EU watchdogs warn of impersonation scams as MiCA licensing cuts leave customers in limbo

Fraudsters are using the MiCA (Markets in Crypto-Assets) licensing shakeout to impersonate regulators and crypto businesses, targeting customers of firms that failed to secure EU authorization. For high-risk payment providers, the practical problem is obvious: once a provider is forced to wind down or transfer EU operations, customer funds and migration flows become a neat place for scammers to step in.

1. Officials cited by the Financial Times said several EU watchdogs have seen a rise in scams since the July 1 deadline for firms to obtain authorization under MiCA. Companies that did not secure approval must wind down or transfer their EU operations, which means customers are being pushed to move assets.
2. Stéphane Pontoizeau, an official at France’s Autorité des Marchés Financiers (AMF), said the regulator encountered cases where fraudsters impersonated AMF representatives and directed users to transfer assets to them through fake websites. That is the basic attack pattern here: fake regulator, fake site, real customer panic.
3. The European Securities and Markets Authority (ESMA) said it was aware of scammers misusing its identity and logo, including through falsified documents. ESMA warned that criminals may target customers searching for an alternative licensed provider, which is exactly the moment when users are most likely to click on the first name that looks official.
4. According to an ESMA list updated at the end of July, only 323 crypto companies had obtained licenses. Data provider VASPnet had previously estimated that more than 1,700 unlicensed companies would need to cease operations.

For PSPs, acquirers, and banks servicing crypto flows, the signal is straightforward: MiCA enforcement does not just change licensing status, it creates a transition period where fraud attempts around asset transfers, provider changes, and “regulator” communications become part of the operational risk profile.