The European Union's Markets in Crypto-Assets (MiCA) regulation has entered its full implementation phase, yet enforcement and licensing progress vary dramatically across member states. With the July 1, 2026 transitional deadline fast approaching, crypto firms face an unprecedented compliance imperative: either secure a CASP (Crypto-Asset Service Provider) license before the cutoff or exit the EU market entirely.
The MiCA Framework: From Fragmentation to Uniformity
MiCA entered into force in June 2023, with stablecoin provisions applying from June 2024 and the full regime commencing on December 30, 2024. It represents the first unified regulatory framework for crypto assets in any major jurisdiction, covering all 27 EU member states through a single licensing passport. Before MiCA, Europe's crypto regulation was a patchwork of national regimes. A company could obtain a relatively light VASP or DASP license in one country and serve clients across Europe with minimal ongoing supervision. MiCA replaces that fragmented system with one standard framework: the CASP regime and unified rules for white papers and token issuance.
CASP Licensing Requirements
Any company providing crypto-asset services within the EU — including operating an exchange, custody, order execution, investment advice, portfolio management, and transfer services — must hold a CASP license. Applicants must demonstrate: minimum capital of EUR 50,000 to 150,000 depending on services; fit-and-proper checks for management; robust AML/KYC frameworks; IT security systems aligned with DORA; segregation of client funds; and governance structures with clear accountability. Once authorized in one member state, the license can be passported across all 27 countries. Notably, DeFi protocols, dApps, and NFTs currently remain outside MiCA's scope, provided the service is genuinely decentralized with no identifiable central party.
Transitional Arrangements: The Clock Is Ticking
Firms previously registered under pre-MiCA national regimes (e.g., VASPs) were granted a transitional period to continue operating while preparing for full MiCA authorization. This window ends on July 1, 2026 for all member states. After that date, any firm without a valid CASP license must cease crypto-asset services in the EU. This deadline is embedded in the EU Regulation itself and cannot be extended by national authorities.
Three Landmark Cases: Enforcement Accelerates
Case One: Austria's FMA Bans KuCoin from New Business
Austria's Financial Market Authority (FMA) prohibited the Austrian branch of KuCoin EU Exchange GmbH from conducting any new business after finding the company lacked several mandatory positions required under MiCA — namely an Anti-Money Laundering Officer and deputy, and a Sanctions Compliance Officer and deputy. The prohibition blocks new customer acquisition and new transactions, effectively freezing the company's growth in Europe. This is one of the first high-profile enforcement actions under MiCA against a globally recognized exchange brand, sending a clear message that regulators are not waiting.
Case Two: Bank of Lithuania Issues First CASP Licenses
Lithuania was once one of Europe's most permissive crypto registration hubs, issuing thousands of VASP authorizations under a light-touch regime. Under MiCA, the Bank of Lithuania has now granted four CASP licenses, the most recent on March 3, 2026. Leveraging its established crypto infrastructure and pool of compliance professionals, Lithuania is emerging as a cost-effective jurisdiction for MiCA licensing.
Case Three: Poland's Second Veto Leaves Over 1,300 VASPs in Limbo
On February 12, 2026, Polish President Karol Nawrocki vetoed the Crypto-Assets Market Act for the second time, blocking the legislation needed to designate the KNF as Poland's competent authority for MiCA enforcement. Consequently, the over 1,300 VASPs registered under Poland's previous national regime cannot submit a MiCA application domestically, yet they remain bound by the EU-level July 1 deadline. Meanwhile, foreign firms with CASP licenses from other member states can already passport services into Poland, creating a significant competitive asymmetry.
Conclusion
A MiCA license is not just a regulatory requirement but a commercial asset. Firms that secure authorization gain access to the entire EU single market with regulatory standing that institutional counterparties, banking partners, and investors increasingly demand. Jurisdictions like the UK, Singapore, and the UAE are closely studying MiCA's structure, while Montenegro (non-EU) has already used it as a basis for its domestic regulation. For operators with EU exposure, the practical question is no longer whether to pursue MiCA compliance, but where to apply, how to prepare, and whether the July 2026 deadline leaves enough runway. The clock is running, and the regulator's blade has fallen.