
Firms should apply stricter due diligence on unhosted wallet transfers and justify risk scores, says FCA.
Britain's FCA proposed nonbinding guidance treating enhanced checks on unhosted crypto wallet transfers as good practice, while criticizing firms unable to explain their risk scores.
AI-generated summary
The UK Travel Rule required cryptoasset businesses to collect and share transfer information starting September 1, 2023.
Britain's Financial Conduct Authority has proposed treating enhanced checks on crypto transfers involving personal, or unhosted, wallets as good practice in nonbinding guidance. It also criticizes firms that cannot explain the risk scores they use.
The regulator opened consultation CP26/38 on Oct. 23, seeking feedback on changes to its Financial Crime Guide until Dec. 24, 2026. The proposals address how firms assess transfers and operate their financial-crime controls.
Draft section FCG 3.2.8 lists applying enhanced due diligence, meaning more intensive checks, to transactions involving unhosted wallets as a good-practice example. For someone moving crypto from a personal wallet to a UK firm, the proposed example concerns how the receiving firm checks that transfer.
The proposed guidance is nonbinding. The FCA says the Guide contains no rules and imposes no new requirements, although it expects firms to read and consider it when establishing effective controls. Departing from the guidance would not, by itself, establish a breach of FCA rules.
Risk scores and tracing rules
The monitoring proposals also address how firms reach those decisions. Draft FCG 3.2.5 identifies as poor practice using third-party technology without being able to explain or evidence the basis of its findings or scoring.
It also criticizes rigid rules about how many transaction “hops,” or transfer steps, a firm examines when those rules fail to account for risk-appropriate measures. The issue is a tracing rule that disregards risk, rather than the mere use of a numerical limit.
Existing duties already provide the backdrop. Under the UK Travel Rule, cryptoasset businesses have been required to collect, verify and share transfer information since Sept. 1, 2023. The FCA also says firms remain responsible for compliance when they use third-party suppliers.
The regulator does not expect the proposed Guide updates to materially increase compliance activity or consumer costs, or materially change firms' products and services. It describes the changes as clarifying existing expectations and established practice.
The consultation covers firms supervised by the FCA for financial crime, including cryptoasset businesses under the Money Laundering Regulations. The FCA plans to consider responses and publish feedback and the final Guide text in a Policy Statement; it has not specified a publication date in the consultation.
AI outlook — possibilities, not facts
FCA will publish feedback and final Guide text in a Policy Statement after consultation.
Very likely · Within months

Bitcoin struggles to maintain $80,000 support as markets prepare for a Federal Reserve interest rate decision, key US tech earnings, and PCE inflation data. Analysts remain cautious amid shifting AI sector sentiment and historical October underperformance.

Bitcoin wallet Electrum patched a high-severity security flaw exploited by malicious servers to redirect payments and steal funds when users attempted to increase transaction fees.

Wells Fargo, Cisco, Marvell, Arm Holdings, Moderna, and Intuit have joined the list of companies objecting to the OKXICE tokenized stock venue. The platform, a joint venture between ICE and OKX, now faces opposition from 22 issuers regarding its 24/7 trading model.

U.S. spot Bitcoin ETFs saw $137.9 million in outflows Friday, yet finished the week up $301 million. October remains negative with $314 million in net outflows, while Ethereum and Solana funds also faced weekly pressure amid broader market weakness.

Prime Minister Benjamin Netanyahu proposed using blockchain to circumvent international sanctions, triggering criticism from political opponents, the Bank of Israel, and financial experts who argue the strategy is ineffective and a threat to national security.

The Polkadot Community Foundation warns that the Fearless Wallet browser extension leaked private keys since February 2025. The breach coincides with concerns that a recent network upgrade, which reduced staking unbonding periods to two days, limits recovery windows.