What is MiCA? It is the EU’s Markets in Crypto-Assets Regulation, the first unified crypto-asset regulatory framework across the European Union. It sets common rules for issuing crypto-assets, for stablecoins, and for crypto-asset service providers (CASPs). Once a firm is authorized in one member state, it can use the “passporting” mechanism to serve the entire European Economic Area without applying country by country.
Which Assets and Services Does MiCA Regulate?
MiCA divides crypto-assets into three categories: e-money tokens (EMTs), which are fiat-backed stablecoins pegged to a single official currency; asset-referenced tokens (ARTs), which reference a basket of assets or several currencies; and all other crypto-assets, such as Bitcoin and ETH. Tokens that already qualify as securities or other financial instruments remain under existing financial law, and unique NFTs are generally out of scope. Only credit institutions and e-money institutions may issue EMTs. On the services side, MiCA treats custody of crypto-assets for clients, operating a trading platform, exchanging crypto-assets for funds or other crypto-assets, executing orders on behalf of clients, and transfer services as crypto-asset services. Firms providing them are CASPs, the EU’s equivalent of what other jurisdictions call VASPs.
When Did MiCA Take Effect?
MiCA entered into force on June 29, 2023 and was applied in two stages: the stablecoin rules for EMTs and ARTs from June 30, 2024, and the remaining rules for CASPs from December 30, 2024. On the same day, the EU’s version of the Travel Rule took effect, requiring CASPs to pass originator and beneficiary information with every crypto-asset transfer. For firms already operating under national regimes, MiCA allowed a transitional period lasting until July 1, 2026 at the latest, which member states could shorten. That transitional period is now over, and any firm that wants to keep providing crypto-asset services in the EU must hold a CASP authorization under MiCA.
What Does MiCA Require for Custody and Wallets?
A CASP that holds crypto-assets for clients must sign a custody agreement with each client, adopt a custody policy, keep a register of each client’s positions, and provide clients with a statement of their positions at least once a quarter. Client assets must be segregated from the CASP’s own assets both operationally and legally, so that even if the CASP becomes insolvent, its creditors have no recourse to client assets. If client assets are lost because of a security incident or operational failure attributable to the CASP, the CASP is liable, up to the market value of the assets at the time of the loss. This means private key management, transfer approvals and audit trails bear directly on a firm’s financial liability, and on the AML side they need to work alongside KYT and the Travel Rule. If a business uses a self-custody setup and stays in control of its assets at all times, the technology provider is generally not treated as a custodian, a point that is central to whether Wallet-as-a-Service is regulated.
Conclusion
MiCA is the EU’s unified crypto-asset regulation, covering stablecoin issuance and crypto-asset services. It has applied in full since the end of 2024, and its transitional period ended by July 1, 2026. CASP authorization opens up the whole European Economic Area, but client asset segregation, private key control and AML capability all face close scrutiny.
Looking for a secure way to manage digital assets?
Talk to our experts and find the right solution for your business.
Request a DemoLooking for a secure way to manage digital assets?
Talk to our experts and find the right solution for your business.