Coinbase wins FCA authorisation: why 'authorised' matters

Coinbase said on 7 July 2026 that it has obtained an investment-services authorisation from the UK's Financial Conduct Authority, clearing the way for the exchange to sell products well beyond digital coins. Its UK arm already carried an e-money licence and a cryptoasset registration; the new permission is a different order of licence altogether.

For UK retail customers it opens equities trading on the platform for the first time. A separate derivatives tier - covering perpetual futures on crypto, equities and commodities - is being pitched at institutional and advanced traders rather than the general public. The company frames it as its largest UK product expansion to date.

The detail worth studying, though, is not the headline. It is the single word doing all the work: authorised. That word is where trader protection begins.

Three permissions, three very different things. A cryptoasset registration under the UK's money-laundering rules is essentially an anti-money-laundering check; it confirms a firm has adequate financial-crime controls, not that its products are supervised for conduct or that your money is ring-fenced. An e-money licence lets a firm issue electronic money and process payments, again with no bearing on investment advice, best execution or client-asset rules.

An FCA investment-services authorisation is the substantive one. It brings the firm inside the conduct regime that governs how regulated investments are marketed, priced and executed, and it triggers the client-money and compensation protections that retail traders should care about most. Coinbase held the first two for some time. Securing the third is what changes the customer's legal standing on the platform, not merely the product menu.

The UK move mirrors a European build-out. In March 2026, Coinbase began offering over-the-counter crypto and equity-index derivatives across 26 European countries, operating under a Cyprus MiFID II licence it picked up through its purchase of BUX Cyprus, according to reporting by Finance Magnates.

A single national authorisation inside the EU can be passported across the bloc, so a CySEC permission in Nicosia becomes a route into Germany, France, the Netherlands and beyond without a fresh licence in each. That passporting mechanism is why the legal entity behind an offer matters more than the brand on the app.

Post-Brexit, the UK and EU no longer share it, so a firm typically needs both a CySEC or equivalent EU authorisation and a separate FCA one to serve both markets - which is precisely the two-track structure Coinbase is now assembling.

Here is the part retail readers should not gloss over. Perpetual futures and comparable high-leverage derivatives are not on the menu for EU or UK retail clients, and that is by regulatory design, not commercial choice.

Under ESMA's product-intervention framework and the FCA's parallel rules, the sale of many leveraged crypto derivatives to retail investors is heavily restricted or outright banned - the FCA has prohibited the sale of crypto derivatives to UK retail consumers since 2021. That is why Coinbase can only aim its derivatives tier at institutional and advanced or professional clients, while limiting the retail-facing launch to equities.

If any venue offers a UK or EU retail customer a crypto perpetual, that is a red flag about where the entity is really regulated, not a competitive advantage.

Authorisation is not a marketing badge; it is a bundle of concrete protections. A properly authorised firm must keep client money segregated from its own funds, so customer balances are not part of the company's working capital.

EU clients of a MiFID firm are covered by an investor-compensation scheme up to 20,000 euros if the firm fails and cannot return assets; UK clients of an FCA-authorised firm fall under the Financial Services Compensation Scheme, which covers eligible investment claims up to 85,000 pounds. Retail CFD accounts also carry negative-balance protection, capping losses at the money deposited, and ESMA's leverage limits apply - from 30:1 on major currency pairs down to 2:1 on crypto CFDs, with tiers in between for indices, gold and individual shares.

None of these apply to an unregulated venue. That is the practical gap between an authorised multi-asset platform and one that merely lists similar products.

Verifying a firm takes a few minutes and is worth doing before funding any account. Search the FCA Register for a UK firm, or the CySEC or relevant national register for an EU one, and confirm the entity is authorised for the specific investment services on offer - not merely registered for anti-money-laundering purposes.

Crucially, match the exact legal entity you are contracting with. Groups often run several subsidiaries, and the app you download may be operated by a different company from the one holding the licence; the protections follow the entity, not the logo. Check the reference number, the permitted activities and any consumer warnings.

If the entity servicing your account sits outside the UK or EU, the compensation schemes and leverage caps described above may not apply at all.

None of this is new territory for established brokers. Pepperstone, IG and CMC Markets already run retail CFD and multi-asset businesses under FCA and MiFID II authorisation, with segregated client money, negative-balance protection and the same leverage caps.

What they do not offer is any performance promise - and the mandatory caveat stands that most retail investor accounts lose money when trading CFDs. Coinbase entering the regulated multi-asset arena raises the profile of authorisation as a differentiator, which is useful for traders.

But the test is identical whichever brand you weigh: is the exact entity authorised for what it is selling you, and do the client-money and compensation protections actually attach. That question, not the marketing, is what separates a venue worth trusting from one worth avoiding.