MiCA Regulation in Sweden and the Nordics: Crypto Compliance Guide

MiCA (Markets in Crypto-Assets Regulation, EU 2023/1114) is the EU legal framework for crypto-asset service providers, stablecoin issuers, and token issuers. It became fully effective on 30 June 2025, with the transition period ending on 1 July 2026. For anyone holding or trading crypto in Sweden, Denmark, Finland, Norway, or Iceland, the regulations shape which exchanges can legally serve them and how those services are licensed. It does not, however, regulate individuals who simply hold their own crypto.

Here's what that means in practice for Nordic users: every exchange they use must now either hold a MiCA license in a home EU/EEA member state or operate under a cross-border passport from a licensed country. And as of 2026, not a single major international exchange holds a home-country MiCA authorization in any of the five Nordic markets.

MiCA Across the Nordic Countries

Each Nordic country has its own designated competent authority under MiCA, responsible for receiving CASP license applications and supervising authorized firms.

Sweden implements MiCA through Finansinspektionen (FI), formally designated as the national competent authority under the supplementary Swedish Act 2024:1159, passed on 27 November 2024. Under Sweden's transition rules, CASPs operating before 30 December 2024 could continue until 30 September 2025. Those that filed for authorization before 1 October 2025 may keep operating in Sweden until FI issues a final decision. Authorization fees range from SEK 135,000 to SEK 690,000 for CASP licenses and SEK 525,000 to SEK 13,500,000 for asset-referenced token licenses.

Denmark designates its Finanstilsynet as the MiCA competent authority for CASPs. Denmark's Finanstilsynet is recorded in ESMA's MiCA compliance table as the authority intending to comply with MiCA knowledge and competence guidelines by 1 July 2027.

Finland uses the FIN-FSA (Finnish Financial Supervisory Authority) as its MiCA authority. Finland ended its national transition period on 30 June 2025, after which any firm actively offering or marketing crypto-asset services must either hold MiCA CASP authorization in Finland or rely on a passport from another EU/EEA state.

Norway and Iceland are not EU member states. Both are members of the European Economic Area (EEA) as EFTA states, which means MiCA applies to them through EEA incorporation. Norway's competent authority is its Finanstilsynet (separate from Denmark's authority of the same name). Iceland's MiCA oversight is with the Central Bank of Iceland, which ESMA lists as the competent authority for all MiCA-related supervision in Iceland.

The passporting mechanism is the same across all five countries: a firm licensed in one EU or EEA member state can offer services throughout the other 26 EU member states and EEA countries without obtaining additional national licenses. That is how most exchanges currently serve Nordic users.

Nordic CASP Authorizations

As of the ESMA register data compiled through mid-2026, the picture across the five Nordic markets is sparse.

Sweden has exactly one home-state MiCA CASP authorization: Safello AB, granted on 13 October 2025 and covering six of the ten MiCA service types. No other Swedish-domiciled firm appears in the ESMA-indexed MiCA CASP lists as a home-state-authorized entity. Denmark has 3 total CASP authorizations, Finland has 5, and Norway has 13 in the broader Nordic and Baltic tally. Iceland's Myntkaup ehf. was authorized on 25 June 2026.

Why so few? Several factors converge. Nordic transition windows were short: Sweden's MiCA grandfathering ran for only nine months. Licensing fees are substantial. And firms seeking EU-wide reach have generally preferred established licensing hubs such as Germany, France, or the Netherlands, where regulatory pipelines were faster or more predictable at the time of MiCA's rollout.

The result is that Nordic users cannot currently walk into a domestically licensed major exchange the way a German or French user might. Nordic users can legally be served by foreign-licensed CASPs where domestic licenses are unavailable or still pending. That may change. The CASP register is a living document, updated as national authorities process applications. A first major Nordic home-country authorization for a large international exchange would be a significant development worth tracking.

Exchanges Available to Nordic Users

Several MiCA-authorized exchanges with Nordic roots or Nordic passporting coverage are already operating. The table below lists those with confirmed CASP authorizations and passport coverage across the Nordic markets.

These are not the only options. Larger international CASPs licensed in Germany, France, the Netherlands, or other EU hubs can also serve Nordic users under the same passporting rules, provided they have notified the relevant Nordic competent authority of their intent to passport. The ESMA CASP register is the authoritative source for checking any specific firm's current status.

The practical point for Nordic users: a MiCA-authorized exchange, wherever it is licensed in the EU/EEA, can legally serve them. The license's home country is less important than whether the firm appears in the register.

Unlicensed Exchanges in the Nordics

Not every exchange that Nordic users have historically used holds a MiCA authorization. Two cases are worth understanding directly.

Binance does not appear on ESMA's MiCA register. Binance withdrew its MiCA license application with the Hellenic Capital Market Commission in Greece and had not obtained authorization in another EU member state as of the sources reviewed. Its Swedish subsidiary, Binance Nordics AB, holds a registration with Finansinspektionen as a financial institution for the trade in and management of virtual currency, but it is an AML-focused registration rather than a full MiCA CASP authorization. From 1 July 2026, unlicensed platforms are permitted only to perform activities necessary to close or transfer client positions. Binance has notified EU customers of service restrictions and the need to withdraw funds.

MEXC is not MiCA-authorized anywhere in the EU/EEA, does not appear in ESMA's CASP register, and as of June-July 2026 had no known MiCA/CASP application filed in any member state. MiCA compliance trackers rate the user risk level as high: no investor protections, potential sudden geoblocking or service withdrawal, and no local recourse if funds are frozen. Nordic users on MEXC face the same risk profile as any other EEA resident on an unlicensed platform.

The risk is real. An unlicensed exchange cannot legally serve EU/EEA customers under MiCA. It must obtain a license, exit the market, or face enforcement action. Users who are still holding assets on an unlicensed platform should understand that withdrawal access may be restricted without notice.

Self-Custody: The Nordic User's Independence

Nordic users are in an unusual position. Compared to users in larger EU markets, they have fewer domestically licensed exchange options. The major platforms they can access are licensed in other countries and can be reached by them via passport. That is a legitimate and legal arrangement, but it does create a single point of dependency: if a foreign-licensed exchange restricts services, changes its passport coverage, or encounters regulatory difficulties in its home country, Nordic users feel the effect.

Self-custody addresses that dependency directly. Picture a 24-hour exchange-withdrawal pause: assets held on the platform remain there until access is restored. MiCA regulates CASPs rather than individual crypto holders or self-custody wallets. Recital 66 of the regulation preserves an individual's right to hold crypto-assets in their own wallet without using a regulated service provider. A self-custodial wallet keeps the private key under the user's control, signs transactions locally, and removes exchange solvency as a counterparty risk. The wallet itself does not require a MiCA license, registration, or KYC to use.

For Nordic users, Tangem offers a physical-card self-custody option. It stores private keys offline on an NFC-enabled physical card using a Samsung S3D350A secure-element chip with Common Criteria EAL6+ certification. The card supports 16,000+ tokens across 91+ blockchains, connects via NFC with no USB port or Bluetooth, and requires no battery. Setup takes under three minutes and does not require writing down a seed phrase unless the user chooses to create one.

One caveat worth understanding clearly: if all backup cards are lost and no seed phrase was created, the funds cannot be recovered. Tangem cannot recover them. That is the trade-off for a seedless setup. Users who want portability to other wallets can generate a BIP39-compatible seed phrase during setup.

There is also a relevant note on the EU Travel Rule. When a user withdraws from an exchange to an unhosted wallet, the exchange may be required to collect information about the withdrawal destination. That is an exchange-level verification step, not a restriction on the wallet itself. The wallet remains outside MiCA's scope. Self-custody does not replace exchanges for buying or selling crypto. But for Nordic users who rely entirely on foreign-licensed CASPs, holding their own keys means their assets are not subject to any single exchange's regulatory situation or solvency.