professional investor exemption is available for communications directed solely at persons who meet qualifying criteria – typically institutional or sophisticated investors – but the mechanics of confirming eligibility require careful documentation. A retail-facing token launch cannot rely on this route without genuine gatekeeping.
What AML registration does a token issuer need under the MLR?
Cryptoasset businesses carrying on certain activities in the United Kingdom must register with the FCA under the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations. Registration – distinct from full FCA authorisation – applies to firms carrying out exchange, transfer, issuance or custody of cryptoassets as a business. The FCA's register of cryptoasset businesses is the gatekeeper: operating without registration is a criminal offence.
The FCA's MLR registration process has been substantive in practice. Firms applying must demonstrate that their AML and counter-terrorist-financing systems meet the standards the FCA expects: risk assessments, customer due-diligence procedures, transaction monitoring, Travel Rule compliance (the obligation to pass originator and beneficiary data with a transfer) and governance arrangements. The FCA has refused a material number of applications and has maintained a temporary registration regime for legacy firms; that transitional window is now effectively closed.
The Travel Rule applies to the United Kingdom under the Funds Transfer Regulation as amended. UK cryptoasset businesses must collect, verify and transmit originator and beneficiary information for in-scope transfers. Counterparty matching – identifying whether the receiving firm is also a registered or authorised entity – adds operational complexity, particularly for cross-border transfers involving EU, Singapore or US counterparties who may operate under different threshold and data-field rules.
How does a cross-border token offering interact with UK rules?
For an issuer sitting between, say, a Cayman or BVI holding structure and a UK marketing reach, the legal question turns on where the promotion is communicated, where the offeree is located and where the issuer is carrying on a regulated activity. The UK takes a territorial approach: a foreign issuer that targets UK persons with a financial promotion, or that carries on a regulated activity that has a sufficient connection to the UK, falls within the FCA's perimeter regardless of where the entity is incorporated.
Issuers who structure offshore – typically in the Cayman Islands under CIMA supervision or in the BVI under the VASP Act 2022 – cannot use the offshore entity to shield UK-facing activity. The FCA's perimeter analysis focuses on where the promotion is received and whether UK persons can participate. A geo-block that genuinely excludes UK IP addresses, combined with contractual prohibition on UK participation and no UK marketing, can reduce exposure. However, passive accessibility of a website is a grey area, and the FCA has issued guidance that mere passive accessibility may not itself constitute a financial promotion. The prudent position is active exclusion, not reliance on passivity.
Where an EU dimension is present – for instance, a token that will be offered across both the UK and the EU – MiCA and the UK regime operate in parallel. MiCA's whitepaper obligation for other crypto-assets (the non-ART, non-EMT category) requires a whitepaper to be notified to the home-state national competent authority before publication; the UK has no equivalent mandatory pre-publication notification at the whitepaper level for non-security tokens, but the financial-promotions rules impose substantive constraints on how the whitepaper may be communicated. A dual UK/EU issuance therefore requires two separate compliance tracks, managed together but distinct in their requirements.
In our cross-border practice, we regularly advise issuers who assume that an EU-compliant MiCA whitepaper satisfies UK requirements. It does not. The UK departed from the EU framework at the end of the Brexit transition period and has been developing its own regime independently. Mutual recognition does not currently apply to cryptoasset regulation between the UK and the EU.
CTA — Issuers with existing structures or stalled offerings: If a prior application or offering structure stalled – a promotion was rejected, an MLR registration was refused or a cross-border structure raised FCA concerns – a fresh read of the structural reason can surface the route forward. Write to info@oboluslaw.com or map your options.
What does a compliant UK token offering look like in practice?
A compliant UK token offering involves a sequence of steps, each with its own legal basis. The starting point is always classification: before any document is drafted, the token's rights structure must be analysed against the specified investments definition, the e-money definition and the FCA's cryptoasset guidance. That analysis drives the downstream obligations.
For a non-security, non-e-money token offered to UK retail persons, the minimum compliance architecture includes: an FCA-authorised approver engaged before any UK-facing promotion is issued; a whitepaper or offering document that satisfies the FCA's accuracy, clarity and prominence standards; risk warnings in the FCA-prescribed form; a 24-hour cooling-off mechanism for first-time investors in restricted mass market investments; AML/KYC procedures covering UK purchasers; and, if the issuer carries on exchange or transfer activities in the UK, an MLR registration.
For a security token offering, the architecture is materially heavier. The offer itself either requires a prospectus (under the UK Prospectus Regulation, as applicable) or must fall within an exemption – typically a private placement to professional investors or a small offering exemption. Secondary trading raises further questions: a security token traded on a platform operating in the UK may bring the platform within the definition of a multilateral trading facility, requiring its own FCA authorisation.
Timeline is a real constraint. MLR registration alone has taken many months in practice; an authorised-approver review of a promotion typically takes several weeks once a competent firm is engaged; and any prospectus process involves the FCA review cycle, which adds further time. Operators who build a launch plan without these lead times built in regularly find themselves unable to access UK audiences on their preferred schedule.
Micro-matter: late-stage reclassification risk
In a recent matter, a token issuer had launched under a utility-token classification supported by external legal advice. In the months following launch, the project introduced a staking mechanic with a fixed yield and added a governance module that gave token holders a vote on protocol fee distribution. We were engaged ahead of a secondary-offering round targeting UK and EU investors. On reviewing the evolved economics, we identified that the combination of the yield mechanic and the profit-distribution right had materially altered the classification picture. We restructured the staking mechanism and advised on the governance model before the secondary offering proceeded. The issuer avoided launching what would have been, in its amended form, an unregistered securities offering in the UK.
Which structure fits which issuer profile?
The right structure depends on three variables: the token's rights, the target investor profile and the issuer's operational footprint in the UK. Two illustrative profiles capture most of the decisions we see in practice.
Profile A – An offshore-incorporated issuer offering a non-security exchange token to UK retail participants. The issuer does not carry on a regulated activity in the UK and has no UK establishment. The minimum path is: engage an FCA-authorised approver for UK promotions, implement the FCA's risk-warning requirements, establish AML/KYC for UK purchasers and consider whether any activity crosses into cryptoasset exchange or transfer (triggering MLR registration). Timeline: several weeks to assemble the approval and compliance layer. Key risk: the FCA's perimeter analysis and whether any element of the offering constitutes a regulated activity in the UK, which would require authorisation rather than registration.
Profile B – A UK-domiciled entity issuing a security token to professional investors. The issuer carries on a regulated activity in the UK. The minimum path is: FCA authorisation with the relevant permissions (or appointment as an appointed representative of an authorised firm), a compliant private-placement process, and ongoing reporting obligations. Timeline: FCA authorisation for a new firm takes considerably longer than MLR registration; operators who underestimate this timeline regularly miss funding windows. Key risk: any retail reach – even inadvertent – outside the professional-investor wrapper triggers prospectus and financial-promotions obligations that are incompatible with a private-placement-only structure.
Both profiles require a cross-border AML layer. UK MLR obligations apply to UK-facing activity; where the issuer also has EU, Singapore or US participants, those jurisdictions layer on their own VASP, MAS or FinCEN obligations independently.
How do banking and tax interact with a UK token issuance?
Banking access for token issuers in the United Kingdom remains constrained. UK banks have generally been cautious in providing accounts to cryptoasset businesses, and MLR registration – while necessary – is not sufficient to guarantee banking access. Issuers routinely use a combination of EMI (electronic money institution) accounts with UK-licensed firms for fiat settlement and offshore banking arrangements for treasury management. The practical reality is that banking strategy must be planned in parallel with regulatory strategy, not after it.
Tax treatment of token issuances in the UK is governed by HMRC guidance, which takes a principles-based approach rather than a dedicated crypto-tax statute. The characterisation of proceeds from a token sale depends on the nature of the token and the circumstances of the sale: proceeds may be treated as income (where the issuer is effectively selling a service or product) or as a capital event (in limited circumstances). For issuers, the most significant risk is that HMRC treats a token sale as the disposal of a chargeable asset or as income receipts subject to corporation tax. VAT treatment of token transactions has been the subject of HMRC guidance that distinguishes between utility tokens (where the tax treatment depends on the underlying supply) and investment tokens (which may be exempt financial instruments).
Cross-border tax structuring – for instance, where the issuance entity is resident in a lower-tax jurisdiction but the development team and marketing are in the UK – raises permanent establishment and transfer pricing considerations. HMRC has indicated a close interest in token-economy structures that attribute value to offshore entities while UK-resident persons perform substantive functions. Issuers who integrate the UK tax analysis into the structuring phase, rather than retrofitting it after the entity stack is fixed, avoid the most common and costly correction work.
Allied counsel in the relevant jurisdiction support our cross-border engagements where local tax or regulatory filings require in-country practitioners.
Related at OBOLUS
- Token Offerings & Securities for Digital-Asset Businesses – full-scope legal advisory on token classification, offering structures and securities compliance across jurisdictions.
- MiCA Whitepaper Review in South Africa – how MiCA whitepaper obligations apply to issuers with African nexus and EU distribution reach.
- Corporate Tax Residency Planning from a Cross-Border Perspective – structuring the issuance entity's tax residency to manage permanent-establishment and transfer-pricing risk.
About OBOLUS
OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance that sit around them. Digital assets are the whole of our practice. We assess token classification against the substance of rights, not the marketing label – a discipline that has protected issuer clients from the most consequential mis-step in the UK market. We advise crypto exchanges, custodians, token issuers and funds across more than seventy licensing jurisdictions. To discuss your situation, contact info@oboluslaw.com.
For a scoped assessment of your token structure and UK offering strategy, contact OBOLUS at info@oboluslaw.com or message us via t.me/oboluslaw.
FAQ
Is my token a security?
Whether a token is a security under UK law depends on the rights it confers. The FCA applies a substance-over-form test: if the token represents a share in profits, an entitlement to repayment or a similar specified investment, it is a security token regardless of how it is marketed. Governance rights, yield mechanics and profit-distribution features each increase the risk of a security classification. Classification must be assessed against the token's actual economics, not its name.
Do I need a MiCA whitepaper?
MiCA is an EU regulation. It does not apply directly in the United Kingdom following Brexit. A UK token offering does not require a MiCA-compliant whitepaper as a matter of UK law. However, if the offering also targets EU persons, MiCA's whitepaper notification requirement applies to that EU-facing activity independently. Issuers offering into both markets must manage two separate compliance tracks; a MiCA whitepaper does not satisfy UK financial-promotions requirements, and vice versa.
How should an airdrop be structured legally?
An airdrop can constitute a financial promotion if it functions as an inducement to engage with a cryptoasset in a way that meets the FCA's definition. The regulatory treatment depends on whether the airdropped token is a specified investment and whether the communication is a qualifying promotion. Free distribution does not automatically place an airdrop outside the financial-promotions regime. The structuring question turns on what the recipient is asked to do, what rights the token confers and whether UK persons are targeted. Legal review before distribution is advisable.
By Roman Levitt, Technology & DeFi Counsel – specialising in token classification, DeFi protocol structuring and cross-border digital-asset regulatory analysis.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.