What Does MiCA Change for EU Crypto Users?

MiCA, the EU's Markets in Crypto-Assets Regulation (Regulation (EU) 2023/1114), means that any firm offering you crypto custody, trading, exchange or transfers in the EU now needs a MiCA authorisation (or, for banks and investment firms, a MiCA notification), because every national transition period ended by 1 July 2026 at the latest. You can check a firm in ESMA's interim MiCA register. MiCA adds disclosure, custody and complaint rules, but no deposit-guarantee-style compensation.

Article numbers below refer to the Official Journal text of the regulation, and register figures come from ESMA's files as published on October 22, 2026. For the general method of looking a platform up across several regulators, start with our guide to checking whether a crypto platform is registered. This page covers the EU detail.

MiCA's timeline: what is already in force

MiCA was adopted on 31 May 2023 and published in the Official Journal on 9 June 2023. It switched on in phases, and all of them are now behind us apart from one long tail for older tokens.

Two points follow. There is no longer a general "still in transition" excuse for an EU-facing crypto service. And for an older token that was trading before MiCA applied, a missing white paper is not by itself a sign of wrongdoing until the 2027 deadline passes.

What MiCA covers, and what sits outside it

MiCA applies to people and firms that issue, offer to the public or seek admission to trading of crypto-assets, and to those that provide crypto-asset services in the Union (Article 2(1)). It defines a crypto-asset broadly, as a digital representation of a value or a right that can be transferred and stored electronically using distributed ledger technology or something similar (Article 3(1)(5)).

It then sorts tokens into three buckets:

Some things are carved out. MiCA does not apply to crypto-assets that are unique and not fungible with other crypto-assets (Article 2(3)), nor to crypto-assets that already qualify as financial instruments, deposits, funds (unless they are EMTs), securitisation positions, insurance or pension products (Article 2(4)). A tokenised share stays under the securities rules.

The regulated services are listed in Article 3(1)(16), lettered (a) to (j): (a) custody and administration on behalf of clients, (b) operating a trading platform, (c) exchanging crypto-assets for funds, (d) exchanging crypto-assets for other crypto-assets, (e) executing orders, (f) placing, (g) receiving and transmitting orders, (h) advice, (i) portfolio management, and (j) transfer services. The register uses the same letters, so an app that holds your coins should show service (a), not only (c).

What a CASP authorisation and the EU passport mean

Under Article 59(1), nobody may provide crypto-asset services in the EU unless it is either a firm authorised as a CASP under Article 63, or an already-regulated financial entity (a credit institution, investment firm, e-money institution, market operator, central securities depository, UCITS manager or alternative fund manager) that is allowed to provide crypto services through the notification route in Article 60.

An authorised CASP must have its registered office in a member state where it carries out at least part of its services, its place of effective management in the Union, and at least one director resident in the Union (Article 59(2)). A firm that is not a CASP may not use a name or marketing that suggests it is one (Article 59(5)).

The authorisation is granted by one national competent authority, the "home" regulator, and it names the specific services the firm may provide (Article 59(6)). Once authorised, the firm can serve clients across the Union (Article 59(7)). To do so in other member states it notifies its home regulator of the countries and services it plans to cover. The home regulator forwards that information within 10 working days, and the firm may start from the date it is told the communication went through, or at the latest from the 15th calendar day after it submitted the information (Article 65). That cross-border right is what people call the passport.

For a user this has two consequences. Your local regulator may not be the one that authorised your provider: a firm serving you in Spain might be authorised in Ireland or Malta, and the register tells you which authority to deal with. And a passport covers the services listed, in the countries listed.

Firms outside the EU sometimes argue they can serve EU residents without authorisation because the client came to them. MiCA allows that only when the client acts on its own exclusive initiative (Article 61(1)). Any solicitation, promotion or advertising aimed at clients in the Union, by any means, removes the exemption, and a contract clause or disclaimer saying otherwise does not change that (Article 61(1)). If an unlicensed platform is advertising to you in your own language, treat the "you came to us" line with suspicion.

The transition is over: Article 143(3) and national cut-offs

Article 143(3) let CASPs that were operating legally under national law before 30 December 2024 keep going until 1 July 2026, or until they were granted or refused a MiCA authorisation, whichever came first. It also let each member state shorten the period or skip it entirely if it judged its old national regime less strict than MiCA. Member states had to tell the Commission and ESMA their choice by 30 June 2024.

ESMA collected those choices in a published list. It notes that some periods were communicated by national authorities as their expectations and may not all have been written into national law when the list was compiled.

The end dates in the right-hand column are our arithmetic, not ESMA's wording; national law sets the exact cut-off, and several countries also required firms to apply by a set date to benefit at all. In every case the period ended early for a firm whose application was refused.

ESMA's December 2024 statement on the transitional measures explains why this patchwork mattered: a firm without a MiCA authorisation had no passport during the transition. Its example was a firm applying in a state with a 12-month window while serving clients in a state with a 6-month window, which could be left without authorisation in the second country for up to six months.

What it means now, in October 2026: a provider still calling itself "in transition" or "grandfathered" is relying on a period that has ended everywhere. If your provider says your account is moving to a different legal entity, look that entity up in the register before accepting. Article 143(6) allowed a simplified procedure for firms already authorised under national law, but the result is still a full MiCA authorisation.

How to check a provider in ESMA's interim MiCA register

Articles 109 and 110 require ESMA to keep a central register of white papers, stablecoin issuers and authorised CASPs, plus a separate list of non-compliant entities. ESMA set up an interim version to meet the 30 December 2024 deadline. It said it would fold the register into its IT systems by mid-2026. On October 22, 2026, the MiCA page still offered it as downloadable CSV files, last updated that day.

The interim register is five files:

The row counts are our tally of the files downloaded on October 22, 2026. ESMA republishes weekly, so the numbers will move. The empty ART file is a useful fact on its own: no issuer of an asset-referenced token appeared in ESMA's register on that date, so a token sold to you as a MiCA-authorised "basket" stablecoin should prompt a direct question about who authorised it.

Step-by-step lookup

Reading the result

The register is a data dump, not a search engine, and it has quirks. In the October 22 files, the legal-basis column in CASPS.csv was filled inconsistently: 76 rows cited Article 63 authorisation, 131 cited the Article 60 notification route for already-regulated financial entities, and 180 were blank. Country codes were not uniform either. Do not treat a blank field as a negative finding.

A hypothetical worked example

Assume the following, invented for illustration. You use an app branded "ExampleX" at examplex.eu. Its terms say your contract is with "ExampleX Europe B.V.", registered in the Netherlands. You live in Portugal and use the app to buy crypto with euros and leave it there.

Reading this: the firm appears to be authorised, but the record does not show custody, and it does not show Portugal. Ask ExampleX which legal entity holds your coins and under which authorisation it serves Portuguese clients. If a separate custodian is involved, Article 75(9) says a CASP that uses another custody provider must use an authorised one and must tell clients. Then look that custodian up the same way. If the answers do not line up with the register or the Dutch authority's own records, that is a reason to move your assets. Our guide to moving crypto from an exchange to your own wallet covers doing that safely.

Reading a MiCA crypto-asset white paper

For crypto-assets other than ARTs and EMTs, the offeror must be a legal person and must draw up, notify and publish a white paper before an offer to the public (Article 4(1)). No white paper is needed for offers to fewer than 150 persons per member state, offers raising no more than EUR 1,000,000 over 12 months, or offers only to qualified investors (Article 4(2)). Title II does not apply to tokens given away free, mining or validation rewards, utility tokens for a good or service that already exists, or limited-network tokens (Article 4(3)).

A Title II white paper is notified, not approved. Regulators may not require prior approval (Article 8(3)), the paper is notified at least 20 working days before publication (Article 8(5)), and its first page must say: "This crypto-asset white paper has not been approved by any competent authority in any Member State of the European Union." The same applies to EMT white papers (Article 51(3)). ART white papers are the exception: they are approved with the issuer's authorisation (Article 16(4)).

A ten-minute white paper checklist

Liability. If a white paper is incomplete, unfair, unclear or misleading, the offeror (or the person seeking admission, or the drafting platform operator) and its management body are liable to holders for the resulting loss (Article 15(1)), and a contract clause excluding that has no effect (Article 15(2)). The burden is on you to show the information was deficient and that relying on it affected your decision (Article 15(4)).

Withdrawal. Buying a Title II token directly from the offeror, or from a CASP placing it, gives you 14 calendar days to withdraw without fees or reasons (Article 13(1)). The right does not apply if the token was already admitted to trading before you bought it (Article 13(4)), so it covers primary sales, not buying an established coin on an exchange.

Stablecoins under MiCA: EMTs, ARTs and the interest rule

MiCA's stablecoin titles have applied since 30 June 2024. Our comparison of stablecoin types covers how the main designs work; here is what MiCA adds for a holder.

The interest prohibition, precisely

Articles 40 and 50 are often summarised as "MiCA bans stablecoin yield". The text is more specific. Issuers of ARTs and EMTs may not grant interest in relation to those tokens, and CASPs may not grant interest "when providing crypto-asset services related to" them. Both articles treat as interest any remuneration or benefit related to how long you hold the token, including net compensation or discounts with an equivalent effect, paid by the issuer or by third parties, directly or through the pricing of other products.

A CASP paying a percentage simply for keeping a euro EMT in your account is the kind of arrangement the rule targets. Whether a particular product falls inside it depends on its structure and the regulator's view, which this page cannot settle. The way different stablecoins' trading venues split after these rules applied is covered in our analysis of MiCA and stablecoin liquidity fragmentation. The US took a different path, which we compare in our explainer on the GENIUS Act's stablecoin rules.

What MiCA does for you if something goes wrong

MiCA's day-to-day protections sit in the conduct rules for CASPs. These are the ones a retail user can point to.

How to complain, in order

A regulator's complaint process is mainly a supervisory tool. It can lead to action against the firm, but it does not guarantee that you will be paid back.

What MiCA does not do

How segregation plays out in practice when a platform fails is the subject of our guide to what happens to customer crypto when an exchange goes bankrupt.

Common mistakes when relying on MiCA

Our other regulation explainers are collected on the regulation topic hub.

Your next step is practical. Open ESMA's MiCA page, download the CASP file, and run the nine-step lookup on the provider that holds most of your crypto today, starting with the legal entity named in its terms of service. If the record and the firm's answers do not line up, our platform registration checklist shows how to confirm the result with the national regulator before you move anything.

Frequently Asked Questions

When did MiCA's grandfathering period end?

Article 143(3) let crypto service providers that operated legally before 30 December 2024 continue until 1 July 2026 at the latest, or until their MiCA application was granted or refused. Member states could shorten the period, and ESMA's list shows periods of 6, 9, 12 and 18 months. By October 2026 every national window has closed, so an EU-facing provider needs a MiCA authorisation or an Article 60 notification.

How do I check if a crypto exchange is authorised under MiCA?

Download the CASPS.csv file from ESMA's MiCA web page and search for the exchange's legal entity name, brand and website. Check the competent authority, the services listed, your country in the host member states field, and whether a withdrawal date is filled in. Then confirm the result on the home regulator's own register, because ESMA's interim files are updated weekly.

Does MiCA protect my crypto if an exchange goes bankrupt?

MiCA requires custodians to segregate client crypto-assets from their own estate so that the firm's creditors have no recourse to them, and to place client cash with a bank or central bank in a separate account. It does not create a compensation scheme, and white papers must state that crypto-assets are not covered by deposit guarantee or investor compensation schemes. Recovery therefore depends on the segregation being done properly and on the insolvency process.

Is a MiCA white paper approved by a regulator?

Not for most tokens. White papers for crypto-assets other than asset-referenced tokens, and for e-money tokens, are notified to a national authority, which may not require prior approval. The first page must say the paper has not been approved by any competent authority. White papers for asset-referenced tokens are the exception, since they are approved as part of the issuer's authorisation.

Can I earn interest on a euro stablecoin under MiCA?

MiCA forbids issuers of e-money tokens and asset-referenced tokens from granting interest, and forbids crypto-asset service providers from granting interest when providing services related to those tokens. Any benefit tied to how long you hold the token counts as interest, including discounts or compensation from third parties. Whether a specific product falls under the rule depends on its structure, so treat advertised stablecoin returns from EU providers with caution and ask how they comply.

What does it mean if a platform appears in ESMA's non-compliant list?

It means a national authority, or ESMA, has reported the entity as providing crypto-asset services in the EU without the authorisation required by Article 59, or outside the narrow reverse-solicitation exemption in Article 61. The record usually gives the reason, the deciding authority and the date. Absence from the list proves nothing, because MiCA describes it as non-exhaustive.

Does MiCA cover NFTs and self-custody wallets?

MiCA does not apply to crypto-assets that are unique and not fungible with other crypto-assets (Article 2(3)), so a genuinely unique NFT sits outside it; what matters is whether the token is in fact unique, not what it is called. A self-custody wallet that you control is software, not a crypto-asset service provided to you, so MiCA's custody rules do not apply to your own keys. Firms that hold keys on your behalf are covered.