What Is MiCA (Markets in Crypto-Assets)? Crypto Regulatory Framework 2026 Explained

The European Union has taken a decisive step in shaping the future of crypto markets with the Markets in Crypto-Assets Regulation, commonly known as MiCA. This comprehensive regulatory framework establishes clear rules for crypto-asset issuers, crypto-asset service providers (CASPs), and anyone operating in one of the world’s largest economic blocs. Understanding MiCA is now essential for any firm with ambitions in European crypto markets.

Key Takeaways

• MiCA (Regulation (EU) 2023/1114) is the EU’s first comprehensive framework for crypto assets, entering into force on 29 June 2023 and becoming fully applicable from 30 December 2024, with rules for asset-referenced tokens and e-money tokens already live since 30 June 2024.

• The regulation covers the issuance and public offering of crypto assets, authorisation of crypto-asset service providers (CASPs), and EU-wide rules on market abuse and supervisory cooperation — creating a single rulebook across all 27 EU member states.

• MiCA applies only to crypto assets not already regulated as financial instruments under MiFID II, while non-fungible tokens and certain DeFi arrangements remain mostly out of scope for now.

• MiCA introduces passporting: once authorised in one EU/EEA country, CASPs can provide crypto-asset services across the entire bloc, subject to ongoing prudential and conduct obligations.

• Both EU and non-EU firms targeting European Economic Area clients must consider MiCA compliance, as national competent authority enforcement is intensifying through 2025–2026.

What Is MiCA?

MiCA, formally Regulation (EU) 2023/1114 published on 31 May 2023, is directly applicable across all 27 EU member states without requiring national transposition. Before MiCA, crypto regulation was a patchwork of national rules that varied widely across Europe, making it difficult for firms to launch products or scale across borders. MiCA resolves that fragmentation with a single, harmonised rulebook.

In practical terms, MiCA establishes uniform rules for crypto assets — including stablecoins and utility tokens — and for the firms providing crypto-asset services across the EU and European Economic Area. It reduces regulatory uncertainty and provides the legal certainty market participants need to build and grow.

The regulation pursues several core policy objectives: investor protection through enhanced transparency, market integrity against manipulation, and financial stability through stablecoin oversight, all while fostering innovation in distributed ledger technology.

MiCA covers four main areas:

• Public offerings and admissions to trading of crypto assets

• Specific regimes for asset-referenced tokens (ARTs) and electronic money tokens (EMTs)

• Authorisation and conduct rules for CASPs

• Rules on market abuse and supervisory cooperation

MiCA complements rather than replaces other EU law, including MiFID II, PSD2, the Electronic Money Directive, the Digital Operational Resilience Act (DORA), and the Transfer of Funds Regulation (TFR).

MiCA Timeline and Implementation Across Europe

MiCA’s development followed a deliberate path through European institutions:

• September 2020: The European Commission publishes the original MiCA proposal as part of the Digital Finance Package

• 20 April 2023: The European Parliament adopts MiCA

• 31 May 2023: MiCA is formally adopted and published as Regulation (EU) 2023/1114

• 29 June 2023: MiCA enters into force, beginning the phased application timeline

• 30 June 2024: Titles III and IV (ARTs and EMTs) become fully applicable

• 30 December 2024: Remaining core provisions, including the CASP regime and market abuse rules, become fully applicable

Secondary legislation, regulatory technical standards and implementing technical standards, continues its development through ESMA and the European Banking Authority through 2024–2026, shaping practical compliance requirements for whitepapers, authorisation files, and reporting templates.

2026 MiCA Updates and Practical Implications

On 30 December 2024, MiCA fully came into effect and the grandfathering transitional period began. This phase allows existing crypto-asset service providers that were operating legally before that date to continue their services without immediate full MiCA compliance, provided they apply for authorisation within specified deadlines.

The maximum transitional window runs until 1 July 2026, or until a provider is granted or denied authorisation — whichever comes first. However, many EU member states have opted for shorter windows. France, Malta, Luxembourg, and Estonia adopted the full 18-month period, while the Netherlands and Poland implemented windows expiring in mid-2025, and Germany, Austria, and Ireland chose 12-month periods concluding by end of 2025. In practice, this means compliance urgency varies significantly by jurisdiction — firms must check their specific member state deadline, not just the EU-wide date.

As of early 2026, around 130–140 CASP licences have been issued (mostly in Germany, the Netherlands, France, and Malta), compared to the hundreds of thousands of VASPs that were operating under national regimes previously. The compliance burden is real: applying for a MiCA licence means submitting hundreds of pages of documentation, including business plans, governance structures, AML/CFT and IT policies, and exhaustive fit-and-proper checks. Many smaller platforms are merging with larger competitors, shutting down EU operations, or relocating.

From mid-2026, there is no further grace period. CASPs that have not obtained authorisation must cease providing regulated crypto-asset services in the EU. Regulators expect full implementation of:

• AML/CFT processes, including customer due diligence, transaction monitoring, and the Travel Rule

• Governance, risk, and control structures

• Data retention, reporting, and audit-ready systems

Looking further ahead, the Crypto-Asset Reporting Framework (CARF) under DAC8 will require CASPs to collect detailed user transaction data for mandatory tax reporting from 1 January 2026, with the first automatic cross-border exchanges of data taking place in 2027. In parallel, the new Anti-Money Laundering Authority (AMLA) is expected to roll out detailed guidelines and regulatory technical standards, further harmonising obligations across the bloc.

Scope, Subject Matter, and Key Definitions

Understanding what MiCA covers,  and what it explicitly excludes, is essential for determining compliance obligations.

MiCA defines a “crypto-asset” as a digital representation of value or rights that can be transferred and stored electronically using distributed ledger technology or similar technology. This baseline definition captures the assets subject to regulation.

MiCA applies only to crypto assets that are not:

• Financial instruments under MiFID II (such as security tokens resembling shares or bonds)

• Deposits, structured deposits, funds, or securitisations

• Pension products or insurance-based investment products

• Central bank money or central bank digital currencies (CBDCs)

The regulation establishes three main categories:

• Asset-referenced tokens (ARTs): Tokens referencing baskets of assets for value stability

• E-money tokens (EMTs): Fiat-pegged tokens functioning as tokenised electronic money

• Other crypto assets: Including utility tokens and exchange tokens like Bitcoin and Ethereum

Non-fungible tokens that are truly unique and non-interchangeable are generally out of scope. However, fractionalised collections or NFT series marketed fungibly can be reclassified as crypto assets under MiCA. Truly decentralised protocols with no identifiable issuer also remain largely exempt, though front-end operators and intermediaries serving EU users could be regarded as CASPs.

Structure of MiCA: Titles and Their Focus Areas

MiCA comprises nine titles, each addressing specific aspects of the regulatory framework. Titles I–VII form the operational core, while Titles VIII and IX cover delegated acts, transitional measures, and reporting obligations.

Title I – General Provisions

Title I establishes subject matter, scope, and core definitions, determining which entities and assets fall under MiCA. Article 3 provides crucial definitions including “crypto-asset,” “distributed ledger technology,” “offer to the public,” and “crypto-asset service.” It also clarifies exclusions: small-scale offers under €1 million over 12 months, purely decentralised networks lacking identifiable issuers, free airdrops, block rewards, and already-regulated financial instruments.

Title II – Crypto-Assets Other Than ARTs and EMTs

Title II governs “other crypto assets” — typically utility tokens or exchange tokens. Issuers must prepare and publish a crypto-asset white paper containing prescribed information: project description, rights attached to tokens, technology risks, governance structures, and risk factors. This white paper must be notified to the relevant national competent authority before publication. Exemptions exist for small offers below monetary thresholds, free airdrops, and tokens created as mining rewards.

Title III – Asset-Referenced Tokens (ARTs)

ARTs are tokens that stabilise value by referencing a basket of other assets — such as combinations of official currencies, commodities, or other crypto assets — distinguishing them from EMTs which reference a single fiat currency.

Only a legal entity established in the EU can issue ARTs. Most issuers must obtain authorisation from their competent authority, unless already authorised as a credit institution meeting specific ART requirements.

Key obligations include:

• Robust governance arrangements

• Own funds requirements (starting at €350,000)

• Creation and segregation of reserve assets

• Custody and investment rules for reserves

• Clear redemption rights and orderly wind-down planning

“Significant” ARTs — those exceeding thresholds like €500 million market cap or 10% of EEA crypto transactions — face direct European Banking Authority oversight alongside national authorities.

Title IV – E-Money Tokens (EMTs)

EMTs are crypto assets intended primarily as a means of payment, maintaining stable value by referencing a single official currency (e.g., EUR or USD). They function as tokenised electronic money and may only be issued by a credit institution or electronic money institution authorised under existing EU law.

Key regulatory requirements include:

• 1:1 redemption at par value

• Safeguarding of funds in secure assets

• Clear white paper and disclosures

• Capital and governance standards

• Restrictions on interest payments

• Obligation to honour redemption requests at any time

“Significant” EMTs face enhanced scrutiny, more frequent reporting, and possible limits on daily transaction volumes to safeguard financial stability — a lesson drawn from events like the TerraUSD collapse.

Title V – Crypto-Asset Service Providers (CASPs)

CASPs are firms that provide crypto-asset services on a professional basis. From 30 December 2024, only authorised legal persons established in the EU may act as CASPs. Regulated services include:

• Custody and administration of crypto assets

• Operation of a trading platform

• Exchange of crypto assets for funds or other crypto assets

• Execution of orders, placement, and portfolio management

• Advice on crypto assets and transfer services

Main authorisation requirements include minimum own funds (€125,000–€150,000 depending on services), fit-and-proper management, robust governance, IT and cybersecurity arrangements, segregation of client assets, and clear disclosure rules.

The EU passporting concept allows CASPs authorised in one member state to provide crypto-asset services across the entire European Economic Area after simple notifications to host authorities. “Significant” CASPs — those serving at least 15 million EU users or holding substantial assets — face intensified supervision from ESMA and the EBA.

Title VI – Market Abuse in Crypto-Asset Markets

Title VI extends EU-style market abuse rules to crypto assets admitted to trading on platforms operated by CASPs. Prohibited behaviours include insider dealing, unlawful disclosure of inside information, market manipulation (wash trading, pump-and-dump schemes, spoofing), and dissemination of false or misleading information.

Title VII – Supervision, Cooperation, and Enforcement

Title VII establishes the roles and powers of national competent authorities across the EU. ESMA and the EBA coordinate supervisory practices, issue guidelines and technical standards, and supervise significant ART/EMT issuers and CASPs. Authorities possess investigative and sanctioning powers, including administrative fines up to 12.5% of global turnover or €15 million.

MiCA’s Impact on EU Stablecoins in 2026

MiCA’s stablecoin rules are among its most consequential provisions. The regulation categorizes stablecoins as either asset-referenced tokens (ARTs) or e-money tokens (EMTs), each subject to strict authorisation and operational standards.

The practical implications for USDT are significant. As of early 2026, Tether Limited has not obtained MiCA authorisation as an e-money token or asset-referenced token issuer. Several major European exchanges have issued notices regarding restrictions on USDT trading pairs, while others are promoting MiCA-compliant alternatives such as EURC (Circle’s euro-denominated stablecoin) and USDC.

Exchanges must evaluate whether to maintain USDT pairs for non-European users while restricting European residents, implement gradual phase-out periods, or transition fully to compliant alternatives. This fragmentation creates liquidity challenges, as USDT historically served as the primary trading pair for thousands of cryptocurrency markets. Traders accustomed to USDT-denominated positions may face conversion costs and reduced market depth during the transition.

Despite these challenges, Tether has indicated ongoing engagement with European regulators. Obtaining authorisation would require establishing EU-based entities, restructuring reserve custody arrangements to meet MiCA’s requirements, and implementing enhanced governance and reporting systems.

The regulatory clarity provided by MiCA is also catalysing new MiCA-native stablecoins — projects designed from the ground up for European compliance. Several financial institutions and fintech companies have announced plans to launch MiCA-authorised e-money tokens, leveraging existing regulatory relationships and banking infrastructure. These new entrants may gain competitive advantages through seamless integration with European payment systems and enhanced regulatory certainty.

MiCA vs Other Global Crypto Frameworks

MiCA establishes a single, harmonised EU-wide framework with unified licensing, passporting, and clearly defined regulatory categories. But globally, approaches vary significantly.

United Kingdom

The UK is moving toward a crypto-activity framework regulated within its existing financial-services architecture. In December 2025, the FCA published a consulting paper on rules for trading platforms, intermediaries, lending and borrowing, staking, and decentralised finance — indicating new guidance is expected in 2026. Firms operating cross-border between the EU and UK must now navigate two distinct regimes.

United States

The US has a more fragmented approach: there is still no single federal crypto law, and oversight is split across multiple agencies including the SEC, CFTC, and FinCEN. However, 2025 saw major federal movement on stablecoins (the GENIUS Act) and market-structure proposals, suggesting a more unified federal framework may be emerging.

Asia-Pacific

Across Asia-Pacific, crypto regulatory frameworks are advancing through formal legislation and licensing regimes. Singapore’s MAS regulates digital payment token services under the Payment Services Act and maintains a dedicated stablecoin framework. Hong Kong has similarly embedded crypto regulation into legislation and licensing regimes for virtual asset trading platforms and stablecoin issuers. Both markets represent credible alternatives for firms unable or unwilling to comply with MiCA.

The key takeaway for firms: MiCA is the most comprehensive crypto regulatory framework currently in force, but it is not globally unique. Firms operating across multiple jurisdictions must manage a mosaic of requirements, there is no single global standard, and regulatory arbitrage remains a live risk.

Who Is MiCA Relevant To?

MiCA affects a wide range of crypto-asset market participants, both within and outside the EU, whenever they target clients in the European Economic Area.

Key in-scope actors include:

• Issuers of ARTs and EMTs seeking to offer tokens or admit them to trading

• Issuers of other crypto assets conducting public offers or seeking exchange listings

• CASPs providing custody, trading, exchange, or advisory services

• Existing virtual asset service providers (VASPs) transitioning to MiCA regimes

• Alternative investment fund managers dealing with such crypto assets

EU investment firms, banks, and e-money institutions engaging in crypto services may rely on existing licences but must comply with MiCA conduct and organisational requirements.

Non-EU entities — including UK and third-country firms — with EEA clients face MiCA expectations if actively targeting the EU market. There is no dedicated third-country equivalence regime. A UK exchange offering spot trading to EU residents, for example, cannot rely solely on narrow reverse-solicitation exceptions.

Crypto-Asset Service Providers: Licensing and Obligations

Becoming a MiCA-authorised CASP involves a structured process. Core regulated services span custody and administration, trading platform operation, exchange services, order execution, placement, portfolio management, advice, and transfer services.

Typical Authorisation Process

1. Prepare application dossier (business plan, governance frameworks, IT security description, AML controls)

2. Submit to the national competent authority

3. Answer follow-up questions — regulators often go through multiple rounds

4. Receive licence if requirements are met

Ongoing Obligations

Once licensed, CASPs must maintain minimum capital, safeguard client assets in segregated accounts, provide clear client agreements, report incidents, handle complaints, and disclose fees transparently. Failure to comply may result in fines, remedial orders, or licence withdrawal.

Interaction With Other EU Regulatory Measures

MiCA operates within a broader EU regulatory stack, requiring firms to manage multiple, overlapping compliance frameworks across trading, settlement, and operational infrastructure.

Digital Operational Resilience Act (DORA): Applicable from 17 January 2025, DORA establishes a unified framework for ICT risk management across the EU financial sector. It requires CASPs and financial institutions to implement robust governance around operational resilience, including incident reporting, resilience testing, and third-party risk oversight.

For institutional crypto participants, DORA directly impacts how trading infrastructure is designed, monitored, and integrated with external providers. Requirements around system availability, security, and auditability are becoming core to market access.

As an ICT provider to financial institutions, Finery Markets aligns its infrastructure with these standards. The platform is SOC 2 Type 1 and Type 2 certified, reflecting mature controls across information security, access management, incident response, and business continuity. Regular penetration testing with CREST-certified providers and continuous monitoring practices support resilience expectations under DORA.

This positioning is increasingly relevant for clients conducting vendor due diligence, where infrastructure reliability and security are no longer differentiators but baseline requirements.

Transfer of Funds Regulation (TFR): From 30 December 2024, the TFR introduces “travel rule” obligations for crypto transfers exceeding €1,000, requiring CASPs to collect, verify, and transmit originator and beneficiary information.

Anti-Money Laundering: Customer due diligence, transaction monitoring, and sanctions screening remain mandatory alongside MiCA. From 10 July 2027, AMLD6 and the AML Regulation (AMLR) will further harmonise requirements across the EU, tightening expectations around compliance controls and reporting.

What MiCA Does Not (Yet) Cover

MiCA has clear exclusions and gaps where future regulation may emerge.

• Security tokens: Instruments already regulated under MiFID II or other European securities frameworks

• Unique NFTs: Non-fungible tokens that are truly unique, unless structured as fungible or financial instruments

• Decentralised finance (DeFi): Truly decentralised arrangements with no identifiable issuer or CASP, though centralised elements can trigger full MiCA obligations

• CBDCs: Central bank digital currencies and monetary policy instruments

Technology providers offering non-custodial wallet software are generally out of scope unless they perform regulated CASP activities in practice. The European Commission is mandated to assess the need for further legislation on NFTs and DeFi, with potential proposals following the 2027 review.

DeFi and NFT projects face ongoing uncertainty. Decentralised protocols are mostly exempt, but any centralised element can trigger full MiCA obligations, which risks driving innovation outside the EU. MiCA should be viewed as a significant first step rather than a final, all-encompassing standard.

Frequently Asked Questions

Is my token a “crypto-asset” under MiCA or a financial instrument under MiFID II?

Classification depends on your token’s legal and economic features. If it grants rights similar to shares, bonds, or units in collective investment schemes, it may qualify as a financial instrument under MiFID II and fall outside MiCA’s scope. Borderline cases — revenue-sharing tokens, tokenised equity, or certain governance tokens — require case-by-case legal assessment, potentially with input from the relevant national competent authority.

Do I need a physical presence in the EU to provide crypto-asset services under MiCA?

Generally, yes. CASPs must be legal persons established in an EU member state to obtain MiCA authorisation and passport services across the EU/EEA. There is no comprehensive third-country regime for non-EU firms. Passive reverse solicitation is interpreted narrowly and cannot support a material business model. Over 30 non-EU firms established Irish or Luxembourg entities by early 2026 to access EU markets under MiCA.

How does MiCA affect decentralised finance (DeFi) protocols?

MiCA primarily targets identifiable issuers and service providers. Fully decentralised protocols with no central operator may fall outside its direct scope. However, front-end operators, developers, or intermediaries who effectively provide crypto services to EU users could be regarded as CASPs. The European Commission and ESMA are studying DeFi and may propose tailored regulatory approaches based on mandated reviews.

Are existing EU VASP registrations automatically converted into MiCA CASP licences?

No. Existing virtual asset service provider registrations under national AML laws do not automatically become MiCA authorisations. Member states may allow transitional periods for registered VASPs to continue operating while applying for MiCA authorisation. Passporting rights only arise once a full CASP licence is granted. Firms currently registered as VASPs should plan early for the authorisation process to avoid bottlenecks near transitional deadlines.

Can European traders still use USDT after MiCA implementation?

It depends on individual exchange policies and Tether’s compliance status. As of early 2026, some platforms have restricted USDT trading for European residents while others maintain availability pending regulatory clarity. MiCA-compliant alternatives such as USDC and EURC provide similar functionality with regulatory certainty. Traders should verify their specific exchange’s policies and monitor announcements regarding stablecoin compliance.

What consumer protections does MiCA actually give retail investors?

MiCA improves transparency through mandatory white papers, standardised disclosures, and marketing communications rules, making it easier for users to understand crypto products and risks. CASPs must segregate client assets, maintain clear complaints procedures, and meet governance, prudential, and security standards. However, MiCA is not a guarantee against loss. Crypto assets remain volatile, projects can fail, and investors can lose all invested capital. Investor protection under MiCA means better information and operational safeguards, not investment guarantees.