MiCA Regulation in Spain: What Crypto Users Need to Know
MiCA, Regulation (EU) 2023/1114, is now the law governing crypto services across every EU member state, including Spain. It covers crypto-asset service providers, stablecoin issuers, and token issuers. Spain does not need to pass separate national legislation to implement it: the regulation applies directly. That matters in a very concrete way for Spanish crypto users. The exchange you use either holds a valid authorization or it doesn't. There is no grey zone anymore.
How MiCA Works in Spain
Spain regulates crypto through the CNMV (Comisión Nacional del Mercado de Valores). The CNMV supervises financial promotions, licensed exchanges, and crypto-asset service providers operating in the country. Under MiCA, it serves as Spain's competent authority: the body that receives applications, grants authorizations, and enforces compliance.
Because MiCA is an EU regulation rather than a directive, it did not require transposition into Spanish law. It became directly applicable across all 27 EU member states simultaneously. Spanish crypto firms and foreign firms serving Spanish users face the same set of rules.
The practical scope is broad. MiCA covers any entity acting as a crypto-asset service provider (CASP): exchanges, custodians, brokers, portfolio managers, and similar intermediaries. Registered platforms must comply with anti-money-laundering requirements, maintain client-asset safeguards, and meet conduct-of-business standards. The CNMV can grant licenses to Spanish-headquartered firms and can receive passported notifications from firms licensed in other EU member states.
One thing MiCA does not regulate: people holding their own crypto. If you control your own private keys, you are outside the regulatory perimeter. More on that in the self-custody section below.
The transitional period for existing providers ended on 1 July 2026. From that date, any crypto-asset service provider without a valid CASP authorization (whether from Spain or via an EU passport) cannot legally offer regulated crypto services to Spanish residents. The CNMV confirmed no extensions would be granted.
Exchanges Licensed in Spain Under MiCA
MiCA passporting lets a firm licensed in one EU member state offer services across all 27 EU countries and the EEA without obtaining separate national licenses in each country. That means Spanish users can legally use exchanges authorized in Ireland, Luxembourg, Malta, Austria, or the Netherlands, not just firms licensed directly by the CNMV.
The table below shows the exchanges with full CASP authorization that can serve Spanish users, based on available register data.
| Exchange | Country of Authorization | Notes |
|---|---|---|
| Bit2Me | Spain (CNMV) | Spain's only home-country CASP |
| Kraken | Ireland | Full CASP, passported to Spain |
| OKX | Malta | Full CASP, passported to Spain |
| Coinbase | Luxembourg | Full CASP, passported to Spain |
| Bitstamp | Luxembourg | Full CASP, passported to Spain |
| Bitpanda | Austria | Full CASP, passported to Spain |
| Bitvavo | Netherlands | Full CASP, passported to Spain |
| Crypto.com | Malta | Full CASP, passported to Spain |
To verify the current status of any exchange, check the ESMA CASP register directly. Search by the legal entity name, not the brand name. A firm may operate under a consumer-facing brand that differs from the registered legal entity. If the entity is not in the register, it is not authorized.
Fees vary significantly across these platforms. Kraken charges a maximum of 0.26% per trade and supports 250+ coins. Coinbase charges 1% or more and supports around 200 coins. Bit2Me charges approximately 0.5% and supports 200+ coins. These figures give a rough sense of the cost landscape, but checking each platform's current fee schedule before trading is always worth the time.
Bit2Me: Spain's Home-Grown MiCA Exchange
Bit2Me is the only exchange with Spain as its home country of authorization under MiCA. The legal entity operating under the Bit2Me brand is BITCOINFORME, PSC, S.L., which holds CNMV authorization as a crypto-asset service provider.
Bit2Me's authorization was publicly reported in July 2025 and recorded in the CNMV's public register as of 31 October 2025. As a CNMV-authorized CASP, Bit2Me can passport its services to all other EU and EEA countries without seeking separate national licenses in each. For Spanish users, Bit2Me offers a few practical advantages beyond compliance status. It provides Spanish-language customer support, SEPA bank transfers for euro deposits and withdrawals, and access to 200+ supported cryptocurrencies. Its fee structure sits at approximately 0.5% per transaction.
The exchange's Spanish roots also mean it has been building its local reputation since before MiCA existed. That context matters when something goes wrong, and you need to reach a support team that understands the Spanish regulatory environment. Holding assets on Bit2Me means the exchange holds your private keys. That is custodial storage. It is regulated, but it still carries counterparty risk: hacks, operational failures, or regulatory freezes can affect access to your funds. MiCA's client-asset safeguards reduce but do not eliminate that risk.
What About Binance and MEXC in Spain?
Binance does not hold a MiCA CASP authorization in any EU member state and does not appear in the ESMA CASP register. Binance withdrew its application with Greece's HCMC on 24 June 2026. Following that withdrawal, EU users could no longer place new orders or make deposits, while withdrawals remained available.
Spain's CNMV confirmed there would be no extensions to the 1 July 2026 MiCA deadline. Binance is therefore not authorized to provide regulated crypto-asset services to Spanish residents. Spanish users who kept assets on Binance after that date were advised to withdraw their funds to an authorized provider or to a self-custody wallet.
The CNMV and ESMA have been explicit: providers without MiCA authorization operating in Spain are treated as unauthorized financial service providers. Using them means operating without the consumer protections MiCA requires.
MEXC is not listed among the 128 authorized providers in Spain's post-transition regulatory landscape. Spanish users who continue to use MEXC are operating with a provider that is not registered in Spain, has no local regulatory protection, and offers no recourse through Spanish or EU enforcement channels if something goes wrong. Before using any exchange, check the ESMA CASP register. If the legal entity is not there, the platform is not authorized to serve you as a Spanish resident under MiCA.
What MiCA Means for Spanish Crypto Holders
MiCA regulates service providers, not individuals. If you hold crypto in your own wallet (controlling your private keys), you are entirely outside MiCA's regulatory scope. No license is required. No KYC is mandated for the wallet itself. No registration with the CNMV is needed.
This is a meaningful distinction. The regulation draws a clear line between custodial services (exchanges, brokers, custodians) and self-custody arrangements where the user controls the keys directly.
Self-custody means the holder, rather than an exchange or intermediary, controls the private keys. Transactions are signed locally on the user's device and broadcast to the blockchain. No third party can freeze the account, apply exchange policies, or restrict access. The trade-off is full personal responsibility: lost keys or lost backup phrases have no recovery process.
EU regulators have explicitly confirmed this framing. Spanish and EU authorities have advised clients of unauthorized CASPs to move their assets either to an authorized provider or to a self-hosted wallet. Self-custody is treated as a tool, not a regulated service.
The core trade-off between custodial and non-custodial storage is real. Custodial exchanges such as Bit2Me, Kraken, and Coinbase offer account recovery, customer support, and regulatory oversight. They also expose users to counterparty risks: hacks, bankruptcy, regulatory freezes, or exit fraud. Self-custody removes counterparty risk but places the security burden entirely on the individual.
For Spanish users who want full independence from exchange compliance status, a hardware wallet is the most common approach. Devices like the Tangem Wallet store private keys offline on a physical card, without an internet connection. The keys are generated inside a secure element chip and never leave the hardware. MiCA's authorization requirements do not apply to the wallet manufacturer or to the user holding their own keys.
Tangem's interface is mobile-only (iOS and Android), with no desktop or web app. That is a genuine limitation worth knowing before you buy. But for Spanish users who want to hold crypto regardless of whether any particular exchange remains authorized, self-custody via a hardware wallet is the option that MiCA explicitly leaves outside its perimeter.
MiCA in Spain: Questions for Spanish Crypto Users
Q1:
Q2:
Q3:
Q4:
Q5:
Q6:
FAQ
-
MiCA is an EU regulation that applies directly in Spain without any additional national law. Spain does not need to transpose it: it became binding on Spanish crypto-asset service providers and any foreign providers serving Spanish users simultaneously with the rest of the EU. The CNMV is the competent authority responsible for supervising licensed providers, receiving applications, and enforcing compliance. Platforms must register, comply with anti-money-laundering requirements, and meet MiCA's conduct-of-business standards.
-
Search the ESMA CASP register by the legal entity name, rather than the consumer-facing brand. A brand can belong to an entity with a different registered name. If you cannot match the entity to a register entry, do not treat the platform as authorized.
-
Keep your withdrawal confirmation and transaction records. You remain responsible for Spanish tax reporting on any gains after the move.
-
If a platform announces it is exiting Spain, move your assets to an authorized provider or a self-custody wallet while withdrawals are still available. Check the ESMA CASP register using the operator's legal entity name and read the platform's withdrawal notices. The register confirms whether the provider is authorized to serve Spanish residents.
-
No. MiCA regulates crypto-asset service providers, not individual holders using a self-custody wallet. The rules do not require a MiCA license, registration, or KYC for the wallet itself, but you remain responsible for Spanish tax reporting obligations on any gains.
-
Unlicensed exchanges cannot legally serve Spanish residents under MiCA. They must either obtain a CASP authorization, leave the Spanish market, or face enforcement action from the CNMV. The CNMV and ESMA have characterized unauthorized providers as illegal financial service operators. Spanish users of unlicensed platforms lack MiCA consumer protections and local regulatory recourse if the platform fails, freezes funds, or disappears.