The FCA's Crypto Rules, Decoded: What Actually Changed for You
What the FCA's crypto marketing and promotion rules really require, and what they don't do for your money.
By Firoz Khan|22 July 2026|Updated 20 September 2026|9 min read
Since October 2023, every UK crypto ad has come wrapped in warnings, cooling-off periods and risk banners, and it's easy to read all that as the FCA having brought crypto safely under its wing. It hasn't. The rules that landed regulate how crypto is marketed to you, not whether your money is protected once you've bought it, and the gap between those two things is exactly where most confusion about 'FCA-regulated crypto' comes from. Here's what the regime actually does, and, just as importantly, what it deliberately leaves untouched.
The financial promotions regime, in plain terms
From October 2023, firms marketing crypto to UK consumers, whether based in the UK or overseas, must have their promotions approved by an FCA-authorised firm or fall under a specific exemption, and must follow FCA content rules: clear risk warnings, a ban on 'refer a friend' style incentives for first-time buyers, and mandatory cooling-off periods for people new to crypto. This is a marketing and consumer-protection regime, built to stop the kind of slick, risk-free-sounding advertising that pulled inexperienced buyers into crypto with little understanding of what they were taking on. It does not mean the underlying crypto asset itself is regulated or approved.
The FCA register: what being on it actually means
Firms offering crypto services to UK customers generally need to be registered with the FCA for anti-money laundering and counter-terrorist financing purposes. Being on the register means a firm has passed checks on its financial crime controls, ownership and systems. It does not mean the FCA has assessed whether the firm's products are safe investments, does not mean customer funds are protected if the firm fails, and does not mean the firm is covered by the Financial Services Compensation Scheme. Conflating 'FCA-registered' with 'FCA-regulated and protected' is one of the most common and most consequential misunderstandings in UK crypto, and it's an easy one for a platform's marketing to quietly lean into without ever stating it outright.
What the risk warning requirement actually forces
Every crypto promotion aimed at UK consumers now has to carry a prominent risk warning, and firms have to run new customers through an appropriateness assessment, a set of questions checking basic understanding, plus a personalised risk warning, before a first purchase can go ahead. First-time investors also get a 24-hour cooling-off period after that assessment before they can complete their first purchase, specifically to interrupt impulse buying driven by hype or a falling or rising price in the moment. This is one of the more genuinely useful pieces of the regime: it inserts a deliberate pause exactly where impulsive decisions do the most damage.
Newsletter
Get the best of our crypto and money content every week
Straight to your inbox, once a week.
By subscribing you agree to receive our weekly newsletter and to our Privacy Policy. No spam, unsubscribe anytime.
The ban that actually removed products from the UK market
The clearest, most concrete consequence of the FCA's stance has been on retail access to certain crypto derivatives, exchange-traded notes and similarly structured products, which have been restricted or banned outright for UK retail consumers, on the basis that their complexity and leverage make them unsuitable for the typical retail buyer. That's a genuine restriction with teeth, unlike the marketing rules, which regulate presentation rather than access. If a product you're being offered as a UK retail investor looks like a leveraged crypto derivative, treat its very availability to you as a signal worth questioning.
Unregistered firms and what happened to them
Firms that market to UK consumers without either FCA authorisation, an approved promotion route, or a valid exemption are acting outside the rules, and the FCA has published warning lists and taken enforcement action against firms doing exactly this, including a steady stream of scam and clone-firm alerts. The existence of these lists is itself a useful signal: if a platform pushing you to invest isn't on the FCA's register and isn't running a properly approved promotion, that alone is a reason to stop, regardless of how legitimate the branding looks.
What actually changes for you as an everyday holder
If you're already holding crypto on a UK-facing platform, day to day very little changes: you still hold an unregulated, uninsured asset, your funds still aren't covered by the FSCS, and the platform still isn't required to assess suitability the way a regulated investment firm would for a stocks and shares product. What has changed is the quality of information you're shown before you buy, and a mandatory pause before a first purchase. Those are consumer protections aimed at the moment of decision, not protections that follow your money afterwards.
Where people get this wrong
The recurring mistake is treating a risk warning banner and an FCA register listing as evidence that a crypto platform is now roughly as safe as a bank or a regulated investment platform. It isn't, and the FCA has never claimed it is. Before using any platform, check its actual status on the FCA register yourself rather than trusting a badge on the site, understand that the appropriateness questions and cooling-off period exist because impulsive first purchases were a documented problem, and remember that none of this regime protects your capital if the platform fails, only how it's allowed to talk to you before you hand that capital over.
A reminder
The FCA risk warning still applies to higher-risk crypto content. Always assess how much risk you are willing to take before buying.
Related reading