Key Takeaways
- Regulatory shakeout confirmed: As of July 3, 2026, only 280 CASPs are licensed, against more than 3,167 entities subject to the licensing requirement under the MiCA Regulation.
- A major player exits: Binance, the largest exchange by global volume, withdrew its authorization application shortly before the July 1, 2026 deadline.
- Deterrent penalties: Fines for unauthorized operation reach €5 million or 5% of annual turnover, with immediate cease-and-desist orders issued by ESMA.
The Deadline That Redraws the Operating Perimeter
On July 1, 2026, the MiCA Regulation's transitional regime came to an end. Twenty-seven fragmented national frameworks were replaced by a single authorization system, with immediate effect on more than 1,000 Virtual Asset Service Providers (VASPs) that until that day had been operating under disparate local registrations. From this date onward, only providers licensed as CASPs (Crypto-Asset Service Providers) can offer services to clients in the European Union. Those who did not complete the process are out of the market by law, not by commercial choice.
The Single Passport Mechanism
CASP authorization is not a bureaucratic formality: it is a thorough review conducted by a National Competent Authority (NCA), which examines governance, capital adequacy, cybersecurity, and anti-money laundering controls. Once granted, the license generates a passport valid across all 27 member states and the European Economic Area. A single market for crypto services now exists on paper, but the barriers to entry have been raised sharply compared to the previous regime.
The Licensing Bottleneck
The numbers confirm a structural bottleneck. Of the 3,167 entities theoretically required to obtain authorization, only 174 had completed the process on the eve of the deadline. The last-minute rush produced a spike in activity: ESMA recorded 66 approvals in June 2026 alone, with 13 concentrated on June 30 and one on July 1. The net result, as of July 3, is a public register of 280 authorized CASPs, a fraction of the pre-existing operator base. Binance withdrew its own application shortly before the deadline, while other major operators still have pending applications with NCAs.
Wind-Down Plans and Asset Transfers
For unauthorized operators, ESMA mandates orderly wind-down plans: immediate cessation of new operations, closure of existing relationships, and transfer of client assets to authorized CASPs or self-custodied wallets. No new account openings are permitted. The only remaining actions available to users are withdrawing funds, transferring to an authorized entity, or moving assets to a personal wallet.
The Scope of Reverse Solicitation
One technical exception remains in force: reverse solicitation, which allows a non-EU operator to serve a European client if the client initiated contact on their own accord. ESMA has defined the boundaries of this exception precisely: the clause does not cover targeted advertising or any other form of active solicitation. Any systematic attempt to circumvent this rule exposes the operator to the same penalties applied to unauthorized activity.
A Consolidation Trajectory
The gap between the 3,167 entities potentially subject to the requirement and the 280 CASPs actually authorized measures the scale of the compression underway. Penalties of up to €5 million or 5% of annual turnover, combined with the possibility of cease-and-desist orders, make operating outside the regulatory perimeter an unsustainable risk over the medium term. The market that emerges in the coming quarters will be structurally more concentrated, with a smaller number of certified operators absorbing capital flows and clientele previously spread across a fragmented ecosystem. The divide between the regulated and the excluded is already drawn: what remains to be seen is how quickly the market completes the migration.
