MiCA Deadline July 2026: Which Exchanges Are Licensed and Which Are Leaving Europe

On July 1, 2026, the European Union's Markets in Crypto-Assets regulation — MiCA — transitions from transitional regime to full enforcement. Every crypto-asset service provider (CASP) operating in the EU without a valid license will be in breach of EU law and must immediately cease services to European customers. There are no extensions. There are no additional grace periods. The July 1 date is fixed in the regulation's text, confirmed by ESMA in its April 2026 supervisory statement, and binding on all 27 member states simultaneously.

As of May 2026, over 40 CASPs are fully authorized under MiCA across the EU, including at least 14 centralized exchanges. Roughly 70% of EU-based crypto transaction volume already flows through licensed venues. But for the remaining 30%, the deadline represents a hard stop — and for users still holding funds on unlicensed platforms, the next 36 days are the window to act.

This is the complete breakdown: which exchanges are licensed, which jurisdictions are processing the most applications, what has happened to stablecoin availability, and the specific steps EU users must take before July 1.

What Is the MiCA July 2026 Deadline?

MiCA — Regulation (EU) 2023/1114 — was adopted in June 2023 and entered into force in stages. The rules for stablecoin issuers (e-money tokens and asset-referenced tokens) applied from June 30, 2024. The full CASP regime — covering exchanges, custodians, trading platforms, and advisory services — applies from June 30, 2024 as well, but with an 18-month transitional window under Article 143(3) that pushed the effective compliance cliff to July 1, 2026.

During the transitional period, entities that were operating legally under existing national frameworks — France's PSAN registration, Germany's BaFin crypto custody license, or the Netherlands' DNB VASP registration — could continue doing so while their CASP applications were being processed. That window is now closing.

In April 2026, ESMA published a formal supervisory statement (ESMA75-113276571-1679) reiterating the July 1 hard deadline and calling on all 27 national competent authorities (NCAs) to apply uniform enforcement standards. The statement explicitly addressed the "reverse solicitation" loophole — attempts by non-EU platforms to serve EU clients by arguing the client initiated contact. ESMA confirmed that reverse solicitation cannot be used systematically and that active marketing to EU clients by unlicensed entities remains prohibited.

What Is a CASP License?

CASP stands for Crypto-Asset Service Provider. Under MiCA, any entity providing at least one of the following services must be authorized as a CASP in an EU member state: operation of a trading platform, exchange of crypto assets for money or other crypto assets, custody and administration of crypto assets, transfer services, portfolio management, order reception and transmission, placing of crypto assets, and crypto-asset advisory services.

Authorization is issued by the national competent authority of the member state where the CASP has its registered EU office. Once authorized, the license can be passported across all 30 EEA nations — which is why Luxembourg (with Coinbase and Bitstamp), Malta (OKX, Gate Technology, Crypto.com), and Ireland (Kraken) have become concentration hubs for global exchange licenses.

Capital requirements scale with the service class: €50,000 for advisory and transfer-only CASPs (Class 1), €125,000 for custody and exchange (Class 2), and €150,000 for trading platform operators (Class 3). These are minimum floors — NCAs can set higher requirements based on risk assessment, and the binding constraint for established firms is usually the own-funds floor equal to one-quarter of prior-year fixed overheads.

Which Exchanges Are MiCA-Licensed? The Full Breakdown

As of March 2026, 14 centralized exchanges and more than 40 CASPs total have received full CASP authorization under MiCA across the EU, according to the ESMA Interim MiCA Register (updated weekly) and the eucryptoregister.com consolidated register (117+ authorized entities as of April 2026).

The following table shows the major consumer-facing exchanges with confirmed CASP authorization:

Source: ESMA Interim MiCA Register (weekly updates), eucryptoregister.com consolidated register (April 2026), CoinLaw MiCA Statistics (May 2026). Status reflects publicly available data as of May 26, 2026.

The CASP Authorization Map: Which Jurisdictions Are Leading

MiCA authorization is not uniformly distributed across the EU. Five jurisdictions have emerged as the primary licensing hubs, each with a distinct market profile:

Luxembourg (CSSF) — Global Brand Gateway

Luxembourg's CSSF has become the destination of choice for global exchanges seeking rapid EEA passporting. Coinbase chose Luxembourg for its EU license — obtained on June 20, 2025, becoming the first US crypto exchange to receive a MiCA CASP license. Bitstamp (May 15, 2025), Clearstream, and Banking Circle also secured CSSF authorization. The CSSF's regulatory familiarity with complex financial institutions and Luxembourg's favorable corporate tax regime make it the premium licensing jurisdiction for large platforms.

Malta (MFSA) — Exchange Cluster Hub

Malta, which built its reputation as a crypto-friendly jurisdiction under the Virtual Financial Assets Act before MiCA, hosts the largest cluster of exchange-specific CASP licenses: OKX, Crypto.com (Foris DAX), Gemini, Bitpanda, ZBX, and Gate Technology Ltd have all secured MFSA authorization. In July 2025, ESMA published a peer review of the MFSA's authorization process — the first regulator-on-regulator assessment under MiCA — finding that the MFSA only partially met expectations in its authorization of at least one unnamed CASP, flagging unresolved governance, ICT, and AML concerns. This placed MFSA-licensed entities under additional retroactive scrutiny.

Netherlands (AFM/DNB) — Crypto-Native First-Movers

The Netherlands ended its transitional period on July 1, 2025 — one of the shortest in the EU. This pushed Dutch exchanges to be among the first to obtain full CASP authorization. Bitvavo (largest Dutch retail exchange), Finst, Amdax, Coinmerce, BLOX, Bitmymoney, Bitonic, and Blockrise are all AFM-authorized. The Netherlands now has the highest density of licensed consumer-facing crypto exchanges relative to population in the EU.

Germany (BaFin) — Bank-Led Cluster

Germany's approach has been dominated by banks, savings banks (Volksbanken), broker-dealers, and custody providers. BaFin authorized entities include DekaBank, DZ BANK, Deutsche WertpapierService Bank, Hauck Aufhäuser Digital Custody, Scalable Capital Bank, Berenberg, MLP Banking, and several dozen regional cooperative banks. Germany has the largest raw count of CASP licenses in the EU, but few pure-play retail exchanges — institutional and banking-sector entities dominate the German register.

France (AMF/ACPR) — Stablecoin and Binance Home

France's AMF authorized Binance France S.A.S. and hosts Circle France — the entity that issued the first MiCA-compliant stablecoin. Circle obtained its ACPR Electronic Money Institution license on July 1, 2024, making USDC and EURC the first fully MiCA-compliant stablecoins. The AMF's PSAN (Prestataire de Services sur Actifs Numériques) registration framework, which preceded MiCA, provided a bridge for French and internationally operating entities.

Austria (FMA) — Bybit and KuCoin Hub

Austria's Financial Market Authority authorized Bybit Technology Austria GmbH on July 1, 2025 — the same day Bybit.com ceased services for EU-verified users and the EU-dedicated platform bybit.eu launched. KuCoin EU Exchange GmbH followed with FMA authorization on November 27, 2025. Austria has also authorized several Austrian fintech firms including FIOR Digital GmbH (the 21bitcoin app) and Coinfinity.

The Bybit Model: How Major Exchanges Solved the MiCA Problem

Bybit's transition is the clearest template for how large non-EU exchanges have navigated MiCA. The sequence: establish an EU-domiciled legal entity, obtain CASP authorization in a chosen member state, migrate EU-verified users to the new entity, and sunset the main-platform's EU service simultaneously with authorization.

On June 28, 2025, Bybit announced the launch of bybit.eu and that Bybit.com would cease services for EU-verified users on July 1, 2025. EU users were instructed to close all open positions on Bybit.com, register on the bybit.eu whitelist, and await migration instructions. The transition was framed as procedural and the company committed to a smooth migration process. Bybit.eu now operates as a distinct licensed entity with the Austria FMA CASP authorization, available to all 30 EEA countries through passporting.

KuCoin followed a similar path with its Austrian entity, and Binance operated through Binance France S.A.S., its AMF-authorized French entity, to maintain EU market access.

USDT Is Gone: The Stablecoin Purge Under MiCA

One of the most visible and disruptive effects of MiCA for EU users has been the systematic delisting of USDT (Tether) from licensed exchanges. Tether CEO Paolo Ardoino has repeatedly stated that Tether has no plans to seek MiCA authorization as an e-money token issuer for the European market. Without authorization, EMT (e-money token) rules prohibit EU-licensed exchanges from offering USDT for spot trading to EU customers.

The delisting cascade unfolded across a four-month window:

USDT spot trading is now functionally absent from the EEA-facing surfaces of all major licensed centralized exchanges. Some derivatives products denominated in USDT remain partially accessible on certain platforms, but spot-to-spot conversions have been disabled.

The compliant stablecoin landscape as of early 2026: 17 e-money token (EMT) issuers are authorized across 10 EU member states, covering 25 individual approved EMTs. The most widely held is USDC (Circle), which has been MiCA-compliant since July 1, 2024. Zero asset-referenced tokens (ARTs) have been authorized under MiCA, reflecting the EBA's stringent reserve and governance bar for multi-currency and commodity-backed stablecoins.

The EMT transaction cap is another critical mechanism: non-EU stablecoin issuers face a mandatory issuance halt once daily transaction value within the EU exceeds €200 million or 1 million transactions per quarter. This provision was designed to protect the euro's role in EU payments infrastructure and applies regardless of the stablecoin's global market cap.

The Gray Zone: Which Exchanges Are at Risk

Not all exchanges have obtained full MiCA CASP authorization. Several categories of risk remain as the July 1 deadline approaches:

Major Exchanges Still Under Application Review

Some exchanges submitted CASP applications within the required timeframe and are operating under grandfathering provisions while their applications are reviewed. These entities may continue providing services during the review period, but they must cease operations immediately if their application is rejected or if the NCA determines they do not qualify for grandfathering. ESMA has explicitly warned NCAs to scrutinize grandfathering claims and reject applications that are not substantively MiCA-compliant.

Gate.com — Entity Separation Risk

Gate Group obtained a full CASP license for its EU entity, Gate Technology Ltd, from Malta's MFSA on October 1, 2025. However, users of gate.com (the global platform) need to confirm they are being served by Gate Technology Ltd, the licensed EU entity, and not by a non-EU Gate group company. The license applies to the specific EU legal entity — it does not automatically cover users of the parent platform. EU users should log in and verify which entity is servicing their account, and if in doubt, contact Gate's EU compliance team.

Exchanges with No Published EU License

Several large global exchanges that remain popular among EU traders have not published MiCA CASP authorization announcements as of May 2026. This includes platforms like MEXC, HTX (Huobi), and various derivatives-focused exchanges. Users of these platforms should assume they will face service restrictions on July 1 and begin migration now.

Small Exchanges That Have Already Exited

Compliance costs for MiCA authorization run between €500,000 and €2 million for exchange-scale operations in year one, with recurring annual compliance costs of €250,000 or more. For smaller exchanges, these costs represent an insurmountable barrier. Many have already exited the EU market quietly, geoblocking EU IP addresses or restricting account registration. Users who still hold balances on platforms that have partially exited but not fully wound down are at elevated risk of account freezes.

Enforcement: What Happens After July 1

ESMA's April 2026 statement set clear expectations for NCAs: unauthorized providers must have implemented orderly wind-down plans by the July deadline. These plans must include prior notice to clients, organized transfer of crypto assets to either an authorized CASP or a self-hosted wallet, and full compliance with EU conduct, prudential, and AML/CFT obligations during wind-down.

The penalty regime under MiCA Article 111 is significant. Administrative fines can reach:

• €15 million or 12.5% of annual turnover (whichever is greater) for operating without authorization
• 15% of annual turnover for market manipulation and insider trading violations
• Temporary or permanent bans on providing crypto services in the EU
• Removal from national and EU-wide registers
• Publication of violation details (public naming)

For a platform with €1 billion in annual revenue, 12.5% of turnover means a potential €125 million fine — dwarfing the cost of compliance. Beyond fines, NCAs can instruct payment processors and banking partners to cut service to unauthorized platforms, effectively removing their ability to accept fiat deposits or process withdrawals for EU users.

EU users of unlicensed platforms face a different risk: if a platform is forced into an unmanaged cessation — where it stops operating without a proper wind-down procedure — access to crypto assets held on the platform may be frozen indefinitely. This is the scenario MiCA's wind-down requirements are specifically designed to prevent, but enforcement against non-EU entities is operationally complex and not guaranteed.

Action Plan: 7 Steps Before July 1

Based on ESMA guidance and the current state of CASP authorizations, here is the concrete action plan for EU-based crypto users:

• Audit every exchange you use. Log in to each platform and check for a MiCA/CASP compliance badge, or look up the exchange by name on the ESMA Interim MiCA Register at esma.europa.eu. If you cannot find authorization confirmation, treat it as unlicensed.
• Check which legal entity is serving you. For exchanges like Gate.com or Binance, the license belongs to a specific EU entity. Verify you are being served by that entity — not a non-EU group company operating under the same brand.
• Open an account on a confirmed licensed exchange. If you do not already have an account on a fully licensed EU exchange, open one now. Bitvavo (Netherlands), Coinbase (Luxembourg), Bybit.eu (Austria), or Kraken (Ireland) are among the most widely used options for EU retail traders.
• Complete KYC (identity verification) in advance. Identity verification typically takes 1–3 business days. Do not leave this for late June, when processing times will be extended due to volume.
• Convert USDT and non-MiCA stablecoins. If you hold USDT on any platform, convert to USDC, EUROC, or a fiat currency before July 1. Licensed EU exchanges are prohibited from handling USDT on behalf of EU clients.
• Withdraw from unlicensed platforms no later than June 15. Do not wait until June 30. Major platform exits and withdrawal processing backlogs are likely in the final two weeks of June. Blockchain networks may also experience congestion during the rush. Target June 15 as your personal deadline.
• Consider self-custody for long-term holdings. Hardware wallets (Ledger, Trezor) eliminate counterparty risk entirely. Self-custody removes exposure to platform insolvency, forced wind-downs, and account freezes. It requires personal responsibility for key management — if your recovery phrase is lost, your crypto cannot be recovered.

MiCA's Long-Term Impact on European Crypto Markets

The July 1 cliff is not the end of MiCA's shaping effect on European crypto markets — it is the beginning of the enforcement phase. Several structural dynamics will play out over the following 12–24 months:

Market Consolidation

The compliance cost barrier — €500,000 to €2 million to license, plus €250,000 or more per year in ongoing compliance costs — has already driven significant consolidation. Smaller exchanges that could not afford full authorization have exited, reducing competition and concentrating order flow on 10–15 major licensed platforms. The benefit is reduced platform failure risk; the cost is higher fees and reduced product diversity for EU retail traders.

Volume Concentration and Institutional Entry

More than 70% of EU-based crypto transaction volume already routes through MiCA-compliant exchanges. Post-July 1, that share is expected to rise sharply as enforcement makes unlicensed alternatives operationally impractical. Institutional investors — pension funds, asset managers, family offices — who previously avoided crypto due to regulatory uncertainty are now able to engage through licensed, audited platforms that meet their compliance requirements.

The ESMA Peer Review Signal

ESMA's July 2025 peer review of Malta's MFSA — finding partial compliance failures in at least one CASP authorization — signals that obtaining a license does not end regulatory scrutiny. Exchanges licensed through NCAs that ESMA later finds to have had deficient authorization processes may face retroactive compliance requirements. This creates ongoing pressure even for already-licensed platforms and underscores that the regulatory environment remains active, not settled.

DeFi and the Grey Regulatory Frontier

MiCA explicitly applies to "crypto-asset service providers" — defined entities with identifiable operators. Fully decentralized protocols with no identifiable service provider are technically outside MiCA's scope. In practice, the line between decentralized and decentralized-in-name is contested. Protocols with identifiable governance structures, known development teams, or foundation-controlled upgrades may face regulatory action. NCAs and ESMA have signaled that enforcement will progressively test this boundary through specific cases.

FAQ