FCA Proposes Guidance on When DeFi Interfaces Need UK Authorization

The FCA has spent recent years building a bespoke cryptoasset regime outside the old e-money and payments rulebooks, running a gateway for firms to register since the Financial Promotions regime tightened in 2023 and an application window for the wider regulatory perimeter opened only weeks ago. DeFi has sat awkwardly in that structure because protocols are designed to run without a regulated intermediary, the very actor UK law is built to supervise.

Firms that build front ends, wallets or aggregators pointing at decentralised protocols will have to work out whether their interface counts as the regulated activity, not the protocol behind it. Authorised firms interacting with DeFi must now map financial crime, custody and operational risk controls against the FCA's expectations, likely meaning new compliance sign-off before integrating a protocol. Purely peer-to-peer, non-custodial code without a UK-facing interface looks set to stay outside scope.

Regulating the interface rather than the protocol is a pragmatic fix, but it exposes the gap between DeFi's decentralised branding and the reality that most users reach it through a handful of centralised front ends. A regime that catches the interface effectively catches the activity, which some will read as the FCA finding a back door into decentralised finance without ever claiming jurisdiction over the smart contracts themselves. (per cryptobriefing.com)

Both consultations, GC26/7 on authorisation boundaries and CP26/36 on risk management, close on Nov. 18, after which the FCA will have to decide how to translate industry feedback into binding guidance rather than a discussion paper. The outcome will determine whether UK-based DeFi interfaces face registration deadlines similar to those already imposed on exchanges and custodians under the broader cryptoasset regime.