The United Kingdom's Financial Conduct Authority (FCA) has made it clear that labeling a cryptocurrency project as decentralized will not automatically shield its operators from financial regulation. The warning forms part of the country's preparations to expand oversight of digital asset businesses under a regime scheduled to take full effect on October 25, 2027.
On October 21, 2026, the FCA published two consultations, CP26/36 and GC26/7, on the boundaries of cryptocurrency regulation and the operational risks related to decentralized finance. The documents describe how the regulator plans to separate genuinely decentralized technical infrastructure from businesses that perform regulated financial activities. The FCA's assessment will focus on what an organization actually does, whether identifiable parties exercise control, and whether statutory exclusions apply. The consultations remain open until November 18, with final DeFi guidance expected in January 2027.
Under the framework, crypto businesses conducting regulated activities in the UK will generally require FCA authorization unless a relevant exclusion or exemption applies. Those activities include operating trading platforms, dealing in cryptoassets, arranging transactions, custody, qualifying stablecoin issuance, and certain staking services. The FCA acknowledged that DeFi protocols can run through automated smart contracts without traditional intermediaries, but emphasized that blockchain technology or decentralized governance does not by itself prove that no regulated business exists. Where an identifiable entity controls or operates a financial service, regulatory obligations may still apply.
The proposed guidance also addresses operational resilience, financial crime, and anti-money laundering compliance. The regulator highlighted risks from smart contract vulnerabilities, reliance on external infrastructure, and the difficulty of identifying responsible parties in decentralized systems. The consultation is aimed primarily at FCA-regulated firms using DeFi services, and does not immediately impose identical obligations on every decentralized protocol.
Britain's broader framework was established through the Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026, enacted in February. The FCA opened its authorization application window on September 30, 2026, with existing firms seeking transitional protection required to apply by February 28, 2027. For DeFi projects, the central message is that regulatory status depends on substance rather than terminology.
