Solutions

Industries

Markets

Partnerships

Resources

Get in touch

What is MiCA (Markets in Crypto-Assets Regulation)?

What is MiCA (Markets in Crypto-Assets Regulation)?


MiCA (Markets in Crypto-Assets Regulation) is the European Union's comprehensive regulatory framework for crypto assets. The regulation establishes harmonised rules for issuance, trading, and service provision across all 27 member states.  

Formally designated as Regulation (EU) 2023/1114, MiCA creates a unified legal framework for crypto-asset markets that were previously unregulated, or governed by fragmented national rules. The regulation applies to crypto-asset service providers (CASPs), issuers, and trading platforms operating within the EU. MiCA's timeline is rolling out progressively, with stablecoin provisions becoming operational on 30 June 2024, and the full regulatory framework taking effect on 30 December 2024.  

All this creates new compliance obligations, including AML requirements for digital asset businesses. Read on to learn about MiCA’s importance, when it takes effect, and what businesses need to do to prepare.  

Why MiCA matters 

MiCA is the first comprehensive crypto regulation framework established by a major jurisdiction, acting as a single rulebook for the EU. Previously, crypto businesses were regulated through a patchwork of 27 different national approaches, creating legal uncertainty and compliance issues. This positions the EU as a global leader in digital assets regulation, whilst addressing critical AML compliance and terrorist financing risks. 

MiCA provides crucial protections against market manipulation, insider trading, and fraud. It also establishes mandatory consumer protection standards and licensing requirements for crypto-asset service providers, ensuring that only vetted, compliant businesses can operate. Stablecoin issuers face especially strict requirements designed to prevent systemic financial risks (more on this later). 

Perhaps most significantly, MiCA introduces a "passporting" system that allows licensed CASPs to offer services across all EU member states with a single authorisation — just like traditional financial institutions.  

Who does MiCA apply to? 

MiCA regulation covers two main categories of market participants: crypto-asset service providers and token issuers.  

Crypto-Asset Service Providers (CASPs) 

CASPs include any business offering crypto-related services to EU customers, including crypto exchanges and trading platforms, crypto custody and wallet providers, brokers and advisers, transfer services, portfolio management, and firms placing or underwriting crypto assets. These providers must obtain authorisation and maintain ongoing compliance with MiCA's operational requirements. 

Issuers 

MiCA distinguishes between three types of token issuers, all of whom must comply with MiCA. Asset-referenced token (ART) issuers create stablecoins backed by multiple assets, like a basket of currencies or commodities. E-money token (EMT) issuers create stablecoins pegged to a single fiat currency. Utility token issuers offer tokens providing access to specific goods or services on their platforms. 

Notably, MiCA doesn't apply to central banks, public authorities, or crypto-assets already regulated under existing EU financial services law (like security tokens under MiFID II). NFTs (non-fungible tokens) are generally exempt unless they're part of large, fractionalisable collections that function more like tradeable assets. 

Key Requirements Under MiCA 

MiCA establishes comprehensive compliance requirements that bring crypto service providers in line with traditional financial services regulation. 

Authorisation and licensing 

CASPs must obtain authorisation from their home member state's competent authority through a detailed application process covering business plans, governance structures, and risk management frameworks. Once authorised, firms gain passporting rights to offer services across all 27 EU member states under a single licence. National regulators maintain ongoing supervision of authorised firms. 

Capital and reserve requirements 

MiCA imposes minimum capital requirements for CASPs that vary based on service type, with crypto custody providers facing particularly stringent standards. Stablecoin issuers must maintain adequate reserves backing their tokens and segregate customer assets from company funds. Custody providers must also hold insurance or comparable guarantees to protect client holdings. 

Consumer protection and market integrity 

Token issuers must publish detailed white papers with mandatory disclosures about risks, costs, and investor rights. MiCA prohibits market manipulation, insider trading, and abusive practices whilst requiring transaction reporting and conflicts of interest management. Firms must establish robust complaint-handling procedures and maintain operational resilience standards. 

AML/CFT compliance 

All CASPs must implement KYC (Know Your Customer) requirements, transaction monitoring, and suspicious activity reporting in line with EU AML compliance frameworks. This includes integration with the Travel Rule for crypto-asset transfers, ensuring that originator and beneficiary information accompanies transactions. 

MiCA's stablecoin requirements 

Stablecoin regulation under MiCA distinguishes between two types of tokens (ARTs and EMTs), each of which carries with reserve and issuance rules. 

Asset-Referenced Tokens (ARTs) are backed by a basket of assets or multiple currencies and face strict 1:1 reserve requirements. Issuers must keep reserves with regulated institutions, maintain segregation to protect holders from insolvency, and guarantee redemption rights at any time. 

E-Money Tokens (EMTs) are pegged to a single fiat currency and can only be issued by authorised credit institutions or e-money institutions. They follow the EU's existing e-money regulatory framework with aligned reserve requirements. 

Whether ARTs or EMTs, stablecoins that meet certain significance criteria face enhanced obligations. Significant asset-referenced tokens receive direct supervision from ESMA, whilst significant e-money tokens are supervised by EBA. This framework directly impacts major stablecoins operating in EU markets. 

MiCA’s implementation timeline 


MiCA is implemented in a phased timeline that began in 2024. 

Stablecoin provisions for asset-referenced tokens and e-money tokens took effect on 30 June 2024, requiring issuers to obtain authorisation and maintain reserve requirements immediately. Existing stablecoin issuers unable to meet these standards were required to cease EU operations. 

The full MiCA regulation became applicable on 30 December 2024, bringing all CASP licensing requirements, market abuse prohibitions, and consumer protection rules into force. However, existing crypto service providers benefit from an 18-month transition period to obtain authorisation, extending until 1 July 2026. During this window, national licensing regimes remain valid, allowing firms to continue operating as they move their businesses toward full MiCA compliance. 

Preparing for MiCA compliance 

Crypto businesses operating in the EU must take concrete steps to meet MiCA's requirements before the 1 July 2026 transition deadline. 

For crypto-asset service providers 

CASPs should begin by assessing which services require authorisation and selecting a home member state for licensing based on regulatory expertise and operational needs. Firms must prepare comprehensive application materials including business plans, governance structures, and risk management frameworks. Implementation priorities include establishing KYC/AML systems, building capital reserves, and creating compliance functions.  

For token issuers 

Issuers must first determine their token classification. Asset-referenced tokens, e-money tokens, and utility tokens all carry differing regulatory requirements. Stablecoin issuers who have not already done so need to establish reserve mechanisms with regulated custodians and prepare detailed white papers with mandatory disclosures.  

The role of digital identity verification 

MiCA mandates robust KYC onboarding for all CASPs, making efficient identity verification solutions essential. Digital identity verification platforms streamline compliance by automating document authentication, biometric checks, and AML screening whilst maintaining the audit trails regulators expect. This technology enables crypto businesses to meet MiCA's standards without sacrificing customer experience. 

FAQs 

What's the deadline for MiCA compliance? 

Stablecoin provisions took effect on 30 June 2024, requiring immediate compliance from asset-referenced and e-money token issuers. The full regulation became applicable on 30 December 2024, but existing crypto-asset service providers have an 18-month transition period to obtain authorisation — meaning the final deadline is 1 July 2026. Firms operating under national licences can continue during this window, but must complete MiCA authorisation applications before the deadline or cease EU operations. 

How does MiCA affect DeFi protocols? 

MiCA's application to decentralised finance remains uncertain. Truly decentralised protocols with no identifiable operator or service provider may fall outside the regulation's scope. However, interface operators, frontend providers, wallet services, and other intermediaries offering CASP-like functions built on DeFi infrastructure likely require authorisation. The European Commission and ESMA are expected to provide further guidance as the DeFi ecosystem evolves, but projects should assess whether any centralised elements of their operations trigger MiCA obligations. 

Can crypto firms passport services across the EU under MiCA? 

Yes—once a CASP obtains authorisation in one EU member state, it can offer services across all 27 member states without separate licences. This passporting framework eliminates the fragmented approach that previously forced crypto firms to navigate 27 different national regimes, putting crypto service providers on equal footing with traditional financial institutions and enabling pan-European operations. 

What's the difference between asset-referenced tokens and e-money tokens? 

Asset-referenced tokens (ARTs) are stablecoins backed by a basket of multiple assets or currencies, whilst e-money tokens (EMTs) are pegged to a single fiat currency and must be issued by authorised credit or e-money institutions. Both require 1:1 reserve backing and redemption rights, but EMTs follow existing e-money regulations whilst ARTs face MiCA-specific requirements. Major multi-asset stablecoins typically qualify as ARTs, whilst single-currency stablecoins fall under EMT rules. 

Does MiCA apply to NFTs? 

Generally, no. Non-fungible tokens are explicitly excluded from MiCA's scope. However, exceptions exist: NFTs that are part of large fractionalisable collections or function as tradeable financial instruments may fall under the regulation. Additionally, if NFT issuance is part of a larger crypto-asset offering, MiCA rules could apply. The regulation focuses on fungible, tradeable tokens rather than unique digital collectibles, but projects should assess whether their NFTs have characteristics that trigger regulatory obligations. 


MiCA (Markets in Crypto-Assets Regulation) is the European Union's comprehensive regulatory framework for crypto assets. The regulation establishes harmonised rules for issuance, trading, and service provision across all 27 member states.  

Formally designated as Regulation (EU) 2023/1114, MiCA creates a unified legal framework for crypto-asset markets that were previously unregulated, or governed by fragmented national rules. The regulation applies to crypto-asset service providers (CASPs), issuers, and trading platforms operating within the EU. MiCA's timeline is rolling out progressively, with stablecoin provisions becoming operational on 30 June 2024, and the full regulatory framework taking effect on 30 December 2024.  

All this creates new compliance obligations, including AML requirements for digital asset businesses. Read on to learn about MiCA’s importance, when it takes effect, and what businesses need to do to prepare.  

Why MiCA matters 

MiCA is the first comprehensive crypto regulation framework established by a major jurisdiction, acting as a single rulebook for the EU. Previously, crypto businesses were regulated through a patchwork of 27 different national approaches, creating legal uncertainty and compliance issues. This positions the EU as a global leader in digital assets regulation, whilst addressing critical AML compliance and terrorist financing risks. 

MiCA provides crucial protections against market manipulation, insider trading, and fraud. It also establishes mandatory consumer protection standards and licensing requirements for crypto-asset service providers, ensuring that only vetted, compliant businesses can operate. Stablecoin issuers face especially strict requirements designed to prevent systemic financial risks (more on this later). 

Perhaps most significantly, MiCA introduces a "passporting" system that allows licensed CASPs to offer services across all EU member states with a single authorisation — just like traditional financial institutions.  

Who does MiCA apply to? 

MiCA regulation covers two main categories of market participants: crypto-asset service providers and token issuers.  

Crypto-Asset Service Providers (CASPs) 

CASPs include any business offering crypto-related services to EU customers, including crypto exchanges and trading platforms, crypto custody and wallet providers, brokers and advisers, transfer services, portfolio management, and firms placing or underwriting crypto assets. These providers must obtain authorisation and maintain ongoing compliance with MiCA's operational requirements. 

Issuers 

MiCA distinguishes between three types of token issuers, all of whom must comply with MiCA. Asset-referenced token (ART) issuers create stablecoins backed by multiple assets, like a basket of currencies or commodities. E-money token (EMT) issuers create stablecoins pegged to a single fiat currency. Utility token issuers offer tokens providing access to specific goods or services on their platforms. 

Notably, MiCA doesn't apply to central banks, public authorities, or crypto-assets already regulated under existing EU financial services law (like security tokens under MiFID II). NFTs (non-fungible tokens) are generally exempt unless they're part of large, fractionalisable collections that function more like tradeable assets. 

Key Requirements Under MiCA 

MiCA establishes comprehensive compliance requirements that bring crypto service providers in line with traditional financial services regulation. 

Authorisation and licensing 

CASPs must obtain authorisation from their home member state's competent authority through a detailed application process covering business plans, governance structures, and risk management frameworks. Once authorised, firms gain passporting rights to offer services across all 27 EU member states under a single licence. National regulators maintain ongoing supervision of authorised firms. 

Capital and reserve requirements 

MiCA imposes minimum capital requirements for CASPs that vary based on service type, with crypto custody providers facing particularly stringent standards. Stablecoin issuers must maintain adequate reserves backing their tokens and segregate customer assets from company funds. Custody providers must also hold insurance or comparable guarantees to protect client holdings. 

Consumer protection and market integrity 

Token issuers must publish detailed white papers with mandatory disclosures about risks, costs, and investor rights. MiCA prohibits market manipulation, insider trading, and abusive practices whilst requiring transaction reporting and conflicts of interest management. Firms must establish robust complaint-handling procedures and maintain operational resilience standards. 

AML/CFT compliance 

All CASPs must implement KYC (Know Your Customer) requirements, transaction monitoring, and suspicious activity reporting in line with EU AML compliance frameworks. This includes integration with the Travel Rule for crypto-asset transfers, ensuring that originator and beneficiary information accompanies transactions. 

MiCA's stablecoin requirements 

Stablecoin regulation under MiCA distinguishes between two types of tokens (ARTs and EMTs), each of which carries with reserve and issuance rules. 

Asset-Referenced Tokens (ARTs) are backed by a basket of assets or multiple currencies and face strict 1:1 reserve requirements. Issuers must keep reserves with regulated institutions, maintain segregation to protect holders from insolvency, and guarantee redemption rights at any time. 

E-Money Tokens (EMTs) are pegged to a single fiat currency and can only be issued by authorised credit institutions or e-money institutions. They follow the EU's existing e-money regulatory framework with aligned reserve requirements. 

Whether ARTs or EMTs, stablecoins that meet certain significance criteria face enhanced obligations. Significant asset-referenced tokens receive direct supervision from ESMA, whilst significant e-money tokens are supervised by EBA. This framework directly impacts major stablecoins operating in EU markets. 

MiCA’s implementation timeline 


MiCA is implemented in a phased timeline that began in 2024. 

Stablecoin provisions for asset-referenced tokens and e-money tokens took effect on 30 June 2024, requiring issuers to obtain authorisation and maintain reserve requirements immediately. Existing stablecoin issuers unable to meet these standards were required to cease EU operations. 

The full MiCA regulation became applicable on 30 December 2024, bringing all CASP licensing requirements, market abuse prohibitions, and consumer protection rules into force. However, existing crypto service providers benefit from an 18-month transition period to obtain authorisation, extending until 1 July 2026. During this window, national licensing regimes remain valid, allowing firms to continue operating as they move their businesses toward full MiCA compliance. 

Preparing for MiCA compliance 

Crypto businesses operating in the EU must take concrete steps to meet MiCA's requirements before the 1 July 2026 transition deadline. 

For crypto-asset service providers 

CASPs should begin by assessing which services require authorisation and selecting a home member state for licensing based on regulatory expertise and operational needs. Firms must prepare comprehensive application materials including business plans, governance structures, and risk management frameworks. Implementation priorities include establishing KYC/AML systems, building capital reserves, and creating compliance functions.  

For token issuers 

Issuers must first determine their token classification. Asset-referenced tokens, e-money tokens, and utility tokens all carry differing regulatory requirements. Stablecoin issuers who have not already done so need to establish reserve mechanisms with regulated custodians and prepare detailed white papers with mandatory disclosures.  

The role of digital identity verification 

MiCA mandates robust KYC onboarding for all CASPs, making efficient identity verification solutions essential. Digital identity verification platforms streamline compliance by automating document authentication, biometric checks, and AML screening whilst maintaining the audit trails regulators expect. This technology enables crypto businesses to meet MiCA's standards without sacrificing customer experience. 

FAQs 

What's the deadline for MiCA compliance? 

Stablecoin provisions took effect on 30 June 2024, requiring immediate compliance from asset-referenced and e-money token issuers. The full regulation became applicable on 30 December 2024, but existing crypto-asset service providers have an 18-month transition period to obtain authorisation — meaning the final deadline is 1 July 2026. Firms operating under national licences can continue during this window, but must complete MiCA authorisation applications before the deadline or cease EU operations. 

How does MiCA affect DeFi protocols? 

MiCA's application to decentralised finance remains uncertain. Truly decentralised protocols with no identifiable operator or service provider may fall outside the regulation's scope. However, interface operators, frontend providers, wallet services, and other intermediaries offering CASP-like functions built on DeFi infrastructure likely require authorisation. The European Commission and ESMA are expected to provide further guidance as the DeFi ecosystem evolves, but projects should assess whether any centralised elements of their operations trigger MiCA obligations. 

Can crypto firms passport services across the EU under MiCA? 

Yes—once a CASP obtains authorisation in one EU member state, it can offer services across all 27 member states without separate licences. This passporting framework eliminates the fragmented approach that previously forced crypto firms to navigate 27 different national regimes, putting crypto service providers on equal footing with traditional financial institutions and enabling pan-European operations. 

What's the difference between asset-referenced tokens and e-money tokens? 

Asset-referenced tokens (ARTs) are stablecoins backed by a basket of multiple assets or currencies, whilst e-money tokens (EMTs) are pegged to a single fiat currency and must be issued by authorised credit or e-money institutions. Both require 1:1 reserve backing and redemption rights, but EMTs follow existing e-money regulations whilst ARTs face MiCA-specific requirements. Major multi-asset stablecoins typically qualify as ARTs, whilst single-currency stablecoins fall under EMT rules. 

Does MiCA apply to NFTs? 

Generally, no. Non-fungible tokens are explicitly excluded from MiCA's scope. However, exceptions exist: NFTs that are part of large fractionalisable collections or function as tradeable financial instruments may fall under the regulation. Additionally, if NFT issuance is part of a larger crypto-asset offering, MiCA rules could apply. The regulation focuses on fungible, tradeable tokens rather than unique digital collectibles, but projects should assess whether their NFTs have characteristics that trigger regulatory obligations. 

Fourthline has been certified by EY CertifyPoint to ISO/IEC27001:2022 with certification number 2021-039.

Copyright © 2026 - Fourthline B.V. - All rights reserved.

Fourthline has been certified by EY CertifyPoint to ISO/IEC27001:2022 with certification number 2021-039.

Copyright © 2026 - Fourthline B.V. - All rights reserved.