The European Union's Markets in Crypto-Assets Regulation (MiCA) reaches its final enforcement deadline on July 1, 2026. After that date, any crypto-asset service provider (CASP) operating in the EU without a full MiCA license must cease all services or face criminal penalties. As of late May 2026...
"We don't make money under the current MiCA license. But we're able to afford it because we're a big entity. For us, it's a long-term investment." — Ben Zhou, CEO, Bybit
The European Union's Markets in Crypto-Assets Regulation (MiCA) reaches its final enforcement deadline on July 1, 2026. After that date, any crypto-asset service provider (CASP) operating in the EU without a full MiCA license must cease all services or face criminal penalties. As of late May 2026, ESMA's interim register lists 204 authorized CASPs across the bloc, with 51 licensed in 2026 alone. An estimated 18% of previously operating European platforms have elected to shut down or exit the market rather than absorb compliance costs that range from €250,000 to €500,000 in the first year, according to research from Zitadelle AG and regional consultancies.
The deadline is not a theoretical concern. On April 17, 2026, ESMA issued a formal statement requiring all unlicensed providers to have credible, immediately executable wind-down plans in place before July 1. France's AMF has warned that operating after the deadline without authorization carries a two-year prison sentence and a €30,000 fine. The result is a two-speed market: large exchanges and traditional banks are absorbing the regulatory cost and expanding across borders via passporting, while smaller operators face an existential choice between heavy capital investment or exit.
MiCA entered into force on December 30, 2024, with a transitional grandfathering period allowing existing providers to continue operating while they applied for new licenses. That window closes on July 1, 2026, across all 27 EU member states.
ESMA's April 17 statement set explicit expectations. Unlicensed providers must have wind-down plans that are "operational, credible, and immediately executable." These plans must include advance client notification, arrangements to transfer crypto-assets to an authorized CASP or self-hosted wallet, and full compliance with EU conduct, prudential, and AML/CFT obligations. National competent authorities (NCAs) are expected to verify the existence and quality of these plans, and to take enforcement action against any unauthorized provider operating after the deadline.
For authorized providers, ESMA expects active onboarding of clients migrating from unlicensed entities, with all AML/CFT standards applied throughout the process.
The enforcement teeth vary by jurisdiction but are uniformly sharp. France's AMF has publicly reminded firms that unauthorized operation after July 1 can trigger a two-year prison sentence and a €30,000 fine. Germany's BaFin and other NCAs have issued similar warnings.
As of May 22, 2026, ESMA's interim MiCA register lists 204 authorized CASPs. Of these:
The register remains in interim form — published as CSV files — and will be formally integrated into ESMA's IT systems by mid-2026.
Prior to MiCA, France alone had 90 registered CASPs and 79 fully authorized providers under its national PSAN framework, according to the AMF's January 2026 data. Not all of those will survive the transition.
The major global exchanges have secured their positions. As of March 2026, fourteen exchanges had received full CASP authorization, according to industry tracking:
| Exchange | Licensing Jurisdiction | Status | |----------|----------------------|--------| | Coinbase | Luxembourg (CSSF) | Licensed, passporting EU-wide | | Bitstamp | Luxembourg | Licensed, passporting EU-wide | | Binance | France (AMF) | Licensed | | Kraken | Ireland | Licensed | | OKX | Malta | Licensed | | Crypto.com | Malta | Licensed | | Gemini | Malta | Licensed | | Bybit | Austria (FMA) | Licensed (May 2025) | | Bitpanda | Germany (BaFin) | Licensed | | SwissBorg | France (AMF) | Licensed (March 2026) |
Luxembourg has emerged as the preferred jurisdiction for firms seeking EU-wide passporting. Coinbase received its license from the CSSF and now operates across all 27 member states from a single authorization. Bitstamp, now owned by Robinhood, followed the same path.
SwissBorg, with one million registered users and $1.3 billion in assets under management, secured its French MiCA license in March 2026 and plans to migrate European operations from its Estonian entity to the new French CASP entity, initially targeting Germany, the Netherlands, Italy, and Spain.
According to research from Zitadelle AG and regional consultancies, approximately 18% of European platforms have chosen to shut down or exit the market entirely rather than pursue MiCA compliance. The figure reflects firms that made an explicit decision to stop serving EU clients, not those still in the application pipeline.
The exits are concentrated among smaller operators. SwissBorg COO Jeremy Baumann characterized the dynamic plainly: stricter MiCA standards would pressure weaker operators, leading to a market of "fewer but more resilient players."
The cost barrier is the primary driver. MiCA CASP licensing typically costs between €200,000 and €475,000 in the first year, with application quality identified as the main determinant of approval timelines, which run six to nine months on average. For startups and smaller exchanges, these figures represent a material portion of operating capital.
ESMA's framework leaves no middle ground. By July 1, a provider is either licensed, in a verified wind-down, or operating illegally.
The financial burden extends beyond licensing fees. MiCA requires:
First-year costs of €250,000 to €500,000 capture only the initial licensing phase. Ongoing annual compliance costs — staffing, technology, audits, regulatory reporting — add further operational overhead that smaller firms struggle to absorb.
The application process itself is demanding. France's AMF noted that "original versions of the files submitted to the AMF are rarely complete, and clarifications or substantial changes are often required." The four-month statutory review period frequently extends in practice.
MiCA has created a regulatory environment that traditional banks can navigate using existing compliance infrastructure. Several major European lenders have entered the market:
DZ Bank (Germany's second-largest bank) received BaFin authorization under MiCA in late December 2025 to roll out "meinKrypto," a retail crypto trading platform integrated into the VR Banking App used by Germany's cooperative banking network. The service offers trading in bitcoin, ether, litecoin, and cardano. According to DZ Bank data, over 71% of cooperative banks in Germany have expressed interest in providing crypto services to private customers through the platform.
Banca Sella became the first Italian bank authorized for crypto-asset services under MiCA, receiving Bank of Italy approval on May 27, 2026. The bank's initial offering covers custody, receipt, and transfer of digital assets for corporate and institutional clients, with a launch expected by end of 2026. Banca Sella is also a founding member of Qivalis, the consortium of 37 European banks building a MiCA-compliant euro stablecoin.
Trade Republic, the German neobroker, secured BaFin authorization, contributing to Germany's position as the most active jurisdiction for MiCA licensing. BaFin has authorized approximately 36% of all EU crypto service providers, according to regulatory tracking data.
The entry of traditional banks changes the competitive landscape. These institutions bring existing customer bases, established compliance teams, and lower marginal costs for adding crypto services to existing product suites — advantages that standalone crypto firms cannot match.
The stablecoin segment of MiCA reveals a bottleneck. As of early 2026:
France leads with four approved EMT issuers, followed by clusters in Malta, Lithuania, the Netherlands, and Luxembourg. Germany, Finland, Denmark, the Czech Republic, and Poland each host a single authorized issuer.
Notable issuers include Société Générale-Forge (SG Forge), which issues EURCV, a euro-denominated stablecoin backed 1:1 by euros in segregated custody, and Circle, which remains the only MiCA-licensed global stablecoin issuer after receiving EMI authorization from France's ACPR.
The complete absence of authorized ARTs — tokens referencing multiple assets or commodities — suggests that either demand is insufficient to justify the compliance cost or the regulatory requirements for ARTs are prohibitively complex. MiCA's ART framework imposes particularly stringent reserve, governance, and disclosure requirements.
MiCA's passporting mechanism — a single license granting access to 500 million consumers across 29 EEA states — has created jurisdictional competition among EU member states for licensing revenue and crypto-sector jobs.
Luxembourg has attracted the largest global brands. Coinbase, Bitstamp, and Clearstream have all licensed there, drawn by the CSSF's familiarity with financial services regulation and efficient passporting processes.
Malta hosts OKX, Crypto.com, Gemini, ZBX, and Bitpanda, building on its pre-MiCA positioning as a crypto-friendly jurisdiction — though tensions with ESMA over supervisory authority emerged in April 2026.
Germany leads by volume of authorizations. BaFin has processed the most CASP applications among EU regulators, driven partly by domestic demand from the cooperative banking sector.
France operates a dual-track system, with the AMF handling CASP authorizations and the ACPR overseeing stablecoin (EMT) issuers. The country had the largest pre-MiCA base of registered providers (90 CASPs plus 79 fully authorized DASPs as of January 2026).
Lithuania and Estonia, previously popular for their low-cost national registrations, face the steepest attrition as MiCA's uniform standards eliminate the regulatory arbitrage that attracted firms to those jurisdictions.
MiCA authorizes a specific set of crypto-asset services: custody, exchange, transfer, and advisory services for crypto-assets. It does not cover derivatives, tokenized securities, or fiat-to-stablecoin issuance.
This creates a structural profitability problem. Bybit CEO Ben Zhou stated in April 2026 that "we don't make money under the current MiCA license," adding that Bybit is "at least two years" from breaking even in Europe. The reason: the highest-margin crypto products — perpetual futures, options, leveraged tokens — require a MiFID II license (Markets in Financial Instruments Directive), and stablecoin-related services require an EMI (Electronic Money Institution) license.
Bybit confirmed it is applying for a MiFID II license with an estimated six-month timeline for EU derivatives trading. Other major exchanges face the same gap. The full regulatory stack for a competitive European crypto business in 2026 requires, at minimum:
Each license carries its own capital requirements, application timeline, and ongoing compliance costs. The cumulative burden favors large, well-capitalized firms and banks with existing MiFID and EMI authorizations.
MiCA's July 1 deadline represents the largest simultaneous regulatory enforcement event in the history of the crypto-asset industry. The regulation accomplishes what it set out to do: establish a unified licensing framework across the EU, eliminate regulatory arbitrage between member states, and impose financial-services-grade compliance standards on an industry that previously operated under a patchwork of national registrations.
The cost of that standardization is consolidation. The 18% exit rate will likely increase in the weeks following July 1, as firms that delayed their decisions face the reality of wind-down requirements. The firms that remain — 204 and counting — will operate in a market with high barriers to entry, significant ongoing compliance costs, and structural advantages for institutions that hold multiple license types.
The entry of traditional banks such as DZ Bank and Banca Sella signals a market where regulated finance and crypto converge not through disruption but through absorption. Banks are adding crypto to existing product suites at marginal cost, while standalone crypto firms must build bank-grade compliance from scratch.
The data suggests that MiCA is not just a licensing regime. It is a structural filter that will determine which business models survive in European digital asset markets for the next decade.