ESMA confirmed on April 17, 2026 that the MiCA transitional period across the EU expires on July 1, 2026. After that date, any entity providing crypto-asset services without CASP authorization must cease EU operations.
MiCA: the framework is already in force
The Markets in Crypto-Assets Regulation entered into full force and effect on December 30, 2024, introducing a single EU-wide licensing system for Crypto-Asset Service Providers (CASPs) in place of fragmented national VASP regimes. Pre-existing providers were granted a transitional 'grandfathering' window under Article 143(3) to operate under national rules while obtaining MiCA authorization.
July 1, 2026: the hard deadline
On April 17, 2026, the European Securities and Markets Authority confirmed that the MiCA transitional period across the EU will officially expire on 1 July 2026. After that date, any entity providing crypto-asset services without a CASP authorization must cease operations in the EU. The scope is broad: crypto exchanges, custodial wallet providers, crypto lending platforms, and any entity offering crypto-asset services to EU customers regardless of where it is headquartered.
The Travel Rule is the other half
The EU Transfer of Funds Regulation, applicable since December 30, 2024, brings the FATF Travel Rule to crypto transfers. CASPs must collect and exchange originator and beneficiary information for every transfer — turning crypto operations into something that closely resembles traditional payments compliance, with KYT, sanctions screening, and SAR equivalents now expected as baseline.
Enforcement and consequences
Non-compliance with MiCA carries serious risks: fines of up to 12.5% of turnover, license revocation, personal liability for executives including industry bans, and public reputational disclosures. National regulators are building dedicated crypto supervision teams. Last-minute authorization applications should expect heightened scrutiny.
What crypto firms should do now
Submit CASP applications immediately if not already filed. Build out the operational AML stack regulators will actually audit: wallet screening, KYT, transaction monitoring, Travel Rule data flows, case management, and audit-ready reporting. Firms operating across multiple member states must observe the shortest applicable transitional window. Looking past July 2026: AMLA's direct supervision regime and the EU AML Regulation (applying July 2027) will further tighten obligations.
Como a UMCA ajuda
UMCA's platform brings enterprise-grade AI fraud detection, rule engine, behavioral analytics, and case management to the crypto space — built for MiCA-era operational compliance.
