MiCA explained: what the EU crypto rules mean for you

MiCA, the Markets in Crypto-Assets Regulation (Regulation (EU) 2023/1114), is the EU's rulebook for crypto assets that are not already covered by financial-services law. It requires firms that run crypto exchanges, hold crypto for clients or provide other crypto services to be authorised as crypto-asset service providers (CASPs), sets strict rules for issuers of stablecoins, and bans market abuse in crypto. It applies in full from 30 December 2024, and the transitional period for firms already operating ended on 1 July 2026 at the latest.

For you as a user, MiCA mainly changes who is allowed to serve you and what they must do with your assets. It does not make crypto prices any less volatile, and it does not compensate you if you lose money. Our broader guide to crypto scams and regulation covers fraud; this one goes through the regulation itself.

Risk warning: crypto assets are highly volatile. MiCA authorisation does not protect you against price falls, and crypto losses are not covered by any deposit or investor compensation scheme. You can lose all of the money you put in.

Why the EU created MiCA

Before MiCA, crypto rules in the EU were a patchwork. Some countries had their own licensing regimes, others had only anti-money-laundering registration, and a firm licensed in one country could not automatically serve another. Consumers had few protections, and failures such as FTX in November 2022 showed how much damage a poorly controlled platform could do.

The European Commission proposed MiCA in September 2020 as part of its digital finance package. It was published in the Official Journal on 9 June 2023 and entered into force on 29 June 2023. As a regulation, it applies directly in every member state rather than needing national laws to copy it, which is what allows a single licence to work across the EU.

The MiCA timeline

• September 2020: the Commission publishes its proposal.
• 9 June 2023: MiCA is published in the Official Journal.
• 29 June 2023: MiCA enters into force, but most of its rules do not yet apply.
• 30 June 2024: the rules for stablecoin issuers (asset-referenced tokens and e-money tokens) apply.
• 30 December 2024: the rest of MiCA applies, including the authorisation of crypto-asset service providers, white paper rules for other crypto assets and market abuse rules.
• Up to 1 July 2026: firms that were already providing crypto services under national law before 30 December 2024 could continue during a transitional period, until they were authorised or refused, or until 1 July 2026, whichever came first. Each member state could shorten the period or not apply it, and many did.

As of November 2026, that transitional window has closed in every member state. The EU's Transfer of Funds Regulation, which applies the travel rule to crypto transfers, also applied from 30 December 2024; see crypto KYC and the travel rule.

What MiCA covers: three kinds of crypto asset

MiCA sorts crypto assets into three groups, with different rules for each.

• E-money tokens (EMTs). Stablecoins that aim to keep a stable value by referring to one official currency, such as a euro or dollar stablecoin.
• Asset-referenced tokens (ARTs). Tokens that aim to keep a stable value by referring to another value or right, or a combination, such as a basket of currencies or commodities.
• Other crypto assets. Everything else in scope, including bitcoin, ether and most other tokens, plus utility tokens.

Our guide to stablecoins explains how stablecoins hold their value and how they have failed.

What is outside MiCA

• Crypto assets that are already financial instruments, such as tokenised shares, and derivatives on crypto, including crypto CFDs. These fall under MiFID II.
• Unique, non-fungible tokens (NFTs), broadly, unless they are in practice part of a large fungible series.
• Services provided in a fully decentralised way without any intermediary.
• Central bank digital currencies and certain other public-sector assets.

The CFD point matters for traders. A bitcoin CFD offered by an EU broker is regulated as a derivative, with ESMA-based leverage caps of 2:1 for retail clients, a 50% margin close-out rule and negative balance protection. See ESMA leverage limits and negative balance protection and crypto CFDs vs buying crypto.

Crypto-asset service providers (CASPs)

MiCA lists the crypto services that need authorisation. They include:

• holding and administering crypto assets for clients (custody);
• operating a crypto trading platform;
• exchanging crypto assets for money or for other crypto assets;
• executing orders for clients, and receiving and transmitting orders;
• placing crypto assets;
• giving advice on crypto assets and managing portfolios;
• providing transfer services for crypto assets on behalf of clients.

A firm can be authorised as a CASP by the regulator in its home member state, such as CySEC in Cyprus, BaFin in Germany or the AMF in France. Some already-regulated firms, such as banks and investment firms, can provide certain crypto services after notifying their regulator instead of applying for a separate CASP licence.

Passporting

Once authorised in one member state, a CASP can serve clients across the EU by notifying its home regulator, which passes the information on to the others. This is why you may see a provider supervised in one country actively serving clients in yours. It also means you need to check the home regulator's register, not only your own.

What an authorised CASP must do

The detailed rules are long, but the parts that matter most to clients are these.

• Act honestly, fairly and professionally in clients' best interests, and give information that is fair, clear and not misleading, including in marketing.
• Warn about risks. Clients must be told about the risks of crypto assets, and marketing must be identifiable as marketing.
• Hold minimum capital. MiCA sets permanent minimum capital by type of service: 50,000 euros for the lighter services, 125,000 euros for firms that provide custody or exchange crypto, and 150,000 euros for firms that operate a trading platform, or a share of fixed overheads if that is higher.
• Segregate client assets. Client crypto must be kept separate from the firm's own, and client money must be safeguarded. Client crypto held in custody should be legally protected from the firm's creditors if it fails.
• Custody policy and liability. A custodian must have a custody policy and is liable to clients for the loss of their crypto assets caused by incidents attributable to it, up to the market value of the assets lost.
• Manage conflicts of interest and disclose them.
• Handle complaints through a published procedure, free of charge to clients.
• Operational resilience. CASPs are also within scope of the EU's Digital Operational Resilience Act (DORA), which applies to financial firms' IT and cyber risk.
• Trading platform rules. Platforms must publish operating rules, assess the tokens they list, publish prices and volumes, and settle trades on-chain promptly where relevant.

None of this stops a CASP from failing. It makes failure less likely and should make the recovery of client assets more orderly if it happens.

Stablecoins under MiCA

The stablecoin rules are the strictest part of MiCA, and the part that changed most for users.

• E-money token issuers must be authorised as a credit institution or an electronic money institution, and must publish a white paper.
• Redemption at par. Holders of an e-money token have a right to redeem it from the issuer at any time, at par value, in the currency it references.
• No interest. Issuers, and CASPs, may not pay interest on e-money tokens or asset-referenced tokens, so a stablecoin cannot be marketed as a savings product.
• Reserves. Issuers must hold reserve assets backing the tokens, kept separate and invested conservatively, with a large share held as deposits at credit institutions.
• Significant tokens. Tokens that become large are classed as significant and supervised more closely, with the European Banking Authority taking a supervisory role.

Because CASPs may only offer tokens that meet MiCA's requirements, several large exchanges restricted EU users' access to stablecoins whose issuers were not authorised under MiCA around the time the full regime applied. Euro and dollar stablecoins from authorised issuers remain available.

Worked example: redemption at par versus selling on an exchange

Illustrative numbers only. You hold 5,000 units of a euro e-money token issued by an authorised e-money institution. During a period of market stress, the token trades on exchanges at 0.995 euros.

• Selling on an exchange: 5,000 x 0.995 = 4,975 euros, before the trading fee. Assume a fee of 0.10%, or about 4.98 euros, so you receive about 4,970.02 euros.
• Redeeming with the issuer: MiCA gives you the right to redeem at par, 5,000 euros, and the issuer must explain the conditions in its white paper. In practice, you may need an account with the issuer and to pass its identity checks, and the time and minimum amounts depend on its terms.

The right to redeem at par is what anchors an EU e-money token close to one euro. It does not protect you if the issuer itself fails or its reserves are lost, which is why reserve and supervision rules exist alongside it.

Market abuse and white papers

MiCA brings insider dealing, unlawful disclosure of inside information and market manipulation in crypto assets under EU law. Pump-and-dump schemes, wash trading and spreading false information to move a price are all prohibited within its scope, and trading platforms must have systems to detect and report suspicious activity. See crypto pump and dump schemes for how those schemes look in practice.

Most offers of crypto assets to the public, and applications to list them on a platform, need a crypto-asset white paper: a document with prescribed information about the project, the rights attached to the token and its risks. White papers are notified to regulators, not approved by them, so their existence does not mean a token has been vetted or is sound. Bitcoin, which has no issuer, needs no white paper from an issuer; platforms listing it take on the disclosure duties instead.

What MiCA does not do

It is just as important to understand the limits.

• No compensation scheme. If a CASP fails or you lose money, there is no MiCA equivalent of a deposit protection scheme or investor compensation fund.
• No protection from price falls. Authorisation is about how a firm is run, not what the assets are worth.
• No approval of tokens. A token listed on a licensed platform can still collapse.
• Little reach over decentralised finance. Fully decentralised protocols with no intermediary are largely outside its scope.
• No reach over firms outside the EU that illegally target EU residents, beyond enforcement action and warnings.
• Reverse solicitation is narrow. A non-EU firm may serve an EU client only at that client's own exclusive initiative, and cannot use that to market further products to them. If a firm contacted you first, reverse solicitation does not apply.

What changed for ordinary users

If you use crypto in the EU, the practical effects of MiCA include:

• providers you use should now appear on a regulator's register as authorised CASPs;
• more detailed onboarding, risk warnings and appropriateness questions for some services;
• clearer disclosure of fees and of how your assets are held;
• some tokens, especially certain stablecoins, are no longer available to EU users on authorised platforms;
• some services that existed under national rules closed or withdrew from certain countries.

How to check a crypto provider under MiCA

1. Find the legal entity that would serve you, from the terms and conditions or the website footer. Large groups often run several companies.
2. Check the national regulator's register in that entity's home member state, and ESMA's register of authorised CASPs. Our regulator registers page lists where to look.
3. Match the details. Company name, registration number, website domain and authorised services must match the entry. Clone firms copy real names; our guide on how to check a broker licence shows how to spot them.
4. Check the services. A firm authorised only to receive and transmit orders is not authorised to hold your crypto, for example.
5. Look for warnings. National regulators and ESMA publish warnings about unauthorised firms.
6. Read the custody terms. Find out whether your crypto is segregated, and whether it is lent out or staked on your behalf.

The UK is different

The UK is not part of MiCA. It has its own regime: crypto firms have needed FCA registration for anti-money-laundering purposes since January 2020, crypto promotions have followed FCA rules since October 2023, and the sale of crypto derivatives, including CFDs, to retail clients has been banned since January 2021. The UK is building a fuller crypto regime, so check the FCA website for the current position.

Common mistakes

• Assuming MiCA protects your money like a bank deposit. It does not; there is no compensation scheme.
• Believing a website that says "MiCA licensed" without checking the register yourself.
• Checking the wrong entity. The group may be authorised in one country while you are signed up with an unregulated affiliate elsewhere.
• Thinking a white paper means a token was approved. It is notified, not vetted.
• Treating stablecoins as savings. MiCA bans interest on them precisely so they are not marketed that way, and offers of "yield" usually involve lending or other risks.
• Assuming crypto CFDs fall under MiCA. They are MiFID II derivatives with different rules.

Frequently asked questions

When did MiCA come into force?

MiCA entered into force on 29 June 2023. Its stablecoin rules applied from 30 June 2024 and the rest, including the licensing of crypto-asset service providers, from 30 December 2024. Transitional arrangements for existing firms ended on 1 July 2026 at the latest.

Does MiCA protect my crypto if an exchange collapses?

It requires authorised firms to segregate and safeguard client assets, which should make recovery more orderly, and makes custodians liable for losses caused by incidents attributable to them. It does not provide a compensation scheme, and it cannot protect you from price falls.

Is a crypto CFD covered by MiCA?

No. Crypto CFDs are derivatives regulated under MiFID II, with ESMA-based retail leverage caps of 2:1, margin close-out and negative balance protection. MiCA covers crypto assets and services that are not already financial instruments.

What is a CASP?

A crypto-asset service provider: a firm authorised under MiCA to provide crypto services such as custody, running a trading platform, exchanging crypto, executing orders or giving advice. An authorised CASP can passport its licence across the EU.

Why can I no longer trade some stablecoins in the EU?

MiCA requires e-money token issuers to be authorised banks or e-money institutions and to meet reserve and redemption rules. Authorised platforms restricted stablecoins whose issuers did not meet those requirements for EU users.

How do I check if a crypto firm is authorised under MiCA?

Find the exact legal entity, then look it up on its home regulator's register and on ESMA's register of authorised CASPs. Make sure the name, number, website and services match. Our CySEC and ESMA glossary entries explain those regulators.