1. What Is the MiCA License? Definition and Legal Basis
MiCA is the first comprehensive, harmonized framework for crypto-asset markets in the EU. MiCA (Markets in Crypto-Assets Regulation, Regulation (EU) 2023/1114) is the European Union's legal framework that harmonises rules for crypto-asset service providers (CASPs) and issuers across all 27 member states. A "MiCA license" in practice means authorization to operate as a CASP, or to issue asset-referenced or e-money tokens, anywhere in the EU. Because MiCA is a regulation and not a directive, it is directly applicable in all Member States, with no separate national transposition required.
In 30 seconds
- What it is. Regulation (EU) 2023/1114: a single framework for crypto-assets across all 27 EU countries.
- Who it affects. Crypto-asset service providers (CASPs) and stablecoin issuers (ARTs and EMTs).
- Key dates. Stablecoins from 30 June 2024, CASPs from 30 December 2024 and the end of the transitional period on 1 July 2026.
- What it gives you. One license to operate in all 30 EEA countries.
MiCA is at the core of Module 7 of MERGE Institute, Regulation and Compliance, taught (in Spanish) by Alfredo Muñoz, PhD in Law from Complutense University of Madrid. See the program →
2. What Does MiCA Regulate? Scope of the Framework
Crypto-Asset Categories Covered
MiCA sorts in-scope tokens into three families: asset-referenced tokens (ARTs), e-money tokens (EMTs), and other crypto-assets such as utility tokens. The MiCA Regulation governs, across the EU, the issuance, offer to the public and admission to trading of crypto-assets that are not financial instruments, and the services provided in relation to them. Out of scope are financial instruments (which stay under MiFID II), deposits, including tokenized deposits, traditional e-money, central bank digital currencies and unique non-fungible assets (NFTs). Services provided in a fully decentralized way, as with much of DeFi, are also outside MiCA for now: the EU is still studying how to regulate them.
- 1Is it a financial instrument, a deposit (even if tokenized), e-money, insurance or a pension product?YesOutside MiCA: covered by its own rules, such as MiFID II
- 2Is it unique and non-fungible, like a genuine NFT?YesOutside MiCA
- 3Is it issued by a central bank or another public authority?YesOutside MiCA
- 4Does it aim to keep a stable value tied to a single official currency?YesE-money token (EMT), Title IV
- 5Does it aim for a stable value tied to another asset or a basket?YesAsset-referenced token (ART), Title III
Is my token covered by MiCA? The decision tree we use at MERGE Institute
| Asset-referenced tokens (ARTs) | E-money tokens (EMTs) | Other crypto-assets | |
|---|---|---|---|
| What they are | Keep their value by reference to a basket of assets: several currencies, commodities or crypto-assets | Keep their value pegged to a single official currency, such as the euro or the dollar | Everything else: utility tokens and crypto-assets such as bitcoin or ether |
| Who can issue them | An entity authorized by the national authority, or a credit institution | Only credit institutions or e-money institutions | No issuer authorization needed, but a white paper must be notified to the national authority (in Spain, the CNMV) |
| Key requirements | Reserve of assets, approved white paper and governance | Reserve and the right to redemption at par at any time | Notified white paper, clear marketing and a right of withdrawal for buyers |
| Example | A stablecoin backed by a basket of currencies | A euro or dollar stablecoin | Utility tokens |
The three families of crypto-assets regulated by MiCA
Regulated Entities and Activities
The license captures crypto-asset service providers (exchanges, custodians, brokers, and advisers), issuers of ARTs and EMTs, and third-country firms seeking EU market access. MiCA lists ten services, including custody, trading, exchange, transfer, advisory, and order execution for crypto-assets, and a CASP license under MiCA covers the ones the firm has been authorized for, which also set its minimum capital.
3. Why MiCA Matters for the Crypto Industry and Investors
Before MiCA, firms operating across Europe had to comply with up to 27 different national regimes, a fragmented, costly, and legally uncertain landscape; to fix this, the European Commission proposed MiCA as part of its wider Digital Finance Package in September 2020. The single framework raises investor protection, strengthens market integrity, and creates a level playing field for compliant businesses, which in turn supports institutional adoption. Keep in mind that authorization does not remove market risk: crypto-asset values fluctuate and can lose value.
This convergence of supervision and digital assets is exactly what the Regulation, Compliance, and Legal Frameworks track covers at MERGE Madrid, positioned as Europe's largest crypto and tech event, with 3,000+ attendees and 200+ speakers from 40+ countries.
The Palacio de Cibeles, home of MERGE Madrid, where the Regulation, Compliance and Legal Frameworks track looks at how to apply MiCA
The largest conference on crypto and digital assets
Banks, fintechs and the crypto ecosystem at the same table. Two editions in 2027:
4. MiCA License Requirements: Who Needs One and How to Qualify
Who Must Obtain Authorization
Any entity providing crypto-asset services to EU clients must be authorized, as must any issuer of ARTs (credit institutions only need their white paper approved). EMTs can only be issued by credit institutions or e-money institutions. When an ART or EMT is deemed significant because of its size, supervision moves to the EBA.
Key Eligibility Criteria
An applicant needs a legal entity established in an EU member state, fit-and-proper management, robust AML/CFT policies, and sound governance, risk, and IT-security frameworks. Capital scales with the services offered: MiCA Annex IV sets minimum own funds at 50,000 euro for Class 1 services, 125,000 euro for Class 2 (adds custody and exchange) and 150,000 euro for Class 3 (adds operating a trading platform). Under Article 67, a CASP must hold the higher of a permanent minimum capital set by class of service and one quarter of the previous year's fixed overheads. Token issuers must also publish a compliant white paper.
Class 1
€50,000
- Reception and transmission of orders
- Execution of orders
- Advice
- Portfolio management
- Placing
- Transfer services
Class 2
€125,000
Everything in Class 1, plus:
- Custody and administration
- Exchange for funds
- Exchange for other crypto-assets
Class 3
€150,000
Everything in Class 2, plus:
- Operating a trading platform
This is the permanent minimum. If one quarter of the previous year's fixed overheads is higher, that amount applies (Article 67).
The three CASP classes under MiCA and their minimum capital (Annex IV)
5. MiCA Timeline: Key Legislative Milestones and Phased Rollout
MiCA was formally adopted by the European Parliament on 20 April 2023, and entered into force in June 2023 as Regulation (EU) 2023/1114. Titles III and IV, governing asset-referenced tokens and e-money tokens, became applicable on 30 June 2024; the remaining provisions, including the full CASP authorisation regime, became applicable on 30 December 2024. ESMA and the EBA continue to develop the regulatory technical standards, guidelines, and Q&A that shape day-to-day compliance.
- Sep 2020ProposalThe Commission presents MiCA in its Digital Finance Package
- Apr 2023AdoptionThe European Parliament adopts the text on 20 April
- Jun 2023Entry into forcePublished as Regulation (EU) 2023/1114
- 30 Jun 2024StablecoinsRules for ARTs and EMTs apply
- 30 Dec 2024CASPsThe full authorization regime applies
- 1 Jul 2026End of transitionNo extension: no license, no operating
MiCA timeline, from proposal to the end of the transitional period
6. The Grandfathering Period and the Final Deadline to Operate Legally
MiCA let member states run a transitional window for firms already operating lawfully under national law. The transitional period set by MiCA runs for a maximum of 18 months from 30 December 2024, ending on 1 July 2026. Crucially, this was a ceiling, not a uniform date: MiCA set 1 July 2026 as the latest date to which a member state could extend the transitional period; member states were free to choose shorter windows, and several did, so the practical cut-off differed from one jurisdiction to another. Some member states set shorter windows that closed as early as 30 June 2025. The MiCA transitional period ended 1 July 2026, with no extension (ESMA confirmed there would be none on 17 April 2026). After that date, any entity providing crypto-asset services to EU clients without a MiCA license is in breach of EU law and must cease those services.
The MiCA transitional period
Each country could shorten the window, so the real cut-off depended on the jurisdiction. Today, operating without a MiCA license is no longer possible.
MERGE Institute
Learn crypto and digital assets from the leaders of the ecosystem
A 12-week program, taught in Spanish by working professionals. MiCA and crypto regulation are covered in Module 7.
Try a free class →
7. Impact on Crypto Businesses and Platforms
Compliance is an operational overhaul: dedicated compliance teams, legal counsel, and technology upgrades for KYC, monitoring, and reporting. A licensed CASP must maintain its minimum own funds, segregate client crypto-assets and funds, run an anti-money-laundering and Travel Rule programme, publish clear disclosures, manage conflicts of interest, and report to its regulator. The market has consolidated sharply: Europe's crypto market has moved from roughly 3,500 national VASP registrations to about 390 authorized CASPs on ESMA's register as of November 2026. On top of that, a CASP that holds or transfers EMTs will in most cases also need a payment services license (PSD2), as the EBA has clarified.
MiCA by the numbers, November 2026
Source: ESMA interim register as of 1 November 2026. Figures change with every register update.
8. The €1,000 Transaction Threshold Rule Explained
The €1,000 figure is widely misunderstood. The Travel Rule sits in a separate instrument, the Transfer of Funds Regulation. Under the Transfer of Funds Regulation (EU) 2023/1113, applying since 30 December 2024, originator and beneficiary information must accompany every crypto-asset transfer, with no minimum amount. The €1,000 threshold applies only to self-hosted wallets: above €1,000 the CASP must take adequate steps to verify that the wallet is genuinely owned or controlled by the client. In short, information duties apply to all transfers; enhanced self-hosted-wallet checks kick in above €1,000.
What changes above €1,000
Originator data
- Name
- Blockchain (DLT) address and crypto-asset account number, if any
- Postal address with country, official ID number and customer number, or date and place of birth
- LEI, for companies
Beneficiary data
- Name
- Blockchain (DLT) address and crypto-asset account number, if any
- LEI, for companies
And if data is missing
The receiving CASP can reject, return or suspend the transfer and ask for what is missing. If the sending CASP fails repeatedly, it can end the relationship and must report it to the supervisor.
What information travels with every crypto-asset transfer (Regulation (EU) 2023/1113, Articles 14 and 17)
9. MiCA vs. Previous EU Crypto Regulations
The pre-MiCA landscape was built on AML registration under the 5th and 6th Anti-Money Laundering Directives, not full licensing. Unlike national VASP registrations, MiCA creates a single authorisation regime across all 27 EU member states. National frameworks run by authorities such as BaFin in Germany and the AMF in France varied widely. In Spain, for example, firms only had to register with the Bank of Spain as virtual currency exchange and custody providers. MiCA's upgrade is conduct-of-business rules, prudential capital, and investor protections that the earlier AML-only regimes never contained.
| Before MiCA | With MiCA | |
|---|---|---|
| Type of regime | National AML registration (5th and 6th Directives) | Full CASP authorization |
| Where it is valid | Only in the country of registration | In all 30 EEA countries through passporting |
| Minimum capital | Not required | €50,000 to €150,000 depending on the class |
| Investor protection | Limited and different in each country | Harmonized conduct rules |
| Stablecoins | No specific regime | Dedicated rules for ARTs and EMTs |
| Supervision | Each national authority on its own | National authority, coordinated by ESMA and the EBA |
MiCA vs. the previous regime
The largest conference on crypto and digital assets
Banks, fintechs and the crypto ecosystem at the same table. Two editions in 2027:
10. Benefits of Holding a MiCA License
EU-Wide Passporting Rights
The headline benefit is one authorization for the whole bloc. A single CASP authorization passports across all 30 EEA member states, 27 EU countries plus Iceland, Liechtenstein, and Norway. That removes the need for separate national authorizations and the duplicated cost and time that came with them.
The 27 EU countries plus Iceland, Liechtenstein and Norway. The home regulator notifies the others through the passporting procedure.
Additional Strategic Benefits
A license signals credibility to banks and institutional counterparties, opens partnership and custody relationships, and lowers the risk of sudden enforcement or market exclusion as regulatory standards rise globally.
11. How to Obtain a MiCA License: Application Process Step by Step
- 1Choose your countryWeigh the regulator's experience, timelines and the local ecosystem.
- 2Prepare the fileBusiness plan, governance, AML/CFT, proof of capital and IT security.
- 3Submit the applicationTo the national competent authority, such as BaFin, the AMF or the CNMV.
- 4Review25 working days to check completeness and 40 to decide.
- 5License and passportThe other countries are notified so you can operate across the EEA.
Throughout the process, check your file against the technical standards, guidelines and Q&As from ESMA and the EBA.
How to get a MiCA license in 5 steps
Step 1, Choose your home member state. Weigh regulator experience, processing speed, and local ecosystem.
Step 2, Prepare the application package. Draft the regulatory business plan and any white paper, document governance, AML/CFT policies, and proof of capital, and prepare IT-security and custody policies.
Step 3, Submit to the national competent authority. Examples include CySEC, BaFin, the AMF, and the Central Bank of Ireland; in Spain, authorization is requested from the CNMV, which published its authorization manual and notification template on 23 July 2024. The regulator has 25 working days to check completeness and 40 working days to decide on a complete application.
Step 4, Align with ESMA and EBA guidance. Map your file to published RTS and Q&A.
Step 5, Receive authorization and notify other member states through the passporting procedure for cross-border services.
The MERGE Institute program includes a module on regulation and compliance taught by practitioners from banks, infrastructure firms, and law firms, which is where teams rehearse exactly this authorization pathway.
12. Consequences of Non-Compliance: MiCA Enforcement and Penalties
National competent authorities can issue public warnings, suspend or withdraw authorizations, and impose fines. For natural persons, maximum fines must be at least EUR 700,000; for legal persons, at least EUR 5 million, or 3%, 5% or 12.5% of total annual turnover depending on the infringement. Market abuse infringements carry a stricter regime, with fines up to EUR 15,000,000 or 15% of total annual turnover for legal persons. ESMA coordinates supervisory convergence to keep enforcement consistent across the EU.
Maximum fines MiCA requires, at a minimum
Each country can set higher fines. Authorities can also withdraw licenses, issue public warnings and ban managers.
MERGE Institute
Learn crypto and digital assets from the leaders of the ecosystem
A 12-week program, taught in Spanish by working professionals. MiCA and crypto regulation are covered in Module 7.
Try a free class →Key Takeaways
- A MiCA license is CASP authorization (or ART/EMT issuer authorization) under Regulation (EU) 2023/1114, applicable to CASPs since 30 December 2024.
- Stablecoin rules (ARTs and EMTs) have applied since 30 June 2024.
- The grandfathering transitional period ended on 1 July 2026, with no extension and several member states closing earlier.
- Minimum capital is €50,000, €125,000, or €150,000 by service class, plus full AML, Travel Rule, and governance obligations.
- One license passports across the EU and EEA; operating without one exposes firms to fines and loss of market access.
For a structured, practitioner-led path through MiCA and EU compliance, the MERGE Institute is the natural next step.
Frequently Asked Questions (FAQ)
What is a CASP authorization under MiCA?
It is the license a crypto-asset service provider needs to operate in the EU. MiCA lists ten services, including custody, trading, exchange, transfer, advisory, and order execution for crypto-assets, and a CASP license under MiCA covers the ones the firm has been authorized for, which also set its minimum capital. Providing any of these to EU clients requires authorization from a national competent authority.
What is the MiCA compliance deadline for existing crypto businesses?
The transitional period ran for a maximum of 18 months from 30 December 2024, ending on 1 July 2026. Member states were free to choose shorter windows, and several did, so the effective cut-off differed by jurisdiction. That date has now passed.
Does a MiCA license give passporting rights across the entire EU?
Yes. A single CASP authorization passports across all 30 EEA member states, 27 EU countries plus Iceland, Liechtenstein, and Norway. The home regulator notifies the other states through the passporting procedure.
How does MiCA regulate stablecoins in Europe?
MiCA splits stablecoins into asset-referenced tokens and e-money tokens, with reserve, governance, and disclosure requirements. These rules have applied to ARTs and EMTs since 30 June 2024. As of November 2026 there are no authorized ART issuers and 25 authorized EMT issuers. Values of crypto-assets can still fluctuate; see the risk notice.
What are the penalties for operating without a MiCA license in the EU?
Operating as a CASP without authorization can result in maximum fines of at least €5 million or 5% of annual turnover for legal persons, and €700,000 for individuals; NCAs can also revoke authorization, issue public warnings, and ban individuals from management.
How does MiCA differ from previous EU crypto regulations like 5AMLD?
Earlier regimes were AML registration only. Unlike national VASP registrations, MiCA creates a single authorisation regime across all 27 EU member states, adding conduct-of-business rules, prudential capital, and investor protections that AML-only frameworks lacked.
Conclusion: Is MiCA the Future of Crypto Regulation in Europe?
MiCA is the most comprehensive crypto regulatory framework enacted anywhere to date, and it is now the baseline for operating in the EU. The essentials are clear: any firm serving EU clients needs a CASP license, the transitional window closed on 1 July 2026, and non-compliance carries real financial and reputational cost. For well-prepared businesses, authorization unlocks passporting, institutional trust, and durable market access. To go deeper with practitioners who work on these files, explore the MERGE Institute.
