Hardware FixRecommendedDevice not working? Your driver may be the problemCheck updates for common hardware issues.Fix DriversHalloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsSlow PC?RecommendedPC slow today? Run a repair scan before it gets worseResolve common Windows issues and optimize system performance.Scan Now×
FREEDOM251

Freedom251 › Blog › consumer protection

MiCA Crypto-Exchange Authorization FAQs: EU Country Coverage, Customer Protections and Transfers (2026)

By Freedom251 Team · · 8 min read

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Short answer: A crypto-asset service provider (CASP) authorized under the EU’s Markets in Crypto-Assets Regulation (MiCA) can generally provide the services named in its authorization across the European Union, including on a cross-border basis. That passporting right does not mean every exchange accepts customers in every country or offers every service there. Check the named provider and the exact service in the ESMA register and your national regulator’s records before depositing funds.

MiCA adds governance, capital, conduct, custody and consumer-protection duties, but it does not make crypto-assets risk-free or provide deposit-insurance-style repayment. The practical questions are therefore: is this provider authorized for the service I need, does it accept my country and account type, and how will it custody and return my assets?

As an Amazon Associate I earn from qualifying purchases.

What a MiCA authorization actually means

MiCA authorization is issued to a specific legal entity and must identify the crypto-asset services that entity is allowed to provide. It is not a blanket approval for every activity performed under an exchange’s brand. Article 59 requires the authorization to specify the permitted services, so a firm authorized for custody and transfer services is not automatically authorized for every other service listed in MiCA.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Authorization is also different from a promise that a platform will list a particular token, support a particular blockchain network, or onboard every type of customer. Those are provider-level business decisions subject to the provider’s terms, technical systems and risk controls.

Passporting across the EU

A CASP authorized in one Member State may provide the services covered by its authorization throughout the Union. It can do so through establishment or by exercising the freedom to provide services, without maintaining a physical office in every country where it serves clients.

This is a legal right for the authorized provider, not a customer-availability guarantee. A platform may exclude a country, limit service types by jurisdiction, decline certain account categories, or pause onboarding. Always verify the firm’s own eligibility page and the current register entry for your country.

How to check whether an exchange is MiCA-authorized

  1. Identify the legal entity. Record the company name shown in the platform’s legal terms, not just its trading name or logo.
  2. Search the ESMA register. Confirm that the entity appears as an authorized CASP and note the authorization date and listed services.
  3. Check your national regulator. Use the financial regulator’s register or warning notices to confirm the entity’s status in your jurisdiction.
  4. Match the service. Verify that the entry covers what you intend to do: custody, transfer, exchange, trading or another named service.
  5. Check customer eligibility separately. Read the provider’s country list, account-type restrictions, identity requirements and product exclusions.

A marketing statement such as “MiCA compliant” is not a substitute for a register entry. An unauthorised provider does not gain MiCA protections merely by serving people in the EU or by saying that an application is pending.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Which countries and customers are covered?

The passporting framework is Union-wide, so an authorized CASP can in principle serve clients in other EU Member States without a separate authorization in each host state. In practice, availability can differ by country, customer type and service. National implementation details, local restrictions, language support, banking arrangements and the provider’s own risk policy can all affect onboarding.

Rank #2
CRYO Crypto Seed Phrase Storage Notebook - Waterproof Bitcoin Recovery Phrase Crypto Password Keeper - 12 to 24 Word Cold Wallet Backup - Mnemonic Passphrase - Pocket Size 2-Pack
  • BACKUP YOUR CRYPTO SEED PHRASE - The CRYO crypto seed phrase storage notebook can easily store up to 40 recovery seed phrases (up to 24 words) for your crypto wallets and cold storage backup
  • WATER & TEAR RESISTANT - The CRYO crypto password keeper is made from premium, durable stone paper designed to protect against water damage
  • STORE YOUR PASSWORDS, LOGINS AND USERNAMES - Store up to 48 cryptocurrency website and app logins including url, email, username, and password
  • POCKET SIZE, DURABLE & DISCREET - the seed phrase notebook easily fits into a pocket or purse. The front and back covers also contain additional pockets to store additional documents
  • 2 RECOVERY PHRASE BACKUP BOOKS INCLUDED - Keep one handy and the other in a separate, safe location

Do not assume that a non-EU exchange becomes authorized because it has EU customers. ESMA’s public statement of 23 June 2026 says CASPs established outside the EU cannot provide MiCA services to EU clients or solicit them, subject only to the narrow reverse-solicitation regime. That exception is not a general cross-border marketing route and also applies in business-to-business situations.

What to verify before opening an account

  • Your country of residence is explicitly accepted.
  • Your customer category and account purpose are eligible.
  • The product is offered under the authorized EU entity, rather than an unrelated offshore company.
  • The service you need appears in the entity’s authorization.
  • Onboarding includes the applicable customer-due-diligence and anti-money-laundering checks.

What protections MiCA gives customers

Authorized CASPs must meet requirements covering governance, capital, orderly conduct and consumer information. Those rules improve accountability and operational discipline, but they do not guarantee that a token will retain value or that a trading strategy will be profitable.

Custody of client crypto-assets

When a CASP safeguards crypto-assets for clients, its custody duties include maintaining records of each client’s positions, protecting ownership rights, providing procedures for returning assets, and keeping client assets legally and operationally separate from the provider’s own holdings and estate. The provider must not use client assets for its own account.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

If crypto-assets are lost because of a circumstance attributable to the CASP, the CASP is liable up to the market value of the lost assets at the time the loss occurred. That is a liability rule, not an absolute guarantee: losses caused by market movements, a client’s own error, an external event outside the provider’s responsibility, or an asset’s collapse in value are not automatically reimbursed.

No deposit-guarantee equivalent

MiCA does not turn crypto into a bank deposit and does not create a universal scheme that repays customers whenever an exchange fails. Assets and services outside MiCA or other EU financial-services legislation may have limited or no consumer protection. The relevant protection depends on the activity, the provider’s authorization and the facts of the loss.

Can an exchange stop you withdrawing your coins?

For custody withdrawals, the European Commission’s answer published through ESMA on 18 February 2026 (ESMA_QA_2320) interprets the requirement to “return crypto-assets held” as returning the same type of crypto-asset that was held when the client requested the withdrawal.

An exchange may offer to convert that asset into fiat currency or another crypto-asset, but it cannot force the conversion as a substitute for returning the asset. The customer must request the alternative, and the provider must hold the authorization needed for that additional service.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Technical or legal controls can still delay a withdrawal. A provider may need to complete identity checks, investigate suspected fraud, comply with a lawful freeze, or wait for a network transaction to be processed. Those situations are different from unilaterally replacing the customer’s asset with cash. Read the platform’s stated limits, suspension conditions and complaint process before transferring funds.

When “buying” never delivers the crypto

A separate Commission answer published on 18 February 2026 (ESMA_QA_2550) says a service that lets customers “buy” a crypto-asset that is never delivered, while allowing them only and exclusively to receive its fiat value, is not permitted as a crypto-asset exchange service. Fiat settlement can be offered as a choice, but it cannot be the sole possible outcome of the transaction.

What transfer-service terms must disclose

For a CASP providing crypto-asset transfer services, the client agreement must identify the parties and explain the transfer modalities, security systems, fees and applicable law. These disclosures let you determine who is responsible for an instruction and what happens if a transfer fails.

MiCA’s high-level requirements do not tell every provider which networks to support or what it must charge. Before sending funds, read the exchange’s current instructions for:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • supported networks and token standards;
  • whether the destination address requires a memo, tag or other identifier;
  • minimum and maximum withdrawal amounts;
  • network and service fees, including how they can change;
  • processing times, confirmation thresholds and maintenance windows;
  • irreversible-address warnings and recovery policy for an incorrect network or address.

A transfer can be valid under the customer agreement and still fail if you select an unsupported network or omit a required destination tag. Start with a small test amount when the destination and network are unfamiliar, then retain the transaction hash and the provider’s confirmation.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

How to compare two MiCA-authorized exchanges

MiCA sets baseline duties; it does not rank platforms or guarantee identical service quality. Use the following comparison before choosing where to hold or transfer assets.

Decision point What to verify Why it matters
Authorization Legal entity, register status and named services Authorization is provider- and service-specific.
Availability Your residence, account type and product eligibility Passporting does not require a provider to accept every customer.
Custody Position records, segregation, return procedures and use of client assets These terms determine how assets are handled if the provider has financial or operational problems.
Withdrawals Same-asset return policy, supported networks and address rules Asset type and network compatibility affect whether you can move funds successfully.
Fees and timing Published transfer fees, limits, confirmations and maintenance conditions Costs and delays vary by provider and network.
Support and complaints Contact channels, response process and escalation route A documented process is important when a transfer is delayed or disputed.

What to do if your provider is unauthorised

ESMA’s 23 June 2026 statement reminds clients of unauthorised CASPs, whether EU or non-EU entities, that they do not benefit from MiCA safeguards, including client-asset protections. Verify the status promptly rather than waiting for a transition deadline or relying on a provider’s reassurance.

  1. Download your transaction history, balances, account statements and correspondence.
  2. Confirm the legal entity and status in the ESMA register and your national regulator’s records.
  3. Ask the provider for its withdrawal procedure and any documented restrictions.
  4. If withdrawals work, consider moving assets to an authorized CASP after checking the destination network and fees.
  5. Another option is a self-hosted wallet, where you control the private keys; this removes exchange custody but makes you responsible for backups, security and transaction accuracy.
  6. Report suspected misconduct to the relevant national regulator and preserve evidence for any complaint.

Moving to a self-hosted wallet is not the same as receiving regulatory protection. It changes who controls the keys and who bears the risk of loss.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Which tokens and services MiCA does not cover

The Joint European Supervisory Authorities’ consumer factsheet explains that MiCA excludes certain unique non-fungible crypto-assets, non-transferable tokens and crypto-assets already governed by existing financial-services legislation. A token or service outside MiCA is not automatically unlawful, but it may fall under a different regime or no EU financial-services regime at all.

Before relying on a protection, identify the asset and activity, then determine which law governs them. Crypto-assets and services outside MiCA or other EU financial-services legislation can involve significant risk and limited or no consumer protection.

A practical pre-transfer checklist

  • Have I identified the exact legal entity holding my account?
  • Is that entity listed as authorized, and does the entry cover custody or transfer services?
  • Is my country and account type accepted under the provider’s current terms?
  • Will the provider return the same asset type if I request a withdrawal?
  • Does the destination support the exact network and token standard selected?
  • Have I checked fees, minimums, tags or memos, confirmation requirements and processing times?
  • Do I understand which risks remain mine, including price volatility, address mistakes and self-custody security?

The Bottom Line

MiCA authorization is a useful verification point, not a guarantee of access, solvency or investment value. Match the legal entity and service in the registers, confirm your country’s eligibility, understand custody and same-asset withdrawal rights, and read the provider’s transfer terms before sending crypto.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

consumer protectioncrypto custodycrypto exchangesCrypto transfersEU regulationMiCA

Leave a Reply

Your email address will not be published. Required fields are marked *

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Recommended PC Tool
Recommended PC Tool
Crashes, No Sound, or Screen Glitches?Free driver scan
PC Slower Than It Used to Be?Free scan - under a minute

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.