MiCA Explained: What the EU Crypto Rules Mean for Exchange Users

MiCA, short for the Markets in Crypto-Assets Regulation (Regulation (EU) 2023/1114), is the European Union’s single rulebook for crypto-asset issuers and for exchanges, custodians and other crypto service providers. Its stablecoin rules applied on 30 June 2024 and its rules for crypto-asset service providers (CASPs) applied on 30 December 2024, with a final transition deadline of 1 July 2026. From that date only a MiCA-authorised firm may legally serve EU customers, so the practical question for users is whether their exchange appears in the ESMA register.

What is MiCA and what does it regulate?

MiCA is Regulation (EU) 2023/1114, the European Union’s licensing and disclosure regime for issuing crypto-assets and for providing crypto services. It entered into force in June 2023 and brings exchanges, custodians, token issuers and stablecoin issuers under one framework across all 27 member states. It sets consumer disclosure rules, prudential requirements for providers, market-abuse rules and supervision by national regulators coordinated by ESMA.

MiCA divides the market into three buckets and sets different rules for each. It also defines ten crypto-asset services that require authorisation, from operating a trading platform to custody, advice and portfolio management. Supervision falls to national competent authorities such as BaFin in Germany or the Central Bank of Ireland, with ESMA coordinating and holding the central register. The full text is published on EUR-Lex, and ESMA keeps an overview page with the register and implementation dates.

What MiCA does not do is approve or vouch for any particular coin. It regulates how crypto-assets are issued and serviced, not whether an asset is a good or bad holding. Non-fungible tokens are generally excluded when they are unique and non-fungible, and services that are fully decentralised with no intermediary sit outside scope. MiCA also does not cover crypto lending and borrowing, which ESMA has said fall outside the service list. MiCA applies across the EU’s 27 member states, not to platforms serving users in the United States or the United Kingdom, which run separate national regimes. For a grounding in how exchanges work before these rules, see our guide to choosing an exchange.

What are the three types of crypto-asset MiCA covers?

MiCA sorts crypto-assets into three categories. Asset-referenced tokens (ARTs) are stablecoins that reference several values, such as a basket of currencies or commodities. E-money tokens (EMTs) reference a single official currency, like the euro or US dollar. Everything else, from bitcoin to utility tokens, falls under crypto-assets other than ARTs and EMTs and needs a white paper for a public offer.

The distinction matters because the rules get stricter as the token gets closer to money. EMTs must be issued by an authorised credit institution or e-money institution and are redeemable at par. ARTs need a reserve of assets behind them. Plain crypto-assets mainly need a white paper and honest marketing. These definitions come from Article 3 of the regulation; the categories are set out across Titles II, III and IV, as summarised by ESMA.

In practice, when you see a euro-pegged stablecoin or a dollar-pegged one, you are looking at an EMT. Our comparison of USDT, USDC and DAI explains the differences between the major stablecoins, and bitcoin is the clearest example of the catch-all category that mainly needs a white paper rather than a reserve.

Which firms need a MiCA licence?

Any firm that provides crypto-asset services to EU customers on a professional basis must be authorised as a crypto-asset service provider (CASP), unless it is an already-regulated financial institution such as a bank or investment firm. MiCA lists ten regulated services, from custody and running a trading platform to advice and portfolio management. One authorisation passports a firm across all 27 member states.

The ten services are: custody and administration of crypto-assets, operating a trading platform, exchanging crypto-assets for funds, exchanging crypto-assets for other crypto-assets, executing orders for clients, placing crypto-assets, receiving and transmitting orders, giving advice, portfolio management and transfer services. A single licence from one member state lets a firm serve the whole EU, which is why an exchange may be regulated in Ireland but serve customers in Germany or France.

Licensed CASPs also face minimum capital and safeguarding rules. Initial capital for a CASP is generally between EUR 50,000 and EUR 150,000 depending on the services, with trading platforms at the higher end. Client crypto-assets must be held separately from the firm’s own assets and safeguarded, so a provider’s failure should not mix your holdings with its balance sheet. Once authorised, a firm notifies other member states and can start serving them under Article 65, in many cases within 15 calendar days.

MiCA does not include a separate third-country regime, so a firm based outside the EU cannot simply register remotely to serve EU clients, but it does contain a narrow exception. Under Article 61, the authorisation requirement does not apply where a client initiates a crypto-asset service exclusively on its own initiative, what is called reverse solicitation; regulators expect this to be interpreted very strictly, and the exemption is lost the moment the firm solicits, markets or advertises in the Union. A non-EU firm that wants to serve EU clients actively must instead be authorised as an EU CASP, which means a registered office in a member state, effective management there and at least one director resident in the EU, under Article 59(2). CASPs with at least 15 million active EU users in a year are classed as significant and face extra supervision. For public token offers, issuers must publish a white paper, and retail buyers generally get a 14-day right to withdraw, with exemptions for offers below EUR 1 million over 12 months or fewer than 150 people per member state. From 17 January 2025, MiCA-authorised CASPs also fall under DORA, the EU’s digital operational resilience rules, as noted by Norton Rose Fulbright.

When did the MiCA rules actually apply?

MiCA rolled out in stages. Stablecoin rules for ARTs and EMTs applied on 30 June 2024, and the rules for CASPs and the rest of the regulation applied on 30 December 2024. A transitional regime let firms operating under old national rules continue until 1 July 2026, when MiCA authorisation became mandatory across the EU.

Member states could shorten or skip the transitional window, which is why some countries cut off earlier than others, but 1 July 2026 was the final EU-wide date. From that point, firms without authorisation had to stop onboarding EU clients and limit activity to helping customers withdraw or close positions.

Enforcement has real teeth. Under Article 111(3), national authorities can fine a firm up to EUR 5 million or a percentage of its annual turnover, at rates of 3%, 5% or 12.5% depending on the breach category, with the highest figure reserved for the most serious conduct. Authorisations can also be withdrawn, which removes a firm’s legal ability to serve EU customers.

What do the MiCA stablecoin rules change for users?

Issuers of e-money tokens, such as euro- or dollar-pegged stablecoins, must now be authorised credit or e-money institutions, hold reserves and let holders redeem at par value. That is why some US dollar stablecoins disappeared from European platforms: an exchange may only list compliant tokens. The rule’s goal is that a stablecoin you hold can actually be redeemed for the currency it tracks.

Under Article 49, EMTs are treated as e-money and must be issued and redeemed at par with no redemption fee. Asset-referenced tokens, the multi-asset kind, must hold reserves and meet stricter capital requirements. MiCA’s reserve rules effectively rule out algorithmic stablecoins that have nothing real behind them.

Behind the scenes, the rules set hard financial floors. An e-money token issuer must hold at least EUR 350,000 of initial capital, rising with the size of tokens in circulation. An asset-referenced token issuer must at all times hold own funds equal to at least the highest of EUR 350,000, 2% of the average amount of its reserve assets, or a quarter of the preceding year’s fixed overheads, and have its reserve audited at least every six months, as set out in Article 35. The European Banking Authority can also designate very large stablecoins as significant, which brings extra supervision and stricter requirements.

For users, the visible changes are delistings and warnings on non-compliant tokens, plus clearer rights to redeem at face value. If your exchange tells you a stablecoin is being delisted, it is usually a MiCA compliance decision, not a platform fee change. The comparison above covers how USDT, USDC and DAI differ before you choose a stablecoin to hold.

What does the MiCA travel rule mean for my transfers?

From 30 December 2024, EU crypto transfers follow the Transfer of Funds Regulation (Regulation (EU) 2023/1113), also called the travel rule. Your exchange must collect and share details of the sender and receiver on every transfer, and for transfers above EUR 1,000 to or from a wallet you control yourself, it must take steps to verify that you control that address. In practice this means extra identity checks and occasional delays.

The originator’s platform must obtain and verify the required information, typically name, address and account or wallet details, before executing a transfer, regardless of the amount. The receiving platform must have procedures to detect missing information. For a transfer above EUR 1,000 involving a self-hosted wallet, the platform has to assess that you own or control that address, as set out in LegalNodes’ summary of Articles 14 and 16 of Regulation (EU) 2023/1113.

A worked example: a EUR 50 transfer between two exchange accounts still carries your name, address and account details. A EUR 5,000 transfer to a hardware wallet you control triggers an extra ownership check, for instance a message signed with the wallet’s keys. None of this changes the network fee, but it does add a compliance step. Platforms must also keep these records and report suspicious transactions, alongside the EU’s anti-money-laundering rules. If you hold assets in a self-hosted wallet, our guide on moving crypto off an exchange walks through the mechanics.

How do you check whether an exchange is MiCA-authorised?

ESMA publishes the official MiCA register under Articles 109 and 110, updated weekly. It is split into five files covering white papers, ART issuers, EMT issuers, authorised CASPs and non-compliant entities. To check an exchange, search the CASP file using the legal entity name from the firm’s terms, and confirm the current status, because withdrawn authorisations can remain listed.

The register is the authoritative check, not a brand name. The five files are: white papers for crypto-assets other than ARTs and EMTs, ART issuers, EMT issuers, authorised CASPs, and non-compliant entities providing crypto services. As of the register’s 30 October 2026 update, the files are refreshed weekly and were expected to be integrated into ESMA’s systems by mid-2026. The white papers listed have not been reviewed or approved by any authority, so a white paper on file is not a seal of quality. Most member states also publish their own national registers, so a second search on the national regulator’s site is a useful cross-check.

1. Open the firm’s terms of service or legal notice and copy the exact legal entity name, not the app or brand name.
2. Go to the ESMA MiCA page and open the authorised CASP file in the register.
3. Search for that entity name and check its authorisation date and the services it is approved for.
4. Cross-check the national regulator, since ESMA’s register can lag national records.
5. If the name is absent or shows a withdrawal date, treat the firm as unauthorised.

ESMA’s list of non-compliant entities is non-exhaustive, so being absent from that list does not prove a firm is authorised. The safest single check is the authorised CASP file plus the national register. ESMA explicitly told investors to verify providers in the register before relying on MiCA protections, according to its 23 June 2026 statement.

Which exchanges are MiCA-authorised?

As of the register’s 30 October 2026 update, hundreds of firms hold MiCA CASP authorisations across the EU. Among major international platforms, Kraken is authorised in Ireland through the Central Bank of Ireland, and Coinbase is authorised in Luxembourg through Coinbase Luxembourg S.A. The register, not the brand, is what confirms status, and several other large exchanges hold licences in other member states.

Authorisation shows a firm meets MiCA’s capital, safeguarding and conduct standards, but it does not mean every product it sells is regulated, since lending and borrowing sit outside MiCA’s list. Kraken lists its Irish entities and registration numbers on its own support page, and Coinbase’s licence was reported by Luxembourg Trade and Invest. Before choosing a platform, read our reviews of Kraken, Coinbase and Binance for fees and features, and our list of MiCA-aligned exchanges in Europe.

What should users do now?

Now that the transition period has ended, verify that your exchange appears in the ESMA register as an authorised CASP. If it does not, consider moving assets to an authorised platform or a self-hosted wallet you control. Check which stablecoins your exchange still lists, and expect identity checks whenever you transfer, because the travel rule is now permanent.

• Confirm your exchange’s legal entity is in the ESMA authorised CASP file, and check the date and approved services.
• If it is unauthorised, withdraw or move assets to an authorised exchange or a wallet you control, as ESMA advised.
• Watch for stablecoin delisting notices and move any non-compliant tokens before a deadline.
• Expect originator and beneficiary checks on transfers, and keep basic records of your account details.
• Make sure you are looking at the entity that actually serves your country, not a parent brand.

ESMA’s 23 June 2026 statement told unauthorised firms to communicate clearly with clients and set a deadline for closing any residual positions, and told clients to act promptly if their provider was not in the register. Crypto-assets are volatile and this is not financial advice. For the risks of leaving funds on a platform, see whether it is safe to keep crypto on an exchange, and for wallet options see our wallet guides.