Is Coinbase MiCA Licensed? EU Regulatory Status Explained
Coinbase Luxembourg S.A. holds a MiCA CASP license granted by Luxembourg's Commission de Surveillance du Secteur Financier (CSSF) on 20 June 2025. That license is recorded in the ESMA register and passported across all EU and EEA member states, making Coinbase one of a small group of exchanges with EU-wide regulatory coverage under the Markets in Crypto-Assets Regulation (MiCA). Here's what that means in plain terms: if you're based in the EU and using Coinbase, you're using a service that is now subject to binding EU rules on client-asset segregation, conduct, and disclosures. That's a meaningful shift from the pre-MiCA era, when most exchanges operated in a patchwork of national registrations or no regulation at all.
Coinbase's MiCA License: What the ESMA Register Shows
The ESMA CASP register is the authoritative public record of every crypto-asset service provider authorized under MiCA. Coinbase's entry lists the legal entity as Coinbase Luxembourg S.A., with Luxembourg's CSSF as the competent authority and an authorization date of 20 June 2025. MiCA became fully effective on 30 June 2025, so Coinbase secured its license just before the framework's hard deadline. Firms that missed that window had to wind down EU services or operate under transitional arrangements.
The ESMA record also confirms passporting. Under MiCA, a license granted by one EU member state's regulator is automatically valid across the entire EEA. Coinbase Luxembourg S.A.'s CSSF authorization covers all 27 EU member states plus additional EEA countries, meaning Coinbase doesn't need a separate license in Germany, France, the Netherlands, or anywhere else in the bloc.
Secondary sources tracking the ESMA register confirm that the passporting notification includes France, with the full list of seven MiCA service categories applied across all EEA states. This single-entity, single-license model is exactly what MiCA was designed to enable. Before it, a firm wanting to operate across Europe needed to navigate up to 27 separate national frameworks. Now, a single authorization from a single regulator covers the whole bloc.
Why Luxembourg? Coinbase's EU Strategy
Choosing a home member state under MiCA is a strategic decision. The chosen regulator becomes the primary supervisor, sets the pace of the authorization process, and shapes the structure of the firm's EU operations.
Coinbase picked Luxembourg. Luxembourg's CSSF had already supervised a cluster of crypto firms before MiCA, and the country had passed four blockchain-specific laws, building a reputation for pragmatic, crypto-friendly regulation. CSSF was also seen as capable of processing MiCA applications without the backlogs that slowed down some other EU authorities.
Luxembourg is also an established hub for European fund domiciliation and institutional finance. Coinbase's public statements framed the Luxembourg choice around that combination: a supportive supervisor, an existing institutional-finance ecosystem, and a clear path to EU-wide passporting from a single regulated entity.
Coinbase's Authorized Services Under MiCA
MiCA defines 10 categories of crypto-asset services. A firm must be explicitly authorized for each category it wants to offer. Not every CASP holds all 10. Coinbase Luxembourg S.A. is authorized for 7 of the 10 MiCA service categories:
| Service Category | Authorised? |
|---|---|
| Custody & administration of crypto-assets (a) | Yes |
| Operating a trading platform (b) | No |
| Exchange of crypto-assets for funds (c) | Yes |
| Exchange of crypto-assets for other crypto-assets (d) | Yes |
| Execution of orders on behalf of clients (e) | Yes |
| Placing of crypto-assets (f) | Yes |
| Reception & transmission of orders (g) | Yes |
| Providing advice on crypto-assets (h) | No |
| Portfolio management on crypto-assets (i) | No |
| Transfer services for crypto-assets (j) | Yes |
Service (b), operating a trading platform, is not authorized for Coinbase Luxembourg S.A. Across multiple MiCA-focused registers and the French AMF's CASP white list, no trading-platform authorization is currently recorded for Coinbase Luxembourg S.A. That category covers the operation of a multilateral trading facility for crypto-assets, which is distinct from the exchange and order-execution services Coinbase holds.
The approved public record limits Coinbase's passported services to the seven listed as authorized. That leaves advice on crypto-assets and portfolio management outside Coinbase Luxembourg S.A.'s recorded authorization, alongside operating a trading platform. In practice, this means Coinbase's EU operations cover the full range of buy, sell, send, receive, and custody functions that most retail users need. The missing trading platform license is more relevant to institutional or professional trading contexts.
Coinbase vs Other MiCA-Licensed Exchanges
Coinbase isn't the only major exchange with a MiCA CASP license. Kraken, Bitstamp, and OKX have also secured authorizations. Here's what the current public record shows:
| Exchange | Authorisation | Services |
|---|---|---|
| Coinbase | 20 Jun 2025 | 7/10 MiCA categories |
| Bitstamp | Confirmed | Not fully documented publicly |
| Kraken | Confirmed | Not fully documented publicly |
| OKX | Confirmed | Not fully documented publicly |
Public primary regulator registers consistently document granular service-category breakdowns only for Coinbase among these four exchanges. They also identify its home regulator and explicit EEA passporting details. Kraken, Bitstamp, and OKX are confirmed as fully licensed CASPs, but like-for-like service-breadth comparisons aren't yet possible from public primary sources alone.
What the available data show is that Coinbase's 7/10 service scope places it among the most widely authorized exchanges tracked in EU registers. That's a meaningful data point for users choosing between regulated platforms.
What Coinbase's MiCA License Means for You
The license changes the regulatory relationship between Coinbase and its EU users. Under MiCA, Coinbase must comply with rules on client-asset segregation, conduct standards, and disclosures, all under CSSF supervision and ESMA registration. That's meaningful protection and a significant step beyond the pre-MiCA era. It does not create a bank guarantee.
Here's the honest issue: MiCA does not guarantee solvency, cybersecurity, investment performance, or the availability of every Coinbase product in every EU country. A license confirms that Coinbase meets the regulatory requirements to operate. It doesn't make the exchange immune to hacks, business decisions, or market events.
Picture an exchange outage that pauses withdrawals: a Coinbase user must wait for the platform to restore access. That's custodial storage. Coinbase holds the private keys, so access also depends on the exchange's continued operation and the account remaining in good standing.
Self-custody inverts that. In a self-custodial setup, the user controls the private keys directly. The wallet signs transactions locally and sends them to the blockchain without relying on an exchange or intermediary. The trade-off is personal responsibility: if you lose access to your keys and have no backup, the funds are gone. MiCA makes Coinbase a better-regulated custodian. It doesn't change the fundamental nature of custodial versus self-custodial ownership.
How to Move Crypto from Coinbase to Self-Custody
If you want to hold your own keys, moving crypto from Coinbase to a self-custodial wallet is straightforward. The standard flow works the same way regardless of which self-custody wallet you use.
On Coinbase (desktop or mobile): log in, go to your portfolio, select the asset you want to withdraw, choose Send/Receive, then Send. Paste your self-custody wallet's public address in the "To" field, select the correct blockchain network for that asset, review the details, and confirm. If you have 2FA enabled, you'll need to complete that step too.
Network selection matters. Sending ETH on the Ethereum network to an address that expects BNB Smart Chain, for example, can result in funds being sent to an address you can't access. Always verify the network on both sides before confirming.
Tangem Wallet is a self-custody option that works well for Coinbase users who are new to managing their own keys. It's a hardware wallet built around NFC-enabled physical cards, with no USB, no battery, and no seed phrase required in its default setup. The Tangem Mobile Wallet app generates a receiving address for each supported network, produces a QR code for easy sharing, and supports memo and destination-tag fields for exchanges that require them. It supports more than 16,000 tokens across 91+ blockchain networks, including Bitcoin, Ethereum, and the main EVM chains you'd withdraw from Coinbase.
ERC-20 tokens withdrawn from Coinbase to a new Ethereum address need ETH to pay gas fees for future transactions. Tangem's Smart Gas feature addresses this for EVM chains by letting you pay network fees with stablecoins (USDC or USDT on Ethereum, for example) instead of needing to hold native ETH first.
Tangem's default setup has an important trade-off. If you use the seedless option and lose all your backup cards, the funds are permanently inaccessible. There is no recovery phrase to fall back on. Understand that limitation before you set it up. For a detailed walkthrough of a Coinbase withdrawal, see Tangem's guide.
FAQ
-
Yes. Coinbase Luxembourg S.A. holds an active MiCA CASP authorization granted by the CSSF of Luxembourg on 20 June 2025. The license is recorded in the ESMA register and passported across all EU and EEA member states. This makes Luxembourg the regulated EU hub for Coinbase's European operations.
-
Yes. Coinbase Luxembourg S.A. holds MiCA authorizations to exchange crypto-assets for funds, exchange crypto-assets for other crypto-assets, and execute orders. Those categories cover typical retail buying and selling. The separate operating-a-trading-platform category is not currently recorded for Coinbase Luxembourg S.A.
-
Luxembourg's Commission de Surveillance du Secteur Financier (CSSF) is Coinbase's home regulator under MiCA. As the competent authority that granted the license, CSSF has primary supervisory responsibility. ESMA maintains the pan-EU register of all authorized CASPs, which includes Coinbase Luxembourg S.A.
-
Coinbase Luxembourg S.A.'s MiCA license is passported across all 27 EU member states and additional EEA countries, so the regulated entity can offer its authorized services EU-wide. Whether a specific Coinbase product or feature is available in a given country may depend on local implementation details and Coinbase's product rollout decisions.
-
No. Across the ESMA register, France's AMF CASP white list, and multiple MiCA tracking registers, no authorization for operating a trading platform (MiCA service category b) is currently recorded for Coinbase Luxembourg S.A. The exchange and order-execution services Coinbase offers cover most retail use cases, but the trading-platform category is specifically absent.
-
MiCA requires Coinbase to comply with client-asset segregation rules, conduct standards, and disclosures under CSSF supervision. But a license does not guarantee access to your account in every circumstance. Your funds on Coinbase remain in Coinbase's custody: the exchange holds the private keys, not you. Regulatory freezes, insolvency, or platform outages can limit a custodial user's control. If you want direct control over your assets, a self-custodial wallet is the alternative. Check your local regulations regarding crypto custody before making storage decisions.
-
A MiCA CASP license authorizes a firm to provide specific crypto-asset services under EU rules. It's not equivalent to a banking license. MiCA-licensed exchanges are not covered by EU deposit guarantee schemes (which protect bank deposits up to €100,000 per account). Regulatory oversight under MiCA is real, but the protections it provides are specific to crypto-asset services, not banking-level guarantees.
-
A license withdrawal would be a significant regulatory event. It is unlikely. MiCA includes provisions for orderly wind-down of client assets in such scenarios, but the specific process would depend on the circumstances and CSSF's instructions at the time. Users who want direct control during an exchange disruption may keep assets in self-custody, regardless of an exchange's regulatory status.