The European Securities and Markets Authority (ESMA) has told crypto asset service providers operating in the European Union without approval to stop onboarding new EU clients and to begin winding down their EU-facing activities ahead of the end of MiCA’s transitional period on July 1, 2026.
ESMA Guidance Ahead of MiCA Deadline
In a statement ahead of the Markets in Crypto-Assets Regulation (MiCA) transition cut-off, ESMA said unapproved firms should prepare an orderly exit from the EU market and communicate clearly with customers about timelines and how client assets will be handled. The supervisor emphasized that, after the deadline, only firms authorized as crypto-asset service providers (CASPs) under MiCA—or operating under valid national grandfathering arrangements that have not yet lapsed—may serve clients in the bloc.
Who Is Affected
- Unauthorized providers: Platforms and service providers that have not obtained MiCA authorization (or equivalent national authorization during a valid transition) are expected to cease taking new EU clients and wind down EU services.
- Firms in transition: Some member states allowed existing nationally supervised providers to continue operating temporarily. Those arrangements expire on July 1, 2026, unless a firm has secured MiCA authorization.
- New entrants since Dec. 30, 2024: CASP rules under MiCA have applied to new authorizations since December 30, 2024; new providers have been required to be licensed from that date.
What MiCA Changes
MiCA creates a single EU-wide framework for crypto markets, introducing licensing, prudential, and conduct rules for CASPs and issuers. It harmonizes requirements across member states and enables “passporting,” allowing authorized firms in one EU country to serve clients across the bloc. Stablecoin (asset-referenced and e-money tokens) provisions began applying in 2024, while CASP requirements took effect at the end of 2024 with a limited transition period for existing providers.
Enforcement and Consumer Considerations
- Supervision: National competent authorities are responsible for supervising and enforcing MiCA locally, coordinated by ESMA.
- Potential measures: Authorities can require service suspensions, impose penalties, and take other actions against non-compliant firms.
- Clients: Users may see service restrictions or changes if their provider is not authorized. Consumers can check authorization status via national registers or official regulatory websites.
ESMA has previously cautioned firms against relying improperly on “reverse solicitation” to serve EU clients without authorization and has urged providers to ensure transparent communications and orderly offboarding where required.