---
title: "UK FCA Consults on DeFi Resilience and Regulatory Perimeter Exclusions"
description: "Guidance papers GC26/7 and CP26/36 detail operational risk rules and scope carve-outs for regulated firms ahead of an expanded 2027 crypto regime."
url: https://basisdesk.news/news/uk-fca-consultation-defi-crypto-perimeter-guidance
published: 2026-10-21T17:41:38.198Z
modified: 2026-10-21T17:41:38.198Z
section: Regulation & Policy
author: Basis Desk Newsroom (AI-generated, source-verified)
sentiment: neutral
tickers: []
tags: [FCA, DeFi, UK regulation, compliance, anti-money laundering]
license: Quote with attribution to Basis Desk (basisdesk.news). Not financial advice.
---

# UK FCA Consults on DeFi Resilience and Regulatory Perimeter Exclusions

Guidance papers GC26/7 and CP26/36 detail operational risk rules and scope carve-outs for regulated firms ahead of an expanded 2027 crypto regime.

## At a glance

- **What happened:** The UK FCA published consultations GC26/7 and CP26/36 covering DeFi operational risks and statutory perimeter exclusions.
- **Why it matters:** The guidance establishes compliance expectations under UK financial crime rules and clarifies carve-outs for technical protocol interfaces.
- **Who is affected:** FCA-regulated institutions using DeFi protocols, software providers, and digital asset firms operating in the UK.
- **Takes effect:** 2026-11-18
- **What's next:** Stakeholder comments close on Nov. 18, 2026, followed by planned final FCA guidance in January 2027.
- **Status:** consultation
- **Primary source:** [🚨 Two important FCA consultations dropped today:](https://lnkd.in/p/gmy_Z7q3) — lnkd.in

## Key points

- FCA released consultations GC26/7 on DeFi operational risk and CP26/36 on cryptoasset regulatory perimeter exclusions [1][2].
- GC26/7 applies to regulated firms using DeFi under SYSC 15A, SYSC 6, and Money Laundering Regulations [2].
- Comments close Nov. 18, 2026, ahead of final guidance in January 2027 and regime enforcement on Oct. 25, 2027 [1][2].

## Editorial remark

- **Context:** The consultations clarify obligations ahead of the Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026, which expand the FCA's statutory perimeter.
- **Impact:** Regulated firms using decentralised protocols must assess their anti-money laundering and systems controls, while infrastructure providers receive clarity on technical exclusions.
- **Watch:** The public consultation window concludes on Nov. 18, 2026, with the FCA scheduled to deliver final guidance in January 2027.

The UK Financial Conduct Authority (FCA) has published two consultation documents addressing how regulated financial firms manage decentralised finance risks and where statutory boundaries fall under incoming crypto rules [1][2]. Both consultation periods run through Nov. 18, 2026, ahead of planned final guidance in January 2027 [1][2].

The first paper, Guidance Consultation GC26/7, introduces proposed non-Handbook guidance for FCA-authorised firms that deploy DeFi to deliver financial services [2]. The paper focuses on practical measures to satisfy Senior Management Arrangements, Systems and Controls (SYSC) requirements under SYSC 15A for operational resilience, SYSC 6 for financial crime controls, and compliance with the Money Laundering Regulations [2]. The FCA noted that while DeFi protocols reduce reliance on traditional intermediaries, automated and open protocols expose companies and clients to distinct operational vulnerabilities and illicit finance risks [1][2].

## Clarifying the Regulatory Boundary

The second paper, Consultation Paper CP26/36, covers cryptoasset perimeter guidance following recent legislative changes [1][2]. According to the UK Cryptoasset Business Council (UKCBC), the document outlines specific exclusions introduced by statute, such as technical software services that merely facilitate access to decentralised networks, temporary settlement workflows, proprietary trading, and defined stablecoin holding structures [1]. The perimeter guidance builds on broader regulatory adjustments detailed in earlier discussions on [UK crypto regulation](https://basisdesk.news/news/uk-crypto-regulation-overview) [1][2].

The supervisory frameworks arrive as the UK prepares for the implementation of the Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026, which formally brings expanded digital asset activities within the FCA’s remit starting Oct. 25, 2027 [2].

## FAQ

**Which entities fall under the GC26/7 DeFi guidance?**

The guidance applies to FCA-regulated firms providing financial services via DeFi that fall under SYSC 15A for operational resilience, SYSC 6 for financial crime compliance, or the Money Laundering Regulations.

**What exclusions are detailed in CP26/36?**

CP26/36 clarifies statutory exclusions including technical access services for decentralized protocols, proprietary trading, temporary settlement, and certain stablecoin holding mechanisms.

**When do the UK cryptoasset rules take full statutory effect?**

The Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026 bring new cryptoasset activities into the FCA perimeter on Oct. 25, 2027.

## Sources

1. [🚨 Two important FCA consultations dropped today:](https://lnkd.in/p/gmy_Z7q3) — lnkd.in, 2026-10-21
2. [GC26/7: Decentralised finance guidance (DeFi)](https://www.fca.org.uk/publications/guidance-consultations/gc26-7-decentralised-finance-guidance) — fca.org.uk, 2026-10-19

---
Basis Desk Newsroom · AI-generated, source-verified · https://basisdesk.news/about/how-we-use-ai
