Hardware FixRecommendedDevice not working? Your driver may be the problemCheck updates for common hardware issues.Fix DriversHalloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsSlow PC?RecommendedPC slow today? Run a repair scan before it gets worseResolve common Windows issues and optimize system performance.Scan Now×
FREEDOM251

Freedom251 › Blog › CASP authorisation

What MiCA Means for Crypto Exchanges and Their Customers in the EU (2026 Guide)

By Freedom251 Team · · 10 min read

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

MiCA is the EU’s framework for specified crypto-asset issuance and services. For an exchange, it means obtaining authorisation for each regulated service (or qualifying through a permitted financial-entity route), meeting conduct and custody requirements, and following EU-wide supervision and cross-border rules. For customers, it means clearer disclosures, a formal complaints process and defined custody safeguards—but not deposit insurance, guaranteed prices or protection from every loss. The checks that matter most are the legal entity serving you, the services it is authorised to provide and whether the particular asset and service remain available under current MiCA rules.

What MiCA covers—and what it does not

MiCA is Regulation (EU) 2023/1114. It regulates specified crypto-asset issuance and services in the European Union, including operating a trading platform, exchanging crypto-assets for funds or other crypto-assets, providing custody, transferring assets, giving advice and managing portfolios.

As an Amazon Associate I earn from qualifying purchases.

Its scope is not universal. The regulation contains exclusions, and the European Securities and Markets Authority (ESMA) has said that services delivered in a fully decentralised manner without an intermediary are outside MiCA’s scope. A token, protocol or crypto-related activity is therefore not automatically covered just because it is available to EU residents. The legal analysis depends on what the activity is and whether an intermediary performs a regulated service.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

A crypto-asset service provider (CASP) is an entity providing one or more of those regulated services. “Exchange” is a consumer label, not proof of a particular legal status. The company name shown in an app may differ from the legal entity that contracts with you, holds assets or processes withdrawals.

How MiCA changes an exchange’s legal position

Authorisation is tied to services

A provider generally needs MiCA authorisation to offer covered crypto-asset services in the Union, unless it qualifies through a financial-entity route specified by the regulation. The authorisation identifies the services permitted. A firm authorised for custody is not automatically authorised to operate a trading platform, provide advice or perform every other service.

This makes a provider-specific check essential. A familiar brand can operate through several legal entities, and an entity may have different permissions in different countries or for different products. Verify the exact contracting entity and the service you intend to use in the current official register and with the relevant national competent authority. A brand name alone is not evidence of authorisation.

Cross-border access after authorisation

Authorised CASPs can provide their authorised services across the Union under MiCA’s cross-border rules. That passporting framework can give customers a more consistent basis for comparing providers in different Member States, but it does not expand an authorisation beyond the services listed for that entity. It also does not remove national differences in complaint routes, enforcement contacts or transition history.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Supervision does not make crypto a bank deposit

MiCA is a conduct and market framework, not a promise that a crypto-asset will retain its value. An exchange account is not automatically equivalent to a bank account, and MiCA does not create a general guarantee for your balance. Price declines, token failures and losses outside a provider’s responsibility remain possible.

Rank #2
CRYO Crypto Seed Phrase Storage Notebook - Waterproof Bitcoin Recovery Phrase Crypto Password Keeper - 12 to 24 Word Cold Wallet Backup - Mnemonic Passphrase - Pocket Size 2-Pack
  • BACKUP YOUR CRYPTO SEED PHRASE - The CRYO crypto seed phrase storage notebook can easily store up to 40 recovery seed phrases (up to 24 words) for your crypto wallets and cold storage backup
  • WATER & TEAR RESISTANT - The CRYO crypto password keeper is made from premium, durable stone paper designed to protect against water damage
  • STORE YOUR PASSWORDS, LOGINS AND USERNAMES - Store up to 48 cryptocurrency website and app logins including url, email, username, and password
  • POCKET SIZE, DURABLE & DISCREET - the seed phrase notebook easily fits into a pocket or purse. The front and back covers also contain additional pockets to store additional documents
  • 2 RECOVERY PHRASE BACKUP BOOKS INCLUDED - Keep one handy and the other in a separate, safe location

Customer-facing conduct rules

Honest, fair and professional treatment

Article 66 states: “Crypto-asset service providers shall act honestly, fairly and professionally in accordance with the best interests of their clients and prospective clients.” This is a legal conduct obligation, not a prediction that an asset is safe or profitable.

CASPs must provide information that is fair, clear and not misleading, explain relevant crypto-asset risks and make required white papers available or link to them for services where that information is relevant. Fee information and the practical conditions of a service should be understandable before you trade, transfer or place assets in custody.

What the rule does not require

Risk warnings do not eliminate risk, and a compliant communication is not investment advice. MiCA does not require an exchange to protect you from market volatility or to ensure that every listed token succeeds. Treat regulatory status as information about the provider’s obligations, not as an endorsement of a particular asset.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Custody: safeguards with defined limits

Segregation and use of client assets

Where a CASP holds crypto-assets for clients, MiCA requires safeguards for clients’ rights and restricts the provider from using client assets for its own account. Custodians must segregate client holdings and keep records that identify each client’s position. The custody agreement should describe the parties’ duties, the custody policy, communications, security systems, fees and applicable law.

Statements and records

A custody provider must maintain client position records and provide an electronic statement at least every three months and whenever the client requests one. Check whether statements show the assets held, relevant transactions and any restrictions that affect transfers. Keep your own transaction records so you can reconcile the provider’s statement.

Liability for attributable loss

A custodian is liable for a loss attributable to it, with liability capped at the market value of the asset when it was lost. That rule is a defined responsibility, not a no-loss guarantee. It does not turn a market decline into a compensable custody loss, and it does not promise recovery for every cyber incident, insolvency event or error that falls outside the provider’s attributable responsibility.

Complaints and regulatory routes

Complaining to the CASP

CASPs must maintain and publish a complaints procedure. Customers can complain without paying a fee; the provider must accept and investigate complaints fairly and promptly and communicate the outcome within a reasonable period. Save the complaint, attachments, transaction identifiers and the provider’s response. Use the channel and format specified in the provider’s published procedure so there is a clear record.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Contacting a competent authority

If you allege an infringement of MiCA rather than simply seeking customer service, consult the complaint procedure of the competent authority for the provider and jurisdiction. Which authority applies depends on the legal entity and country. An authority’s process is separate from the provider’s internal complaint route and may not provide the same remedy as a contractual dispute process.

The transition deadline for legacy providers

Article 143 allowed certain providers already operating lawfully before 30 December 2024 to continue during a transition. Member States could shorten or remove that period, so customers could encounter an earlier national deadline. ESMA stated that the outer EU-wide transition expired on 1 July 2026.

After that date, an entity providing covered EU services without a MiCA licence is in breach and must cease those services and wind down. ESMA’s 17 April 2026 statement expected an orderly process and migration of clients. If a provider is winding down, follow its notices and deadlines rather than waiting for access to fail.

Possible offboarding arrangements

ESMA identifies transfer to another authorised CASP or transfer to a self-hosted wallet as examples of possible arrangements. A self-hosted wallet means you control the keys; it is not a recommendation that every customer self-custody, and buying a hardware wallet is not required by MiCA or a guarantee of safety. Before moving assets, verify the destination address, network, fees, supported asset and any withdrawal limits.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Stablecoins and the October 2026 supervisory position

ESMA’s opinion dated 8 October 2026 is especially relevant to exchange users. It said MiCA-authorised CASPs should cease covered services for EU clients involving asset-referenced tokens (ARTs) or electronic-money tokens (EMTs) that do not comply with MiCA. The services named in the opinion include operating a platform, exchanging assets, executing orders, providing custody, transferring assets and giving advice.

This is not a statement that every stablecoin is banned. The issue is whether the particular ART or EMT complies with MiCA and whether the particular service remains permitted. Availability can therefore change even when an exchange itself remains authorised. Check the exchange’s current notice, the token’s status and the service involved before trading or transferring.

How to check whether your exchange is authorised

  1. Identify the contracting entity. Open the account agreement, legal notice or terms and record the company’s full legal name, registration details and country. Do not rely only on the app name, logo or domain.
  2. Find the entity in the official register. Confirm that the record is current and that it refers to the same legal entity. If you cannot match the details, ask the provider which entity serves EU customers.
  3. Match the permission to the service. Check whether the authorisation covers the activity you plan to use: custody, trading-platform operation, exchange, transfers, advice or portfolio management. A listing for one service does not prove permission for another.
  4. Check the EU activity. Confirm that the entity’s authorisation or cross-border notification covers service to customers in your Member State. National competent authorities can explain the applicable route.
  5. Check the asset and current notices. For a stablecoin, establish whether it is an ART or EMT subject to MiCA requirements and whether the exchange has announced restrictions. Asset availability is separate from the provider’s general authorisation.
  6. Save evidence. Keep a dated copy or screenshot of the register entry, terms, custody policy and relevant notices. Authorisation details and available services can change.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

What to inspect before leaving assets on an exchange

  • Custody agreement: look for duties, segregation, security systems, fees, applicable law and how assets are returned.
  • Position reporting: confirm that electronic statements are available at least quarterly and on request, and that you can identify each holding.
  • Risk and fee disclosures: check that warnings, spreads, transaction fees, withdrawal charges and service limitations are presented clearly before execution.
  • Complaints: locate the free internal procedure, response expectations and the competent authority’s route for alleged regulatory breaches.
  • Portability: understand withdrawal networks, address requirements, transfer limits and what happens if the provider winds down.

A practical comparison framework for EU customers

Compare exchanges on the same service and asset rather than on brand recognition or headline fees.

Comparison area Questions to ask Why it matters under MiCA
Authorisation What legal entity serves me? Which regulator and authorised services are listed? Authorisation is entity- and service-specific; a brand name is not proof.
Custody Are holdings segregated? What does the custody agreement say? How often are statements issued? MiCA sets custody safeguards, records and attributable-loss liability, but not blanket protection.
Customer service Are risks and fees clear? Is the complaint process published, free and accessible? Conduct and complaint duties affect the information and recourse available to customers.
Asset availability Is the specific token, stablecoin and service currently offered to EU clients? Stablecoin compliance and supervisory guidance can change what may be offered.
Exit and portability How can I withdraw or transfer? What notices and deadlines apply during a wind-down? Migration may involve another authorised CASP or a self-hosted wallet, subject to practical constraints.

What MiCA still does not protect you from

  • Market losses: MiCA does not guarantee a token’s price or investment performance.
  • Every operational incident: custody liability is tied to loss attributable to the custodian and capped at the asset’s market value when lost.
  • Bank-deposit risk assumptions: an exchange balance is not automatically covered like a bank deposit.
  • Unregulated activity: fully decentralised activity without an intermediary can fall outside MiCA, and a provider offering a service without the required authorisation is not made compliant by displaying a familiar brand.
  • Permanent product availability: an authorised CASP may stop supporting an asset or service when legal requirements or supervisory guidance change.

If your provider is unauthorised or announces a wind-down

  1. Read the provider’s official notice for the exact entity, affected services, deadline and withdrawal instructions.
  2. Stop opening new positions if the notice or regulator says services must cease; do not assume that a pending order or deposit will be processed normally.
  3. Verify whether the proposed destination is an authorised CASP and whether it supports the same asset and network.
  4. For self-hosted withdrawal, test the address and network with a small amount when practical, and retain transaction hashes and confirmations.
  5. Keep copies of statements, custody terms, notices and complaint correspondence in case reconciliation or a claim is needed.
  6. Use the provider’s free complaint process for a service dispute and the relevant competent authority’s procedure for an alleged MiCA infringement.

The dates that frame the current position

Date Event Customer significance
30 December 2024 Cut-off for a qualifying legacy provider to have been operating lawfully under applicable law for Article 143 transition eligibility. A provider that began later could not rely on that grandfathering route.
1 July 2026 Outer EU-wide transition expiry stated by ESMA. After this date, an unauthorised provider must cease covered EU services and wind down; a Member State may have imposed an earlier deadline.
8 October 2026 ESMA opinion on services involving non-compliant ARTs and EMTs. MiCA-authorised CASPs should cease covered services to EU clients involving those non-compliant tokens.

As of 17 October 2026, these dates and the October stablecoin opinion are current reference points, but supervisory guidance and technical standards can develop. Recheck the official register, national authority information and the provider’s latest notices when making a decision.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Bottom line for exchange users

MiCA gives EU customers a framework for checking who provides a crypto service, what that provider is authorised to do, how custody should be organised and how complaints can be handled. It does not turn crypto into a guaranteed investment or an insured bank deposit. The safest practical approach is to verify the legal entity and service authorisation, read the custody and fee terms, confirm the specific asset’s current availability, keep independent records and understand your withdrawal options before a provider’s status changes.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

CASP authorisationconsumer protectioncrypto custodycrypto exchangesEU crypto regulationMiCAStablecoins

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Recommended PC Tool
Recommended PC Tool
Windows Errors? Fix Them Before They SpreadFree repair scan
Outdated Drivers Are Slowing You DownFree scan - exact matches

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.