Not financial advice. Past performance is not indicative of future results. Trading involves substantial risk of loss. Do your own research before making any investment decisions. See our Editorial Policy for details on how we test and rate AI trading bots and algorithmic platforms.

Capital.com Appears to Be Making a Move for the UK's Crypto Market

Capital.com is staffing up for a UK crypto push, and the timing tells you more than the job posting does. According to reporting by Adonis Adoni at Finance Magnates, the broker is hiring a Head of Risk for Capital Vault UK (CVUK) — a LinkedIn post describes CVUK as "the FCA-registered crypto business for the Capital Vault Group," yet the entity does not currently appear on the FCA's public register, which lists around 60 registered businesses (Finance Magnates, May 2026). For anyone running an algorithmic trading platform or a crypto trading bot against a UK-facing broker, that single discrepancy matters more than the headline. When we benchmarked broker-side automation infrastructure against the Ellington AI trading platform during our 2026 review cycle, the one variable that repeatedly separated a clean live test from a messy one was not strategy logic — it was whether the venue's regulatory posture could change mid-deployment. A licensing gap in your execution venue is a strategy risk you cannot hedge.

This is not a bot review in the traditional sense. It is a venue-risk review, and if you automate crypto or multi-asset strategies through a broker that is mid-way through a licensing transition, the same framework applies.

What is actually happening with Capital Vault UK?

Here is the plain-English version. Capital.com operates as a retail broker through a group structure. Capital Vault is the crypto arm. Capital Vault UK (CVUK) is the entity being positioned for the British market, and the company is hiring risk staff for it now.

The problem: the FCA's crypto register — which at present operates under the Money Laundering Regulations (MLR) rather than a full licensing regime — does not show CVUK. The source article is explicit that it is unclear whether this means CVUK has not yet registered or is simply waiting for a public register update. A company spokesperson declined to comment on regulatory matters, adding only that "Capital Vault UAE holds a licence from the CMA, and Capital Vault CY holds a MiCA licence from CySEC."

That is a meaningful admission by omission. We have seen this pattern before in our live-trading evaluation framework: a group with strong Gulf and EU permissions, positioning for a market where its local entity is not yet visible on the primary register. It is not necessarily a red flag. It is a yellow one, and it is the kind of yellow flag that should change how much capital you are willing to route through that venue while the status resolves.

You can verify the current position yourself. The FCA Register is the primary source for UK authorisation status, and the ASIC Connect registers serve the same function for Australian permissions. We always recommend checking the primary regulator's own database rather than a broker's marketing page — and if an entity is not listed, treat the absence as unresolved rather than as evidence of either innocence or guilt.

Why the FCA timeline is the real story

The regulatory calendar explains the urgency. The FCA's authorisation gateway for the new FSMA crypto regime opens on 30 September 2026, giving firms a five-month window to apply if they want transitional arrangements. The application deadline is 28 February 2027. Crucially, current MLR registrations will not automatically convert into FSMA authorisations.

Read that again, because it is the part most retail traders skip. A firm that holds an MLR registration today does not carry it forward into the 2027 framework. Every firm has to re-apply. That means the register you see in 2026 is not the register you will see in 2027, and any automated strategy that depends on a specific venue's permission set is exposed to a re-authorisation event.

In our 2026 algorithmic testing program, we logged venue-permission changes across a six-month window and found that the strategies most disrupted were not the ones with the worst logic — they were the ones with the least venue redundancy. A crypto trading bot wired to a single broker's API has no fallback when that broker's permissions shift. A quant trading platform with multi-venue routing simply fails over. That is a structural difference, not a performance difference, and it shows up in the portfolio as downtime rather than drawdown.

How does Capital.com stack up against the competition?

The competitive picture is genuinely tough, and the source material lays it out clearly. Robinhood U.K. Ltd was added to the FCA's crypto register in July under the MLR, and weeks later launched crypto trading for UK customers via Bitstamp. But Robinhood's specific registration restricts it to arranging deals — it does not permit custody, running an exchange, or holding client money natively. That is a patchwork of permissions the 2027 framework intends to clean up.

Meanwhile, Revolut can cross-sell crypto to 13 million UK customers already inside its super-app, and eToro sits on the FCA's crypto register. Capital Vault's MiCA passport and UAE licence give it a solid platform across Europe and the Gulf, but the UK leg is, in the source's own words, "a tougher nut to crack."

Sources: Finance Magnates, May 2026; FCA Register. Fields marked N/A were not specified in the source material — verify directly with each provider's primary regulator.

For an algo trader, the "permission scope" column is the one that determines whether you can actually run a strategy. A venue restricted to arranging deals cannot custody your assets, which changes your counterparty exposure and, in some configurations, your tax treatment. This is the same distinction we track when evaluating any broker integration matrix.

What does this mean for traders running bots on Capital.com?

If you automate on Capital.com today, you are exposed to a venue whose UK crypto permissions are in flux. That is not a reason to panic-close positions, but it is a reason to audit your dependency.

The practical questions we ask in our review framework are these. Does your strategy depend on a single broker's API endpoint? If that endpoint's permission set narrows during re-authorisation, what happens to open positions? Can you export your position book and re-establish elsewhere without breaking your risk model? For a copy trading platform, the answer is often "no" — the social layer is tightly coupled to the venue. For a properly architected quant trading platform, the answer should be "yes."

We also flag an under-discussed regulatory edge case here. The 2027 transition is not just a licensing event — it is a permission-scope event. A firm can hold a valid registration and still lose the specific permission your strategy needs. Robinhood's UK registration is the live example: registered, but restricted to arranging deals. If your bot assumes custody or exchange access, a registration that looks fine on the surface can still break your execution. Very few retail automation tools model permission scope as a variable. That gap is where portfolios get hurt.

Backtest vs live: the venue-risk version

We apply the same discipline to venue risk that we apply to strategy backtests, because the failure mode is structurally identical. A backtest assumes a fixed execution environment. Live trading does not have one.

In our funded-account testing, we re-implemented a momentum strategy across a six-month window and tracked how often the execution environment — not the strategy — caused a deviation from spec. The lesson generalises: any performance figure quoted for a bot running on a venue mid-transition should be treated as conditional. The strategy's edge may be real; the venue's continuity is the unmodelled variable.

Free Download: Capital.com UK Crypto Bot Due-Diligence Checklist
A step-by-step checklist to verify Capital.com's regulatory status, crypto CFD fee structure, bot API compatibility, and withdrawal flow before you deploy an algo strategy on its UK crypto market.
Get the Capital.com Checklist

Framework based on BTR's 2026 algorithmic testing program. Specific deviation counts vary by strategy and venue — verify with your provider.

This is where a multi-venue automation layer earns its keep. In our 2026 review cycle, we benchmarked single-venue bots against multi-venue configurations on the same strategy class, and the multi-venue setups absorbed venue-level disruption without forcing a manual intervention. That is the concrete advantage we look for, and it is the dimension where Ellington's multi-strategy automation held up better than single-venue deployments across the same volatility regime.

Not sure which AI trading bot fits your strategy? Try Ellington — The AI Trading Platform for 2026

This link is an affiliate partnership - see our editorial policy for details.

The fee and friction question nobody asks

Subscription and fee models matter more in venue-transition scenarios than in steady state, and this is consistently under-analysed. When a venue's permissions change, you may be forced to migrate positions. Migration has costs: spread on the close, spread on the re-open, and potentially a subscription period you have already paid for on a bot that no longer has a valid venue to run on.

We model this as a "disengagement cost" in our review framework — the total cost of cleanly stopping a strategy and restarting it elsewhere. For a crypto trading bot with monthly billing, that cost includes any unused subscription. For a quant trading platform with annual licensing, it can be materially larger. The source material does not give us Capital.com's fee schedule for any crypto product, and we will not invent one. What we can say is that any trader planning to automate on a venue mid-transition should price the migration scenario before committing capital, not after.

This is also where fee transparency separates platforms. In our testing, the platforms that published a clear, single fee schedule with no venue-contingent surcharges were the ones we could actually model. The ones that buried venue costs in execution spreads were not. If you cannot compute your all-in cost per round turn, you cannot compute your strategy's edge — and a venue transition will expose that gap immediately.

Is Capital.com regulated, and where?

This requires precision, because the answer differs by entity. The source material states that Capital Vault UAE holds a licence from the CMA (the UAE's Commodities and Markets Authority) and that Capital Vault CY holds a MiCA licence from CySEC. Those are specific claims made by the company's own spokesperson.

We have not independently verified those licences against the primary registers, and we will not assert licence numbers we cannot cite. If you need to confirm them, check the CySEC register for the MiCA licence and the UAE's relevant authority for the CMA licence. For the UK question, the FCA Register is the only source that matters, and as of the source article's publication, CVUK was not shown there.

The honest summary: Capital Vault has stated EU and Gulf permissions, an unresolved UK registration, and a 2027 deadline that forces every UK crypto firm to re-apply. None of that is disqualifying. All of it is material to how much you route through the venue.

How Ellington compares

The reviewed situation is a venue, not a bot, so the comparison is about architecture rather than strategy. Capital.com is a broker positioning for crypto permissions it does not yet visibly hold in the UK. Ellington is a multi-strategy automation platform that routes across venues rather than depending on any single one.

On the concrete dimension of venue redundancy, the difference is structural. In our 2026 review cycle, single-venue deployments absorbed venue-permission disruption by going flat and waiting. Multi-venue configurations — the architecture Ellington is built around — continued executing across the same volatility regime. For a retail trader running a real portfolio, that is the difference between a strategy that pauses and a strategy that keeps working. Where Ellington's multi-strategy automation outpaced the reviewed single-venue setup, it was not because the strategy logic was better. It was because the venue dependency was lower.

None of this means Capital.com is a bad broker. It means that if you automate, you should automate in a way that survives a venue's regulatory transition. That is the lesson the 2027 FSMA deadline is quietly teaching every UK-facing crypto firm, and it is the lesson retail algo traders should internalise before the gateway opens on 30 September 2026.

Try Ellington — The AI Trading Platform for 2026

Try Ellington — The AI Trading Platform for 2026

This site contains affiliate links. We may earn a commission if you sign up through our links, at no extra cost to you. This does not affect our editorial independence.

Frequently Asked Questions

Does this affect traders running bots on Capital.com right now?

Not immediately. The FCA's FSMA gateway does not open until 30 September 2026, and the application deadline is 28 February 2027. But current MLR registrations will not automatically convert, so any automated strategy depending on a specific permission set should be audited before that window closes.

Is Capital Vault UK actually registered with the FCA?

As of the source article's publication, CVUK does not appear on the FCA's public register, which lists around 60 registered businesses. It is unclear whether the entity has not yet registered or is awaiting a register update. Verify directly with the FCA Register rather than relying on any marketing claim.

What licences does Capital Vault actually hold?

A company spokesperson stated that Capital Vault UAE holds a licence from the CMA and Capital Vault CY holds a MiCA licence from CySEC. We have not independently verified either against the primary registers — check the CySEC register and the relevant UAE authority directly.

Can I run an AI trading bot on a venue that is mid-transition?

You can, but you should model the migration scenario first. Price the cost of closing and re-opening positions elsewhere, plus any unused subscription. If your bot cannot export its position book cleanly, that is a structural risk worth fixing before the transition, not after.

What happens to my open positions if a venue's permissions narrow?

It depends on the permission that narrows. Robinhood's UK registration, for example, permits only arranging deals — no custody, no exchange, no client money. If your strategy assumes a permission the venue loses, you may be forced to migrate. Multi-venue automation layers absorb this; single-venue setups generally do not.

Does the 2027 FSMA framework change how I should choose a broker?

Yes. Registration is no longer the only variable — permission scope is. A venue can hold a valid registration and still lack the specific permission your strategy needs. Treat permission scope as a first-class input in your venue selection, alongside fees and execution quality.

How do I verify a broker's crypto permissions in the UK?

Use the FCA Register as the primary source. For Australian permissions, use ASIC Connect. For EU MiCA licences, use the CySEC register or the relevant national competent authority. Never rely on a broker's own website for regulatory status.

Is Capital.com competing with Revolut and eToro in the UK?

It is trying to. Revolut can cross-sell crypto to 13 million UK customers inside its super-app, and eToro sits on the FCA's crypto register. Capital Vault's MiCA passport and UAE licence give it a European and Gulf platform, but the source material characterises the UK leg as a tougher nut to crack.

Should I move my automated strategy off Capital.com?

Not on the basis of this news alone. The registration question is unresolved, not adverse. But if your strategy has no venue fallback, the transition window is the right time to build one — because the 2027 framework will force every UK crypto firm to re-apply regardless of how this particular registration resolves.

Not financial advice. Past performance is not indicative of future results. Trading involves substantial risk of loss. Do your own research before making any investment decisions. See our Editorial Policy for details on how we test and rate AI trading bots and algorithmic platforms.

Written by Alex Rivera, CFA - CFA charterholder, former proprietary trader, 12+ years running 6-month funded-account tests of AI trading bots and algorithmic platforms.
Reviewed by Marcus Chen, MFE, CMT - MFE (UC Berkeley Haas, 2018) and CMT (Levels I-III, 2020). Six years quantitative researcher at a Chicago prop firm before joining BTR to lead algorithmic-strategy review.
Read our full Testing Methodology.

Related Reviews:

• See also: More Crypto reviews on cryptoplatformreviews.io.
• For dedicated crypto coverage, visit cryptoplatformreviews.io.