MiCA
What is MiCA?
MiCA, the Markets in Crypto-Assets Regulation (Regulation (EU) 2023/1114), is the European Union's legal framework for issuing crypto-assets and providing crypto-asset services. It sets uniform rules for token issuers and crypto-asset service providers () across all EU Member States.
Before MiCA, each Member State applied its own registration regime, mostly built around checks. MiCA replaces that patchwork with a single authorization model: a firm authorized in one Member State can passport its services to the rest of the EU. It covers crypto-assets that aren't already regulated as financial instruments, deposits or electronic money under existing EU law, which places most and activity inside one rulebook.
Key facts
- Full name: Regulation (EU) 2023/1114 on markets in crypto-assets.
- Timeline: entered into force on 29 June 2023. Stablecoin rules (Titles III and IV) have applied since 30 June 2024, and the rest of the regulation since 30 December 2024.
- Transitional period: firms already operating under national law could continue until 1 July 2026 at the latest, or earlier where a Member State shortened the window. That period has now ended, so CASPs serving EU clients need a MiCA authorization.
- Token categories: e-money tokens (EMTs), asset-referenced tokens (ARTs) and other crypto-assets.
- Supervisors: national competent authorities authorize and supervise firms. The European Banking Authority (EBA) supervises issuers of significant ARTs and EMTs, and both the EBA and the European Securities and Markets Authority (ESMA) issue technical standards.
- Out of scope: crypto-assets that qualify as financial instruments under MiFID II, central bank digital currencies, and most unique, non-fungible tokens.
Key requirements
MiCA's obligations depend on what a firm does and which token category it deals with.
- E-money tokens: an EMT references a single official currency, such as the US dollar or the euro. Only credit institutions and authorized e-money institutions can issue EMTs to the public in the EU. USDC and EURC are examples of EMTs issued in the EU under an e-money institution authorization. MiCA gives EMT holders a legal claim against the issuer for redemption at par value, and the issuer's white paper sets out how redemption works in practice.
- Asset-referenced tokens: an ART references a basket of currencies, commodities or other assets. Issuers need authorization, a published white paper, and a reserve of assets that's segregated, held in custody and independently audited.
- White papers: offering other crypto-assets to the public, or seeking admission to trading, requires a white paper that discloses the issuer, the project, the rights attached to the token and its risks.
- CASP authorization: firms that provide services such as custody, exchange between crypto-assets and funds, operation of a trading platform or transfer services need authorization from a national competent authority. Conditions cover minimum capital, governance, safeguarding of client assets, complaints handling and the management of conflicts between the firm and its clients.
- Market abuse rules: MiCA prohibits insider dealing, unlawful disclosure of inside information and market manipulation involving crypto-assets admitted to trading.
MiCA works alongside the EU Transfer of Funds Regulation (Regulation (EU) 2023/1113), which has applied since 30 December 2024. It requires CASPs to attach originator and beneficiary information to crypto-asset transfers, the crypto equivalent of the travel rule for wire transfers. CASPs also remain subject to EU anti-money laundering rules, including checks on their clients.
Who it applies to
MiCA applies to anyone who issues crypto-assets to the public in the EU, or provides crypto-asset services to clients in the EU, whether the firm is based inside or outside the Union. Non-EU firms generally can't serve EU clients on their own initiative without authorization. The exception is reverse solicitation, where a client approaches the firm on the client's exclusive initiative, and ESMA interprets that exception narrowly.
For businesses that hold, send or receive stablecoins, MiCA mainly shapes the counterparties they work with. Using USDC or EURC in a business's own name, for example to pay contractors, generally isn't a listed crypto-asset service in itself. Custody, exchange for fiat and transfers carried out for clients are, so those steps run through authorized CASPs or EMT issuers. Payment and crypto partners are part of a business's : checking that a provider holds a MiCA authorization, and in which Member State, confirms it can lawfully serve EU clients. Whether a specific business model triggers authorization depends on the exact activity and is assessed case by case.
Penalties for non-compliance
Article 111 of MiCA requires Member States to give national competent authorities a minimum set of administrative penalties and measures. These include:
- Public statements naming the person responsible and the nature of the infringement.
- Cease-and-desist orders requiring the conduct to stop.
- Suspension or withdrawal of a CASP's authorization.
- Management bans preventing responsible individuals from holding management functions at a CASP.
- Administrative fines for legal persons with maximums of at least €5,000,000, or a share of total annual turnover: 3%, 5% or 12.5% depending on the category of infringement, with the higher turnover-based tiers tied to token issuer obligations.
Market abuse infringements carry a separate, higher penalty tier. Member States can set stricter penalties than these minimums, so the exact exposure depends on where a firm is authorized.