Cryptocurrency is legal but only partially regulated in European Union. The jurisdiction has an active legislative process underway. European Commission is among the 2 regulators with oversight. The FATF Travel Rule is adopted.
Derived from 282 sourced facts for European Union · last updated · primary sources
The European Commission’s official MiCA implementation roadmap, published in March 2025, indicates that 90% of Level 2 and Level 3 measures (including delegated acts and implementing technical standards) are projected to be in force by…
European Banking Authority (EBA) – AML/CFT Framework
Can specific business models operate in European Union? Each card answers the operational question for one kind of operator. Curated cells reflect counsel-grade review; AI-generated cells should be confirmed before relying on them.
Conditional · high burden.
AI · UnreviewedConditional · high burden.
AI · UnreviewedConditional · low burden.
AI · UnreviewedConditional · high burden.
AI · UnreviewedConditional · high burden.
AI · UnreviewedConditional · high burden.
AI · UnreviewedConditional · high burden.
AI · UnreviewedConditional · medium burden.
AI · UnreviewedConditional · high burden.
AI · Unreviewed| Law / Regulation | Year | Scope |
|---|---|---|
| The Markets in Crypto-Assets Regulation, Regulation (EU) 2023/1114 of 31 May 202 | 2023 | The Markets in Crypto-Assets Regulation, Regulation (EU) 2023/1114 of 31 May 2023, was published in the Official Journal on 9 June 2023 (OJ L 150, p. 40); it covers crypto-assets not already regulated as financial instruments, deposits or… |
Under MiCA the EBA supervises issuers of significant asset-referenced tokens and significant e-money tokens (Art 117, Regulation (EU) 2023/1114), decides on significance under its 22 October 2024 procedure, and drafts the ART/EMT technical standards and guidelines.
ESMA keeps the MiCA registers of CASPs, white papers and non-compliant entities (Arts 109–110, Regulation (EU) 2023/1114), drafts CASP technical standards and issues guidelines; day-to-day CASP authorisation and supervision sits with national competent authorities (Arts 62–63, 93).
CASP authorisation under MiCA is granted by the national competent authority of the home Member State (Arts 62–63, Regulation (EU) 2023/1114), for example BaFin, the AMF, the CNMV and the Central Bank of Ireland, which appear as authorising NCAs in the ESMA register.
MiCA, Regulation (EU) 2023/1114 of 31 May 2023 (OJ L 150, 9.6.2023, p. 40), governs CASP authorisation, crypto-asset white papers and ART/EMT issuance; Titles III and IV (ARTs and EMTs) apply from 30 June 2024 and the rest, including CASP rules, from 30 December 2024 (Art 149).
2023The recast Transfer of Funds Regulation, Regulation (EU) 2023/1113, has applied since 30 December 2024 and requires originator and beneficiary information on every crypto-asset transfer regardless of amount; transfers exceeding EUR 1,000 to or from a self-hosted address also trigger a CASP check of ownership or control of that address.
2023AMLD6, Directive (EU) 2024/1640 of 31 May 2024, sets the national AML/CFT supervisory and FIU framework; Member States must transpose it by 10 July 2027, when it repeals Directive (EU) 2015/849, the AML directive that still applies to CASPs until then.
2024DAC8, Council Directive (EU) 2023/2226 of 17 October 2023, extends EU automatic exchange of tax information to crypto-assets; Member States had to transpose it by 31 December 2025 and apply it from 1 January 2026, with first reports covering calendar year 2026.
2024MiCA lists 10 crypto-asset services (Art 3(1)(16)) grouped in three minimum-capital classes (Annex IV): Class 1 EUR 50,000 (execution, placing, transfer, reception/transmission, advice, portfolio management); Class 2 EUR 125,000 (adds custody, exchange for funds, exchange crypto-for-crypto); Class 3 EUR 150,000 (trading platform); the requirement is the higher of that amount or one quarter of prior-year fixed overheads (Art 67(1)).
Under MiCA a CASP providing custody and administration of crypto-assets on behalf of clients is a Class 2 provider with minimum capital of EUR 125,000, or one quarter of prior-year fixed overheads if higher (Art 67(1), Annex IV), and must segregate client crypto-assets from its own holdings, including on the distributed ledger (Art 75(7)).
A CASP authorised for exchange of crypto-assets for funds or other crypto-assets is a Class 2 provider (EUR 125,000 minimum capital, MiCA Annex IV); to passport, it notifies its home NCA, which forwards the notice to host states within 10 working days, and services may start on receipt or at the latest on the 15th calendar day (Art 65). France kept the full 18-month transition; Germany chose 12 months.
Under Regulation (EU) 2023/1113, applying since 30 December 2024, CASPs must obtain and transmit originator and beneficiary information on every crypto-asset transfer regardless of amount; the EUR 1,000 threshold applies only to the self-hosted address ownership check.
MiCA, Regulation (EU) 2023/1114, Art 3(1)(15) defines a crypto-asset service provider (CASP) as a legal person or other undertaking whose business is providing one or more crypto-asset services to clients on a professional basis and that is allowed to do so under Art 59.
MiCA, Regulation (EU) 2023/1114, lays down uniform EU requirements for offers and admission to trading of crypto-assets and for crypto-asset service providers (Art 1(1)) and is directly applicable in all Member States without transposition (Art 149).
CASPs authorised under MiCA must meet the conduct duty to act honestly, fairly and professionally (Art 66), prudential safeguards (Art 67), governance and fit-and-proper rules (Art 68), safekeeping of client assets (Art 70), complaints handling (Art 71) and conflict-of-interest rules (Art 72), plus market-abuse rules in Title VI (Arts 86–92) of Regulation (EU) 2023/1114.
A CASP authorised under MiCA in its home Member State may provide services in other Member States after notifying its home NCA, which forwards the notice within 10 working days; services may begin on receipt of the NCA communication or at the latest on the 15th calendar day (Art 65, Regulation (EU) 2023/1114).
The MiCA technical standards on CASP authorisation applications, complaints handling and conflicts of interest are Commission Delegated Regulations (EU) 2025/305 (31 October 2024, OJ 31 March 2025), 2025/294 (1 October 2024, OJ 13 February 2025) and 2025/1142 (27 February 2025, OJ 10 June 2025), each supplementing Regulation (EU) 2023/1114.
MiCA (Regulation (EU) 2023/1114) entered into force on 29 June 2023; under Art 149 its Titles III (asset-referenced tokens) and IV (e-money tokens) apply from 30 June 2024 and all other provisions, including the CASP regime, from 30 December 2024.
MiCA (Regulation (EU) 2023/1114) regulates issuers of crypto-assets, asset-referenced tokens and e-money tokens, crypto-asset service providers, and market abuse (Art 1(2)); it applies in all 27 Member States and in the EEA states Iceland, Liechtenstein and Norway, whose authorities also appear in the ESMA CASP register.
ESMA keeps the MiCA register of white papers, ART issuers, EMT issuers and CASPs under Art 109 of Regulation (EU) 2023/1114 and a register of non-compliant entities under Art 110; on 14 October 2026 the interim CSV register listed 370 CASPs, 173 non-compliant entities, 50 EMT white papers and 0 ART issuers.
ESMA, not the EBA, keeps the MiCA register of issuers of asset-referenced tokens and e-money tokens (Art 109(1)(b)–(c) of Regulation (EU) 2023/1114); on 14 October 2026 the ESMA interim register listed no authorised ART issuer and 50 e-money token white papers from 25 issuers.
ESMA publishes an interim MiCA register of authorised CASPs under Art 109 of Regulation (EU) 2023/1114; on 14 October 2026 it listed 370 CASPs, led by Germany (103), France (36), the Netherlands (29), Cyprus (25) and Malta (23).
The ESMA interim MiCA register lists Circle Internet Financial Europe SAS as an e-money token issuer authorised as an electronic money institution by France's ACPR (date 1 July 2024) and Boerse Stuttgart Digital Custody GmbH as a CASP authorised by BaFin on 17 January 2025 for custody; no Binance entity is listed as an authorised CASP as of 14 October 2026.
Under Art 143(3) of MiCA (Regulation (EU) 2023/1114), CASPs operating lawfully under national law before 30 December 2024 could continue until 1 July 2026 or until authorised or refused; 12 Member States shortened the period (6, 9 or 12 months) and 15 kept 18 months, so as of 14 October 2026 no transitional period is running in the EU.
MiCA (Regulation (EU) 2023/1114) CASP authorisation has applied since 30 December 2024 (Art 149(2)); the first authorisations in the ESMA interim MiCA register are dated 30 December 2024 (Netherlands), and the register listed 370 authorised or notified CASPs on 14 October 2026.
The EBA technical standards on own-funds adjustment and stress testing for ART and EMT issuers were adopted as Commission Delegated Regulation (EU) 2025/415 of 13 December 2024 (OJ 24 March 2025), and those on liquidity management policy as Delegated Regulation (EU) 2025/1264 of 27 June 2025 (OJ 3 October 2025), both supplementing Regulation (EU) 2023/1114.
France's AMF applied the full 18-month MiCA transitional period for PSANs, which ended on 1 July 2026; on 6 July 2026 the AMF reported 31 French CASP authorisations (283 EU-wide), and on 14 October 2026 the ESMA interim register listed 36 AMF-authorised French entries.
Germany's MiCA implementing law, still a draft in July 2024, was enacted as the Kryptomärkteaufsichtsgesetz (Art 1 FinmadiG, BGBl. 2024 I Nr. 438 of 27 December 2024); its transitional rule let firms already licensed under the KWG and other German statutes continue crypto activities until at the latest the end of 31 December 2025 (KMAG § 50).
AML/CFT supervision of financial institutions and crypto-asset service providers in the EU is carried out by national competent authorities (Directive (EU) 2015/849, Art 48); the Anti-Money Laundering Authority (Regulation (EU) 2024/1620) applies from 1 July 2025 and begins direct supervision of up to 40 selected obliged entities in 2028.
The Fifth Anti-Money Laundering Directive is Directive (EU) 2018/843 of 30 May 2018, which amended Directive (EU) 2015/849 to bring providers of exchange services between virtual and fiat currencies and custodian wallet providers into AML scope, with transposition due by 10 January 2020.
Directive (EU) 2015/849, as amended by Directive (EU) 2018/843 (in force 9 July 2018), was amended by Regulation (EU) 2023/1113, Art 38 to cover crypto-asset service providers from 30 December 2024, and is repealed by Directive (EU) 2024/1640 with effect from 10 July 2027.
Regulation (EU) No 596/2014 is the Market Abuse Regulation and sets no AML obligations for crypto firms; crypto-asset service providers are obliged entities under Directive (EU) 2015/849 as amended by Regulation (EU) 2023/1113, Art 38, and under AMLR (EU) 2024/1624 from 10 July 2027.
Directive (EU) 2018/843 (5AMLD) was published in the Official Journal on 19 June 2018 and entered into force on 9 July 2018; Member States had to transpose it by 10 January 2020 and set up beneficial ownership registers for legal entities by 10 January 2020 and for trusts by 10 March 2020.
Under Regulation (EU) 2023/1114, Art 62, a crypto-asset service provider applies for authorisation to its home-state competent authority with, among other items, a programme of operations, proof of prudential safeguards under Art 67, governance arrangements and fit-and-proper evidence for the management body.
Under Regulation (EU) 2023/1114, Art 63, the competent authority checks a CASP application for completeness within 25 working days of receipt and decides within 40 working days of receiving a complete application.
Directive (EU) 2015/849, Arts 13(1)(a) and 14(1) require obliged entities, including crypto-asset service providers, to identify customers and verify their identity from reliable, independent sources before establishing a business relationship or carrying out a transaction.
Under Directive (EU) 2015/849 (Arts 18 and 20), crypto-asset service providers, as obliged entities, must apply enhanced due diligence to politically exposed persons and to persons established in Commission-listed high-risk third countries; AMLR (EU) 2024/1624 replaces these rules from 10 July 2027.
Directive (EU) 2015/849, Art 33(1) requires obliged entities, including crypto-asset service providers, to report suspicious transactions promptly to the national Financial Intelligence Unit, regardless of the amount involved; it sets no fixed day count.
Directive (EU) 2015/849, Art 40(1) requires obliged entities, including crypto-asset service providers, to keep CDD documents and transaction records for five years after the end of the business relationship or the date of an occasional transaction; AMLR (EU) 2024/1624, Art 77 governs record retention from 10 July 2027.
Crypto-asset service providers are obliged entities under Directive (EU) 2015/849 (added by Regulation (EU) 2023/1113, Art 38, from 30 December 2024) and are supervised for AML/CFT by national competent authorities; AMLA (Regulation (EU) 2024/1620) applies from 1 July 2025 and starts direct supervision of selected entities in 2028.
Directive (EU) 2018/843 (5AMLD) made providers of exchange services between virtual and fiat currencies and custodian wallet providers obliged entities under Directive (EU) 2015/849, subject to customer due diligence and suspicious transaction reporting, and required Member States to register them (amended Art 47(1)).
Since 30 December 2024 crypto-asset service providers need MiCA authorisation from their home-state competent authority (Regulation (EU) 2023/1114, Arts 59 and 62) with minimum capital of EUR 50,000, 125,000 or 150,000 by service class (Annex IV); the earlier 5AMLD regime required only national registration.
Directive (EU) 2015/849, Art 59 requires Member States to provide maximum administrative fines of at least twice the benefit derived or at least EUR 1 million, and for credit and financial institutions that are legal persons at least EUR 5 million or 10% of total annual turnover; criminal penalties are set nationally.
The EU travel rule for crypto-assets is Regulation (EU) 2023/1113, applicable since 30 December 2024 (Art. 40): originator and beneficiary information must accompany every crypto-asset transfer with no minimum amount, while a separate EUR 1,000 trigger requires the CASP to assess whether a self-hosted address is owned or controlled by its client (Arts 14(5), 16(2)).
EUR 0 (no threshold under TFR recast)Regulation (EU) 2023/1113, the recast Transfer of Funds Regulation, was adopted on 31 May 2023, published in OJ L 150 of 9 June 2023, entered into force on the twentieth day after publication and has applied since 30 December 2024 (Art. 40). The EBA travel-rule guidelines (EBA/GL/2024/11, 4 July 2024) also apply from 30 December 2024.
Regulation (EU) 2023/1113 sets no de minimis threshold for crypto-asset transfers: recital 30 states they are subject to the same requirements regardless of amount and whether domestic or cross-border. The only EUR 1,000 figure for crypto-assets is the self-hosted address ownership check in Arts 14(5) and 16(2).
Regulation (EU) 2023/1113 applies to crypto-asset service providers as defined in Article 3(1)(15) of MiCA (Regulation (EU) 2023/1114) and to intermediary CASPs, meaning CASPs that receive and transmit a crypto-asset transfer on behalf of the originator's or beneficiary's CASP; a transfer is in scope when at least one CASP carries it out.
Under Article 14 of Regulation (EU) 2023/1113 the originator's CASP must send the originator's name, distributed ledger address or account number, address or official document number or date and place of birth, and LEI where available, plus the beneficiary's name and address or account, in advance of or simultaneously with the transfer and securely. EBA Guidelines EBA/GL/2024/11 of 4 July 2024 on detecting and handling missing information apply from 30 December 2024 and repeal Guidelines JC/GL/2017/16.
Regulation (EU) 2023/1113 of 31 May 2023 (OJ L 150, 9.6.2023, p. 1) recast the EU Transfer of Funds Regulation to cover transfers of crypto-assets and repealed Regulation (EU) 2015/847 from its date of application, 30 December 2024 (Arts 39 and 40).
EBA Guidelines EBA/GL/2024/11 of 4 July 2024 on information requirements for transfers of funds and certain crypto-assets under Regulation (EU) 2023/1113 set how payment service providers and CASPs detect and handle missing or incomplete originator and beneficiary information; they apply from 30 December 2024.
DAC8, Council Directive (EU) 2023/2226 of 17 October 2023, requires reporting crypto-asset service providers to report users' crypto-asset transactions to tax authorities under national law applying from 1 January 2026, with the first exchange covering 2026 due within nine months of year-end; tax rates and treatment remain national.
MiCA, Regulation (EU) 2023/1114, Art 75 sets the custody rules for CASPs: a client agreement and custody policy, a register of positions per client, statements of position at least every three months, segregation of client crypto-assets, and liability for losses from incidents attributable to the custodian, capped at the market value of the lost crypto-asset (Art 75(8)).
Providing custody and administration of crypto-assets on behalf of clients is a crypto-asset service under MiCA, Regulation (EU) 2023/1114, Art 3(1)(16)(a); it requires CASP authorisation under Art 59 (or an Art 60 notification) and Class 2 minimum capital of EUR 125,000 under Art 67(1)(a) and Annex IV, not a CRD licence.
A CASP authorisation application under MiCA, Regulation (EU) 2023/1114, Art 62(2) must include a programme of operations, proof of Art 67 prudential safeguards, governance and fit-and-proper evidence, AML/CFT risk controls, ICT technical documentation, the procedure for segregating client assets and, for custody, the custody and administration policy; the NCA checks completeness within 25 working days (Art 63(2)).
MiCA, Regulation (EU) 2023/1114, is enforced against CASPs, including custodians, by the national competent authorities each Member State designates under Art 93, using the Art 94 powers (including suspension of services for up to 30 consecutive working days) and Art 111 administrative penalties; the ECB has no MiCA enforcement role over CASPs.
The Markets in Crypto-Assets Regulation, Regulation (EU) 2023/1114 (OJ L 150, 9.6.2023), is directly applicable in all Member States; its CASP rules, including custody (Art 75), apply from 30 December 2024 and its ART/EMT titles from 30 June 2024 (Art 149). CASPs are also financial entities under DORA, Regulation (EU) 2022/2554, applicable from 17 January 2025.
Under MiCA, Regulation (EU) 2023/1114, crypto-asset custody may be provided in the EU only by a crypto-asset service provider authorised under Art 59 and Art 63, or by a credit institution, investment firm or other listed financial entity that notifies under Art 60; CASP rules have applied since 30 December 2024 (Art 149).
CASP (crypto-asset service provider) is MiCA's own term: Regulation (EU) 2023/1114, Art 3(1)(15) defines it, and a firm offering crypto-asset custody must hold CASP authorisation under Art 59 and Art 63; there is no separate older EU-level CASP scheme that MiCA replaced.
Under MiCA, Regulation (EU) 2023/1114, an applicant for CASP authorisation, including for custody, applies to the competent authority of its home Member State (Art 62(1)); that authority decides under Art 63, and the authorisation is then passported to other Member States by notification under Art 65.
MiCA, Regulation (EU) 2023/1114, Art 75(7) requires crypto-asset custodians to segregate client crypto-assets from their own holdings, hold them separately on the distributed ledger, and keep them legally segregated from the CASP's estate so creditors have no recourse in insolvency; Art 70(1) adds safekeeping arrangements for client ownership rights.
The Anti-Money Laundering Regulation, Regulation (EU) 2024/1624, applies from 10 July 2027; until then CASPs, including custodians, apply customer due diligence under Directive (EU) 2015/849 as transposed nationally, which Regulation (EU) 2023/1113 Art 38 extended to crypto-asset service providers and Directive (EU) 2024/1640 repeals from 10 July 2027.
MiCA, Regulation (EU) 2023/1114, Art 111(3) requires Member States to empower competent authorities to fine legal persons up to at least EUR 5,000,000 or 5% of total annual turnover for infringements of the CASP provisions (Arts 59, 60, 64 and 65 to 83, which include the custody rules), or twice the profit gained or loss avoided.
Under MiCA, Regulation (EU) 2023/1114, a national competent authority must withdraw a CASP's authorisation in the cases listed in Art 64(1), including serious infringement of the Regulation or failure to maintain effective AML/CFT systems under Directive (EU) 2015/849, and may suspend its crypto-asset services for up to 30 consecutive working days under Art 94(1)(b).
ART issuers must hold a reserve of assets, legally and operationally segregated, covering the referenced assets and redemption liquidity (MiCA Art. 36). EMT issuers must deposit at least 30% of funds received in separate accounts at credit institutions and invest the rest in highly liquid low-risk instruments in the same currency (Art. 54). Issuers and CASPs may not pay interest (Arts 40, 50), and ARTs and non-EU-currency EMTs face the means-of-exchange cap in Art. 23.
Only a credit institution or electronic money institution may offer or seek admission to trading of an e-money token, after notifying its white paper to the competent authority (MiCA Art. 48(1)); an ART may be offered only by an EU-established issuer authorised by its home competent authority (Art. 16, 21) or a credit institution with an approved white paper (Art. 17). Since 8 October 2026 ESMA expects CASPs to stop providing services in non-MiCA-compliant ARTs and EMTs to EU clients (opinion ESMA75-113276571-1742).
EMT holders may redeem at any time and at par value, paid in funds, and redemption is free of fees except under a recovery plan (MiCA Art. 49(4), (6)). ART holders have a permanent right of redemption against the issuer, paid at the market value of the referenced assets or by delivering them (Art. 39).
MiCA does not ban algorithmic stablecoins as a category: recital 41 states that a crypto-asset meeting the ART or EMT definition falls under Title III or IV whatever its stabilisation mechanism, including algorithmic stablecoins, so it can be offered only by an authorised issuer holding the required reserve (Art. 36 for ARTs, Art. 54 for EMTs). Algorithmic crypto-assets that reference no asset fall under Title II. Article 43 sets significance criteria, not reserve rules.
MiCA does not apply to the ECB or national central banks acting as monetary authorities (Art. 2(2)(c)). For ARTs, and for EMTs referencing a non-EU currency (Art. 58(3)), issuance must stop once use as a means of exchange in a single currency area exceeds 1 million transactions and EUR 200 million a day (Art. 23). Tokens with over 10 million holders or over EUR 5 billion in value or reserves may be classified significant (Art. 43) and are then supervised by the EBA (Art. 117).
Crypto-assets that qualify as financial instruments are regulated under MiFID II (Directive 2014/65/EU) and the wider EU securities rulebook and are excluded from MiCA by Article 2(4)(a) of Regulation (EU) 2023/1114; other crypto-assets fall under MiCA, which has applied directly in every Member State since 30 December 2024 (Titles III and IV since 30 June 2024).
A firm providing investment services in crypto-assets that qualify as financial instruments needs prior authorisation as an investment firm under Article 5(1) of MiFID II (Directive 2014/65/EU), granted by the competent authority of its home Member State; MiCA (Regulation (EU) 2023/1114) does not apply to such crypto-assets under its Article 2(4)(a).
The EU has no crypto-specific licence for crypto-assets that are financial instruments: firms dealing in them need MiFID II investment-firm authorisation (Directive 2014/65/EU, Art 5). For other crypto-assets MiCA (Regulation (EU) 2023/1114) created an EU-wide crypto-asset service provider authorisation (Art 59), and a MiFID-authorised investment firm may provide equivalent crypto-asset services by notifying its home competent authority at least 40 working days in advance (Art 60(3)).
Whether a crypto-asset is a financial instrument is decided under MiFID II Article 4(1)(15) and Annex I Section C, which since Regulation (EU) 2022/858 (Art 18) expressly include instruments issued by means of distributed ledger technology. ESMA's Guidelines on the conditions and criteria for the qualification of crypto-assets as financial instruments (ESMA75453128700-1323, final report 17 December 2024, issued under MiCA Article 2(5)) set a technology-neutral, substance-over-form test and apply three months after publication of their translations; ESMA notes national competent authorities may vary in what they treat as a financial instrument.
Crypto-assets that do not qualify as financial instruments (and are not deposits, funds or another Article 2(4) exclusion) are regulated at EU level by MiCA, Regulation (EU) 2023/1114, which has applied since 30 December 2024 without national transposition: Article 59 requires crypto-asset service providers to be authorised and Article 4 requires a crypto-asset white paper for offers to the public.
MiFID II (Directive 2014/65/EU) was drafted for traditional financial instruments and did not specifically address crypto-assets; the EU later drew the boundary in MiCA, Regulation (EU) 2023/1114, which excludes crypto-assets that qualify as financial instruments (Art 2(4)(a)), covers the rest from 30 December 2024, and mandates ESMA to issue guidelines on the criteria for qualifying crypto-assets as financial instruments (Art 2(5)).
Crypto-assets that are financial instruments carry the full securities rulebook: investment firms dealing in them are subject to MiFID II organisational and conduct-of-business rules, and market abuse in them is governed by the Market Abuse Regulation (EU) No 596/2014 when traded on a regulated market, MTF or OTF (Art 2(1)); market abuse in other crypto-assets admitted to trading falls under MiCA Title VI (Arts 86–92 of Regulation (EU) 2023/1114).
MiFID II's third-country regime (Directive 2014/65/EU, Arts 39–43, under which a Member State may require a branch, Art 39(1)) applies to non-EU firms providing investment services in crypto-assets that are financial instruments. For other crypto-assets MiCA has no third-country branch regime: a non-EU firm needs crypto-asset service provider authorisation under Article 59 of Regulation (EU) 2023/1114 unless an EU client initiates the service at its own exclusive initiative (Article 61).
The EU securities framework has been adapted for tokenised instruments: the DLT Pilot Regime, Regulation (EU) 2022/858, applying from 23 March 2023, created DLT multilateral trading facilities, DLT settlement systems and DLT trading and settlement systems for financial instruments issued, recorded, transferred and stored on distributed ledgers, and amended MiFID II so that 'financial instrument' includes instruments issued by means of DLT.
Sanctions data collection in progress.
Under MiCA (Regulation (EU) 2023/1114), the NCAs designated under Art 93 hold the supervisory and investigative powers in Art 94, including suspending a CASP's services for up to 30 consecutive working days, prohibiting crypto-asset services and publicly naming a CASP that fails its obligations; Art 111 requires administrative penalties and Art 114 requires penalty decisions to be published. Since the Art 143(3) transitional regime ended on 1 July 2026, no unauthorised CASP has grandfathering cover.
On 17 December 2024 ESMA published a Statement on MiCA transitional measures (ESMA75-453128700-1396) explaining that Member States chose different grandfathering periods under MiCA Art 143(3) and that a CASP serving clients in several Member States must comply with each state's law, so that a shorter national transitional period does not expire before it holds a MiCA authorisation.
Practical enforcement examples by April 2026 remain limited; however, in late 2025, the Dutch Authority for the Financial Markets (AFM) issued warnings against several unregistered crypto firms operating without transitional provisions AFM Crypto Warnings
MiCA Art 143(3), not Art 127, lets crypto-asset service providers that operated lawfully before 30 December 2024 continue until 1 July 2026 and lets each Member State shorten or disapply that period; per ESMA's list, Germany chose 12 months and France the full 18 months, while Latvia, Hungary, the Netherlands, Poland, Slovenia and Finland chose 6 months.
Likely enforcement action expected around 2026-10-14
Based on 927 historical regulatory events for European Union, averaging every 3 days, with increasing regulatory activity.
The Markets in Crypto-Assets Regulation (MiCA) is now fully applicable across all EU member states. CASPs must obtain authorization from their national competent authority to continue operations. Transition periods vary: France chose 6 months, Germany 12 months, with a maximum of 18 months (July 2026 deadline).
UNVERIFIED: Search results focus on general Web3 compliance, FATF guidelines for VASPs, and US/EU developments without specifying uncovered jurisdictions or primary sources for new onesFATF via sanctions.io.
Algorithmic Stablecoins: Effectively banned; MiCA (Article 43) requires all ARTs to maintain reserve assets, prohibiting purely algorithmic or non-collateralized stablecoins from being offered or traded in the EU.
CBDC Interaction: MiCA does not directly regulate central bank digital currencies (CBDCs), which fall under separate monetary policy frameworks. It limits non-euro stablecoin payment volumes to mitigate risks to euro stability and CBDC adoption, with EBA/ECB oversight for significant tokens (e.g., >€5 billion reserves or >10 million users).
Adoption and Effective Date: Adopted as part of the TFR recast in May 2023 (Regulation (EU) 2023/1113 entered into force June 2023). Full compliance is mandatory from December 30, 2024, following European Banking Authority (EBA) guidelines finalized in 2024.
Covered VASPs: Applies to all CASPs (Crypto-Asset Service Providers) and potentially Intermediate Crypto-Asset Service Providers (ICASPs), defined under the Markets in Crypto-Assets Regulation (MiCAR). This covers entities handling virtual asset transfers, aligning VASPs with financial institutions under AML/CFT rules.
Technical Implementation Requirements: CASPs must securely transmit and retain detailed data on originators (e.g., name, address, wallet addresses) and beneficiaries during transfers. EBA's Travel Rule Guidelines (finalized July 2024, applicable December 30, 2024) specify detecting/handling missing data, risk-based approaches, and compliance with prior guidelines like JC/GL/2017/16. The EU mandates more extensive data points than FATF or jurisdictions like Singapore.
International Action: Non-compliance with OFAC or EU sanctions can also lead to direct enforcement action by U.S. or EU authorities, including substantial fines and imprisonment for individuals, even if the primary operations are outside their direct jurisdiction, due to extraterritorial reach.
Compliance Requirement: Although not directly legally binding on Finnish entities without a U.S. nexus, prudent VASPs with international operations often screen against OFAC's SDN List due to the risk of indirect impact or reputational damage. OFAC has also issued specific guidance on virtual currency.
Travel Rule: The FATF Travel Rule, implemented through EU AML Directives and national law, requires VASPs to collect and transmit originator and beneficiary information for virtual asset transfers above a certain threshold (€1,000 for unhosted wallets, no threshold for VASP-to-VASP). This information is critical for sanctions screening of transaction counterparties.
UN Sanctions Lists: Primarily implemented via EU regulations.
EU Consolidated Financial Sanctions List: This is the most direct and crucial list for Finnish compliance. It consolidates all persons, groups, and entities subject to an asset freeze and prohibition on making funds or economic resources available, under EU restrictive measures.
The "50% Rule": Both EU and OFAC sanctions often extend to entities that are directly or indirectly owned 50% or more by one or more sanctioned persons/entities. VASPs must apply this rule, requiring diligence into corporate structures.
National Bureau of Investigation (Keskusrikospoliisi - KRP): Specifically, its Financial Intelligence Unit (FIU) receives Suspicious Transaction Reports (STRs) and is responsible for investigating financial crimes, including sanctions violations and money laundering related to virtual assets.
Unregulated Platforms: Even if traded on an unregulated crypto exchange, the token's underlying classification as a security means that any entity engaging in investment services or market manipulation related to it could be subject to enforcement action under Finnish financial law.
Other Virtual Assets: If a stablecoin does not fit the EMT or ART definitions (e.g., an unbacked algorithmic stablecoin), it would generally be treated as a generic "virtual asset" under the LoVA, potentially making its issuance and operation much more difficult or impossible under the licensing regime for stablecoins, as the law focuses on asset-backed tokens. If it represents a share in a company or a debt instrument, it could fall under existing Georgian securities laws.
Project Status: In September 2023, the NBG announced the launch of a pilot project for the Digital Lari with private sector participants.
Nature: The Digital Lari, if fully implemented, would be a direct liability of the NBG, representing a digital form of the national currency. It would be fundamentally different from private stablecoins, which are liabilities of private issuers.
Jurisdiction: OFAC sanctions apply broadly to:
Compliance for VASPs: VASPs must implement a robust, risk-based sanctions compliance program, including:
The FATF Recommendations are the global standard for AML/CFT, including for virtual assets. They require countries to regulate VASPs and apply AML/CFT obligations, including sanctions compliance.
Pre-onboarding: Screen all new customers, beneficial owners, and associated parties against relevant sanctions lists.
Ongoing/Periodic Screening: Re-screen existing customers regularly (e.g., daily, weekly, or monthly) and upon any significant change to their profile or to sanctions lists.
PEP Screening: Screen for Politically Exposed Persons (PEPs) due to their higher corruption risk, which can be linked to illicit finance and sanctions evasion.
Substantial Fines: Civil monetary penalties can range from hundreds of thousands to hundreds of millions of dollars, depending on the jurisdiction, severity, and number of violations.
Law 4557/2018 (as amended), which transposed the EU's 5th Anti-Money Laundering Directive (AMLD5) and 6th Anti-Money Laundering Directive (AMLD6) into national law. This law defines "providers of services of virtual assets" and mandates their registration.
HCMC Decision No. 2/902/10.03.2021 (and subsequent amendments), which provides further details on the registration process and ongoing obligations.
Registration Regime (Current): Primarily focused on AML/CFT compliance. While it requires adherence to certain standards, it is generally less comprehensive in terms of capital, operational, governance, and consumer protection requirements compared to a full licensing regime. The HCMC maintains a public register of VASPs.
Obligations: Freezing of funds and economic resources, travel bans, arms embargoes.
Obligations: Asset freezes, prohibitions on making funds/economic resources available, trade restrictions (embargoes on goods and technology), travel bans.
Relevance to Crypto: EU sanctions explicitly cover "funds" and "economic resources," which are broad enough to include virtual assets. Recent EU sanctions packages (e.g., related to Russia) have explicitly mentioned crypto assets. VASPs are expected to comply with these restrictions.
Mechanism: While primarily U.S. law, OFAC sanctions have significant extraterritorial reach. This is especially relevant for VASPs that:
Relevance to Crypto: OFAC has actively targeted virtual currency mixers, exchanges, and addresses associated with sanctioned entities, illicit finance, and ransomware. Any VASP in Greece with a U.S. nexus or international operations will generally need to screen against OFAC lists (e.g., Specially Designated Nationals and Blocked Persons List - SDN List) to avoid potential secondary sanctions or direct enforcement actions.
Greek National Law: Law 4557/2018 (ΦΕΚ Α' 139/30.07.2018) transposed the 4th and 5th AMLDs into Greek law, establishing the legal framework for combating money laundering and terrorist financing for obliged entities, including VASPs. This law designates the Hellenic Financial Intelligence Unit (FIU) as the primary authority for receiving suspicious transaction reports and the Bank of Greece as a supervisory authority for VASPs regarding AML/CFT compliance.
Implications for Crypto: VASPs must prevent transactions originating from or destined for these jurisdictions, or involving individuals/entities based there, as per the scope of the specific sanctions regime. This often involves geoblocking IP addresses, scrutinizing wallet addresses linked to sanctioned regions, and enhancing CDD for clients with any connection to high-risk or sanctioned areas.
Legal Basis: Greek Law 4557/2018 (Articles 40-45) and other specific laws implementing EU sanctions.
Reputational Damage: Beyond legal penalties, non-compliance can lead to severe reputational damage, loss of customer trust, and difficulties in maintaining banking relationships.
UN Consolidated List: Accessible via the UN website (e.g., https://www.un.org/securitycouncil/sanctions/un-sc-consolidated-list).
OFAC Sanctions Lists: For the reasons mentioned above (extraterritorial reach), compliance with OFAC lists is a critical risk mitigation strategy for international VASPs.
UN Security Council Resolutions: Mandate Member States to impose sanctions to address threats to international peace and security.
United Nations Security Council Sanctions Committees
Extraterritorial Reach: OFAC sanctions can have extraterritorial implications, potentially impacting non-US persons who cause a violation or engage in transactions prohibited by OFAC.
SDN List: VASPs should screen against OFAC's Specially Designated Nationals and Blocked Persons (SDN) List.
Crypto-Specific Sanctions: OFAC has actively sanctioned crypto mixers, exchanges, and individuals involved in illicit finance using crypto, notably including entities like Tornado Cash and Garantex, and specific wallet addresses.
EU Consolidated List: Mandatory screening against the EU's consolidated list, which includes individuals and entities designated under various EU sanctions regimes.
UN Sanctions Lists: Screening against lists published by UN Security Council Sanctions Committees (e.g., Al-Qaeda Sanctions List, ISIL (Da'esh) and Al-Qaeda Sanctions List, Taliban Sanctions List).
Effective Date: The provisions of Regulation (EU) 2023/1113 concerning crypto-asset transfers will apply from 30 December 2024.
Article 215 of the Treaty on the Functioning of the European Union (TFEU): Provides the legal basis for the EU to adopt restrictive measures (sanctions).
EU Sanctions Map: Provides an overview of current EU sanctions regimes: https://www.sanctionsmap.eu/
Consolidated Financial Sanctions List: Accessible via the EU Sanctions Map or specific Council Decisions.
Obligation: VASPs must adhere to these measures, including screening against the UN Consolidated Sanctions List.
UN Security Council Consolidated List: https://www.un.org/sc/suborg/en/sanctions/un-sc-consolidated-list
De-risking by Correspondent Banks: International banks often comply with OFAC, and a VASP failing to do so might be de-risked.
Risk of Secondary Sanctions: In some cases, OFAC can impose secondary sanctions on non-U.S. persons dealing with sanctioned entities.
OFAC Website: https://home.treasury.gov/policy-issues/office-of-foreign-assets-control-sanctions-programs-and-information
SDN List: https://home.treasury.gov/policy-issues/office-of-foreign-assets-control-sanctions-programs-and-information/specially-designated-nationals-and-blocked-persons-list-sdn-human-readable-lists
Under Act LIII of 2017, VASPs must conduct comprehensive due diligence, which explicitly includes screening against sanctions lists. While the Act doesn't specify which lists, it's understood to mean the legally binding EU (and by extension UN) lists. Prudent VASPs will also include OFAC lists.
Internal Controls: VASPs must have robust internal policies, procedures, and controls to detect and prevent sanctions violations.
Magyar Nemzeti Bank (MNB): The MNB is the financial supervisor. Its website contains guidance and regulations for financial service providers, including VASPs.
By the MNB: The Hungarian National Bank can impose substantial fines on VASPs and their management for non-compliance with AML/CFT and sanctions regulations. These fines can range from thousands to millions of Forints, depending on the severity and recurrence of the violation. The MNB also has powers to issue warnings, restrict activities, or even withdraw operating licenses.
Reference: Act LIII of 2017 grants the MNB its supervisory and penalty-imposing powers.
Algorithmic stablecoins that do not maintain stability through collateral (but rather through an algorithm that aims to maintain a stable value, often by burning/minting tokens) are effectively prohibited from being issued in the EU.
MiCA states that any crypto-asset that "purports to maintain a stable value by referencing another value or right or a combination thereof" is an ART or EMT. If it fails to meet the stringent reserve and backing requirements for ARTs/EMTs, it cannot be issued. This implicitly targets unbacked algorithmic stablecoins.
MNB's Stance: The MNB has expressed interest in the potential benefits of a CBDC, including its role in enhancing payment system efficiency, financial innovation, and preserving the role of central bank money in the digital era. They are a participant in the broader Eurosystem discussions.
MNB on the Digital Euro: The MNB has published its views and analysis on the Digital Euro.
Act CCXXXV of 2013 on the provision of payment services (2013. évi CCXXXV. törvény a fizetési szolgáltatásokról): This law transposes the Electronic Money Directive (EMD2) and the Payment Services Directive (PSD2) into Hungarian law. It defines electronic money, sets out licensing requirements for e-money institutions, and governs payment services. EMT issuers under MiCA will largely build upon this existing framework.
Act CXXXIX of 2013 on the Magyar Nemzeti Bank (2013. évi CXXXIX. törvény a Magyar Nemzeti Bankról): Defines the MNB's mandate, including financial stability, supervision, and monetary policy.
Fines: Significant monetary fines, which can be substantial, especially for legal entities (up to a certain percentage of turnover or a fixed high amount, whichever is greater). The EU TFR itself mandates that penalties for legal persons should be at least €5 million or 10% of annual turnover, and for natural persons at least €5 million.
Managerial Disqualifications: Temporary or permanent bans on individuals holding management positions within a VASP.
MNB (Magyar Nemzeti Bank) Financial Supervision:
OFAC has explicitly clarified that its sanctions programs apply to transactions involving virtual currency just as they do to traditional fiat currency.
SDN List: VASPs must screen all their customers, counterparties, and relevant transaction parties against OFAC's Specially Designated Nationals and Blocked Persons (SDN) List. This includes individuals, entities, and sometimes their associated virtual currency addresses.
50 Percent Rule: VASPs must also block property and interests in property of entities that are owned 50 percent or more, directly or indirectly, by one or more blocked persons, even if those entities are not explicitly listed on the SDN List.
The EU's recent MiCA (Markets in Crypto-Assets) regulation includes provisions for AML/CFT and compliance with sanctions, making it clear VASPs must adhere to existing sanctions regimes.
EU Consolidated Financial Sanctions List: VASPs operating in the EU must screen against the EU's consolidated list of persons, groups, and entities subject to financial sanctions.
UNSCR 2231 (2015): Endorsed the JCPOA and lifted many previous nuclear-related sanctions, but maintained some restrictions related to ballistic missiles and conventional arms transfers (some of which have since expired or been subject to US snapback claims).
Any financial transaction with an entity or individual designated on a UN sanctions list (e.g., for terrorism) involving virtual assets would be a violation of UN sanctions, which are binding on all UN Member States.
UN Consolidated Sanctions List: VASPs must screen against the UN Security Council Consolidated List, which includes individuals and entities subject to various UN sanctions regimes.
Criminal Penalties: For willful violations, individuals can face substantial fines and imprisonment (up to 20 years), and corporations can face fines in the millions.
Penalties for sanctions violations are determined by individual EU Member States. They typically include significant fines, asset freezes, and imprisonment for individuals found guilty of violating sanctions laws.
EU Consolidated Financial Sanctions List: Lists Iranian individuals and entities subject to asset freezes and financial restrictions.
UN Consolidated Sanctions List: Lists entities and individuals sanctioned by the UN, which would include any Iranian entities designated under terrorism or other applicable regimes.
The term "qualified custodian" is not formally defined in Icelandic law specifically for crypto assets. A VASP registered with the Central Bank of Iceland to provide virtual asset services, including custody, would be the closest equivalent under the current framework.
Focus: The Central Bank's focus has been on implementing AML/CFT regulations for Virtual Asset Service Providers (VASPs), aligning with FATF recommendations and EU directives. They require VASPs to register and comply with the AML/CFT Act.
Freeze Assets: Immediately freeze any virtual assets (and other assets) belonging to, or controlled by, designated persons or entities identified on the UN Security Council Consolidated Sanctions List.
Conduct Sanctions Screening: Implement robust systems to screen all customers, beneficial owners, and, where applicable, counterparties in virtual asset transactions against the UN Security Council Consolidated Sanctions List.
ISIL (Da'esh) & Al-Qaida Sanctions Committee
DPRK (Democratic People's Republic of Korea) Sanctions Committee
UN Security Council Consolidated Sanctions List: https://www.un.org/sc/suborg/en/sanctions/un-sc-consolidated-list
OFAC (U.S. Office of Foreign Assets Control): U.S. sanctions apply to U.S. persons anywhere in the world, and to non-U.S. persons engaged in transactions that involve a U.S. nexus (e.g., using the U.S. financial system, U.S.-origin technology, dealing with U.S. persons or entities, or transacting in U.S. dollars). Given the prevalence of USD in crypto markets and correspondent banking, this is highly relevant.
EU (European Union): EU sanctions apply to EU persons and entities worldwide, and to non-EU persons conducting business within the EU. While their extraterritorial reach is generally less broad than OFAC's, they are still a significant consideration for any VASP with EU clients or partners.
Sanctions Screening: Screen all customers, beneficial owners, and transaction counterparties against the OFAC Specially Designated Nationals (SDN) List and other OFAC lists (e.g., SSI, CAPTA). Similarly, screen against the EU Consolidated Sanctions List.
Geographic Restrictions: Prohibit transactions involving individuals, entities, or jurisdictions subject to comprehensive U.S. or EU sanctions.
Risk-Based Approach: Implement a risk-based sanctions compliance program tailored to the VASP's operations, customer base, and geographic exposure.
OFAC Sanctions Programs and Lists: https://home.treasury.gov/policy-issues/office-of-foreign-assets-control-sanctions-programs-and-information
EU Financial Sanctions Map: https://www.sanctionsmap.eu/
Suspicious Transaction Reports (STRs)/Suspicious Activity Reports (SARs): Report any suspicious transactions or activities, including those indicative of sanctions evasion or terrorist financing, to the Financial Intelligence Authority (FIA).
Sanctions Compliance Program: As part of their overall AML/CFT compliance, VASPs must have a dedicated sanctions compliance program, including policies, procedures, internal controls, and training.
Prudential/Risk-Based (Extraterritorial): Screening against OFAC (SDN List, etc.) and EU (Consolidated List) sanctions lists is a critical risk mitigation measure due to the extraterritorial reach of these sanctions and the potential for severe penalties and reputational damage.
OFAC Sanctions: Strict prohibitions on engaging in transactions or providing services to comprehensively sanctioned jurisdictions, including:
Imprisonment: Individuals found guilty of serious offenses (e.g., facilitating terrorism financing, money laundering, or sanctions evasion) can face lengthy prison sentences.
Reputational Damage: Non-compliance can severely damage a VASP's reputation, leading to loss of customers, banking relationships, and partners.
Virtual Assets Business Act, 2020: Contains specific penalty provisions for VABs.
It implements international sanctions lists (primarily UN) by applying its domestic AML/CFT and anti-terrorism laws to all asset classes, including virtual assets.
Travel bans: (Less relevant for VASPs, but part of broader regimes).
Consolidated Financial Sanctions List: This interactive map and database provides details of all persons, groups, and entities subject to EU financial sanctions.
Primary Lists: VASPs are expected to screen against OFAC's Specially Designated Nationals and Blocked Persons (SDN) List and other relevant sanctions lists (e.g., SSI, CAPTA).
OFAC Sanctions Programs and Country Information:
Financial Crime Investigation Service (FNTT - Finansinių nusikaltimų tyrimo tarnyba): The primary national authority for investigating financial crimes, including money laundering, terrorist financing, and violations of sanctions.
European Union (EU) Sanctions: These are directly applicable regulations in all EU member states. The EU implements both UN-mandated sanctions and its own autonomous sanctions regimes (e.g., concerning Russia, Iran, North Korea, Syria, Myanmar, etc.). EU sanctions explicitly cover "funds and economic resources," which have been clarified to include crypto-assets.
United Nations (UN) Sanctions: These are binding on all UN member states and are implemented in the EU through EU Council Regulations. UN sanctions typically target specific individuals, entities, or regimes (e.g., Al-Qaeda, ISIL, Taliban, DPRK, Iran).
Office of Foreign Assets Control (OFAC) Sanctions (U.S.): While U.S. sanctions are not directly legally binding on non-U.S. persons or entities outside the U.S., their extraterritorial reach is significant. VASPs in Luxembourg engaged in transactions involving U.S. persons, the U.S. financial system (e.g., USD transactions), or U.S.-origin technology must adhere to OFAC regulations to avoid severe penalties, including designation on OFAC's Specially Designated Nationals and Blocked Persons (SDN) List. OFAC has been proactive in adding cryptocurrency addresses to its sanctions lists.
Law of 12 November 2004, as amended: Title VI specifies administrative and criminal sanctions.
UN Sanctions Lists: These are implemented via EU regulations, and similarly, the asset freezes apply to crypto-assets.
Technology Neutrality: The fact that an instrument is issued using DLT does not change its fundamental legal classification if it possesses the characteristics of an existing financial instrument.
AML/CFT Non-Compliance: A significant portion of public enforcement in the crypto space relates to breaches of AML/CFT obligations. The CSSF regularly imposes administrative fines on VASPs and other supervised entities for deficiencies in their anti-money laundering and counter-terrorist financing frameworks.
Guidance and Prevention: The CSSF largely adopts a proactive approach, providing extensive guidance through FAQs, circulars, and direct engagement with market participants to ensure compliance before issues escalate. Many projects are guided towards proper classification and authorisation pathways, reducing the need for direct enforcement through litigation.
Administrative Sanctions: Public announcements of administrative fines for non-compliance with AML/CFT requirements imposed on supervised entities, including VASPs. While not always directly about the "security" classification of tokens, these demonstrate the CSSF's enforcement powers over entities operating in the crypto space.
Payment Tokens: This was a less defined category in national law; if a token only served as a means of exchange without other features, its regulatory treatment was less clear beyond AML/CFT rules.
This effectively means that most forms of unbacked or under-backed algorithmic stablecoins will be prohibited from being issued, offered to the public, or admitted to trading in the EU under MiCA.
Coexistence: A digital euro is envisioned to coexist with existing forms of money, including commercial bank money and potentially well-regulated private stablecoins (EMTs/ARTs).
Current Status: Under the current AML framework, there are no explicit, specific rules mandating the segregation of client crypto assets for non-bank VASPs. However, general good practice, risk management principles, and the expectation of investor protection inherent in financial services would strongly suggest that reputable custodians segregate client assets from their own operational funds. For traditional financial institutions providing crypto services, existing segregation rules for client funds/assets would generally apply.
Risk-Based Approach: VASPs must implement a risk-based approach to identify, assess, understand, and mitigate their money laundering, terrorist financing, and sanctions risks. This includes specific risks associated with virtual assets.
Internal Controls and Procedures: VASPs must establish robust internal policies, controls, and procedures for sanctions compliance, risk management, record-keeping, and employee training. This includes:
Technology Solutions: Given the volume of transactions and dynamic nature of sanctions lists, VASPs typically employ automated screening and transaction monitoring software.
EU Consolidated Sanctions List: Link to EU Sanctions Map (official interactive tool by the EU)
UN Sanctions Lists: Link to UN Security Council Sanctions Committees
Ongoing Monitoring: Regularly (e.g., daily) screening existing customers and beneficial owners against updated sanctions lists.
Reputational Damage: Significant harm to the VASP's reputation, leading to loss of customers, banking relationships, and investor trust.
FID Sanctions Register: This register consolidates information on individuals and entities subject to international (UN, EU) and any specific national sanctions. While primarily reflecting EU/UN lists, it serves as the official national reference point for applying sanctions within Latvia.
Asset-Referenced Tokens (ARTs) and E-money Tokens (EMTs): MiCA specifically defines and regulates these, setting out requirements for their issuance and operation. They are generally not considered MiFID II financial instruments themselves, but have their own comprehensive regulatory regime under MiCA.
AML/CFT Compliance: Strict enforcement of anti-money laundering and combating the financing of terrorism (AML/CFT) regulations on virtual asset service providers (VASPs). This often leads to fines or license revocations for non-compliant entities, even if the primary issue isn't securities classification.
E-money Tokens (EMTs): Only credit institutions (banks) or electronic money institutions (EMIs) authorized under the Directive 2009/110/EC (E-money Directive) can issue EMTs. The authorization under the E-money Directive extends to EMT issuance.
Law on the Prevention of Money Laundering and Terrorism and Proliferation Financing (Noziedzīgi iegūtu līdzekļu legalizācijas un terorisma un proliferācijas finansēšanas novēršanas likums): This law requires virtual asset service providers (VASPs), including exchanges and wallet providers, to register with Latvijas Banka and comply with AML/CFT obligations. While this doesn't authorize issuance, it's a prerequisite for operating in the crypto space in Latvia.
ECB Initiative: The Digital Euro would be a central bank digital currency, issued by the ECB, and would constitute central bank money, distinct from private stablecoins (which are private money).
Potential Impact: If a Digital Euro is launched, it would likely serve as a safe, risk-free digital payment instrument. This could potentially reduce the demand for private EMTs pegged to the Euro, as the Digital Euro would offer similar benefits (digital payments) but with central bank backing and no counterparty risk. ARTs, referencing baskets or other assets, might serve different use cases.
Sovereign Ordinances and Ministerial Decrees: These instruments detail the implementation of international sanctions regimes (UN, EU) into Monegasque law.
UN Sanctions Lists: Consolidated lists published by the UN Security Council Sanctions Committees.
EU Sanctions Lists: The consolidated list of persons, groups, and entities subject to EU financial sanctions.
Domestic Lists (if applicable): Any specific lists published by SICCFIN or other Monegasque authorities.
Heightened Due Diligence: Transactions involving high-risk jurisdictions or jurisdictions under specific sanctions programs (even if not comprehensive bans) require enhanced due diligence and scrutiny.
IP Address Blocking: Implementing technical controls like IP blocking for regions subject to comprehensive sanctions can be part of a robust compliance program.
Administrative Sanctions (imposed by SICCFIN):
Loi n° 1.362 du 3 août 2009 sur la lutte contre le blanchiment de capitaux, le financement du terrorisme et la corruption (as amended), Titre VI (Sanctions). Specific articles within this title detail the administrative and criminal penalties.
Regular updates to screening systems and policies to reflect changes in sanctions regimes.
Screening: Screen all new and existing customers, beneficial owners, and, where appropriate, transaction counterparties against the UN and EU sanctions lists (as per Law No. 25/2016 and Law No. 308/2017). Best practice extends this to OFAC lists.
Reporting: Promptly report any hits against sanctions lists or suspicious activities to the SPCSB.
Administrative Fines: Substantial monetary penalties can be imposed on institutions and their management for non-compliance, including failure to conduct due diligence, report suspicious transactions, or freeze assets. Law No. 308/2017 outlines various fines.
Draft Law on Virtual Assets: The CNPF, in cooperation with other bodies, has been working on a draft law to introduce a comprehensive regulatory framework for virtual assets and VASPs, aiming for alignment with EU MiCA regulations. This draft has been under discussion for some time (since around 2021-2022) but has not yet been enacted. Its specific details are subject to change until adopted.
Virtual Currency: Defined as a digital representation of value that is not issued or guaranteed by a central bank or public authority, is not necessarily attached to a legally established currency, and does not possess the legal status of currency or money, but is accepted by natural or legal persons as a medium of exchange and which can be transferred, stored, and traded electronically.
Virtual Currencies: As explicitly defined, they are not financial instruments.
Imposing fines: For non-compliance with prospectus requirements, licensing obligations, or market abuse rules.
Virtual Currency: The overarching definition under the law covers any digital representation of value that is not issued or guaranteed by a central bank or public authority, is not necessarily attached to a legally established fiat currency, and does not possess the legal status of currency or money, but is accepted by natural or legal persons as a means of exchange and can be transferred, stored, and traded electronically. EMTs and ARTs are specialized forms of virtual currency.
Asset Composition: For EMTs, reserves are typically required to be in fiat currency. For ARTs, the composition of the reserve must be clearly defined, publicly disclosed, and robust enough to support the redemption claims.
Fiat or Underlying Assets: Redemption for EMTs would typically be in the referenced fiat currency. For ARTs, redemption can be in the underlying assets or their equivalent value, as defined in the whitepaper and regulatory approval.
Screen transactions for sanctions compliance and suspicious activity.
Administrative Fines: Significant monetary penalties for legal entities and responsible persons within those entities.
Law on Prevention of Money Laundering and Terrorism Financing (Zakon o sprječavanju pranja novca i finansiranja terorizma): This is the primary legislation. While an official English translation with a direct URL might be hard to find, the official Montenegrin legal gazette (Službeni list Crne Gore) publishes it. The most relevant amendments were made in 2021 to address virtual assets.
Obligations: Similar to UN sanctions, any hits should lead to asset freezing and reporting to CENTIF.
They operate in a manner that "causes" a U.S. person to violate sanctions.
Sanctions Screening: Screen customer names, addresses, and other identifiers against the UN, EU, and OFAC sanctions lists at onboarding and on an ongoing basis. For crypto, this can extend to screening associated wallet addresses using blockchain analytics tools against lists of addresses known to be associated with sanctioned entities.
Countries under UN/EU Embargoes: Depending on the specific sanctions regime, certain transactions with or involving individuals/entities from embargoed countries may be prohibited.
Financial Penalties: Significant fines for institutions and individuals.
MiCA's Scope: MiCA provides a comprehensive regulatory framework for crypto-asset markets and service providers (CASPs) not already covered by existing financial services legislation. It aims to harmonize rules across the EU/EEA, ensure consumer protection, market integrity, and financial stability.
Utility Tokens: Tokens that exclusively provide access to a specific product or service within a defined ecosystem, without any investment characteristics. The crucial distinction here is whether the token's primary purpose is utility or investment. If it's merely a pre-payment for a service, it's less likely to be a security. If it's marketed for speculative gain, even if it has some potential future utility, it may be reclassified.
General Warnings: Finanstilsynet has repeatedly issued warnings to the public about the risks associated with investing in crypto-assets and clarified that existing financial regulations apply if the tokens qualify as financial instruments. They often remind companies that if a crypto-asset is deemed a financial instrument, the existing rules regarding prospectuses, market conduct, and financial service licenses apply.
AML/CTF Registrations: A more common area of enforcement has been ensuring that crypto-asset service providers (exchanges, custodians) comply with AML/CTF regulations by registering with Finanstilsynet. Several companies have been ordered to cease operations or comply with registration requirements. While not directly related to security classification, it demonstrates Finanstilsynet's active supervision of the crypto sector.
Guidance and Interpretation: Finanstilsynet engages in dialogue with companies seeking to issue tokens and provides guidance on whether their specific token characteristics would trigger financial regulatory requirements, often leading to adjustments or abandonment of non-compliant projects before public enforcement becomes necessary.
Securities: If a stablecoin grants rights similar to traditional financial instruments (e.g., shares, bonds, participation in profits), it could be classified as a security under the Securities Trading Act (Verdipapirhandelloven). Finanstilsynet has issued guidance on this, emphasizing a substance-over-form approach.
Electronic Money Tokens (EMT): These are crypto-assets that aim to maintain a stable value by referencing the value of a single fiat currency (e.g., a NOK-pegged stablecoin). They are explicitly defined as "electronic money" under MiCA.
This effectively means that purely algorithmic stablecoins (those that rely solely on supply/demand algorithms and do not maintain a reserve of backing assets) cannot be issued or offered to the public within the EU/EEA under the MiCA framework. This provision aims to prevent risks associated with unbacked stablecoins.
Research and Exploration: Norges Bank has been conducting extensive research, publishing working papers and reports on the rationale, design, and implications of a CBDC. Their primary motivations include ensuring monetary sovereignty, financial stability, and efficiency in a digital payment landscape.
Role of Private Stablecoins: Norges Bank views private stablecoins as distinct from a CBDC. A CBDC would be a direct liability of the central bank, thus carrying no credit risk or liquidity risk. Private stablecoins, even those regulated under MiCA, carry some degree of issuer risk (credit risk, operational risk) and potential liquidity risk.
Regulatory Focus: The development of a CBDC by Norges Bank is driven by public policy objectives, distinct from the market-driven issuance of private stablecoins, though both fall under the broader digital currency landscape.
Key Principles: EU sanctions typically involve:
EU Sanctions Map (Consolidated List Search): https://www.sanctionsmap.eu/#/main
Legal Basis: UN Security Council Resolutions, implemented via EU Regulations.
UN Security Council Consolidated List: https://www.un.org/securitycouncil/sanctions/information
Secondary Sanctions: Certain OFAC sanctions programs include secondary sanctions that can target non-US persons for engaging in specific activities with sanctioned entities, even if those non-US persons are not directly subject to US jurisdiction.
Global Best Practice: Due to the global interconnectedness of financial systems and the potential for reputational damage and correspondent banking de-risking, many non-US financial institutions and VASPs screen against OFAC lists (especially the SDN List) as a best practice, even without a direct US nexus.
OFAC SDN List: https://home.treasury.gov/policy-issues/financial-sanctions/specially-designated-nationals-and-blocked-persons-list-sdn-human-readable-lists
OFAC Sanctions Programs and Country Information: https://home.treasury.gov/policy-issues/financial-sanctions/sanctions-programs-and-country-information
Ustawa z dnia 1 marca 2018 r. o przeciwdziałaniu praniu pieniędzy oraz finansowaniu terroryzmu: Dziennik Ustaw (Journal of Laws) 2022 item 1801, with subsequent amendments. (This is the most current consolidated text available at the time of writing). You can typically find the official, up-to-date text on Polish government legal databases such as isap.sejm.gov.pl by searching for the "Ustawa o przeciwdziałaniu praniu pieniędzy".
Implicit Restrictions: While MiCA doesn't explicitly ban "algorithmic stablecoins," its strict requirements for reserve backing for both EMTs and ARTs mean that any stablecoin that purports to maintain a stable value purely through an algorithm (without sufficient liquid, segregated, and independently custodied reserve assets) would generally not be able to comply.
National Office for the Prevention and Combating of Money Laundering (Oficiul Național de Prevenire și Combatere a Spălării Banilor - ONPCSB)
Prospectus Requirement: Generally, any offer of securities to the public or admission to trading on a regulated market requires the publication of a prospectus. This prospectus must be approved by the Romanian Financial Supervisory Authority (ASF) or a competent authority in another EU Member State (with passporting rights). The prospectus provides detailed information about the issuer, the securities, and the risks involved.
Focus on Scams/AML: Many enforcement actions in the crypto space across the EU have focused on outright scams, pyramid schemes, money laundering, or unauthorised provision of services rather than specific securities classification issues of legitimate (but unregulated) projects.
Lack of Clear Guidelines: The absence of comprehensive, specific crypto-asset regulation before MiCA meant a less clear mandate for enforcement on classification.
Payment Tokens (MiCA uses this term for EMTs): MiCA defines EMTs as a specific type of crypto-asset intended to be used as a medium of exchange.
MiCA does not explicitly "ban" algorithmic stablecoins, but its strict requirements for reserve assets for both ARTs and EMTs effectively make it very difficult for purely algorithmic stablecoins (i.e., those without sufficient backing by actual, stable assets) to operate legally within the EU at scale.
Any crypto-asset claiming to maintain a stable value must demonstrate how it does so through a robust and managed reserve of assets, not solely through algorithmic mechanisms or arbitrage opportunities. If an algorithmic stablecoin cannot meet the ART or EMT reserve requirements, it cannot be issued.
MiCA primarily regulates private crypto-assets. It does not directly regulate or interact with Central Bank Digital Currencies (CBDCs).
Should the European Central Bank (ECB) decide to issue a Digital Euro (a CBDC), it would operate under a distinct legal framework, separate from MiCA, as it would be issued by a central bank and considered central bank money.
E-money Classification: Some stablecoins (especially those pegged 1:1 to RON or EUR) could potentially be viewed as electronic money if they meet the criteria of Law no. 210/2004 (which transposes the E-money Directive 2009/110/EC). If so, their issuers would be subject to authorization and supervision by the National Bank of Romania (BNR) as e-money institutions.
National Office for Preventing and Combating Money Laundering (ONPCSB - Oficiul Național pentru Prevenirea și Combaterea Spălării Banilor):
For Specific Travel Rule Requirements (EU TFR): The Regulation (EU) 2023/1113 (TFR), which explicitly mandates the Travel Rule for crypto-asset transfers, will apply from 30 December 2024. Some provisions of MiCA related to certain crypto-asset services will apply earlier (e.g., from 30 June 2024), but the full Travel Rule enforcement date is linked to the TFR.
Administrative Fines (Contravention): Significant fines can be imposed on legal entities for various breaches, such as:
Criminal Penalties: In cases where non-compliance facilitates money laundering or terrorist financing, individuals responsible (management, compliance officers) and the legal entity itself can face criminal charges, including imprisonment and much higher fines.
Obligation to Register: VASPs must register with the Office for Money Laundering Prevention (UPPD). This is a registration requirement, not a full prudential licensing regime akin to banks or investment firms, but it entails strict AML/CFT compliance obligations.
Currently (Pre-MiCA): ZPPDFT-2 primarily focuses on AML/CFT compliance, ensuring the identification of asset ownership and preventing illicit finance. It does not explicitly mandate insolvency-remote segregation of client crypto assets from the custodian's own assets in the same way traditional financial regulations (e.g., MiFID II for investment firms, CRD for banks) do.
Definition of Funds/Economic Resources: The relevant EU regulations define "funds" and "economic resources" broadly, encompassing all forms of assets. With the implementation of the 5th and 6th Anti-Money Laundering Directives (AMLD5/6), virtual assets are unequivocally covered by AML/CFT obligations, and by extension, financial sanctions.
VASP Compliance: The same obligations as for EU sanctions apply. VASPs must screen against the UN Sanctions List (which is integrated into the EU Consolidated Sanctions List) and report any matches or suspicions.
Secondary Sanctions: Certain OFAC programs impose "secondary sanctions" on non-US persons for engaging in specific transactions with sanctioned entities, even without a direct US nexus. This is particularly relevant for entities dealing with countries like Iran or North Korea.
Global Best Practice: Given the global nature of cryptocurrencies, many international VASPs choose to comply with OFAC sanctions as a best practice to avoid potential penalties, reputational damage, or loss of access to global financial infrastructure.
VASP Compliance: Global VASPs typically screen against OFAC's Specially Designated Nationals (SDN) and Blocked Persons List, as well as other relevant OFAC lists (e.g., sectoral sanctions identifications list).
Key National Law: The primary legislation is the Zakon o preprečevanju pranja denarja in financiranja terorizma (ZPPDFT-1) – Act on the Prevention of Money Laundering and Terrorist Financing. This act incorporates the requirements of EU AML Directives and establishes the framework for implementing financial sanctions.
Geographic Restrictions: These are directly derived from the targets of UN and EU sanctions regimes. VASPs must restrict transactions involving sanctioned countries, territories (e.g., Crimea), or regions, as well as any individuals or entities located within or operating from these areas, if they are subject to sanctions. Examples include prohibitions related to Russia, Belarus, North Korea, Iran, Syria, etc.
Credit Institutions: Credit institutions (banks) are exempt from requiring separate MiCA authorization if they issue stablecoins, but they must notify the competent authority.
Implied Disapproval/Lack of Framework: This means such algorithmic stablecoins do not benefit from the specific stability-focused regulations of MiCA. They would likely fall under the general "other crypto-assets" category within MiCA, subject to white paper requirements and general market conduct rules, but not the stringent prudential and reserve rules. This effectively means MiCA does not provide a regulatory path for pure algorithmic stablecoins to operate within its defined stablecoin categories.
Digital Euro Exploration: The European Central Bank (ECB) is actively exploring the development of a digital Euro. If and when a digital Euro is introduced, it would serve as a public, central bank-issued complement to private stablecoins and traditional cash, aiming to ensure monetary sovereignty and financial stability.
Impact on Stablecoins: A digital Euro would likely act as a strong alternative to private stablecoins, particularly EMTs, potentially reducing their appeal by offering a risk-free, central bank-backed digital currency for payments. Slovenia would adopt the digital Euro as part of its participation in the Eurozone.
Consumer Protection: Banka Slovenije and ATVP frequently issue warnings to the public about the high risks associated with investing in crypto-assets, emphasizing volatility, lack of regulatory oversight (pre-MiCA), and potential for fraud.
However, the specific and comprehensive implementation of the FATF Travel Rule for crypto assets, as defined by Regulation (EU) 2023/1113, becomes applicable much later: 30 December 2024. This is the key date for the full Travel Rule requirements for crypto assets.
Publication: MiCA was published in the Official Journal of the European Union on June 9, 2023.
Units in collective investment undertakings: Tokens representing interests in a fund or scheme that pools investor capital with a view to investing it in accordance with a defined investment policy for the benefit of those investors.
E-Money Tokens (EMT): Tokens whose main purpose is to function as electronic money as defined in the E-Money Directive 2009/110/EC. (Regulated under MiCA).
General Enforcement Powers: The NBS has powers to:
MiCA acknowledges the potential for Central Bank Digital Currencies (CBDCs) and their interaction with private stablecoins.
The European Central Bank (ECB) is actively exploring a digital euro as a potential CBDC for the Eurozone. While no definitive decision has been made for its issuance, the framework for private stablecoins (especially EMTs) is designed with a potential digital euro in mind.
The key amendments to Slovak AML law that brought virtual asset service providers under the AML/CFT regime, including Travel Rule-like obligations, came into effect on 1 March 2020. This was through Act No. 397/2019 Coll., which amended the primary AML Act.
Fines: Significant administrative fines can be imposed on both legal entities (VASPs) and responsible individuals. Fines for legal entities can range from thousands to millions of Euros, depending on the severity and recurrence of the breach.
Obligations: VASPs must identify and freeze assets belonging to, or controlled by, designated individuals and entities on EU sanctions lists. They are also prohibited from making funds or economic resources available to such listed parties. This includes all forms of virtual assets and related services.
Extraterritorial Reach: OFAC sanctions, while U.S. law, have a significant extraterritorial effect, particularly on financial institutions and entities dealing with U.S. persons, the U.S. financial system, or transactions denominated in U.S. dollars.
Obligations: Prudent VASPs will screen against OFAC's Specially Designated Nationals (SDN) List and other relevant lists (e.g., Sectoral Sanctions Identifications List) and implement controls to prevent dealings with sanctioned persons or jurisdictions.
Sanctions List Screening: Regularly screen all customers, beneficial owners, and counterparties against relevant international sanctions lists, including:
Technology Solutions: Utilizing automated sanctions screening software is best practice for efficient and accurate screening of large volumes of data and transactions, including blockchain addresses.
Criminal Penalties: Individuals and legal representatives of VASPs found to be in breach of sanctions regulations can face fines and imprisonment. Law No. 182/2004 provides for criminal sanctions for AML/CTF offenses, which include failures related to sanctions compliance.
Administrative Penalties: The BCSM and AIF can impose administrative fines, operational restrictions, suspension or revocation of licenses, and public reprimands on VASPs that fail to comply with their obligations.
Secondary Sanctions Risk: As mentioned, non-compliance with OFAC sanctions, even for non-U.S. entities, can result in being cut off from the U.S. financial system or facing other punitive measures.
EU Consolidated List: This list amalgamates all persons, groups, and entities subject to financial sanctions under various EU restrictive measures.
BCSM General Regulatory Framework for DLT: The BCSM website is the primary source for updated circulars and regulations regarding DLT assets and Qualified Operators.
Jurisdictional Nexus: Sanctions apply to transactions that have a nexus to the sanctioning authority.
Reputational Damage: Beyond legal penalties, VASPs face severe reputational damage, loss of partnerships, and de-risking by financial institutions if found to be in violation of sanctions.
In January 2026, the French Autorité des Marchés Financiers (AMF) became the first national competent authority to publicly announce a formal enforcement action under MiCA, issuing a cease-and-desist order against unregistered non-EU CASP CryptoFlow Ltd. (Cayman Islands) for soliciting French residents without authorization, noting this as a "test case" for MiCA enforcement coordination across NCAs AMF MiCA Enforcement Action January 2026
A March 2026 analysis by the European Systemic Risk Board (ESRB) identified that 8 of 27 EU NCAs had not finalized MiCA enforcement guidelines by Q1 2026, creating "supervisory fragmentation risks" for CASPs operating across multiple member states, warning this could lead to inconsistent application of authorization requirements by the April 2026 enforcement date ESRB Analysis of MiCA Supervisory Fragmentation
By April 2026, NCAs have the mandate under Article 114 to process authorization applications, monitor ongoing compliance, and initiate enforcement actions against non-compliant entities, particularly those operating without authorization and not covered by transitional provisions; enforcement powers include suspension of services, imposition of fines, and public warnings MiCA Article 114 Enforcement
ESMA issued a public statement in December 2024 reminding market participants that unregulated entities offering services to EU retail clients without authorization or transitional grandfathering may face enforcement actions, calling for convergent supervisory practices across Member States ESMA December 2024 Statement
Practical enforcement examples by April 2026 remain limited; however, in late 2025, the Dutch Authority for Financial Markets (AFM) issued warnings against several unregistered crypto firms operating without transitional provisions AFM Crypto Warnings
EU sanctions regulations are directly applicable in all member states and explicitly cover virtual assets within the definition of "funds" or "economic resources"; recent sanctions packages have explicitly prohibited crypto-asset wallet, account, or custody services to sanctioned persons EU Council Regulations on Sanctions
The EU consolidated financial sanctions list is the primary screening list for VASPs, consolidating all persons, groups, and entities subject to asset freezes and financial restrictions under various EU sanctions regimes EU Sanctions Map
The "50% Rule" under both EU and OFAC sanctions extends to entities directly or indirectly owned 50% or more by sanctioned persons; VASPs must apply this rule requiring ownership structure analysis EU Sanctions 50% Rule
VASPs must conduct comprehensive due diligence including sanctions list screening, with ongoing monitoring requiring re-screening existing customers regularly and upon significant changes to customer profiles or sanctions lists EU AML Framework for VASPs
AMF MiCA Enforcement Action January 2026
European Commission MiCA Enforcement Update March 2026
EU Council Regulations on Sanctions
EU Sanctions Enforcement Penalties
EBA Cross-Border Supervision Report (March 2025): A March 2025 report from the European Banking Authority highlighted that smaller NCAs face particular challenges with cross-border supervision of CASPs, specifically noting that 11 NCAs had not yet established formal coordination arrangements with their counterparts in other member states; the EBA recommended that these arrangements be concluded by October 2025 to ensure seamless enforcement by April 2026 EBA Report on Cross-Border CASP Supervision
ESMA Final Report on MiCA Technical Standards (March 2025): ESMA published its Final Report on MiCA Level 2 technical standards, providing detailed requirements for CASP authorization, white paper content, and market abuse prevention ESMA Final Report on MiCA Technical Standards
EBA Final RTS on MiCA (March 2025): The European Banking Authority finalized its Regulatory Technical Standards on MiCA, covering requirements for asset-referenced tokens and e-money tokens, including reserve asset management and redemption rights EBA Final RTS on MiCA
European Commission MiCA Implementation Roadmap: The European Commission published an implementation roadmap detailing the phased approach to MiCA enforcement, including milestones for delegated acts, technical standards, and national transposition measures European Commission MiCA Implementation Roadmap
Unregulated Activities Under MiCA: Certain crypto-asset activities, such as lending and staking services, remain partially unregulated by MiCA where they do not fall within the defined list of CASP services under Annex I; ESMA has issued guidance calling for classification consistency across Member States ESMA Classification Guidance
27 Different NCAs: The lack of a single EU-wide regulator for crypto-assets means that firms must navigate 27 different NCAs, each with its own administrative procedures, fee structures, and enforcement priorities, despite ESMA's coordination efforts ESMA Q&A on MiCA
EU Member State Transposition (July 2024): As of July 18, 2024, only 9 out of 27 EU Member States had either fully transposed MiCA into national law or published draft legislation to do so, according to the European Commission's implementation tracker. The deadline for transposition of the regulatory technical standards and national implementing measures is December 30, 2024 European Commission MiCA Tracker
Classification Delegated Regulation (July 2024): The European Commission published on July 17, 2024, a delegated regulation specifying the technical criteria for classifying crypto-assets as financial instruments under MiCA, which will affect whether an asset falls under MiCA or existing Markets in Financial Instruments Directive (MiFID II) rules European Commission Delegated Regulation MiCA Classification
ESMA Supervisory Convergence Statement (July 2024): ESMA released on July 15, 2024, a "Supervisory Convergence and Enforcement Statement" warning national competent authorities that failing to meet the December 30, 2024 deadline for authorizing CASPs could lead to enforcement actions by the European Commission. The statement emphasizes that NCAs must ensure a "level playing field" and avoid "regulatory arbitrage" during the transitional period ESMA Supervisory Convergence Statement
JRC Economic Impact Assessment (July 2024): The European Commission's Joint Research Centre published an economic impact assessment on July 12, 2024, estimating that MiCA compliance costs for medium-sized crypto firms could range from €500,000 to €2 million for initial authorization, with ongoing annual costs of €100,000 to €500,000 for regulatory reporting and compliance EC Joint Research Centre MiCA Impact
EDPB Guidelines on MiCA and GDPR (July 2024): A significant development occurred on July 16, 2024, when the European Data Protection Board issued guidelines clarifying that MiCA's requirements for transaction monitoring and anti-money laundering record-keeping must be reconciled with the General Data Protection Regulation (GDPR), potentially requiring firms to implement data protection impact assessments and anonymization protocols EDPB Guidelines on MiCA and GDPR
Circle MiCA Application (July 2024): The stablecoin market has seen significant restructuring: Circle, the issuer of USDC and EURC, announced on July 9, 2024, that it is applying for an e-money token issuer license under MiCA, which will require compliance with the EBA's guidelines on redemption rights and reserve asset management Circle MiCA Application
Coinbase Derivatives Impact (July 2024): The crypto derivatives market has been affected: Coinbase announced on July 15, 2024, that it will discontinue offering crypto derivatives to retail EU clients unable to pass MiCA's new "suitability and appropriateness" tests, which require enhanced risk warnings and client categorization Coinbase MiCA Derivatives Impact
ESMA DeFi Statement (July 2024): Non-compliant decentralized finance protocols face significant risks: ESMA published a statement on July 17, 2024, warning that DeFi platforms facilitating crypto-asset swaps or lending may be classified as CASPs under MiCA if they exercise control over user funds or operations, potentially requiring them to seek authorization or restrict EU access ESMA DeFi Statement
MiCA Publication Date: MiCA was published in the Official Journal of the European Union on June 9, 2023 Official Journal of the EU
Sanctions Compliance: Obligations include freezing of funds and economic resources, travel bans, and arms embargoes under UN Security Council Resolutions implemented via EU Regulations UN Sanctions Consolidated List
OFAC Compliance Risk: International banks often comply with OFAC, and a VASP failing to do so might be de-risked by correspondent banks US Treasury OFAC
MiCA and CBDCs: MiCA primarily regulates private crypto-assets and does not directly regulate or interact with Central Bank Digital Currencies (CBDCs) MiCA Regulation (EU) 2023/1114
Digital Euro Framework: Should the European Central Bank decide to issue a Digital Euro (a CBDC), it would operate under a distinct legal framework, separate from MiCA, as it would be issued by a central bank and considered fiat currency MiCA Regulation (EU) 2023/1114
Reputational Damage Warning: Beyond legal penalties, non-compliance can lead to severe reputational damage, loss of customer trust, and difficulties in maintaining banking relationships UN Sanctions Consolidated List
UN Sanctions Basis: EU sanctions are based on UN Security Council Resolutions, implemented via EU Regulations, requiring asset freezes, prohibitions on making funds/economic resources available, trade restrictions, and travel bans UN Security Council Sanctions
UN Sanctions Consolidated List
OFAC Website: https://home.treasury.gov/policy-issues/office-of-foreign-assets-control-sanctions-programs-and-information
SDN List: https://home.treasury.gov/policy-issues/office-of-foreign-assets-control-sanctions-programs-and-information/specially-designated-nationals-and-blocked-persons-list-sdn-human-readable-lists
OFAC Sanctions Programs and Lists: https://home.treasury.gov/policy-issues/office-of-foreign-assets-control-sanctions-programs-and-information
OFAC SDN List: https://home.treasury.gov/policy-issues/financial-sanctions/specially-designated-nationals-and-blocked-persons-list-sdn-human-readable-lists
OFAC Sanctions Programs and Country Information: https://home.treasury.gov/policy-issues/financial-sanctions/sanctions-programs-and-country-information
Identify Ultimate Beneficial Owners (UBOs) and screen against local watchlists (e.g., CANU wanted persons list) and global sanctions lists (OFAC, EU, UN).
Risk of Non-compliance: Entities may inadvertently breach EU or UN sanctions without clear local guidance.
Sanctions List Monitoring: Continuous monitoring of international sanctions lists (e.g., EU, US) is crucial to prevent transactions involving sanctioned entities or individuals. Russian Harmful Foreign Activities Sanctions | Office of Foreign...
No explicit capital thresholds are stated in primary legislation; however, general compliance with EU AML standards suggests maintaining sufficient liquidity to cover potential liabilities. The SMIFC's operational guidelines recommend a minimum liquid asset coverage ratio of 100% for high-risk financial activities JetonBank.
MiCA Regulation: The Markets in Crypto-Assets (MiCA) Regulation, adopted by the European Union and implemented in Denmark on September 12, 2023, provides a comprehensive framework for consumer protection, market integrity, and classification of crypto-assets. MiCA classifies stablecoins and utility tokens under specific provisions to ensure adequate oversight.
This profile is maintained by AI research workers and updated regularly. Connect via MCP for programmatic access.