From 1 July 2026, any crypto exchange serving EU users without a valid MiCA CASP authorization is in breach of EU law. That deadline is not a formality. It means exchanges that fail to obtain or maintain their license must stop taking on new EU clients, wind down operations, and give existing users a window to withdraw their assets. What that window looks like in practice, and how quickly it can close, is what this article explains.
How a MiCA License Can Be Lost
A CASP (Crypto-Asset Service Provider) license under MiCA is not permanent. National regulators can withdraw or revoke authorization for a range of reasons, and the consequences are immediate. The primary legal triggers include operational cessation, serious non-compliance with MiCA requirements, governance failures, and money-laundering or sanctions risks. Fines for serious breaches can reach €15,000,000 or 15% of annual turnover. For users, license withdrawal is the most disruptive outcome because it forces the platform to stop serving EU customers.
Regulators are also required to notify ESMA within two working days of any withdrawal decision, so ESMA can update the public CASP register without delay. That means the official record changes fast. An exchange that appears on the register today may not appear tomorrow.
The practical routes to losing a license break down into a few categories. A platform might fail to maintain required staffing in key compliance roles. It might fall short of anti-money-laundering obligations. It may face financial instability, raising questions about its ability to safeguard client assets. Or it might simply fail to apply before the deadline, leaving it operating outside the law from 1 July 2026 onward. Checking an exchange's current regulatory status before signing up is not optional advice. It is the baseline.
Real Examples of MiCA Enforcement
Three cases illustrate how MiCA enforcement plays out in practice. Each one is different, and together they show that a license does not guarantee uninterrupted service.
KuCoin EU: Licensed, Then Restricted
KuCoin EU Exchange GmbH obtained MiCA CASP authorization from the Financial Market Authority (FMA) of Austria on 27 November 2025. That made it one of the first major exchanges to achieve full MiCA status. Less than three months later, on 19 February 2026, the FMA issued an administrative decision prohibiting KuCoin EU from conducting any new business, onboarding new customers, or launching new products or contracts. The reason: vacancies in key AML (anti-money-laundering) and sanctions compliance officer roles.
Existing users could still access and trade on the platform. But no new relationships or products were permitted until compliance was restored. This is the case study that matters most for EU crypto users. A license is not a permanent green light. It can be restricted within months of being granted, for reasons unrelated to the exchange's solvency or the safety of user funds. The gap between "licensed" and "fully operational" is real.
Binance: Application Under Pressure
Binance pursued MiCA licensing through Greece's HCMC regulator, a process that ran for approximately 18 months. The company stated publicly that it had "been working constructively with regulators for the past 18 months" on the application.
Reports emerged that the HCMC was preparing to reject the application, which would have blocked Binance from operating across all 27 EU countries after the MiCA transition period ended on 1 July 2026. Binance is committed to updating customers on its regulatory status by 30 June 2026, though no official rejection has been formally announced as of the reporting date. The outcome for EU users remained uncertain as the deadline approached. Binance's situation shows that even a prolonged licensing effort does not guarantee a successful outcome.
MEXC: Unauthorized Exchange
MEXC is among the global platforms that lack MiCA authorization. The available research does not document a MEXC-specific notice telling EU users to leave. Gemini's documented EU and UK exit is a comparable case instead. The exchange move affected users, putting them in withdrawal-only status on 5 March 2026, and closed UK accounts on 6 April 2026. This sequence illustrates the kind of wind-down an unauthorized exchange can require, but it is not evidence of a MEXC-specific notice.
The Typical Wind-Down Timeline
MiCA does not prescribe a specific minimum notice period. The regulation requires "prior notice" and a "realistic action window," but it does not define either in days or weeks.
What ESMA has clarified is the sequence. An unauthorized CASP must stop onboarding new EU clients, cease marketing, limit operations strictly to helping clients sell or transfer assets and close positions, and maintain custody only as long as needed for an orderly exit. ESMA also requires platforms to "communicate clearly, promptly and repeatedly" their wind-down plans, including a deadline after which residual positions are closed automatically.
In practice, the market has shown a roughly 1-month gap between withdrawal-only access and full account closure. Gemini's EU and UK exit provides a concrete reference point: the exchange moved to withdrawal-only status on 5 March 2026 and closed UK accounts on 6 April 2026, following advance announcements and a series of delistings and restrictions. That is approximately 32 days from restricted access to closure.
The sequence typically looks like this:
Announcement: the exchange notifies users of its regulatory status and wind-down intention
Restrictions: new deposits, new products, and new customer onboarding are halted
Withdrawal-only access: users can move funds out, but cannot trade or deposit
Account closure: remaining positions are closed, and accounts are terminated
No stage of this process comes with a guaranteed minimum duration. A platform under acute regulatory pressure could significantly compress the timeline. Users who wait for the final announcement before acting may find themselves with very little time.
What Happens to Your Funds
The best-case outcome is an orderly withdrawal window. The exchange gives users adequate notice, withdrawal infrastructure remains functional, and everyone who acts promptly can withdraw their assets.
The worst case is frozen funds. When you leave crypto on an exchange, you do not fully control it. Exchanges can face hacks, technical failures, insolvency, or regulatory restrictions on withdrawals. A license revocation adds a fifth scenario: a regulator may restrict the platform's operations in ways that temporarily or permanently prevent normal withdrawals. The German exchange guidance advises readers to look for segregation of client funds from an exchange's operational funds, but it does not establish this as a MiCA-specific legal guarantee.
In a custodial model, the exchange controls the private keys to your assets. That means access to your funds depends on the exchange remaining operational, solvent, and legally permitted to process withdrawals. All three conditions can fail simultaneously during a regulatory wind-down. The key distinction is straightforward: in a custodial arrangement, the provider controls the private keys. In a self-custodial arrangement, the user does.
How to Protect Yourself Before It Happens
Act before the headline arrives.
Self-custody means holding crypto in a wallet where you, rather than an exchange or intermediary, control the private keys. It removes exchange counterparty risk entirely. If an exchange loses its MiCA license, freezes withdrawals, or shuts down, your assets are unaffected because they were never on the exchange to begin with.
The trade-off is real and worth stating plainly. In self-custody, you take full responsibility for managing and recovering your private keys. Lose access to your keys without a backup, and the funds are gone. Careful setup matters. Cold storage keeps private keys offline. Hardware devices, paper wallets, and air-gapped systems all fall under this category. Keeping keys offline eliminates the remote-exploit vectors that affect software wallets and exchange accounts.
For users looking for a practical cold-storage option, the Tangem Cold Wallet stores private keys on an NFC-enabled card with a Samsung S3D350A chip certified at Common Criteria EAL6+. The private key is generated on-chip, never leaves the secure element, and transaction signing happens on-chip as well. The card requires no battery and has a stated minimum operating lifespan of 25+ years. Tangem positions this as key ownership without an exchange counterparty: the wallet cannot be frozen or affected by an exchange's regulatory problems.
One limitation to be aware of: if all backup cards are lost and no seed phrase was created, the funds are permanently inaccessible. The default setup is seedless, meaning the backup responsibility lies with the physical cards, not a written phrase. Setting up two or three cards as backup addresses this, but it requires deliberate action at the start.
The Tangem app also includes a Smart Gas feature that lets users pay network fees with USDC or USDT rather than native tokens on Ethereum, BNB Smart Chain, Polygon, Arbitrum One, and Base. Tangem's product documentation identifies this as particularly useful for users withdrawing funds from centralized exchanges to a self-custodial wallet, as it eliminates the need to hold native gas tokens to complete the transfer.
The practical step is simple: move assets you are not actively trading to a self-custodial wallet. Do not wait for your exchange to announce a problem. By the time the announcement comes, the withdrawal window may already be narrowing.
FAQ
Yes. Under MiCA, national regulators have the authority to withdraw or revoke a CASP authorization. Mandatory withdrawal triggers include operational cessation, serious non-compliance with MiCA requirements, governance failures, and money-laundering or sanctions risks. When a license is withdrawn, the regulator must notify ESMA within two working days so the public CASP register can be updated.
MiCA does not prescribe a specific minimum notice period. The regulation requires "prior notice" and a "realistic action window," but neither term is defined in days or weeks. In practice, the market has shown roughly one month between withdrawal-only access and full account closure, based on observed wind-down sequences. Users should not assume they will have weeks to act.
The German exchange guidance advises readers to look for segregation of client funds from an exchange's operational funds, but it does not establish this as a MiCA-specific legal guarantee.
Trading restrictions do not necessarily mean you cannot withdraw. Under ESMA's wind-down expectations, the platform may keep custody and withdrawal access only for the time needed to complete an orderly exit. Check the exchange's notices immediately and follow its deadline for residual positions. Do not rely on a fixed timetable: MiCA does not set one.
Self-custody removes exchange counterparty risk entirely. If an exchange loses its MiCA license, your assets in a self-custodial wallet are unaffected. The trade-off is that you become fully responsible for private-key management and recovery. There is no customer support to call if you lose access. For users who set up their self-custody correctly, including maintaining backup cards or a seed phrase, it is the most direct way to eliminate exchange-related risk.
ESMA maintains a public MiCA CASP register that lists all authorized crypto-asset service providers. Checking whether your exchange appears on that register as authorized is the official verification method. Firms not appearing as authorized are treated as unauthorized under MiCA. The register is updated when regulators notify the ESMA of any change in a provider's status, which must occur within 2 working days of a withdrawal decision.
A license does not guarantee safety. KuCoin EU had one and was restricted for three months. Binance spent 18 months pursuing one and faced potential rejection. MEXC is among the global platforms that lack MiCA authorization.
The most reliable protection comes from removing the dependency on exchange custody altogether. Move assets you are not actively trading to a self-custodial wallet before the headline arrives.
Ask AI whether Tangem is a good fit for your needs
Research Tangem wallet with AI to learn whether our security and usability fits your unique use cases
