EU MiCA Regulation Explained: Crypto Rules, Stablecoins and Exchange Licensing in 2026

The Markets in Crypto-Assets Regulation, better known as MiCA, has moved into a very different phase in 2026.

For several years, the regulation was discussed mainly in terms of implementation dates, licence applications and transitional arrangements. That period is largely over.

The stablecoin provisions have applied since June 30, 2024. Most of the remaining regulation has applied since December 30, 2024. And on July 1, 2026, the longest possible transitional period for crypto-asset service providers came to an end.

For exchanges, custodians and other crypto businesses serving EU customers, the central question is therefore no longer:

Is this company preparing for MiCA？

It is:

Which legal entity serves the customer, is that entity authorised under MiCA, and which services is it authorised to provide？

That distinction is more important than the licence badge shown in an exchange footer.

A global crypto brand may operate through one MiCA-authorised European company, a separate UK entity, Middle Eastern entities and offshore companies. MiCA protections attach to the authorised legal entity and the services covered by its authorisation — not automatically to every company using the same brand.

For users, this makes MiCA more practical than it may initially appear. Regulatory claims can increasingly be verified against official registers rather than accepted as marketing statements.

MiCA in 2026: the transition period is over

MiCA is Regulation (EU) 2023/1114.

The core timeline is now straightforward:

Article 143 allowed some firms that had already been lawfully providing crypto-asset services before December 30, 2024 to continue temporarily under national transitional arrangements.

That permission could last no later than July 1, 2026.

Member States could also shorten the period or decline to use the full grandfathering regime.

This created an important distinction during 2025 and the first half of 2026:

Operating legally under a national transitional arrangement was not the same thing as being authorised under MiCA.

That distinction now matters even more.

After July 1, 2026, ESMA stated that firms providing services that require MiCA authorisation cannot continue relying on the general EU transitional regime. Providers without the required authorisation are expected to cease the relevant services unless another valid legal basis applies.

Primary sources:

• MiCA Article 143 — Transitional measures
• ESMA statement on the end of MiCA transitional periods

Why MiCA was introduced

Before MiCA, crypto regulation across the European Union was fragmented.

Some Member States had relatively developed virtual-asset registration systems. Others focused primarily on anti-money-laundering supervision.

As a result, two exchanges could both say they were “registered in Europe” while operating under substantially different requirements.

A national AML registration did not necessarily mean a company had undergone equivalent review of:

• governance;
• capital;
• custody;
• client-asset safeguarding;
• complaints handling;
• market conduct;
• operational resilience.

MiCA creates a more harmonised framework for large parts of the EU crypto market.

It covers areas including:

• issuance of certain crypto assets;
• asset-referenced tokens;
• e-money tokens;
• crypto-asset service providers;
• custody;
• exchange services;
• trading platforms;
• transfer services;
• crypto-asset white papers;
• marketing communications;
• market abuse;
• cross-border provision of crypto services.

But MiCA does not regulate everything involving blockchain technology.

The legal classification of the asset and service still comes first.

Primary source:

Regulation (EU) 2023/1114 on markets in crypto-assets

Which crypto assets does MiCA cover？

MiCA does not place every token into one regulatory category.

Three groups are especially important.

Crypto assets other than ARTs and EMTs

This broad category includes many crypto assets that:

• are not asset-referenced tokens;
• are not e-money tokens; and
• do not already qualify as products such as financial instruments under another EU regime.

Depending on the circumstances, MiCA can impose requirements involving:

• crypto-asset white papers;
• disclosures;
• marketing communications;
• liability for misleading information;
• admission to trading.

One point is particularly important for investors:

A MiCA crypto-asset white paper is not an EU regulatory endorsement of the token.

Where the relevant MiCA provisions apply, the white paper must itself make clear that it has not been approved by a competent authority and that responsibility for its content belongs to the relevant issuer, offeror or other responsible party.

A project should therefore not market the existence of a MiCA white paper as evidence that regulators believe the token is safe or likely to increase in value.

Asset-referenced tokens

An asset-referenced token, or ART, seeks to maintain a stable value by referencing another value, right, asset or combination of assets.

MiCA applies a substantially more demanding regime to these tokens than to many ordinary crypto assets.

Relevant requirements can include:

• authorisation;
• governance;
• reserve assets;
• custody of reserves;
• investment of reserve assets;
• redemption;
• disclosure;
• recovery planning.

The useful question is therefore not simply whether an ART maintains its target value.

Users should ask:

Who issues it？

What backs it？

Where are the reserves held？

What redemption rights exist？

What happens if the issuer comes under stress？

E-money tokens

An e-money token, or EMT, seeks to maintain a stable value by referencing one official currency.

This category is particularly important for fiat-linked stablecoins.

An issuer offering an EMT to the public in the EU or seeking admission to trading generally needs to fall within the permitted institutional framework, including authorisation as a credit institution or electronic money institution where required.

MiCA also provides redemption rights and restricts the granting of interest in connection with e-money tokens under the relevant provisions.

This is why statements such as:

“MiCA banned Stablecoin X”

can be misleading.

A proper analysis needs to distinguish:

• the token's legal classification;
• the issuer's status;
• where the token is offered;
• whether it is admitted to trading;
• obligations imposed on the platform;
• any independent commercial decision made by an exchange.

If an exchange delists a stablecoin, that does not by itself establish an EU-wide prohibition.

Significant stablecoins face additional supervision

MiCA applies enhanced requirements when certain ARTs or EMTs become sufficiently significant.

Relevant criteria include factors such as:

• number of holders;
• size of issuance or reserves;
• transaction volume and value;
• cross-border usage;
• interconnectedness;
• implications for financial stability.

Significant tokens can become subject to enhanced requirements and more direct supervisory involvement from the European Banking Authority.

The regulatory logic is straightforward.

A stablecoin used at sufficient scale can become more than a crypto trading instrument.

It can also become part of the payments and settlement infrastructure of the wider economy.

What MiCA changes for crypto exchanges

For exchanges and custodians, the central regulatory concept is the Crypto-Asset Service Provider, or CASP.

MiCA identifies ten crypto-asset services.

This creates one of the most important rules for checking an exchange's licence:

MiCA authorisation is not just a yes/no badge.

The authorised service scope matters.

A company could be authorised to provide custody and exchange services without necessarily being authorised for every activity associated with the wider brand.

And some products — particularly certain tokenised securities or derivatives — may fall under existing EU securities law instead of the ordinary MiCA crypto-asset regime.

When checking an exchange, ask:

• Which legal entity is authorised？
• Which national regulator granted the authorisation？
• Which MiCA services are listed？
• Which entity appears in the customer's agreement？
• Is the product actually covered by MiCA？

MiCA authorisation is more substantial than an AML registration

Obtaining CASP authorisation requires more than registering a company for anti-money-laundering supervision.

Applicants must provide substantial information to their home-state competent authority.

The framework covers areas including:

• programme of operations;
• governance;
• management suitability;
• qualifying shareholders;
• prudential safeguards;
• safeguarding of client funds and crypto assets;
• ICT systems;
• business continuity;
• internal controls;
• conflicts of interest;
• complaints handling;
• AML arrangements;
• policies relating to the individual services offered.

That is why a legacy VASP or AML registration should not automatically be marketed as equivalent to MiCA authorisation.

Minimum capital depends on the services provided

MiCA divides CASPs into different capital classes.

Class	Main service scope	Minimum capital
Class 1	Advice, execution, reception/transmission, placing, portfolio management, transfers	EUR 50,000
Class 2	Class 1 plus custody and/or exchange services	EUR 125,000
Class 3	Class 2 plus operation of a crypto trading platform	EUR 150,000

The EUR 150,000 figure is therefore relevant to operators of crypto-asset trading platforms.

But it should not be interpreted as the total amount of capital a major exchange necessarily needs.

MiCA's prudential framework also includes a fixed-overheads calculation, and the applicable safeguard can be higher than the basic minimum.

For a large crypto exchange, the effective requirement can therefore be materially greater than EUR 150,000.

Why MiCA passporting matters

One of MiCA's major commercial changes is passporting.

Once a CASP is authorised, it can provide its authorised services across EU Member States after completing the relevant cross-border notification process.

That substantially reduces the fragmentation of the pre-MiCA system.

But passporting belongs to the:

authorised legal entity

not automatically to the:

global brand

Consider a large international exchange group operating through:

• a French entity;
• a UK entity;
• a UAE entity;
• an offshore entity.

If the French company receives MiCA authorisation, that does not automatically place the UK, UAE and offshore companies under the same authorisation.

A customer still needs to know which company holds the account.

MiCA has meaningful client-asset safeguards

For customers, custody rules are among MiCA's most practical protections.

CASPs providing custody must maintain appropriate records and arrangements designed to protect client ownership rights.

Requirements include controls relating to:

• customer positions;
• custody policies;
• segregation;
• return of customer assets;
• protection against loss;
• separation of customer crypto from the provider's own assets.

The legal framework is also designed to protect crypto assets held in custody from claims by the CASP's general creditors under the applicable insolvency framework.

This can materially improve legal clarity compared with arrangements in which customer and corporate assets are poorly separated.

But it does not mean:

Every loss at a MiCA-authorised exchange must be reimbursed.

Different rules can apply to:

• investment losses;
• user mistakes;
• blockchain failures;
• events not attributable to the custodian;
• losses caused by the provider.

MiCA strengthens custody obligations.

It does not eliminate crypto risk.

MiCA does not create crypto deposit insurance

This point deserves separate emphasis.

A MiCA-authorised CASP is not the same thing as a bank.

Crypto assets do not automatically gain the protection of a bank deposit-guarantee scheme merely because they are held by a MiCA-authorised exchange.

Likewise, authorisation does not guarantee:

• asset prices;
• exchange profitability;
• continuous withdrawals;
• zero cyber risk;
• zero operational risk.

MiCA provides a stronger regulatory framework.

It is not a government guarantee against every form of loss.

White papers and crypto marketing are regulated

MiCA is not only an exchange-licensing regime.

It also introduces rules around crypto-asset disclosures and marketing.

Where a crypto-asset white paper is required, it must contain specified information about areas such as:

• project structure;
• technology;
• rights;
• risks;
• offer terms.

Marketing communications are also subject to rules.

They must, among other things:

• be identifiable as marketing;
• be fair and clear;
• not be misleading;
• remain consistent with the relevant white paper.

These provisions are no longer theoretical.

The Bitpanda enforcement case shows the next phase of MiCA

On August 14, 2026, Austria's Financial Market Authority announced a EUR 70,000 fine against Bitpanda GmbH for breaches of MiCA.

According to the regulator, the breaches included:

• failure to submit a required crypto-asset white paper within the prescribed period;
• publishing a marketing communication before the required white paper;
• omitting required statements and contact information from marketing material.

The Austrian regulator described the penal order as legally final.

This is significant because the case is not primarily about whether an exchange had a licence.

It concerns ongoing conduct after the regulatory framework became operational.

That is likely to become increasingly important in the next stage of MiCA.

Users and compliance teams should expect more attention on:

• white papers;
• advertising;
• client-asset safeguards;
• complaints handling;
• market conduct;
• cross-border activity;
• operational resilience.

Primary source:

Austrian FMA enforcement action against Bitpanda GmbH

MiCA also creates a crypto market-abuse regime

MiCA addresses more than licensing and custody.

It includes rules targeting:

• insider dealing;
• unlawful disclosure of inside information;
• market manipulation.

Persons professionally arranging or executing relevant crypto-asset transactions must maintain systems intended to prevent and detect market abuse and report suspicious activity where required.

Trading platforms also face requirements designed to support transparent, fair and orderly markets.

This represents an important shift in EU crypto supervision.

The question is no longer only:

Can this platform legally hold customer crypto？

It also increasingly includes:

How does the market itself operate？

Some blockchain assets remain outside MiCA

Despite its name, MiCA does not cover everything represented using distributed-ledger technology.

A token may already qualify as:

• a financial instrument;
• a deposit;
• a securitisation position;
• another product covered by existing EU financial-services law.

If so, another regulatory regime may apply.

This becomes particularly relevant for tokenised stocks, bonds and derivatives.

Calling an instrument a “token” does not determine the regulation that applies to it.

The underlying legal rights do.

NFTs are not automatically exempt

The statement:

“NFTs are outside MiCA”

is too broad.

Crypto assets that are genuinely unique and non-fungible can fall outside MiCA's ordinary scope.

But the label used by the issuer is not decisive.

A large collection of highly similar tokens that are economically interchangeable may require a different analysis.

Regulators look at substance, not simply whether the project writes “NFT” in its marketing.

DeFi is not automatically exempt either

MiCA contemplates situations in which crypto services are provided in a fully decentralised manner without an intermediary.

But describing a project as:

• DeFi;
• DAO;
• DEX;
• non-custodial;

does not determine the legal answer.

Relevant questions can include:

• Is there an identifiable operator？
• Who controls the front end？
• Who determines the service rules？
• Who can upgrade the contracts？
• Are EU users actively marketed to？
• Does anyone transmit or execute customer orders？
• Is customer crypto held by an intermediary？

A genuinely decentralised protocol and a website operated by a company that calls itself a DEX can present very different regulatory facts.

Reverse solicitation is not a general offshore loophole

MiCA includes a narrow mechanism allowing a third-country company to provide a service where an EU customer approaches the firm entirely on the customer's own exclusive initiative.

This is commonly called reverse solicitation.

It is deliberately narrow.

Article 61 makes clear that if a third-country firm — directly or through an affiliate, agent or other person acting on its behalf — solicits EU customers through advertising or promotion, the resulting business cannot simply be treated as client-initiated.

A disclaimer saying:

“All customers approached us voluntarily”

cannot override what actually happened.

An initial request for one service also does not create unlimited permission for the offshore company to market other crypto products to the customer.

Reverse solicitation should therefore not be viewed as a scalable substitute for MiCA authorisation.

Primary sources:

• MiCA Article 61
• ESMA Guidelines on reverse solicitation

MiCA is not the entire EU crypto rulebook

Another common mistake is to call every European crypto requirement “MiCA.”

MiCA is central, but other EU rules apply alongside it.

Crypto transfer traceability

Regulation (EU) 2023/1113 has applied since December 30, 2024.

It extends information requirements to relevant crypto-asset transfers and forms part of the EU framework for improving transaction traceability and AML/CFT controls.

For users, this helps explain why regulated exchanges increasingly request information about:

• destination exchanges;
• beneficiaries;
• self-hosted wallets;
• ownership of receiving addresses.

Primary source:

Regulation (EU) 2023/1113

Digital Operational Resilience

The Digital Operational Resilience Act, or DORA, has applied since January 17, 2025.

MiCA-authorised CASPs fall within its relevant operational-resilience framework.

DORA addresses areas including:

• ICT risk;
• incident management;
• resilience testing;
• business continuity;
• technology third-party risk.

Primary source:

Regulation (EU) 2022/2554 — DORA

The practical conclusion is:

MiCA authorisation does not mean a firm has completed every EU compliance obligation relevant to its business.

How to verify whether an exchange is actually MiCA-authorised

The verification process should begin with the legal entity.

Not the logo.

Not the exchange name.

Not a screenshot of a licence badge.

Step 1: Find the contracting entity

Open the:

• Terms of Service;
• User Agreement;
• regulatory disclosure;
• account agreement.

Identify the exact legal company serving the account.

For a global exchange, this may vary depending on where the customer lives.

Step 2: Search ESMA's MiCA register

ESMA maintains the EU's MiCA register.

It includes datasets covering:

• crypto-asset white papers;
• ART issuers;
• EMT issuers;
• authorised CASPs;
• non-compliant entities.

The register is updated regularly.

Official register:

ESMA MiCA page and Interim MiCA Register

Step 3: Match the exact company name

Do not search only for the brand.

For example:

CryptoExchange EU S.A.

and:

CryptoExchange Global Ltd.

can be two legally separate companies even if both operate under the same logo.

The authorised company should match the entity serving the account.

Step 4: Check the national regulator

CASPs receive authorisation through a national competent authority.

Verify the entity against that regulator's own register where available.

This gives a second source rather than relying only on an exchange's marketing page.

Step 5: Check the service scope

This step is frequently skipped.

Determine whether the entity is authorised for the services actually being used.

Possible services include:

• custody;
• operating a trading platform;
• crypto-fiat exchange;
• crypto-to-crypto exchange;
• transfers;
• execution;
• advice;
• portfolio management.

A CASP authorisation covering custody and exchange should not automatically be assumed to cover a different regulated activity.

Step 6: Check whether the product falls under MiCA at all

This is especially important for:

• tokenised stocks;
• securities;
• derivatives;
• certain structured products.

Some of these can fall under other EU financial-services regimes.

A MiCA licence is not a universal permission slip for every financial product a crypto group can build.

The verification chain should look like this

A stronger regulatory database follows:

Brand → Legal Entity → Regulator → Authorisation → Service Scope → Status → Effective Date → Official Source

The weak model is:

Brand → One licence found → Entire platform marked “regulated”

The second model is easier to build.

It is also much more likely to mislead users.

What MiCA means for exchanges

For exchanges, MiCA produces both costs and strategic benefits.

Higher compliance requirements

Firms need to invest in areas such as:

• governance;
• prudential safeguards;
• custody;
• asset segregation;
• disclosures;
• market-abuse controls;
• technology resilience;
• AML;
• complaints handling;
• cross-border compliance.

Higher barriers to entry

The older model of entering an EU market through relatively light national registration becomes more difficult to maintain for regulated crypto-asset services.

Easier expansion once authorised

An authorised CASP can use MiCA's harmonised framework and passporting mechanism to provide its authorised services across EU Member States after completing the required process.

Greater pressure for legal-entity transparency

Large exchange groups increasingly need to disclose:

• which company serves EU users;
• where it is authorised;
• what it may legally provide.

The phrase:

“We are regulated in Europe”

is becoming less informative.

What MiCA means for stablecoin issuers

For stablecoins, MiCA changes the competitive landscape more fundamentally.

Relevant factors increasingly include:

• issuer legal structure;
• authorisation;
• reserve quality;
• custody arrangements;
• liquidity;
• redemption rights;
• governance;
• disclosures;
• significant-token supervision.

Stablecoins therefore increasingly compete not only on:

• trading volume;
• exchange listings;
• liquidity;

but also on regulatory structure and redemption credibility.

What MiCA means for ordinary users

The most useful benefit is not that crypto becomes safe.

It is that users can ask better questions and increasingly verify the answers.

For an EU exchange account:

• Who legally operates it？
• Which regulator supervises that company？
• Is it in the ESMA register？
• Which services is it authorised to provide？
• How are customer assets safeguarded？
• Where are complaints submitted？

For a stablecoin:

• Who is the issuer？
• What regulatory category applies？
• What supports the token？
• Are redemption rights available？
• Is the issuer authorised where required？

These questions are much more useful than asking whether a familiar exchange logo “has MiCA.”

What MiCA does not guarantee

Several misconceptions are still worth avoiding.

MiCA does not make a token safe

BTC, ETH and other crypto assets can still lose substantial value.

MiCA does not make an exchange failure impossible

Governance, capital and safeguarding requirements can reduce certain risks without eliminating:

• cyber risk;
• liquidity risk;
• operational failures;
• business failure.

A white paper is not regulatory approval

A required MiCA white paper is fundamentally a disclosure document.

It does not mean regulators recommend the token.

MiCA is not a deposit guarantee

Crypto assets do not automatically gain bank-deposit protection.

One MiCA-authorised subsidiary does not regulate an entire international group

The legal entity matters.

The service scope matters.

The customer's agreement matters.

MiCA does not automatically govern every tokenised financial product

Some instruments fall under other EU financial-services legislation.

The practical conclusion is:

MiCA reduces some regulatory, governance, custody and market-structure risks. It does not eliminate crypto investment or business risk.

MiCA's most important 2026 shift is enforcement

The most important development in 2026 is not a new headline rule.

It is the change in regulatory phase.

The longest transitional period has ended.

CASPs are being supervised under the operational framework.

ESMA continues to maintain authorised-provider and non-compliant-entity data.

National regulators are beginning to publish enforcement actions under MiCA.

That means future MiCA analysis should move beyond simply counting licences.

The more useful areas to monitor are:

• enforcement decisions;
• misleading marketing;
• white-paper compliance;
• stablecoin supervision;
• client-asset safeguarding;
• market-abuse controls;
• cross-border activity;
• operational resilience;
• action against unauthorised providers.

MiCA is increasingly becoming ordinary financial supervision rather than a crypto policy project waiting to be implemented.

The longer-term change: from brand-level to entity-level regulation

One of MiCA's most important consequences may be how the crypto industry talks about regulation.

The old question was:

Does this exchange have a licence？

The more useful question is:

Which legal entity serves me, who regulates it, and which services is it authorised to provide？

That creates a better framework for comparing exchanges.

A regulatory database should not merely record:

Binance — Licensed

or:

Exchange X — Regulated in Europe

It should record:

Brand → Entity → Jurisdiction → Regulator → Authorisation Type → Service Scope → Status → Effective Date → Official Source

This structure is more complicated.

But it reflects the way regulatory protection actually works.

Conclusion

MiCA's significance is not that it suddenly made crypto “legal in Europe.”

Crypto activity existed before MiCA and was already subject to national and EU laws.

The real change is that large parts of the European crypto market now sit inside a much clearer common regulatory perimeter.

Crypto assets first need to be classified.

Stablecoin issuers face requirements around reserves, redemption and governance.

Crypto exchanges and custodians need authorisation matching the services they provide.

Customer assets must be safeguarded.

Marketing cannot be misleading.

Trading venues need systems addressing market abuse.

Offshore exchanges cannot use reverse solicitation as a general marketing route into the EU.

And after July 1, 2026, the longest general transitional period is over.

The practical test for any exchange claiming to be “MiCA regulated” is therefore straightforward:

Check the legal entity.

Check the ESMA register.

Check the national regulator.

Check the authorised services.

Check the company named in the customer agreement.

If those pieces match, the regulatory claim has substance.

If only the logo matches, it does not.

Frequently asked questions

What is MiCA？

MiCA is Regulation (EU) 2023/1114 on markets in crypto-assets.

It establishes an EU regulatory framework covering certain crypto assets, stablecoin issuers and crypto-asset service providers, including rules on authorisation, disclosures, safeguarding and market conduct.

When did MiCA start applying？

The main provisions governing asset-referenced tokens and e-money tokens began applying on June 30, 2024.

Most remaining MiCA provisions began applying on December 30, 2024.

When did the MiCA transitional period end？

The longest EU-level transitional period available to eligible pre-existing CASPs ended on July 1, 2026.

Some Member States had already used shorter transition periods.

Does an old national VASP registration still count as MiCA authorisation？

No.

A firm could previously operate temporarily under a qualifying national grandfathering arrangement without itself being MiCA-authorised.

After the relevant transition ends, the company needs the appropriate legal basis to continue providing regulated MiCA services.

How can I check whether an exchange has a MiCA licence？

Start with the exact legal entity in the exchange's User Agreement.

Then search that company in ESMA's MiCA register and confirm:

• home regulator;
• authorisation status;
• authorised services.

Where possible, cross-check the entity against the national regulator's register.

Can a MiCA-authorised exchange serve customers across the EU？

A MiCA-authorised legal entity can provide its authorised services across Member States after completing the relevant notification process.

The passport belongs to that authorised entity.

It does not automatically apply to every affiliate in the same exchange group.

Does MiCA cover crypto derivatives？

Not necessarily under the ordinary MiCA crypto-asset framework.

If a token or contract qualifies as a financial instrument, existing EU securities and derivatives rules may apply instead.

Classification needs to be checked product by product.

Does MiCA ban US-dollar stablecoins？

MiCA should not be reduced to a simple list of allowed and banned stablecoins.

The correct analysis depends on the token's classification, issuer status, offering and trading arrangements, exchange obligations and applicable regulatory requirements.

An exchange delisting a stablecoin does not by itself prove an EU-wide ban.

Are NFTs outside MiCA？

Genuinely unique and non-fungible crypto assets may fall outside MiCA's ordinary scope.

But the label “NFT” does not decide the issue. Large series of substantially similar or effectively interchangeable tokens can require further legal analysis.

Is DeFi outside MiCA？

Not automatically.

A fully decentralised service without an intermediary can raise different questions from an exchange or protocol with an identifiable operator, controlled front end or customer-facing intermediary.

The actual structure matters.

Can an offshore exchange use reverse solicitation to serve EU customers？

MiCA provides a narrow exception for services initiated entirely at an EU customer's own exclusive initiative.

It does not create a general right for offshore firms to advertise to EU customers and then label the resulting business “reverse solicitation.”

Does a MiCA white paper mean a regulator approved the token？

No.

A MiCA white paper is a regulatory disclosure document.

For relevant crypto assets, it must explicitly state that it has not been approved by an EU competent authority.

Does MiCA guarantee customer crypto？

No.

MiCA imposes safeguards relating to custody and segregation, but crypto is not automatically protected by a bank deposit-guarantee scheme.

Market, cyber, operational and business risks remain.

What is the best way to evaluate an exchange's EU regulatory status？

Use this chain:

Brand → Legal Entity → Regulator → Authorisation → Service Scope → Status → Customer Agreement

Do not stop after finding one licence associated with the brand.

Primary Official Sources

• Regulation (EU) 2023/1114 on markets in crypto-assets
• ESMA MiCA page and Interim MiCA Register
• MiCA Article 143: Transitional measures
• ESMA statement on the end of MiCA transitional periods
• MiCA Article 61: Services provided at the client's exclusive initiative
• ESMA Guidelines on reverse solicitation under MiCA
• Regulation (EU) 2023/1113 on crypto-asset transfer information
• Digital Operational Resilience Act — Regulation (EU) 2022/2554
• Austrian FMA: MiCA sanction against Bitpanda GmbH

Disclaimer: This article is for regulatory research and informational purposes only. It is not legal or investment advice. MiCA authorisations, service scopes and regulatory records can change, so current status should always be verified against ESMA and the relevant national competent authority.