MiCA’s July 1, 2026 deadline ends Europe’s crypto grandfathering period

Europe’s last transitional cushion for crypto firms is gone. As of July 1, 2026, any company serving EU clients without a MiCA licence is no longer just behind on paperwork; according to ESMA, it may now be in breach of EU law and has to stop offering those services.

1. MiCA, formally Regulation (EU) 2023/1114, is the EU’s single rulebook for crypto-assets that were previously covered by a patchwork of national regimes. It replaced that fragmentation with one licence that can be passported across the EU.
2. The rollout came in stages: stablecoin rules for asset-referenced tokens and e-money tokens started in June 2024, then white paper requirements, the market-abuse regime and the licensing framework for crypto-asset service providers (CASPs) followed in December 2024. Firms already operating under national law were given up to 18 months to get authorised. That window is now closed across all 27 EU member states and the 30 EEA countries, with no extensions and no national carve-outs.
3. The market effects are already showing up. Only compliant stablecoins from authorised issuers can now be offered on EU venues, and USDT, the world’s largest stablecoin, has been progressively delisted for EU users after its issuer declined to pursue authorisation.
4. An April 2026 analysis by Spain’s Agencia Tributaria, citing ESMA’s register, found more than 185 crypto-asset market operators had secured MiCA authorisation across the EU. Firms that did not want to make the compliance investment have, in many cases, left the European market altogether.
5. For PSPs and other high-risk providers, the bigger shift is operational. Under Regulation (EU) 2023/1113, the Travel Rule requires CASPs to collect, verify and transmit originator and beneficiary information on every qualifying transfer, regardless of amount. ESMA has also said authorised CASPs are expected to run robust onboarding as users migrate from firms that lost market access, with full AML/CFT compliance throughout.

That is why identity verification vendors such as Identomat matter here. Its setup combines ID document verification, biometric matching with liveness detection, transaction monitoring, risk assessment and AML screening for sanctions, PEP and adverse media in one automated flow, with verification completed in seconds and a timestamped evidence trail ready for regulators.