MiCA Regulation Explained: Complete EU Crypto Guide 2026
MiCA is the EU's new crypto regulation. By July 2026, exchanges must be ESMA-registered, but self-custody wallets are exempt.
Regulation (EU) 2023/1114, known as MiCA (Markets in Crypto-Assets Regulation), is the first EU-wide legal framework for crypto assets. It was published in the Official Journal of the European Union on 9 June 2023, entered into force on 29 June 2023, and reached full application on 30 December 2024. The transitional period for existing crypto service providers ends on 1 July 2026.
If you use a crypto exchange, hold stablecoins, or keep assets in a self-custody wallet inside the EU or EEA, MiCA affects your options. This guide explains what the regulation covers, what it does not cover, and what to do if your exchange is caught in the crossfire.
What is MiCA? (Markets in Crypto-Assets Regulation)
Before MiCA, crypto regulation in Europe was a patchwork. Germany's BaFin classified crypto custody and trading as regulated financial services. Spain's CNMV (Comisión Nacional del Mercado de Valores) supervised financial promotions and licensed exchanges. France, Poland, and every other member state had their own rules, registers, and gaps. A firm licensed in one country had no automatic right to operate in another.
MiCA replaces that patchwork with a single EU-wide standard. The regulation has three stated purposes: consumer protection, market integrity, and financial stability. It applies across all 27 EU member states and the EEA. Any firm that issues crypto assets to the public, runs a trading platform, provides custody, or offers related services inside that territory must comply.
Crucially, MiCA regulates the firms and the services. It does not regulate the underlying assets themselves, as securities law regulates stocks. Bitcoin and Ether, as decentralized assets with no identifiable issuer, sit largely outside its product scope. What MiCA regulates is the organized provision of services around those assets.
A platform without proper licensing can expose users to hacking, insolvency, or regulatory action risk. MiCA's licensing regime is designed to reduce that risk by requiring authorized firms to implement identity verification, anti-money-laundering checks, capital adequacy standards, and asset segregation. The rules now apply uniformly, regardless of whether the firm is based in Berlin, Madrid, or Warsaw.
MiCA Timeline
MiCA did not arrive all at once. The regulation was structured in phases, with the most consequential rules for ordinary users coming last.
| Date | Event |
|---|---|
| 9 June 2023 | MiCA published in the Official Journal of the EU |
| 29 June 2023 | MiCA entered into force |
| 30 June 2024 | Stablecoin provisions (Titles III and IV: ARTs and EMTs) began to apply |
| 30 December 2024 | The full CASP regime became applicable |
| 1 July 2026 | EU-wide transitional period ends; all existing CASPs must hold authorization |
The stablecoin rules arrived first because the EU considered large-scale stablecoin issuance the most immediate systemic risk. Exchanges and custodians had until the end of 2024 to apply the CASP framework, followed by a further transitional window running to 1 July 2026 to obtain their authorizations.
Who MiCA Regulates: CASPs Explained
CASP stands for crypto-asset service provider. MiCA defines ten categories of regulated services:
- Custody and administration of crypto assets on behalf of clients
- Operation of a trading platform for crypto assets
- Fiat-to-crypto exchange
- Crypto-to-crypto exchange
- Execution of orders for crypto assets on behalf of clients
- Placing of crypto assets
- Reception and transmission of orders for crypto assets on behalf of clients
- Advice on crypto assets
- Portfolio management
- Transfers on behalf of clients
Any firm providing one or more of these services to EU clients must obtain authorization from its home country's national competent authority (NCA). In Germany, that is BaFin; in France, it is the AMF; in Spain, it is the CNMV. Capital requirements are tiered by activity: €125,000 for exchange or custody services, and €150,000 for operating a trading platform.
Once authorized by its home NCA, a CASP can passport its services across other EU member states without needing a separate license in each country. That is a significant change from the pre-MiCA patchwork. A firm licensed in Lithuania, for example, can serve clients in Germany, France, and Spain under a single authorization.
The ESMA (European Securities and Markets Authority) maintains the official EU-wide register of authorized CASPs. Before using any exchange or custodial service, EU residents can check the register to confirm the firm's status.
When you check the register, match the legal entity and the service it is authorized to provide, not just the brand name on an app. A group can operate different entities in different countries, and authorization covers listed services rather than every product a platform offers. Keep a record of the result before you deposit or leave funds there. The register answers a narrow but useful question: whether the firm has an EU authorization for the service you intend to use.
MiCA and Crypto Exchanges
The exchange sector is where MiCA's effects are most visible. Licensed exchanges must perform identity verification and anti-money-laundering checks, maintain segregated client assets, publish clear fee disclosures, and meet ongoing capital requirements. The exchanges that have pursued authorization can passport their services across the EU. Those who have not faced a hard deadline.
Binance is the clearest example of the compliance challenge at scale. As of late June 2026, Binance does not hold any MiCA CASP authorization in the EU. Its application, filed with Greece's Hellenic Capital Market Commission (HCMC) in January 2026, was reviewed and found MiCA-compliant at both the HCMC and the ESMA levels, but Binance formally withdrew it in June 2026.
The exchange has stated it will seek authorization via another EU member state, with France identified as its intended route. From 1 July 2026, Binance has suspended regulated EEA services while it pursues future MiCA authorization.
| Exchange case | Status in this guide | Practical check |
|---|---|---|
| Binance | No EU MiCA CASP authorization as of late June 2026; regulated EEA services suspended from 1 July 2026 | Confirm its current legal entity and service status before depositing or leaving assets there |
| Exchange listed in the ESMA CASP register | Authorized for the specific services shown in the register | Match the legal entity and authorized service to the account you use |
| Exchange is absent from the ESMA CASP register | Not shown as an authorized CASP | Check its status before relying on EU-regulated services or keeping assets on the platform |
The individual exchange articles from the brief are not available as approved internal links in this run, so this table substitutes a register-first summary.
Exchanges that cannot or choose not to obtain CASP status must wind down EU operations and allow users to withdraw their assets. Users on unlicensed platforms face a real risk of withdrawal if a firm's EU operations are suspended before they act. For EU residents, the practical rule is straightforward: use an exchange that appears on the ESMA CASP register, or withdraw to self-custody.
MiCA and Stablecoins
MiCA creates two categories for stablecoins, and the distinction matters for which coins you can hold on regulated EU platforms.
An EMT (e-money token) is a crypto asset that maintains a stable value by pegging to an official currency, such as EUR or USD. An ART (asset-referenced token) references any other value or right, including baskets of currencies, commodities, or other assets.
EMT issuers must be authorized as credit institutions or electronic money institutions. They must issue tokens only at par on receipt of funds, maintain fully backed low-risk reserves with daily redemption at par, refrain from paying interest on holdings, and publish a MiCA-compliant white paper approved by the relevant NCA. ART issuers face stricter prudential, governance, reserve-segregation, and own-funds requirements under MiCA Title III.
USDC is treated and authorized as an EMT in the EU. Its issuer has met the MiCA requirements, so USDC can be lawfully offered to the public and used by EU-regulated firms. USDT has not been authorized as an MiCA EMT. Only MiCA-authorized EMTs can be offered by EU-regulated firms, meaning exchanges operating under MiCA have delisted or restricted USDT for EU users. For anyone holding USDT on a European exchange, this is a live issue. The stablecoin rules have been in force since 30 June 2024, and the situation has not changed since.
MiCA by Country
MiCA is an EU-wide regulation, but authorization is granted at the national level. Each member state's NCA processes applications and issues licenses; those licenses then pass across the bloc.
| Country | National Competent Authority (NCA) | Licenses Issued (as of 21 July 2026) | Key Notes |
|---|---|---|---|
| Germany | BaFin (Federal Financial Supervisory Authority) | No verified country total in this guide's research | Classifies crypto custody and trading as regulated financial services; early MiCA implementation |
| France | AMF (Autorité des marchés financiers) | No verified country total in this guide's research | Identified as Binance's intended future authorization route |
| Spain | CNMV (Comisión Nacional del Mercado de Valores) | No verified country total in this guide's research | Supervises financial promotions and licensed exchanges; AML/KYC required for registered platforms |
| Luxembourg | CSSF (Commission de Surveillance du Secteur Financier) | No verified country total in this guide's research | Active CASP processing |
| Lithuania | Bank of Lithuania | No verified country total in this guide's research | Early CASP licenses issued; passporting used by several firms |
Germany and France have the largest established crypto markets in the EU, and both NCAs have been active in the MiCA authorization process. But the research used for this guide does not provide a verified country-by-country count of MiCA licenses as of 21 July 2026. No country should be called the register leader without a dated ESMA tally. The ESMA register is the authoritative source for the current license status.
Imagine a French resident using a platform licensed in Lithuania. Passporting allows the firm to offer its approved services in France, but the account agreement still names a specific legal entity. If a withdrawal is delayed or a complaint arises, the ESMA register helps the resident identify the NCA responsible for that entity. That makes the country field practical: it tells the reader who oversees the service and where regulatory questions belong.
An NCA license is the starting point, not a guarantee that every customer will have the same experience. Fees, available assets, and local onboarding still depend on the platform. Passporting allows an authorized firm to serve other member states, but it does not eliminate the need to verify which legal entity holds your account. The NCA listed in the register tells you who granted the authorization and where to direct regulatory questions.
What MiCA Does NOT Regulate
This is the section that matters most for most individual crypto holders. MiCA regulates service providers. It does not regulate individuals holding their own assets.
Self-custody wallets sit explicitly outside MiCA's scope. Hardware and software providers of non-custodial wallets are not classified as CASPs. A wallet in which the user holds their own private keys, with no intermediary in custody, is not a regulated service under MiCA. EU regulators explicitly acknowledge the "default pseudonymity in the use of self-custody wallets" and do not impose licensing or KYC obligations on individuals using them.
Fully decentralized DeFi protocols also fall outside the regulation's scope, provided they operate without any intermediary. Services provided "in a fully decentralized manner without any intermediary" are not treated as CASPs. The qualification matters: if a DeFi protocol has identifiable operators who control key functions, it may still attract scrutiny. Truly decentralized on-chain DEXs and private peer-to-peer transfers are not regulated by MiCA.
NFTs as a category are generally outside MiCA's product scope. MiCA does not apply to unique, non-fungible tokens. However, if a CASP interacts with NFTs at the on/off-ramp level, AML and travel-rule obligations may still apply to the service provider, not the NFT holder.
Bitcoin and Ethereum, as decentralized assets with no identifiable issuer, fall outside MiCA's product scope, as MiCA does not regulate the assets themselves. What MiCA regulates is the organized provision of services around those assets. Holding BTC or ETH in your own wallet is not a regulated activity.
On 1 July 2026, MiCA's CASP transition ends for exchanges and custodians, not for people holding their own assets. It does not restrict what you can hold or how you can hold it in your own wallet. The regulation increases the importance of understanding the difference between leaving assets with a service that controls the private keys and holding them yourself.
Self-Custody: Your MiCA-Independent Option
Self-custody means the holder, not an exchange or intermediary, controls the private keys. Transactions are signed locally and broadcast to the blockchain. No third party holds the keys; no third party can freeze, restrict, or lose the assets. A self-custody wallet is not a CASP, so its provider does not need a license. On 1 July 2026, someone using a self-custody wallet still needs no registration or KYC for the wallet itself.
Tangem Wallet is designed for this use case. It stores private keys offline on an NFC-enabled physical card, certified to Common Criteria EAL6+ using a Samsung S3D350A secure element chip. The private keys are generated inside the chip during activation using a True Random Number Generator and never leave the card. The wallet has no USB connection, no battery, and no Bluetooth.
For basic wallet use, no account registration or KYC is required. Tangem's servers are not involved in crypto operations; transactions connect directly to blockchain nodes. If Tangem ceased operations, the private keys would remain on the user's cards, and the funds would remain accessible.
What to Do If Your Exchange Is Affected by MiCA
If you currently use an exchange and are unsure of its MiCA status, the decision process is straightforward.
Step 1: Check the ESMA CASP register. The register lists every authorized crypto-asset service provider in the EU. If your exchange appears there, it is licensed to operate. If it does not appear, it either has not yet received authorization or has withdrawn its application.
Step 2: If the exchange is licensed, you can continue. Licensed exchanges must comply with MiCA's consumer protection, asset segregation, and AML requirements. Your assets are held under a regulated framework.
Step 3: If the exchange is not licensed, act before 1 July 2026. From that date, unlicensed exchanges must wind down EU operations. Providing regulated services in the EU without CASP status is no longer permitted. Exchanges in that position must allow users to withdraw assets, but acting early is safer than waiting.
Step 4: Decide where to hold your assets. A custodial wallet delegates control of the private key to a third party. A non-custodial wallet gives the holder sole control of the keys. If you withdraw before 1 July 2026, you can move to a licensed exchange or to self-custody.
The German exchange guide puts it directly: choose a platform with clear BaFin/MiCA compliance and smooth withdrawals to a self-custody wallet. The two options are not mutually exclusive. Many users keep a small amount on a licensed exchange for trading and hold their longer-term holdings in a self-custody wallet.
MiCA changes the rules for exchanges and other service providers. It does not turn your wallet into a regulated service when you control the keys. Check an exchange's legal entity and authorized services in the ESMA CASP register before leaving assets with the exchange. If you prefer to hold your own keys, self-custody remains outside the CASP regime.
FAQ
-
Check the legal entity that will hold your account and the service it is authorized to provide before you deposit. The brand on an app may belong to a group with different entities in different countries. Authorization covers listed services rather than every product a platform offers. Keep a record of the result before you leave funds there.
-
USDT has not been authorised as a MiCA EMT, so EU-regulated exchanges may delist or restrict it for EU users. The stablecoin rules have applied since 30 June 2024. Check the platform's current restrictions and withdrawal options before transferring USDT or leaving it on the exchange.
-
The ESMA register is the authoritative source for current CASP authorization totals. The number of authorized firms changes as NCAs process applications and as firms withdraw or amend submissions. As of mid-2026, the transitional period is ending, which means the register reflects firms that have completed the full authorization process. For the current count, check the ESMA official CASP register directly, as any figure cited here would be outdated within weeks.
-
MiCA does not change the consequences of losing a self-custody wallet. The provider does not hold the private keys, so access depends on your own backup arrangement. If every backup is lost and no seed phrase exists, the funds cannot be recovered. A stolen wallet does not give its provider a route to restore your access, which is why backup planning matters before you move funds.
-
From 1 July 2026, providing regulated crypto services in the EU without CASP authorisation is unlawful. Unlicensed exchanges must wind down their EU operations and allow users to withdraw assets. Binance is the most prominent current example: it withdrew its Greek application in June 2026 and suspended regulated EEA services from 1 July 2026 while pursuing future authorisation via another member state. Users on unlicensed platforms should withdraw assets before the platform suspends EU operations, rather than waiting for a forced wind-down.
-
MiCA is a financial services regulation, not a tax law. It does not change how crypto gains are taxed. A related EU directive, DAC8, introduces crypto-asset reporting obligations that apply regardless of whether assets are held on an exchange or in a non-custodial wallet. Whether you hold assets on a licensed exchange or in self-custody, your tax obligations under national law remain unchanged by MiCA itself.
-
The CASP regime became applicable on 30 December 2024. Passporting lets a CASP authorised in one EU member state provide its licensed services across all other EU member states without obtaining a separate licence in each country. Once a firm receives authorization from its home NCA, it can operate across the full EU/EEA territory under that single authorization. Passporting covers the services named in the authorization, so users should still check the legal entity and service listed in the ESMA register.