UK Cryptocurrency Laws Guide: Rules, Documentation, Common Triggers, and Risk Controls
A practical guide to navigating UK cryptocurrency laws — HMRC tax rules, the FCA regulatory framework, AML requirements, recordkeeping, reporting obligations, and the risk controls every user and business should understand.
📅 Updated July 2026 • 11 min read
📊 Taxable events and HMRC rules
There is no specific "cryptocurrency tax" in the UK. Instead, HMRC assesses each crypto transaction to determine whether it falls under Capital Gains Tax (CGT) or Income Tax[reference:0]. The key question is whether your activity constitutes investment (CGT) or trading/business (Income Tax).
Capital Gains Tax (CGT)
Most individual investors will encounter CGT when they dispose of cryptoassets. HMRC defines a "disposal" as[reference:1]:
Selling crypto for fiat currency (GBP, USD, etc.)
Swapping one cryptocurrency for another — a taxable event even without cashing out to fiat[reference:2]
Using crypto to purchase goods or services
Gifting crypto (except to a spouse or civil partner, where a no-gain/no-loss transfer applies)
Participating in certain DeFi activities where ownership is relinquished
For the 2024/25 and 2025/26 tax years, the CGT annual exempt amount is £3,000. If your total sales proceeds exceed £50,000, you have a reporting requirement even if your gains are below the exempt amount[reference:3]. CGT rates are up to 20% for higher-rate taxpayers[reference:4].
Income Tax
Some crypto transactions are taxed as income rather than capital gains[reference:5]. This typically applies when[reference:6]:
Mining — profits from crypto mining are generally subject to Income Tax at rates up to 45%.
Staking rewards — where the activity is considered a trade or business.
Receiving crypto as payment for goods or services.
Frequent trading — if your activity amounts to a trade, profits may be taxed as income rather than capital gains.
🔑 Key distinction
The line between CGT and Income Tax can be blurry. HMRC considers factors such as frequency of transactions, level of organisation, and whether you are seeking a profit. If in doubt, seek professional advice.
📁 Recordkeeping and documentation
HMRC expects taxpayers to keep comprehensive records of all crypto transactions[reference:7]. Without proper records, you may struggle to calculate gains accurately and could face penalties if HMRC investigates.
What records to keep
Date and time of each transaction
Type and amount of cryptoasset involved
Value in pound sterling at the time of the transaction (using HMRC's conversion rules — CRYPTO40100)[reference:8]
Counterparty or exchange name
Wallet addresses involved
Fees paid (trading fees, network/gas fees)
Purpose of the transaction (e.g., sale, swap, gift, purchase)
Any correspondence with exchanges or other parties
How long to keep records
HMRC generally expects records to be kept for at least five years after the tax year in which the transaction occurred. This aligns with the standard recordkeeping requirements for self-assessment taxpayers.
Practical tips
Use crypto tax software to automatically aggregate transaction data from exchanges.
Download transaction history from each exchange you use, and store it securely.
Keep a separate spreadsheet to record transactions not captured by exchanges (e.g., peer-to-peer trades, DeFi interactions).
For DeFi activities, record the smart contract address and the nature of the transaction (e.g., lending, staking, liquidity provision).
📋 Reporting obligations and the Cryptoasset Reporting Framework (CARF)
From 1 January 2026, the UK is implementing the Cryptoasset Reporting Framework (CARF), a new global standard developed by the OECD for the automatic exchange of cryptoasset information between tax authorities[reference:9][reference:10].
What CARF means for users
UK Reporting Cryptoasset Service Providers (RCASPs) — exchanges, wallet providers, and other platforms — are now required to collect and report detailed personal and transactional data for users who are UK residents[reference:11][reference:12]. This applies to both UK-based and overseas platforms serving UK clients[reference:13].
RCASPs must register with HMRC by 31 January 2027 and submit their first report covering the 2026 calendar year by 31 May 2027[reference:14][reference:15].
What this means for you
HMRC will receive transaction data directly from platforms, increasing visibility and compliance risk.
You must ensure your tax reporting matches the data HMRC receives from exchanges.
If you have unreported crypto gains, the window for voluntary disclosure is closing.
Review past crypto activity to check whether any tax is due[reference:16].
⚠️ Important
The UK has "gold-plated" the OECD's CARF rules — meaning it has extended reporting to cover domestic UK users, not just international exchanges[reference:17]. HMRC will receive data on UK residents using UK platforms.
🏛️ FCA regulatory framework
The UK is bringing cryptoassets within the scope of the Financial Services and Markets Act 2000 (FSMA). The Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2025 establish a comprehensive FCA-supervised regime[reference:18][reference:19].
Key milestones
February 2026: Legislation brought cryptoassets into the FCA's remit[reference:20].
30 June 2026: FCA published its final rules and guidance, completing its Crypto Roadmap[reference:21].
30 September 2026 – 28 February 2027: Application window for firms seeking FCA authorisation[reference:22].
25 October 2027: New mandatory regime comes into force[reference:23][reference:24].
Which activities will be regulated
From October 2027, firms must be FCA authorised to carry out certain cryptoasset activities, including[reference:25][reference:26]:
Issuing qualifying stablecoins
Safeguarding cryptoassets (custody)
Operating trading platforms
Dealing and arranging deals in cryptoassets
Staking
Cryptoasset lending and borrowing
DeFi activities where there is an identifiable controlling entity[reference:27]
Financial promotion rules
Since 8 October 2023, firms promoting cryptoassets in the UK must be FCA authorised or registered, or have their marketing approved by an authorised firm[reference:28]. Promotions must be clear, fair, and not misleading[reference:29].
🛡️ AML and registration requirements
Since 2021, all cryptoasset firms have been required to register with the FCA under the Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017 (MLRs)[reference:30][reference:31].
Key AML obligations
Registration: Cryptoasset exchange providers and custodian wallet providers must register with the FCA[reference:32].
Customer due diligence (CDD): Verify customer identities and conduct risk assessments.
Enhanced due diligence (EDD): Required for correspondent relationships, including assessing non-UK firms' AML controls[reference:33].
Reporting: Suspicious activity reports (SARs) must be filed with the National Crime Agency.
Recordkeeping: Maintain records of CDD and transactions for at least five years.
Recent AML reforms
In 2025, HM Treasury published draft amendments to the MLRs, including[reference:34]:
Aligning registration and change-in-control thresholds with FSMA.
Removing the requirement for firms authorised under FSMA to also register under the MLRs.
Setting the change-in-control threshold for cryptoasset firms at 10%[reference:35].
⚠️ Common compliance triggers
Certain activities or events are more likely to attract HMRC or FCA attention. Understanding these triggers can help you stay compliant.
HMRC triggers
Large or frequent transactions: High-value or high-frequency trading may prompt HMRC enquiries.
Sales proceeds exceeding £50,000: Triggers a reporting requirement[reference:36].
Inconsistent reporting: Discrepancies between your self-assessment and data HMRC receives from exchanges.
DeFi activity: Lending, staking, and liquidity provision are complex areas that HMRC is scrutinising.
Mining income: Mining profits are taxable as income and must be declared.
FCA triggers
Unauthorised financial promotions: Promoting crypto without FCA authorisation or approval[reference:37].
Failure to register for AML: Operating a cryptoasset business without FCA registration.
Non-compliance with financial promotion rules: Promotions that are unclear, unfair, or misleading[reference:38].
🛡️ Risk controls and best practices
Proactive risk management can help you avoid penalties and maintain compliance.
For individuals
Keep meticulous records: Use crypto tax software and maintain a personal transaction log.
File on time: Self-assessment deadlines are 31 January following the tax year end (5 April).
Declare all gains and losses: Even if your gains are below the CGT exempt amount, you may still have a reporting obligation if proceeds exceed £50,000[reference:39].
Claim losses: You have four years from the end of the tax year to claim losses[reference:40].
Review past returns: If you have unreported crypto activity, consider making a voluntary disclosure.
For businesses
Register with the FCA: Ensure AML registration is in place and prepare for full FSMA authorisation.
Implement robust AML/CTF controls: CDD, EDD, and SAR reporting.
Comply with financial promotion rules: Ensure all marketing is clear, fair, and not misleading[reference:41].
Prepare for CARF reporting: RCASPs must collect and report transaction data from 1 January 2026[reference:42].
Stay informed: The regulatory landscape is evolving rapidly; monitor FCA and HMRC announcements.
⚖️ Comparison: individuals vs. businesses
Obligation
Individuals
Businesses / Firms
Tax on disposals
CGT (up to 20%)
Corporation Tax (19–25%) on trading profits
Income Tax on mining/staking
Up to 45%
Corporation Tax on business income
FCA registration
Not required
AML registration required since 2021; FSMA authorisation from Oct 2027
Financial promotion rules
Not applicable
Must be authorised or use s.21 approver[reference:43]
CARF reporting
Data reported by RCASPs
RCASPs must collect and report user data[reference:44]
Recordkeeping
5+ years for self-assessment
5+ years for AML and tax purposes
AML obligations
None (as a user)
CDD, EDD, SAR reporting, registration
✅ Practical compliance checklist
Keep a complete record of every crypto transaction — date, amount, value in GBP, counterparty, and fees.
Use HMRC's conversion rules (CRYPTO40100) to value transactions in pound sterling[reference:45].
Calculate your CGT liability for each tax year, applying the £3,000 annual exempt amount.
If sales proceeds exceed £50,000, report even if gains are below the exempt amount[reference:46].
File your self-assessment return by 31 January following the tax year end.
If you have unreported gains, consider making a voluntary disclosure to HMRC.
For cryptoasset businesses: register with the FCA for AML supervision.
Prepare for FSMA authorisation if you engage in regulated crypto activities (deadline: 25 October 2027)[reference:47].
Ensure financial promotions are clear, fair, and not misleading[reference:48].
If you are a RCASP, prepare for CARF reporting from 1 January 2026[reference:49].
Review HMRC and FCA guidance regularly — the rules are evolving.
Consult a qualified tax or legal professional for personalised advice.
🧪 Scenario example: a UK investor's compliance journey
📊 James's crypto compliance
James, a UK resident, has been buying and selling crypto since 2020. In the 2024/25 tax year, he made the following transactions:
Sold £45,000 worth of Bitcoin for GBP.
Swapped £10,000 of Ethereum for Solana (a taxable event).[reference:50]
Received £500 in staking rewards.
James calculates his total proceeds at £55,000 — above the £50,000 reporting threshold[reference:51]. His total gains are £8,000. He deducts the £3,000 CGT exempt amount, leaving £5,000 taxable at 20% (higher rate) = £1,000 tax due.
He also declares his £500 staking rewards as miscellaneous income. He keeps records of all transactions, including the exchange rate used for each trade.
James files his self-assessment return by 31 January 2026 and pays the tax due. He also reviews his 2020–2024 activity and discovers he had unreported losses in 2022 — he claims these losses within the four-year window[reference:52], reducing his 2024/25 tax liability.
Lesson: Keeping good records and understanding the rules helps James stay compliant and minimise his tax bill.
🚫 Common mistakes with UK crypto compliance
Assuming no tax is due if you haven't cashed out: Swapping one crypto for another is a taxable event[reference:53].
Ignoring the £50,000 proceeds reporting threshold: Even if gains are below £3,000, you must report if sales proceeds exceed £50,000[reference:54].
Failing to claim losses: Losses can be carried forward to offset future gains, but you must claim them within four years[reference:55].
Not keeping adequate records: Without records, you cannot accurately calculate gains or defend against an HMRC enquiry.
Confusing CGT and Income Tax: Mining and trading as a business are subject to Income Tax, not CGT[reference:56].
Assuming DeFi activity is tax-free: Lending, staking, and liquidity provision can trigger tax liabilities[reference:57].
Not registering with the FCA: Cryptoasset businesses must register for AML supervision.
Unauthorised financial promotions: Promoting crypto without FCA authorisation or approval[reference:58].
Ignoring CARF: From 2026, HMRC will receive transaction data directly from exchanges[reference:59].
Assuming HMRC won't find out: HMRC has been actively working with exchanges to access user data[reference:60].
Penalties and interest: Failure to declare crypto gains can result in penalties of up to 100% of the tax due, plus interest[reference:61].
HMRC investigations: HMRC has been actively working with exchanges to identify non-compliance[reference:62]. From 2026, CARF will provide HMRC with direct transaction data[reference:63].
Uncertainty in DeFi taxation: The tax treatment of DeFi activities is evolving. The new 'no-gain/no-loss' regime will simplify some DeFi transactions, but until then, uncertainty remains[reference:64].
Regulatory change: The UK's crypto regulatory framework is rapidly evolving. Rules that apply today may change tomorrow.
FCA enforcement: Operating without FCA authorisation or breaching financial promotion rules can result in fines and sanctions[reference:65].
AML compliance failures: Failure to register with the FCA or comply with AML obligations can lead to criminal penalties.
Recordkeeping failures: Without adequate records, you cannot defend against an HMRC enquiry or accurately calculate your tax liability.
Cross-border complexity: If you use overseas exchanges or are resident in multiple jurisdictions, your tax obligations may be even more complex.
This article is for informational and educational purposes only. It does not constitute financial, legal, or tax advice. Tax laws and regulations are complex and subject to change. Always consult a qualified professional for advice tailored to your specific circumstances.
❓ Frequently asked questions
Do I have to pay tax on cryptocurrency in the UK?
Yes. HMRC taxes cryptoassets based on the nature of your activity. Most individuals pay Capital Gains Tax (CGT) on disposals, while mining, staking, or trading as a business may be subject to Income Tax. There is no specific 'cryptocurrency tax' — each transaction is assessed on its own merits[reference:66].
What is a taxable event for crypto in the UK?
A taxable event includes: selling crypto for fiat currency, swapping one cryptocurrency for another, using crypto to buy goods or services, gifting crypto (except to a spouse/civil partner), and certain DeFi transactions where ownership is relinquished[reference:67]. Simply holding crypto or moving it between your own wallets is not taxable.
What is the CGT annual exempt amount for 2025/26?
For the 2024/25 and 2025/26 tax years, the CGT annual exempt amount is £3,000[reference:68]. If your total sales proceeds exceed £50,000, you have a reporting requirement even if your gains are below the exempt amount[reference:69]. Always check HMRC's current guidance as these figures can change.
Do I need to report crypto losses to HMRC?
If you make a loss, you can claim it to offset against future gains. You have four years from the end of the tax year in which the loss arose to make a claim. If you do not claim the losses, you will lose them[reference:70].
Do I need to register with the FCA for crypto activities?
Since 2021, cryptoasset firms have been required to register with the FCA for anti-money laundering supervision[reference:71]. From 25 October 2027, a broader FCA authorisation regime will come into force, requiring firms engaged in regulated crypto activities — such as exchanges, custodians, and stablecoin issuers — to hold FCA permission[reference:72].
What records do I need to keep for UK crypto tax purposes?
You should keep records of every transaction: date and time, the type and amount of crypto, the value in pound sterling at the time of the transaction, the counterparty or exchange, wallet addresses, fees paid, and any relevant correspondence. HMRC expects records to be kept for at least five years.
What is the Cryptoasset Reporting Framework (CARF)?
CARF is a new global standard developed by the OECD for the automatic exchange of cryptoasset information between tax authorities[reference:73]. The UK is implementing CARF from 1 January 2026, requiring UK Reporting Cryptoasset Service Providers (RCASPs) to collect and report transaction data on UK residents to HMRC, with first reports due by 31 May 2027[reference:74].
What happens if I don't declare my crypto gains?
Failure to declare crypto gains can result in penalties, interest charges, and potential investigation by HMRC[reference:75]. HMRC has been actively working with exchanges to access user data and identify non-compliance[reference:76]. If you have unreported gains, you should consider making a voluntary disclosure to HMRC.
All tax rates, allowances, and deadlines are subject to change. Always verify current information directly from HMRC and FCA official sources.