MiCA transition ends; EU cracks down on unauthorized crypto

The transition period for the EU’s Markets in Crypto-Assets regulation ended on July 1. Crypto firms without MiCA authorization must stop serving EU clients or face multimillion-euro fines, enforcement actions and possible legal penalties. National competent authorities will authorize and supervise crypto-asset service providers. The European Securities and Markets Authority will coordinate cross-border supervision and maintain a public register of authorized firms. The European Banking Authority will directly oversee significant stablecoin issuers.

Unauthorized providers are expected to wind down EU operations or risk penalties. Nicola Massella, a partner at Storm Partners, estimated implementation costs for many companies at €350,000 to €600,000. Edwin Mata, chief executive of Brickken, estimated costs can reach €2 million depending on a company’s size and services. Eckehard Stolz, managing director of Amina EU, noted MiCA penalties start at €5 million or 5% of annual turnover for some breaches. The European Banking Authority proposed fines of up to 12.5% of turnover for certain stablecoin-related violations.

MiCA establishes a single EU rulebook, but day-to-day supervision and enforcement will be carried out by national competent authorities. ESMA’s role will focus on coordinating supervisory convergence between member states and keeping the register of authorized crypto-asset service providers.

Enforcement is likely to vary between countries in the short term because national authorities differ in staff levels, experience and priorities. Stolz noted ESMA expects national authorities to act against unauthorized providers from July 1 and that how aggressively each regulator moves will depend on local resourcing. Peter Bidewell of Parfin warned inconsistent enforcement could create opportunities for firms to seek more permissive national regimes.

Several national authorities have issued reminders. Regulators in the Czech Republic, Bulgaria, Luxembourg and Italy urged unauthorized providers to cease operations or apply for authorization. The Czech National Bank pointed to powers in its Financial Market Digitization Act that allow fines up to 118.5 million Czech koruna, 5% of annual turnover if higher, or twice the unlawful benefit obtained.

Regulators and industry lawyers expect enforcement to become more systematic over time as national authorities identify unauthorized providers, share information across borders and tighten cross-border oversight. Ivo Grlica, founder of GrlicaLaw and G Lab Advisors, noted that national enforcement can also lead to legal actions in courts and criminal systems where conduct causes harm.

Firms that wish to continue operating in the EU must complete authorization processes and meet capital, governance and consumer-protection requirements. ESMA and national authorities will publish and maintain the register of authorized firms to help market participants and supervisors track compliance.