79% of Crypto Firms Miss MiCA Deadline as EU Licensing Rules Take Full Effect
The transition signals the conclusion of legacy provisions at the national level under MiCA Article 143(3). Fragmenting registration regimes are being replaced with a harmonized framework established throughout the 27 EU member states and 3 EEA markets. Unregistered platforms must either wind down, restructure their corporate arrangements, or migrate customers’ assets to registered Crypto-Asset Service Providers (CASPs).
Unauthorized Crypto Firms Face Exit
Per TRM Labs, a blockchain analysis company that focuses on digital asset risk and monitoring crypto-financed crime trends, more than 79% of currently active operators did not receive MiCA approval before July 1.
Approximately 12% of unlicensed providers are High/Severe risk rated compared to approximately 2% of licensed CASPs. All known “Severe” risk ratings were found in the unlicensed group.
Unlicensed providers moved $5 billion in assets to sanctioned parties. Licensed providers moved $1.7 billion in assets to sanctioned parties.
Germany approved 55 domestic providers, the most of any member state. Poland approved no domestic providers despite maintaining an official national register of >1800 providers.
EU’s AML Authority (AMLA) warns firms are potentially exposing themselves to high risk by offboarding funds from over 1,000 unlicensed providers.
Varied Licensing Requirements from Country-to-Country
Before MiCA went into effect, crypto asset companies throughout Europe were subject to differing national regulations. This led to significant discrepancies between licensing requirements at the local level. Registers that once existed in Lithuania (>383 active providers) and Poland (>1,800 registered entities) quickly diminished due to MiCA’s strict capitalization and operational standards.
License approval processes differed wildly from country to country:
- Germany: Issued licenses to 55 companies first in Europe, out of the 57 that applied for one to do business domestically.
- France & Netherlands: Both countries gave the green light to 29 companies.
- Malta & Cyprus: Both countries issued 20 and 19 licenses domestically respectively.
- Poland & Lithuania: Poland awarded no licenses, Lithuania welcomed only eight from the legacy list of over 400 operators.
MiCA has its share of patchy adoption at the local level but the passporting framework means that once a CASP obtains authorization from one member state, it will be able to service customers in any of the 30 EEA countries. Liquidity provider B2C2 was able to obtain a license from Luxembourg in May 2026 to operate in all EEA markets. While Ripple secured an EU CASP license, and Coinbase, Bitpanda and Kraken are among the many large platforms that chose a single regulator to base themselves within Europe.
By July 3, ESMA interim register grew to include 300 authorized CASPs after approving another 57 closer to the deadline, some well-known institutional entities like Standard Chartered and FalconX among them.
Sanctions Exposure and Risk Profiles Driven by Illicit Flows
Comparing TRM Labs data between authorized and unauthorized groups shows significant differences in compliance risk profiles. On average, direct sanctions exposure was low for both unauthorized and authorized groups combined (0.09% and 0.07% respectively). However, high-risk entities were concentrated among a small number of unlicensed exchanges.
A tiny fraction of unauthorized exchanges transferred between 1% and 12% of volume to illicit addresses. HTX (designated exchange) and Huione Pay (subject to US targeted sanctions) were included in high-risk recipients that, along with companies sanctioned by the EU for Russia-related dealings, did not secure MiCA licenses despite being domestically registered businesses.
Structural breakdown also varied: financial institutions/investment services firms comprised 46% of approved applicants while crypto exchanges (42%) and payment processors (16%) comprised most of those declined.
Offboarding Clients & Custody Reviews Make Regulatory Shift
With over 1,000 firms conducting unregulated business activity within the EEA, regulators have shifted focus to the offboarding of customer assets. European regulators directed by the Anti-Money Laundering Authority (AMLA) have told national regulators to pay close attention to company wind-downs, stating that accelerated timelines can weaken AML procedures and leave gaps in the illicit asset trail. Incoming CASPs are seeing increased operational pressure to perform diligence on incoming clients, especially those coming from the list of 30 unregulated providers with a High or Severe risk rating from TRM.
At the same time, ESMA started conducting a thematic inspection on a sample of MiCA-approved crypto custodians this July. Areas covered during the inspection include private key management, custody segregation controls, third-party vendors and breach preparedness. According to TRM’s review, there was no observable relationship between the number of total licenses issued by a jurisdiction and the illicit risk exposure of firms supervised by that jurisdiction’s regulators. This highlights that financial institutions need to perform due diligence on an entity level rather than rely on the reputation of the home regulator.
International Competition Strains EU Guardrails
In addition to homegrown challenges around compliance requirements and national bourse departures, EU lawmakers are preparing to revise MiCA. Tensions surrounding the exchange delisting of non-EU compliant tokens like Tether (USDT) and accelerated development of the US’s GENIUS Act revealed shortcomings in the region’s original proposal. Amendments slated for review in 2027 aim to clarify how international stablecoin projects can enter the region without losing investors to rival transatlantic markets. The scope of the legislation is also likely to broaden to include ETFs and tokenized cash.
Conclusion: A Shift in Market Quality over Quantity
MiCA’s July 1 deadline ushered in a new era for Europe’s crypto landscape. We have seen the substantial benefit of moving from thousands (3,200+) of vaguely registered national license holders to around 300 tightly regulated CASPs fully compliant with MiCA. There will be growing pains as over 1,000 companies scramble to end customer relationships, but dramatically less crime exposure and sanctions risk means a much healthier ecosystem for institutions operating in the EEA. One positive side-effect of this cleanup may actually be that it creates a tighter safe zone around legitimate liquidity pools by driving European retail and institutional investors away from risky offshore exchanges to regulated crypto exchanges in the EU under tight MiCA supervision and capitalization rules.