Britain's 2027 DeFi Rules Would Lock Out Licensed Firms, and That's Half the Point

Britain has spent four years telling the world it wants to be a crypto hub. In 2027 it starts enforcing a rulebook that would make it very hard for any licensed firm to touch DeFi. Both of those things can't be true at the same time.

That's the shape of an argument Coinbase's European policy lead, Katie Harries, is making about the UK's upcoming cryptoasset regime. Her read is blunt. The rules as drafted amount to a de facto ban on regulated firms offering access to decentralised finance. Not a ban in writing. Nothing that honest. A pile of obligations that no authorized firm can satisfy when the counterparty on the other side is a smart contract with no legal personality, no registered office, and no compliance officer to call.

The 2027 Deadline

The timeline has been public for a while. The Treasury set out its plan to fold cryptoassets into the existing financial services framework, and the FCA has been building a rulebook to match it. Core activities are slated to come into force around 2026, with the fuller set, staking, lending, and the customer-facing interfaces people use to reach DeFi protocols, landing in 2027. Roughly 7 million UK adults, about 12% of the population by the FCA's own research, already hold some crypto. The regulator isn't writing rules for a hypothetical market.

Here's where it gets awkward. An authorized firm operating under that regime would need to identify its counterparties, run due diligence on the protocols it connects to, hold capital against the exposure, apply the consumer duty, and stay inside the financial promotion rules that took effect in October 2023. Run that checklist against a permissionless lending pool and every item collapses. There's no counterparty to identify. There's no issuer to diligence. There's no entity to serve a notice on if something goes wrong.

So the firm does the only rational thing. It doesn't offer the product.

That's the mechanism Harries is pointing at, and it's not a conspiracy. It's just how a rulebook written for entities behaves when you aim it at software. But the outcome matters more than the intent.

The Perimeter Is the Product

There's an honest version of this policy, and I want to give it credit before I tear into it. Regulate the on-ramp. The on-ramp is where the regulated pound meets the unregulated pool, and in a permissionless system it's the only chokepoint you'll ever get. That logic is sound. It's also how every serious jurisdiction is approaching this problem, from Singapore to the EU under MiCA.

The problem isn't the chokepoint. It's the calibration.

If the standard is set so that only firms big enough to build a permissioned wrapper, run their own KYC layer, and absorb the legal risk of touching an open protocol can clear it, then you haven't protected consumers. You've handed the market to whoever can afford the legal bill. That's a moat dressed up as a consumer safeguard, and I'd bet a decent chunk of the lobbying pushing for tight DeFi rules knows it.

But here's the part that should worry the FCA more than it worries Coinbase. A de facto ban doesn't stop the activity. It relocates it. The user who wants yield doesn't disappear when the licensed venue closes its DeFi tab. They open a self-custody wallet, bridge through a protocol with no UK nexus, and carry on. The difference is that nobody supervised is anywhere near them anymore.

That's the tradeoff the current draft makes. Less visible risk, more actual risk.

And let's be clear about where the bottleneck sits. It isn't the technology. Throughput is table stakes now. The stack has gotten boringly fast, gas on the major L2s is cheap enough that it's stopped being a design constraint, blob space has made data availability a solved-enough problem that rollups can undercut the base layer on cost without apologising for it. The engineering side of this argument was settled two years ago. What's left is legal plumbing, and legal plumbing is where things actually break.

So ask the question plainly. If the only firms that can legally offer DeFi access are the ones large enough to wrap it in a permissioned product, what did the consumer gain? A branded front end. A complaints process. And a product that's a shadow of the thing it's named after.

Who Actually Loses

Follow the money and it's not Coinbase. Coinbase can survive a UK DeFi gap. It has a US business, an EU business under MiCA, and a balance sheet that can wait out a bad rulebook. The losers are the mid-sized UK firms who can't afford the compliance build for a product line the regulator might reinterpret in eighteen months. And the smaller protocols that depended on regulated distribution to reach ordinary users.

Nobody cares about infrastructure until it breaks, and the thing that breaks here isn't a chain. It's the bridge between regulated money and open protocols, and once it's gone it's expensive to rebuild.

The fix isn't radical. Regulate the interface, not the protocol. Require disclosure, set position limits for retail, mandate clear warnings about smart contract risk and impermanent loss, and let authorized firms connect to audited, time-tested contracts with capital held against the wrapper rather than the pool. That's a workable route to regulated DeFi access, and it's roughly what other jurisdictions are converging on.

What won't work is pretending a rule that no firm can comply with is a rule at all. It's a wall. And walls don't stop flows, they redirect them, usually toward Dubai, Singapore, and a VPN.

The scaling roadmap for this stuff just got more interesting. The 2027 rules will arrive either way. Whether they arrive as a perimeter or a wall is the only question that matters, and the UK has maybe one consultation cycle left to answer it.