Picture this. You run a small crypto exchange out of Lisbon. Nothing huge, maybe a few thousand active traders, some staking products, a custody wallet or two. For years you operated on a registration you got in an afternoon, some paperwork with the national regulator, a checkbox for AML, done. Then one July morning you wake up and that registration means nothing. Your license, in the eyes of the law, no longer exists.
That’s not a hypothetical anymore. That’s what happened to hundreds of crypto firms across the EU on July 1, 2026, when the last of the MiCA transitional windows closed for good.
So let’s talk about what MiCA actually asks of Crypto Asset Service Providers, because honestly, most explainers either drown you in article numbers or oversimplify it into “get a license, you’re fine.” Neither is true. Here’s the real shape of it.
Get covered on MiCA with CryptoTechFeed.
What is MiCA, In Plain Terms
MiCA stands for Markets in Crypto Assets Regulation, and it’s the EU’s attempt to do something nobody else has managed at this scale: build one licensing rulebook that covers every crypto business touching European clients, instead of 27 different national patchworks. Before MiCA, a French exchange operated under one set of rules, a German one under another, and a Cyprus based platform under something else entirely. Passporting between them was basically nonexistent.
MiCA replaces all of that. Get authorized as a Crypto Asset Service Provider, or CASP, in any one of the 30 EEA states (that’s the 27 EU members plus Iceland, Liechtenstein, and Norway) and you can legally serve clients across all of them. One license, thirty markets. That’s the pitch, and for firms that actually clear the bar, it’s a genuinely powerful thing to hold.
But clearing the bar is the hard part.
The Ten Services That Trigger CASP Authorization
MiCA doesn’t regulate “crypto companies” as a vague category. It regulates ten specific services, and if you offer even one of them to EU clients, you need authorization. These are custody and administration of crypto assets, operating a trading platform, exchanging crypto for cash, exchanging crypto for other crypto, executing client orders, placing crypto assets, receiving and transmitting orders, giving advice on crypto assets, managing crypto portfolios, and providing transfer services.
Notice how broad that net is. A wallet app that lets users swap tokens falls in scope. A robo-advisor recommending crypto allocations falls in scope. An OTC desk quietly moving large blocks for institutional clients falls in scope. There’s no “we’re too small” exemption written into the regulation itself.
The Three Classes, and Why Your Capital Requirement Depends on What You Actually Do
Here’s where MiCA gets genuinely clever, or genuinely annoying depending on which side of the application you’re sitting on. Instead of one flat capital requirement for everyone, it splits CASPs into three classes based on how much client risk the service carries.
| Class | Core Services | Minimum Capital |
|---|---|---|
| Class 1 | Advice, portfolio management, order transmission, execution, placing, transfer services | €50,000 |
| Class 2 | Exchange of crypto for funds or other crypto assets | €125,000 |
| Class 3 | Custody and administration, operating a trading platform | €150,000 |
The rule that trips people up is this: your class isn’t decided by your biggest ambition, it’s decided by the single most capital intensive service you actually offer. Run a custody wallet alongside an advisory arm, and you’re Class 3, full stop, even if custody is a tiny sliver of revenue. There’s no averaging, no blending. The highest applicable class wins.
And these figures aren’t the whole story either. Under Article 67, a CASP has to hold own funds equal to whichever is higher: the class minimum, or one quarter of last year’s fixed overheads. Run a mid sized exchange with €2 million in annual overhead, and your real capital floor jumps to €500,000, not €125,000. Founders who budget to the headline number and stop there tend to get an unpleasant surprise partway through the application.
What Comes With the License, Beyond the Money
Capital is the number everyone fixates on, but it’s genuinely not the hardest part of a CASP application. The governance requirements are where most files actually stall.
Directors and anyone holding significant influence over the firm need to pass a “fit and proper” test, meaning regulators dig into professional history, past conduct, even reputation. You need a physical, substantive presence in the country granting your license, not a shell address. Client crypto assets have to sit fully segregated from company assets, on chain and operationally, with no commingling under any circumstance. Client funds have to land with a credit institution or central bank by the next business day. And since January 2026, CASPs also fall under DORA, the Digital Operational Resilience Act, which means your IT systems, incident reporting, and third party vendor oversight all get audited too.
Honestly, that last one catches a lot of people off guard. Firms walk into MiCA thinking about crypto rules and forget they’ve also just inherited a full operational resilience framework built for banks.
The Deadline That Already Passed
MiCA’s CASP rules technically started applying back on December 30, 2024. But member states could grant existing firms a transitional window, up to 18 months, to keep operating under their old national registration while the CASP application worked its way through the system. Some countries used the full window. France, Malta, Luxembourg, and Estonia stretched it to July 1, 2026. Others, Poland among them, closed theirs far earlier, and Poland’s situation turned into a genuine mess: no designated national authority ever got set up to actually process applications, leaving firms that were operating perfectly legally stuck with nowhere to file.
As of August 22, 2026, the ESMA CASP register shows 331 authorized providers across the EEA. That sounds like progress, and it is, but weigh it against the roughly 1,200 firms that were operating under national VASP registrations before MiCA kicked in. A huge share of the market either never applied, got stuck in a backlog, or simply exited the EU rather than build out the compliance stack MiCA demands.
Operating without authorization after July 1, 2026 isn’t a paperwork gap anymore. It’s an outright breach of EU law, and the penalties reflect that: fines running up to 12.5% of annual turnover, license revocation, and in some cases personal liability reaching the executives who signed off on continuing to operate.
Why This Matters Even If You’re Not Building a CASP
If you’re an Indian retail investor reading this wondering why a Brussels regulation matters to you, here’s the honest answer. MiCA authorized exchanges are becoming the trust signal international crypto users actually check for. When you see a platform boasting “MiCA licensed” or “CASP authorized,” that’s not marketing fluff, it means the exchange has been through capital review, governance vetting, and custody audits that plenty of platforms operating elsewhere simply haven’t. It’s not a perfect proxy for safety, nothing is, but it’s a real one.
Frequently Asked Questions
What does CASP stand for under MiCA? CASP stands for Crypto Asset Service Provider, the authorization category MiCA created for any firm offering regulated crypto services like exchange, custody, or trading platform operation to EU clients.
Do all crypto businesses need the same MiCA license? No. Your required class, and therefore your minimum capital, depends on the highest risk service you offer. Advisory only firms sit in Class 1, exchanges and custodians typically land in Class 2 or Class 3.
Can a CASP licensed in one EU country serve clients across the whole EU? Yes. That’s the passporting mechanism under Article 65, once you’re authorized in one EEA state, you can serve clients in all 30 without separate national licenses.
What happens if a firm operates without CASP authorization after July 2026? It’s treated as an outright breach of EU law, not a compliance lag, carrying fines up to 12.5% of annual turnover along with possible license revocation and executive liability.
Is MiCA only about exchanges? No. It covers ten distinct services including advisory, portfolio management, custody, and order execution, so wallet providers, robo-advisors, and OTC desks can all fall within scope depending on what they actually do.
