Tag: ESMA

  • EU Warns of Surge in Crypto Impersonation Scams During MiCA Transition

    EU Warns of Surge in Crypto Impersonation Scams During MiCA Transition

    EU regulators have issued a fresh warning to cryptocurrency users about a sharp increase in impersonation scams following the conclusion of the MiCA (Markets in Crypto-Assets) transition period on July 1, 2026. Fraudsters across Europe are posing as regulators and authorized crypto firms, targeting customers of platforms that failed to secure MiCA approval.

    These criminals use fake emails, websites, and official-looking documents to trick victims into moving funds or sharing sensitive information. The European Securities and Markets Authority (ESMA) has specifically flagged fraudulent messages that misuse its name and branding.

    In a post on its official LinkedIn account, ESMA stated: “ESMA does not request personal data or payments through unsolicited emails.” The regulator urged users to verify any suspicious communication before taking action.

    France’s financial regulator, the Autorité des Marchés Financiers (AMF), has reported similar incidents where scammers impersonated its staff, directing victims to bogus websites and asking them to transfer crypto assets.

    By late July, ESMA’s official register listed 323 authorized crypto firms. However, more than 1,700 unlicensed firms could face closure or relocation, creating confusion that scammers are exploiting. Users searching for new regulated platforms are particularly vulnerable.

    To stay safe, regulators advise always checking a provider’s legal name against the official ESMA register before transferring funds. Avoid clicking links from unexpected emails, calls, or social media messages. Legitimate authorities will never ask for seed phrases, private keys, passwords, or payments via unsolicited communications.

    The MiCA transition aims to strengthen crypto market oversight, but fraudsters are taking advantage of the resulting uncertainty. Remaining vigilant is crucial.

  • ESMA Launches EU-Wide Crypto Custody Review Following MiCA Deadline

    ESMA Launches EU-Wide Crypto Custody Review Following MiCA Deadline

    The European Securities and Markets Authority (ESMA) has initiated a comprehensive review of licensed crypto custody providers across the European Union, just days after the full implementation of the Markets in Crypto-Assets (MiCA) regulation on July 1, 2026. Announced on July 8, 2026, this Common Supervisory Action (CSA) marks a significant shift from the licensing phase to ongoing compliance and supervision in the crypto sector.

    ESMA’s review will focus on how authorized crypto-asset service providers (CASPs) safeguard client assets through secure custody practices, operational resilience, and risk management. National regulators will inspect a risk-based sample of licensed firms during the assessment period, running from the second half of 2026 through the first half of 2027.

    Key Areas of Assessment

    The supervisory action will examine several critical aspects of crypto custody operations under MiCA:

    • Governance arrangements – How firms manage and oversee custody processes.
    • Private key management – Security measures for controlling access to client assets.
    • Storage controls – Physical and logical safeguards for digital asset storage.
    • Transaction monitoring – Systems for detecting and reporting suspicious activities.
    • Incident detection procedures – Protocols for identifying and responding to security breaches.
    • Smart contract risks – Assessment of vulnerabilities in automated agreements.
    • Third-party reliance – Evaluation of technology providers supporting custody operations.

    Post-MiCA Transition Period

    The review follows the expiration of MiCA’s transitional period on July 1, 2026. From that date, any company offering crypto services in the EU without proper MiCA authorization is violating EU law. ESMA has instructed unauthorized firms to cease operations and implement orderly wind-down plans, which must include notifying clients and allowing them to transfer assets to an authorized provider or a self-hosted wallet. Additionally, MiCA prohibits authorized firms from outsourcing custody services to entities lacking CASP authorization.

    No New Obligations, But Higher Scrutiny

    ESMA confirmed that the review introduces no new custody obligations. Instead, regulators will assess whether licensed firms already meet the operational standards established under MiCA. Custody providers remain liable for client asset losses resulting from incidents attributable to them, with liability capped at the market value of the lost assets. The review aims to ensure firms have robust controls to reduce operational failures and protect customer holdings.

    According to CoinPaprika data cited by ESMA, the global cryptocurrency market stood at approximately $2.25 trillion on July 8, 2026, after a 2% decline in the previous 24 hours. This substantial market value underscores the importance of secure custody practices.

    Future Implications

    The Common Supervisory Action will continue until the first half of 2027. ESMA will then compile its findings into a report for its Board of Supervisors during the second half of 2027. The results, which will not identify individual firms, will guide how national regulators apply MiCA standards and supervise crypto custody providers across the EU. This coordinated effort aims to ensure consistent supervisory practices and strengthen the overall security of the European crypto market.

  • MiCA Deadline Forces Thousands of European Crypto Firms to Shut Down

    MiCA Deadline Forces Thousands of European Crypto Firms to Shut Down

    Crypto companies across Europe are reaching the end of the MiCA transition period, with July 1 marking the point when older national registrations will no longer be enough to stay in business. From that date, only firms that secured a MiCA license can continue offering crypto services across the region, placing many existing operators under pressure.

    Industry figures show the gap between previously registered firms and those that completed the new licensing process. More than 3,000 virtual asset service providers (VASPs) were registered before MiCA, yet only 244 have obtained authorization as crypto-asset service providers (CASPs). Meanwhile, the European Securities and Markets Authority has instructed firms without approval to wind down their activities in an orderly manner while protecting customer assets.

    MiCA Deadline Leaves Many Firms Without Authorization

    MiCA became fully applicable across Europe after introducing stablecoin rules in June 2024 and broader crypto regulations later that year. Existing providers were granted a transition period that expires on July 1, allowing time to obtain authorization from national regulators. Licensed firms can then operate throughout the European Economic Area, which includes the European Union, Norway, Iceland, and Liechtenstein.

    Meanwhile, the European Securities and Markets Authority (ESMA) has instructed unauthorized crypto firms to close their operations in an orderly manner once the transition period ends. The regulator also asked companies to safeguard customer assets during the process. Industry executives expect the new framework to reduce the number of active providers across the region.

    Erald Ghoos, CEO of OKX Europe, estimated that “80% of the crypto players won’t survive after MiCA.” He added that “It’s not only because of MiCA itself, it’s because of the whole width and heaviness of the European regulatory burden.” According to Ghoos, firms offering stablecoin services may also require Payment Institution or Electronic Money Institution licenses, adding further compliance requirements.

    Compliance Costs Create Challenges for Smaller Companies

    Industry participants say the financial burden extends beyond the minimum capital required for authorization. Patrick Gruhn, founder and CEO of Perpetuals.com Ltd, said firms need between €50,000 and €150,000 in regulatory capital depending on their license category. However, obtaining authorization can cost as much as €700,000 during the first year, followed by annual compliance expenses that may reach €250,000 for smaller firms.

    Gruhn also stated that legal fees alone can approach €100,000, while the authorization process may take between 12 and 24 months before companies can begin regulated operations. He noted that although many businesses could disappear, numerous pre-MiCA registrations belonged to shell entities with limited activity. According to Gruhn, many compliance jobs created under the new framework may also offset employment losses elsewhere.

    Several companies have reportedly explored acquisitions rather than completing the licensing process themselves. Ghoos said some firms approached OKX Europe after determining they could not meet the regulatory costs required under MiCA.

    Poland Reflects the Wider Licensing Challenge

    Poland presents one of the clearest examples of the transition’s effect. The country previously had around 2,000 registered VASPs, yet only one company has obtained a MiCA license. Legislative delays and regulatory hurdles slowed the licensing process, leaving many firms without authorization ahead of the deadline.

    Mateusz Kara, CEO of Morphic Financial Group, said “It will change the business landscape of crypto entities a lot.” He added, “As far as I know, we are the only ones that have a MiCA license right now.” Kara also stated that many firms could be forced to cease operations during the second half of the year.

    Meanwhile, legal experts expect enforcement to differ among European jurisdictions. John Salmon, partner at Hogan Lovells, said “None of us know what’s going to happen,” noting that some countries introduced legislation later than others. However, his colleague Lavan Thasarathakumar said “Any regulator, jurisdiction, or member states allowing firms to continue to operate under their existing national law would be deemed in breach of EU regulations.”

    BitGo Europe has also introduced a regulated custody option that allows firms to transfer customer wallets instead of pursuing their own MiCA authorization. CEO Mike Belshe described the transition as ‘a setback,’ adding that “European users will become the biggest victims of the end of this transitional period.”