Total cost swings widely. It depends on your regulated activities, custody exposure, customer base, compliance maturity, and whether you are planning for today's registration or tomorrow's broader regime.
This guide covers UK fee figures, professional and ongoing costs, application requirements, budgeting, and common mistakes. Check every figure against current FCA and UK government guidance before you commit.
Key Takeaways
- The FCA fee is a small slice; people, technology, legal work and oversight usually dominate the budget.
- Your exact services decide your route: exchange, custody, transfers, staking, stablecoins or others.
- Budget one-time build costs and recurring MLRO, monitoring, Travel Rule and audit costs.
- The cheapest route fails if it ignores your banking, promotions and roadmap needs.
How Much Does a VASP Licence Cost in the UK?
There is no single UK price. Separate three things: the FCA's fees, professional support, and the ongoing cost of running controls.
Misreading this causes real damage:
- Underbudgeting the application
- Treating registration as permission for every crypto activity
- Overlooking financial promotions obligations
- Failing to fund controls after registration
Typical Cost Range
The FCA application fee for MLR cryptoasset registration is £11,260 (Category 6), per the FCA fee page. It is non-refundable if you withdraw or are refused. The 2026/27 periodic fee has a minimum of £2,251, plus £6.01 per £1,000 of annual income above £100,000.
No reliable, itemised UK adviser fee range exists. A headline figure of £2.1m circulates for the whole industry's authorisation effort, but it is not an individual applicant's invoice, so do not use it as your benchmark. Below are the cost drivers by model, without fixed prices.
Entry-level or limited scope
- Clearly defined model, limited products, largely outsourced compliance
- Includes the FCA fee, basic legal preparation, AML documentation and initial tools
- Excludes hires, heavy technology builds and complex custody
Mid-range operating model
- More legal analysis, governance papers and a dedicated MLRO
- Stronger monitoring tools, financial promotions review and operational readiness
- Higher volumes, riskier customers or cross-border ambitions push you here
Higher-cost, complex model
- Custody, exchange infrastructure, multiple activities, high-risk customers, complex ownership or heavy outsourcing
- Keep regulatory capital separate from adviser fees and operating cash
Final prudential rules require own funds of at least the highest of a permanent minimum, a fixed-overheads requirement (one quarter of prior-year expenditure) and a K-factor requirement.
The final rules set £750,000 for dealing as principal. Check the rules for your activity.
What Are the UK VASP Licence Requirements?
Under the Money Laundering Regulations (MLRs), a cryptoasset exchange provider exchanges or arranges exchange of cryptoassets for money or other cryptoassets, or operates automated exchange machines. A custodian wallet provider safeguards or administers clients' cryptoassets or private keys. Confirm current definitions on the FCA's registration page and in the legislation.
Business Model and Regulatory Scope
Map every current and planned feature to a regulated activity:
- Fiat-to-crypto and crypto-to-crypto exchange
- Custody and wallet administration
- Transfers and brokerage
- Staking, lending and derivatives
- Stablecoins and token issuance
Then consider UK customers, solicitation, financial promotions, outsourcing, and whether another permission is needed.
Application, Ownership and Governance
The FCA expects a full business plan, ownership and control structure (including ultimate beneficial owners), a UK compliance function and named role-holders. It assesses fit and propriety of owners, directors and similar persons.
Common failure points are unrealistic financial and staffing forecasts, unclear customer and funds flows, and generic risk assessments. Missing or poor-quality key material can make an application invalid.
AML and Financial Crime Controls
Expect to document:
- A tailored business-wide risk assessment
- Customer due diligence and enhanced due diligence
- Sanctions screening and ongoing monitoring
- Suspicious activity reporting (SAR) policy
- Record retention, generally five years
- Staff training and independent testing
You must appoint a Money Laundering Reporting Officer (MLRO). The FCA assesses their fitness, probity, crypto AML expertise, independence, authority and resources, and refuses applications where the MLRO is not fit and proper. Controls should fit your products, customers, flows and jurisdictions.
Technology, Custody, Cyber and Outsourcing
The FCA's operational resilience guidance expects:
- Secure private-key processes and access controls
- Blockchain analytics and transaction monitoring
- Cyber and vulnerability testing
- Incident response and business continuity
- Oversight of cloud, custody and validator suppliers
You stay responsible for outsourced functions. A polished policy manual is not enough; you must show controls work in practice.
Ongoing Obligations
Registration starts the compliance programme: reporting, record retention, training, monitoring, reviews, complaints handling and notifying material changes. Two rules matter immediately:
- Travel Rule (since 1 September 2023): collect, verify and share transfer information, even when using third parties.
- Financial promotions (since 8 October 2023): promote via an authorised person, an approved route, MLR-registered status or an exemption, with risk warnings and, in some journeys, a 24-hour cooling-off period.
Build the regime change into your roadmap early. The Financial Services and Markets Act (FSMA) regime is expected to start on 25 October 2027, with applications open from 30 September 2026 to 28 February 2027. Existing MLR registration does not convert automatically. The FCA advises against applying for MLR registration after 31 July 2027.
What Does the Total Cost of UK VASP Registration Include?
Plan for first-year implementation plus recurring annual spend, not a single application fee.
Regulatory and Corporate Setup (mostly one-time)
- FCA application and periodic fees (above)
- Companies House: £100 digital incorporation, £50 confirmation statement
- ICO data protection fee: £52, £78 or £3,763 depending on tier
- Accounting, tax, insurance, registered office
Application Preparation and Specialist Advice (mostly one-time)
Typical workstreams include:
- Legal analysis and perimeter mapping
- Business plan, policies and drafting
- FCA correspondence, gap assessments and remediation
Later variations or amendments add cost.
Compliance Personnel (recurring)
Budget for an MLRO, compliance officer, senior oversight, training and independent testing. Morgan McKinley's 2026 London guide estimates general MLRO pay (not crypto-specific) at:
- £90,000-£120,000 (0-3 years)
- £120,000-£150,000 (3-5 years)
- £150,000-£300,000 (5+ years)
A fractional model can reduce this line item. Fraxtional provides named, director-led MLRO services for UK firms through advisory, subscription or embedded engagements, without a full-time executive hire.
Compliance Technology (one-time and recurring)
Budget for:
- KYC/KYB and sanctions screening
- Transaction monitoring and blockchain analytics
- Travel Rule tooling and case management
- Secure storage, penetration testing and integrations
Vendor pricing varies. One published example lists identity verification at about £1.05-£1.45 per check with monthly minimums; monitoring is often custom-priced.
Post-Registration and Lifecycle (recurring)
- Regulatory reporting and policy refreshes
- Audits and compliance reviews (independent work can run from a few thousand to tens of thousands of pounds by scope)
- Training
- Banking and payment-provider due diligence
- Product and ownership changes
- Analysis for the new FSMA regime
How to Estimate the Right UK VASP Budget, and What Applicants Miss
Lower-Cost vs Higher-Cost Routes
A lower-cost model has tight scope, a mature risk assessment, limited activities, proportionate tooling and carefully used specialists. The trade-off is rigidity: product expansion, custody or higher-risk customers can force a full rebuild.
A higher-cost model involves custody, exchange, multiple product lines, complex flows, higher-risk exposure and real UK substance. The extra spend should buy stronger governance, resilience and evidence that controls work.
How to Build the Budget
- List one-time costs: application, legal, policies, technology implementation, recruitment.
- List recurring annual costs: people, technology subscriptions, assurance, reporting, regulatory maintenance.
- Add capital: separate own-funds expectations from fees and cash for operations.
- Add contingency for FCA questions, remediation and scope changes.
Build timeline into the budget as well. The FCA reported average time to approval of 217 days for applications received in 2025, according to FCA data. Early data showed 69% of applications withdrawn, so submission quality is itself a cost driver.
What Most Applicants Miss
- Focusing only on the filing fee
- Assuming registration permits all crypto activity (it is AML/CTF registration, not FSMA authorisation)
- Ignoring UK customer access and banking
- Postponing financial promotions or Travel Rule planning
An apparently cheap application becomes expensive through repeat submissions, weak documentation, unsuitable vendors, rushed hiring or a later change of business model. Fixing a weak AML policy early is cheaper than losing weeks at a bank review.
Conclusion
UK VASP licence cost depends on regulatory scope, business complexity, compliance maturity, people, technology and ongoing obligations, not just the FCA fee.
The right budget balances approval readiness, resilience, customer protection, banking practicality and your product roadmap. Get current UK-specific professional advice before you apply.
Frequently Asked Questions
How much does a VASP licence cost?
There is no fixed price. The FCA MLR application fee is £11,260, with separate costs for legal support, compliance staff, technology and ongoing operations.
How do I get a VASP licence?
Define your regulated activities, confirm the FCA route, build governance and AML controls, prepare documents, submit, answer FCA queries, then maintain controls after registration.
Does the UK have a VASP licence or registration?
Currently, firms register with the FCA under the MLRs for AML/CTF purposes. A separate FSMA authorisation regime is expected from 25 October 2027; verify the position before applying.
What are the requirements for VASP registration in the UK?
You need a clear business model, transparent ownership, fit-and-proper management, an MLRO, AML/CTF systems, due diligence, monitoring, sound technology controls and ongoing reporting.
How long does UK VASP registration take?
The statutory MLR period is three months, but the FCA reported 217 days average approval for 2025 applications. Preparation time is separate and depends on document quality.
Is FCA registration enough to operate a crypto business in the UK?
No. It does not cover payments, e-money, derivatives or stablecoin permissions, and promotions, sanctions and consumer rules still apply. FSMA authorisation may also be needed.
