8 min.
Added: August 27, 2026

Europe has closed the era when a crypto exchange service could operate under national registration without looking to Brussels. As of 1 July 2026, the transitional periods have expired in all EU countries, and a platform without a European licence serving clients from the EU has found itself operating outside the law. Therefore, the question of what MiCA is has ceased to be theoretical for the owner of an exchange service: the answer determines access to 27 markets at once.
MiCA is Regulation (EU) 2023/1114 on markets in crypto-assets, adopted on 31 May 2023 and published in the Official Journal of the EU on 9 June. The abbreviation stands for Markets in Crypto-Assets. The format matters: unlike a directive, a regulation applies directly, without having to be transposed into the national law of each country. The document covers three areas: the issuance of crypto-assets, the activities of service providers and the prohibition of market abuse.
Until 2023, each country decided for itself. France introduced the PSAN regime, Germany issued licences for crypto custody, while Lithuania limited itself to registration. A company operating legally in one jurisdiction could find itself in a grey area in a neighbouring one, and cryptocurrency regulation in the EU resembled a patchwork quilt. The collapse of Terra and FTX in 2022 added a second argument: token holders had neither a right of redemption nor access to issuer reporting. The MiCA regulation closes both gaps.
The document covers three groups: issuers of asset-referenced tokens (ART), issuers of electronic money tokens (EMT) and crypto-asset service providers, also known as CASPs. The latter include exchanges, exchange services, custodians, brokers, advisers and portfolio managers. Geography is determined by the client, not the office: a company from a third country that actively attracts EU residents must obtain authorisation from the regulator of one of the EU Member States.
The market is divided into three categories:
For the third category, an issuer licence is not required, but a white paper describing the project, risks and energy consumption must be submitted to the national authority by way of notification.
Article 2 excludes unique non-fungible tokens, crypto-assets qualifying as financial instruments under MiFID II, deposits, securitisation positions, insurance and pension products. Central banks acting within the framework of monetary policy and the future digital euro are also outside its scope. DeFi is a separate matter: if a service operates in a fully decentralised manner and there is no intermediary, there is no one to whom requirements can be applied. The uniqueness of NFTs is assessed on substance rather than by label: a series of ten thousand similar images is fungible.
The set of obligations for CASPs looks much like banking regulation. Own capital under Annex IV: €50,000 for advice, reception and transmission of orders, €125,000 for custody and exchange, €150,000 for a trading platform, or one quarter of the fixed overheads of the preceding year if that amount is higher. This is followed by the segregation of client assets, written conflict-of-interest policies, checks on the business reputation of management, a business continuity plan and a complaints-handling procedure with fixed response deadlines.
Authorisation is granted for specific services from the ten listed in Article 3(1)(16): custody, operation of a trading platform, exchange for fiat funds, exchange for other crypto-assets, execution of orders, placing, reception and transmission of orders, advice, portfolio management and transfer. The main benefit is passporting: a licence from one country opens up the entire EEA without repeated procedures. Banks, investment firms and electronic money institutions follow a simplified route through notification.
EMTs may only be issued by a credit institution or an electronic money institution with European authorisation. The token is sold at par value, redeemed on demand at any time and also at par value, while the payment of interest to holders is prohibited. At least 30% of the funds received are held in separate accounts with credit institutions, with the threshold rising to 60% for significant tokens. If an ART within a single currency area consistently exceeds 1 million transactions and €200 million per day, Article 23 requires issuance to be stopped.
Article 13 gives a retail purchaser 14 calendar days to withdraw from the transaction without fees and without giving a reason; the rule applies as long as the asset has not been admitted to trading. The issuer is financially liable for an incomplete or misleading white paper. A custodian is liable to the client for the loss of crypto-assets or access keys up to their market value. Rates, fees and the climate footprint are disclosed publicly.
Marketing materials must be clearly identified as advertising, must not contradict the white paper and must contain a warning about the risk of losing the entire amount invested. Promises of returns, presenting past growth as a guarantee of future performance and failing to disclose fees are expressly prohibited. Materials are published on the website and provided to the regulator upon request. For an exchange service, this means that a banner saying “a rate better than the market” without disclosing the spread becomes grounds for a complaint.
The regulation itself does not contain anti-money laundering rules: MiCA regulation governs market access, while anti-money laundering requirements are contained in separate related acts. Regulation (EU) 2023/1113 has applied since 30 December 2024, together with the explanatory EBA guidelines: sender and recipient data accompany every crypto transfer regardless of the amount, while the €1,000 threshold has been retained for fiat payments. From 10 July 2027, AMLR will apply: anonymous accounts and coins with enhanced anonymity will be prohibited for obliged entities.
The document entered into force on 29 June 2023. Titles III and IV on stablecoins became applicable on 30 June 2024, while the remaining provisions applied from 30 December 2024. Article 143(3) allowed countries to give existing service providers up to 18 months to obtain a licence, but each country decided for itself: in some states the window closed as early as 30 June 2025, while in others it closed in December of the same year. The final deadline falls on 1 July 2026, and the text contains no extension mechanism.
The impact of MiCA on cryptocurrencies can be seen most clearly in the case of USDT. Tether did not seek EMT authorisation, and platforms removed trading pairs: Coinbase in December 2024, Crypto.com in January 2025, Binance and Kraken in March. No one prohibited private individuals from holding and transferring USDT, but trading it on a licensed platform in the EEA became impossible. For an exchange service, this means restructuring its offering: some exchange directions disappear, while liquidity shifts to USDC and EURC.
Users gain a verifiable counterparty: the ESMA register is public, and a licence can be found by searching the name of the legal entity. At the same time, MiCA rules do not apply to non-custodial wallets, P2P or exchanges on decentralised platforms, so responsibility there remains with the individual. The downside is noticeable: the choice of assets on regulated services has narrowed, while verification has become mandatory everywhere, including small one-off exchanges where an email address used to be sufficient.
The advantages are obvious for those planning to scale: one authorisation instead of 27 procedures, clear capital requirements and the question of “is this legal?” removed for banks and payment partners. The disadvantages are measured in money and time. Preparing documentation, hiring a compliance officer, auditing and capital requirements push smaller services out of the market. One telling detail: in a year and a half of the regulation being in effect, not a single ART issuer obtained authorisation, even though this category is described in the text in greater detail than the others. Reserve and capital requirements proved more burdensome than the expected revenue.
MiCA gives national regulators the power to impose fines, suspend services, publicly name offenders and revoke authorisation. Significant token issuers are supervised by the EBA: in June 2026, it put out for consultation a methodology for calculating fines: up to 12.5% of annual turnover for significant ARTs and up to 10% for significant EMTs, or twice the amount of the benefit obtained if it can be calculated. In parallel, ESMA maintains a public list of non-compliant companies.
By August 2026, the ESMA register contains more than three hundred authorised CASPs, around two dozen EMT issuers and no ART issuers. Germany and the Netherlands lead in the number of licences. Revisions to the stablecoin section are being discussed: the concentration of dollar liquidity with a single issuer concerns the Commission no less than unregulated tokens. DeFi and NFTs remain open issues, which are expected to be addressed by a separate package.
MiCA does not prohibit cryptocurrencies and does not in itself make them safer: it determines who is entitled to work with clients’ funds and under what conditions. For the owner of an exchange service, the choice is simple: either a CASP licence and access to the entire EEA, or operation outside the European regulatory perimeter without clients from the Union. The BoxExchanger platform covers the technical side of launching an exchange service, while the owner handles the legal status and preparation for authorisation independently.
The information presented in this article is for informational purposes only and does not constitute a guide to action, financial recommendation or investment advice. Investing in cryptocurrency involves a high level of risk, and every investor should conduct their own analysis, assess their financial capabilities and consult professional financial advisers before making investment decisions.
Is a CASP licence required if the company is registered outside the EU?
Yes, if the service actively attracts clients from the Union. A client approaching a foreign platform on their own initiative is not prohibited by the regulation, but marketing, website localisation and acceptance of European payment methods are treated as operating in the EU market.
Can USDT still be held in the EU?
Yes. The restriction concerns not ownership, but the offering of the token by licensed platforms. Holding it in a non-custodial wallet, transfers and exchanges on decentralised services remain available.
How long does it take to obtain a CASP licence?
The regulator checks the completeness of the application within 25 working days and then carries out a substantive assessment within 40 working days. In practice, taking into account requests for additional documents, the process can take 6-12 months.
Also read

August 13, 2026
What is PayFi: payment finance on the blockchain
Money in cross-border transfers is almost always sitting somewhere waiting. The sender has already parted with the ...

August 5, 2026
What Is a Crypto Bank: How It Works and How It Differs from a Traditional Bank
A layer of licensed institutions has grown around cryptocurrency, managing fiat currencies and tokens within a sing...

July 24, 2026
What Payment Methods Are in Demand in 2026
The payments market in 2026 is changing faster than companies themselves can adapt. Users want to pay for a purchas...