Crypto · Intermediate · 4 min

Regulation: MiCA and beyond

You can explain what the EU's MiCA regulation covers, its key dates, and how to check whether a crypto provider is authorized.

One rulebook

For years, crypto in Europe was regulated country by country, or barely at all. A provider could be strictly supervised in one country and almost unregulated in the next.

The EU's Markets in Crypto-Assets regulation, known as MiCA, replaced that patchwork with one set of rules for the whole union. This lesson explains what it covers, its key dates, and what it means for you as a customer.

Authorize, separate, disclose

MiCA is the EU regulation for crypto assets that are not already covered by existing financial rules. It sets rules for two groups:

Issuers of crypto assets, with special rules for stablecoins: e-money tokens and asset-referenced tokens, including reserves and redemption rights.
Crypto-asset service providers. A crypto-asset service provider, or CASP, offers services such as custody, trading platforms, exchange between crypto and money, or advice. CASPs need an authorization from a national authority, and can then serve clients across the EU.

Among other things, CASPs must keep client assets separate from their own, inform clients about risks and costs, and handle complaints.

The key dates, as ESMA and the European supervisory authorities describe them:

MiCA entered into force in June 2023.
The stablecoin rules apply since 30 June 2024.
The rest applies since 30 December 2024.
Firms already active before that could continue under national transition rules until 1 July 2026 at the latest. ESMA then called on unauthorized providers to stop onboarding EU clients and wind down their EU business in an orderly way.

Outside the EU, rules differ widely. In the US, several authorities share responsibility, and some products such as spot bitcoin ETPs are regulated as securities products while the underlying coins are not. Many offshore platforms are regulated weakly or not at all.

MiCA regulates providers, not prices. It makes firms more accountable and transparent, but it does not protect anyone from the volatility of crypto assets.

Not in the register

A fictional app advertises crypto trading to customers in Germany.

Its website mentions a company registered on a distant island and a "global license".
ESMA's register of MiCA-authorized providers does not list it, and neither does the German regulator's database.
Since July 2026, a provider serving EU clients without authorization is a clear red flag.

The same checks from the rubric on accounts apply: legal name, official register, matching contact details, warning lists.

Common mistakes

"Regulated means safe." MiCA governs providers, not price risk.
Trusting license claims on websites. Check the official registers yourself.
Assuming all crypto is covered. Some assets and decentralized services fall outside MiCA.
Ignoring where the provider is based. Offshore entities may not be covered at all.

The takeaway

MiCA is the EU's rulebook for crypto issuers and service providers. Since July 2026, providers in the EU need authorization. Check the register.

Check yourself

Quick quiz

4 questions. Instant feedback, nothing is saved.

1Tap the date after which unauthorized crypto providers had to wind down their EU business.

Tap the chart.

The transition period for existing providers ended on 1 July 2026. ESMA called on unauthorized firms to stop onboarding EU clients and wind down.
2What is a crypto-asset service provider (CASP) under MiCA?

CASPs need an authorization from a national authority and can then passport their services across the EU.
3Does MiCA protect you from losing money when crypto prices fall?

MiCA sets rules for disclosure, custody and conduct. Market risk stays with you.
4Where can you check whether a crypto provider is authorized in the EU?

As in the lesson on regulation, check the official register, not the provider's claims.

of 4 correct.