MiCA Regulation Explained — Complete Guide to Markets in Crypto-Assets 2026

The Markets in Crypto-Assets Regulation, known as MiCA (Regulation (EU) 2023/1114), is the European Union's landmark regulatory framework for crypto-assets and crypto-asset service providers. Published in the Official Journal of the EU on June 9, 2023, and entering into force on June 29, 2023, MiCA represents the most comprehensive crypto regulatory regime adopted by any major jurisdiction worldwide.

MiCA applies directly as a regulation — without requiring national transposition — across all 27 EU member states. This means a single crypto-asset service provider authorization (CASP) issued by any EU national competent authority (NCA) grants legal access to operate across the entire EU single market through the EU passporting mechanism.

The full CASP authorization requirements under MiCA became applicable on December 30, 2024 — 18 months after the regulation's publication. From this date, crypto businesses providing services to EU clients must obtain CASP authorization from a national NCA or operate under the 18-month transitional period that runs until July 1, 2026.

MiCA has three main regulatory pillars, each addressed in a separate Title of the regulation:

Pillar 1: Crypto-Asset Issuers (Title II)

Companies issuing crypto-assets to the public — other than ARTs and EMTs — must produce a crypto-asset white paper compliant with MiCA's content requirements (Art. 6) and notify their home NCA. This covers most utility tokens and project tokens. The white paper must be published before the public offer and include all material information investors need to make informed decisions.

Pillar 2: Asset-Referenced Token (ART) Issuers (Title III)

ARTs — tokens that reference multiple assets to maintain stable value — require prior authorization from an NCA before issuance. This covers most algorithmic stablecoins and multi-asset-referenced tokens. ART issuers face strict reserve asset requirements, redemption rights, and own funds requirements. Significant ARTs are supervised directly by the European Banking Authority (EBA).

Pillar 3: CASP Service Providers (Title V)

Businesses providing crypto-asset services to EU clients on a professional basis must obtain CASP authorization from their home NCA. This is the most broadly applicable pillar — covering exchanges, custodians, trading platforms, portfolio managers, and advisors. CASP authorization triggers ongoing compliance obligations covering capital, governance, AML, DORA, and conduct of business rules.

Under MiCA Art. 3(1)(16), there are 10 defined crypto-asset services that trigger the CASP authorization requirement. Any legal person providing one or more of these services to EU clients on a professional basis must be authorized as a CASP:

• 1. Custody and administration of crypto-assets on behalf of clients
• 2. Operation of a trading platform for crypto-assets
• 3. Exchange of crypto-assets for funds (fiat)
• 4. Exchange of crypto-assets for other crypto-assets
• 5. Execution of orders for crypto-assets on behalf of clients
• 6. Placing of crypto-assets (primary market issuance services)
• 7. Reception and transmission of orders for crypto-assets on behalf of clients
• 8. Providing advice on crypto-assets
• 9. Providing portfolio management of crypto-assets on behalf of clients
• 10. Providing transfer services for crypto-assets on behalf of clients

Certain businesses are exempt from MiCA CASP authorization — including credit institutions authorized under the CRD IV, investment firms authorized under MiFID II (for financial instrument services), central securities depositories, and other regulated EU financial entities, provided their crypto-asset activities fall within their existing authorizations. These entities must notify their home NCA before providing crypto-asset services.

Correct token classification determines which MiCA rules apply — and whether MiCA applies at all. The classification hierarchy is:

Step 1: Is the token a financial instrument under MiFID II?

If yes, MiCA does not apply. The token is regulated under MiFID II (securities regulations). This covers security tokens, tokenized shares, and certain derivatives.

Step 2: Is it an E-Money Token (EMT)?

EMTs reference a single official currency (e.g., EUR, USD) and function as electronic money. EMT issuers must hold an e-money institution license under EMD2 in addition to MiCA compliance. Examples: EURC, EURT.

Step 3: Is it an Asset-Referenced Token (ART)?

ARTs reference multiple assets (currencies, commodities, other crypto-assets) to stabilize value. They require NCA authorization before issuance. Examples: multi-currency stablecoins.

Step 4: Other crypto-assets (Utility Tokens)

All remaining crypto-assets — tokens that don't fit MiFID II, EMT, or ART categories — are regulated under MiCA Title II as "other crypto-assets." White paper publication is required for public offers above de minimis thresholds. Most project tokens, governance tokens, and utility tokens fall here.

MiCA Art. 67 establishes minimum own funds requirements based on the risk profile of services provided. CASPs providing multiple service types must hold the highest applicable capital requirement:

Capital must be held in liquid, freely available form. NCAs may impose higher capital requirements on individual CASPs based on specific risk assessments. Insurance policies may substitute for a portion of the capital requirement under ESMA regulatory technical standards.

MiCA Articles 60–76 establish a powerful EU passporting system. A CASP authorized in any one EU member state may provide its authorized services across all 27 EU member states without obtaining additional local licenses. This is one of MiCA's most commercially significant provisions.

The passporting procedure works as follows: the CASP notifies its home NCA of its intention to provide services in another member state. The home NCA transmits the notification to the host NCA within 10 working days. The CASP may begin providing services in the host state on the day of transmission — without waiting for host NCA approval or assessment. All authorized CASPs are listed in ESMA's public register.

This mechanism incentivizes companies to select cost-efficient EU jurisdictions — such as Lithuania, Estonia, or Bulgaria — for initial authorization, then passport their services across the entire EU single market from day one of authorization.

MiCA Art. 143 provides a transitional period allowing existing VASPs (Virtual Asset Service Providers) registered under national pre-MiCA regimes to continue operating without full CASP authorization during the transition window. The key dates:

• December 30, 2024: MiCA CASP provisions fully applicable. NCAs begin accepting CASP applications.
• January 2025 – June 2026: Transitional period. VASPs with existing national registrations may continue operating while pursuing CASP authorization.
• July 1, 2026: Hard deadline. All VASPs must hold valid CASP authorization or cease providing EU crypto-asset services.

MiCA explicitly applies to legal persons and undertakings — not to software protocols operating without any identifiable legal entity. Fully decentralized protocols where no company controls access, profits, or governance are generally outside MiCA's scope. However, the boundary is complex and fact-specific:

• Outside MiCA: Purely automated, non-custodial, fully decentralized protocols with no legal entity controlling them.
• Inside MiCA: Companies operating DeFi front-ends, providing wallet services, offering DeFi aggregation as a service, or DAOs with legal wrappers that control protocol governance.
• Grey area: "Sufficiently decentralized" protocols — ESMA has indicated it will publish guidance on DeFi scope assessment.

Any DeFi-adjacent business should obtain specific legal advice on MiCA scope before assuming exemption. The consequences of non-compliance — operating without authorization after July 1, 2026 — include criminal sanctions in most member states.

Each EU member state designates its own National Competent Authority (NCA) for MiCA CASP authorization. Key NCAs for crypto businesses in 2026:

• Lithuania: Bank of Lithuania (Lietuvos bankas) — most licensed CASPs in EU
• Estonia: Financial Supervision Authority (Finantsinspektsioon / FSA) — selective, high credibility
• Bulgaria: Financial Supervision Commission (FSC / KFN) — lowest cost in EU
• Poland: Polish Financial Supervision Authority (KNF)
• Germany: Federal Financial Supervisory Authority (BaFin) — highest standard
• Malta: Malta Financial Services Authority (MFSA)
• Cyprus: Cyprus Securities and Exchange Commission (CySEC)
• Ireland: Central Bank of Ireland (CBI)

ESMA maintains a public register of all authorized CASPs across EU member states, accessible at esma.europa.eu.