Key takeaways
- Buying, holding, selling and spending Bitcoin is legal in the UK. It is not legal tender, and neither is a debit card payment.
- Firms that provide in-scope cryptoasset services in the UK must register with the FCA, which has supervised them for anti-money-laundering since 10 January 2020.
- Crypto marketing to UK consumers has followed FCA rules since 8 October 2023: a prescribed risk warning, no incentives to invest and a cooling-off period of at least 24 hours for people new to a firm.
- Full FCA authorisation is on the way. Applications opened on 30 September 2026, the application period closes on 28 February 2027 and the regime is expected to start on 25 October 2027.
- The Financial Services Compensation Scheme and the Financial Ombudsman Service generally do not cover crypto, so check the legal entity and its register entry before you send money.
For information only. Not investment advice. This guide describes the rules as they stood on 11 October 2026 and is not legal or tax advice.
The short answer
Bitcoin is legal in the UK: you can buy, hold, sell and spend it. No rule of the Financial Conduct Authority (FCA) stops a consumer from buying it; the regulator's message is that you should be prepared to lose all the money you invest. Bitcoin is not legal tender, but the Bank of England says legal tender has “a narrow technical meaning” about settling debts. In England and Wales it covers Royal Mint coins and Bank of England notes. Debit cards, cheques and contactless payments are not legal tender either, and a shop may choose what it accepts.
What is missing is protection. Most crypto activity is not yet regulated in the UK, which is why the FCA's guide for beginners carries this warning:
“there is no safety net if things go wrong”
Financial Conduct Authority, Crypto: The basics, read on 11 October 2026.
This guide, part of the CoinCorner learn hub, explains who supervises what, what changes in 2027, how to check a firm and what an Isle of Man registration means. Spending Bitcoin is covered in the guide to how the Lightning Network works.
Who regulates what today
No UK body regulates Bitcoin itself: in October 2026 the FCA supervises crypto firms in two limited ways and HM Revenue and Customs (HMRC) taxes the gains. The table sets out each job next to what it leaves out. It adds the Financial Services Compensation Scheme (FSCS), the Financial Ombudsman Service and the Isle of Man Financial Services Authority (Isle of Man FSA), because readers ask about them.
| Body | What it covers today | What it does not cover |
|---|---|---|
| FCA: anti-money-laundering registration | Firms that provide in-scope cryptoasset services in the UK, which must register before they start trading | Prices, custody and service quality. Registration brings no compensation scheme and no ombudsman |
| FCA: financial promotions | How cryptoassets are marketed to UK consumers, wherever the firm is based, since 8 October 2023 | The asset itself, and what a firm does outside its marketing |
| HMRC | Tax on gains when you dispose of cryptoassets | Supervising firms or protecting customers |
| FSCS and Financial Ombudsman Service | Compensation and complaints for regulated financial services | Most crypto activity, because it is not regulated in the UK |
| Isle of Man FSA, for firms based in the Island | Registration and oversight of designated businesses for anti-money-laundering compliance | Licensing: a registered designated business is not a licence holder |
Last reviewed: , against the FCA, GOV.UK and Isle of Man FSA pages listed under Sources.
Six terms this guide uses
- Bitcoin: the longest-running cryptoasset, created in 2009. The FCA classes it as an exchange token, a kind of unregulated token.
- Cryptoasset: a digital token secured by cryptography and recorded on a distributed ledger, which stands for value or a contractual right and can be transferred, stored or traded.
- Registered: placed on a regulator's register for a stated purpose, here anti-money-laundering supervision.
- Authorised: permitted by the FCA to carry on a regulated activity under the Financial Services and Markets Act 2000 (FSMA).
- Financial promotion: an invitation or inducement to invest, such as an advert, a web page or a social media post.
- FRN: the firm reference number the FCA gives every firm on its register.
The glossary has more regulatory terms explained.
The FCA: registration for anti-money-laundering
A firm that provides in-scope cryptoasset services in the UK must register with the FCA before it starts trading. The FCA has been the anti-money-laundering supervisor for these firms since 10 January 2020, under the Money Laundering Regulations (MLRs), as the FCA's cryptoassets page records. Registration asks one question: can the firm spot and stop money laundering? It says nothing about the firm's prices or how it holds your coins, and the FCA is plain that a registered firm does not bring access to a compensation scheme or an ombudsman.
The FCA: financial promotions
Since 8 October 2023 every promotion of a qualifying cryptoasset to UK consumers, Bitcoin included, has had to follow FCA rules. They apply “regardless of whether the firm is based overseas”, in the FCA's words. The rules come from policy statement PS23/6, which lets crypto be marketed to the public only with restrictions. The next section shows what that means on the page in front of you.
HMRC: tax
HMRC taxes the gain, not the purchase: you may owe Capital Gains Tax when you sell, swap, spend or give away Bitcoin. The tax section below gives the three facts most people need.
The risk warning on every UK crypto page
A firm that markets Bitcoin to UK consumers must show a risk warning whose words are fixed by rule 4.12A.11R of the FCA's Conduct of Business Sourcebook (COBS).
Don't invest unless you're prepared to lose all the money you invest. This is a high-risk investment and you should not expect to be protected if something goes wrong.
The warning prescribed for qualifying cryptoassets. Source: FCA Handbook, COBS 4.12A, read on 11 October 2026.
On a website or in an app the warning must also carry a link with the text “Take 2 mins to learn more”, which opens a summary of the risks. On this site the sentence sits in the footer of every page and links to the risk disclosure.
The warning is one of five consumer measures in PS23/6:
- Clear risk warnings, in the prescribed words.
- A ban on incentives to invest: no monetary or non-monetary reward for investing, such as a bonus for joining, cashback or a bonus for referring a friend.
- Positive frictions: a cooling-off period of at least 24 hours before a first investment with a firm, and a personalised risk warning that uses your name.
- Client categorisation: the firm must establish what kind of investor you are.
- An appropriateness assessment: questions that test whether you understand the risks before you can go ahead.
There are four lawful routes to promote crypto to UK consumers, according to the FCA. The promotion is communicated by an FCA-authorised firm; it is made by an unauthorised firm and approved by an authorised one; it is communicated by a cryptoasset business registered with the FCA under the MLRs; or it meets an exemption in the Financial Promotion Order. The second route uses what the FCA calls a section 21 approver, and it is the one open to overseas firms and to firms that are neither authorised nor registered. The FCA says it will act against promotions that breach the rules, including by asking for websites to be taken down.
What changes in 2027: FCA authorisation
From 25 October 2027, the date on which the FCA expects the new regime to come into force, firms that provide cryptoasset services in or to the UK will need FCA authorisation, not only registration. The legal basis is the Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026, made on 4 February 2026, which bring cryptoassets within the FCA's remit. The FCA published final rules and guidance for authorised firms on 30 June 2026 (FCA, a new regime for cryptoasset regulation).
Key dates
Four dates frame the change. The regulations were made on 4 February 2026, the FCA's gateway for applications opened on 30 September 2026, the application period closes on 28 February 2027, and the regime is expected to come into force on 25 October 2027. “Expected” is the FCA's word, so read the last date as the plan and not as a fixed date.
What it means for customers
For customers the main change is that an anti-money-laundering registration will no longer be enough to serve the UK. The FCA's page on how the gateway will operate sets out what happens to firms on each path:
- Registered firms must apply again. There is “no automatic conversion” of an MLR registration into authorisation.
- Firms that apply in time can carry on while the FCA decides. The FCA expects to decide those applications before the regime starts, and a saving provision covers a firm that is still waiting.
- Firms that apply late may have to stop taking new business. A firm that applies after 28 February 2027 and is not authorised when the regime starts enters a transitional provision. It can only perform contracts it already has, and cannot sign new ones with new or existing UK customers.
- Firms that do not apply must leave. They have to run off their UK cryptoasset business before the regime begins.
If you hold Bitcoin with a firm that serves the UK, it is reasonable to ask which path the firm is on and to know how withdrawals work. Authorisation is about how firms behave. It does not change the chance that the price of Bitcoin falls.
What protection you have, and what you do not
If a crypto firm fails or treats you badly, the two UK protection schemes generally do not apply, according to the FCA's page on crypto investment scams. The FSCS pays compensation when a regulated firm goes out of business. The Financial Ombudsman Service settles complaints about regulated financial services. Most crypto activity is not regulated, so the FCA says you “generally won't have access” to the ombudsman and will not be protected by the FSCS.
Three things are often mistaken for that protection:
- A registration. The FCA says that a firm being registered does not mean you can use the FSCS or the ombudsman if something goes wrong.
- E-money safeguarding. Pounds held as electronic money with an FCA-authorised issuer must be safeguarded under the Electronic Money Regulations 2011, typically in segregated accounts kept apart from the firm's own money. Safeguarding is not FSCS cover.
- Commercial insurance. Insurance on a custody product is a contract between a firm and an insurer, with its own terms, limits and exclusions. It is not a compensation scheme.
The table works through an invented example: a customer called Sam, a crypto firm that stops trading, and made-up amounts.
| What Sam holds with the firm | Amount | FSCS cover | What applies instead |
|---|---|---|---|
| Pounds in an e-money balance | £400 | £0 | Safeguarding: the money sits in a segregated account, and Sam claims on that pool |
| Bitcoin held by the firm | £1,600 | £0 | The firm's own custody arrangements and the insolvency process |
| Total | £2,000 | £0 | No compensation scheme stands behind either amount |
Illustrative figures only, not real customer data. The £1,600 is the price on one day: the same Bitcoin can be worth more or much less by the time a claim is settled.
For CoinCorner's own arrangements, read how customer Bitcoin is held and the full risk disclosure.
How to check a crypto firm before you use it
Checking a crypto firm takes five steps and one or two public registers, and it starts in the footer of the firm's website.
-
Find the legal entity
Look in the footer for the full company name, the company number and the registered address. A brand name is not enough: registers list companies, not logos.
-
Search the FCA Register
The FCA Financial Services Register can be searched by firm name or by FRN. The FCA says firms offering crypto products in the UK must be registered with it or have permission to promote them.
-
Read what the entry permits
An entry lists activities and services. An e-money authorisation or an anti-money-laundering registration is not permission for everything else, so check that the service you want is among them.
-
For a firm outside the UK, find its home register
A firm based outside the UK may be on a register in its home jurisdiction instead. Find that regulator's public register, read the entry, and ask which of the four routes the firm uses to promote to UK consumers.
-
Be wary of clone firms
Fraudsters copy the name, address or FRN of a genuine firm, a pattern the FCA calls a clone firm. Use the contact details shown on the register, not the ones in an advert or an unexpected email.
Firms registered outside the UK: the Isle of Man
The Isle of Man is a Crown Dependency, not part of the UK, with its own laws and its own regulator: the Isle of Man Financial Services Authority. Under the Island's Designated Businesses (Registration and Oversight) Act 2015, businesses in listed categories must register with the Authority before they operate in or from the Island. Virtual asset service providers are one category, alongside money lenders, estate agents and tax advisers.
The registration is narrow, and the Authority says so. Its overview of designated businesses states that they are registered and overseen “for AML/CFT compliance only”, and that the Act does not make them “licence holders of the Authority”. AML/CFT stands for anti-money-laundering and countering the financing of terrorism.
What an Isle of Man registration tells you
- The business is known to a regulator and is on a public register
- It is overseen for anti-money-laundering compliance
- Carrying on that business without registration is an offence under the Act
What it does not tell you
- That the firm holds a licence from the Authority
- That the FCA regulates the firm
- That the UK's FSCS or ombudsman covers its customers
Worked example: how CoinCorner is registered
CoinCorner Ltd is registered with the Isle of Man Financial Services Authority as a designated business (register entry) and is not regulated by the FCA. Here are the five steps applied to CoinCorner, a Bitcoin exchange in the Isle of Man, starting with what its entry on the designated business register says, line by line.
CoinCorner Ltd on the Isle of Man FSA designated business register
- Trading name
- CoinCorner
- Principal trading address
- 18c Carrs Lane, Tromode, Douglas, Isle of Man, IM4 4RG
- Categories
- Lender, Virtual Asset Service Provider
- Date registered
- Conditions
- At least two Isle of Man resident directors at all times; management and control of the virtual asset business in the Island
- Registration number
- None shown on the entry
Register entry read on 11 October 2026.
Each line can be checked against the website. The name and the address match the footer of this site, which also gives the company number, 129003C. The two categories are the activities the registration covers. The conditions tie the business to the Island. The entry dates from 4 May 2016 and shows no registration number, so none is printed on this site.
What the entry does not mean. The registration is oversight for AML/CFT compliance only, and it is not a licence. As the footer of every CoinCorner page says: CoinCorner and investments in cryptoassets are not regulated by the Financial Conduct Authority, are not covered by the Financial Ombudsman Service, and are not subject to protection under the Financial Services Compensation Scheme.
Pounds and euros are a separate arrangement. Electronic money is issued by Mercury Foreign Exchange Limited (registered in England and Wales, company no. 06445887), which is authorised by the FCA under the Electronic Money Regulations 2011, FRN 900858. CoinCorner Ltd acts as its distributor. You can confirm this by searching for 900858 on the FCA Register. That authorisation covers the e-money accounts and payment services. It is not an authorisation of CoinCorner Ltd, and it does not cover Bitcoin.
One more public fact: when read on 6 October 2026, CoinCorner's careers page listed a vacancy for a UK Head of Compliance and Money Laundering Reporting Officer, whose work includes preparing the firm's application under the UK cryptoasset authorisation regime. That shows preparation and nothing more. It is not an FCA status.
Check it yourself, then decide
Every company, regulator, status and register link is on the page for CoinCorner registrations and regulatory status, and the about page describes CoinCorner's legal entities. If the checks satisfy you, you can buy Bitcoin with pounds from £1 by bank transfer or debit card.
Tax: how HMRC treats Bitcoin
Tax usually arises when you dispose of Bitcoin, not when you buy or hold it: HMRC's guidance says you may need to pay Capital Gains Tax when you sell Bitcoin, exchange it for another cryptoasset, use it to pay for goods or services, or give it away, unless the gift is to a spouse, a civil partner or a charity. If your total gains in the tax year are above the Capital Gains tax-free allowance, which is £3,000, you must report the gain and pay the tax. You must keep your own records of every transaction, and the step-by-step guide to buying Bitcoin in the UK covers the rest.
Red flags and scams
Reports of crypto investment scams to the FCA have more than doubled since 2020, and the regulator asks three questions to help you spot one:
- Were you contacted out of the blue?
- Are you being pressed to invest quickly?
- Are you being promised returns that sound unrealistic?
A yes to any one of them calls for extreme caution. The usual pattern, in the FCA's account, is an advert on social media, often with a celebrity's picture, that leads to a professional-looking website where prices and returns can be faked. Some victims find out only when they try to sell.
If you think you are dealing with a scam, stop sending money and run the five checks above. The FCA's crypto scams page explains how to report it. If you have already lost money, the FCA asks you to report it to the FCA and then to contact Report Fraud. Be wary of anyone who offers to recover the money for a fee: the FCA warns that follow-up scams often target the same people.
Frequently asked questions
Is Bitcoin legal tender in the UK?
No. Bitcoin is not legal tender in the UK, and that does not make it illegal to use. The Bank of England explains that legal tender has a narrow technical meaning about settling debts: in England and Wales it covers Royal Mint coins and Bank of England notes. Debit cards, cheques and contactless payments are not legal tender either, and a shop can choose which payment methods it accepts.
Is my Bitcoin protected by the FSCS?
No. The Financial Services Compensation Scheme does not protect Bitcoin held with a crypto firm. The FCA says most crypto-related activities are not regulated in the UK, so if the firm goes out of business it is unlikely you would get your money back. Pounds held as e-money are safeguarded in segregated accounts, but safeguarding is not FSCS cover either.
What does “registered with the FCA” mean for a crypto firm?
It means the firm is on the FCA's register for anti-money-laundering supervision under the Money Laundering Regulations. Registration shows the firm passed the FCA's checks for that purpose. It is not full authorisation: the FCA says a registered firm does not give you access to the FSCS or the Financial Ombudsman Service, and a registration will not convert automatically into authorisation under the new regime.
Will crypto exchanges need an FCA licence in 2027?
Yes, if they serve UK customers. The FCA calls it authorisation: firms carrying on the new regulated cryptoasset activities in or to the UK will need to be authorised under the Financial Services and Markets Act 2000 once the regime starts, which the FCA expects on 25 October 2027. Applications opened on 30 September 2026 and the application period closes on 28 February 2027.
Is Bitcoin legal in the Isle of Man?
Yes. A business may provide Bitcoin services in or from the Isle of Man once it is on the designated business register kept by the Isle of Man Financial Services Authority; virtual asset service providers are a listed category. The Authority oversees them for anti-money-laundering compliance only. Tax rules in the Island differ from those in the UK and are outside this guide.
Can I complain to the Financial Ombudsman Service about a crypto firm?
Generally no. The FCA says that because most crypto-related activities are not regulated in the UK, you generally will not have access to the Financial Ombudsman Service if you want to complain about a crypto investment. Start with the firm's own complaints procedure, and check its register entry to see which regulator, if any, oversees the service you used.
CoinCorner's own procedure is set out on the page that explains how complaints are handled.
Sources
The eight pages below carry the main statements in this guide; other pages are linked beside the sentence that relies on them. Each was read on 11 October 2026.
- Financial Conduct Authority, A new regime for cryptoasset regulation (last updated 30 September 2026): https://www.fca.org.uk/firms/new-regime-cryptoasset-regulation
- Financial Conduct Authority, Cryptoassets: How the gateway will operate: https://www.fca.org.uk/firms/new-regime-cryptoasset-regulation/how-gateway-will-operate
- Financial Conduct Authority, Cryptoasset firms: Use of s.21 approvers: https://www.fca.org.uk/firms/new-regime-cryptoasset-regulation/s21-approvers
- FCA Handbook, COBS 4.12A, Promotion of restricted mass market investments: https://handbook.fca.org.uk/handbook/cobs4/cobs4s17
- Financial Conduct Authority, Crypto investment scams (last updated 16 February 2026): https://www.fca.org.uk/consumers/crypto-investment-scams
- Bank of England, What is legal tender?: https://www.bankofengland.co.uk/explainers/what-is-legal-tender
- Isle of Man Financial Services Authority, DNFBP Overview: https://www.iomfsa.im/designated-business/dnfbp-overview/
- HM Revenue and Customs, Check if you need to pay tax when you sell cryptoassets (last updated 5 October 2026): https://www.gov.uk/guidance/check-if-you-need-to-pay-tax-when-you-sell-cryptoassets