MiCA's CASP transitional period ends July 1, 2026. Learn country-specific deadlines, grandfathering rules and what EU crypto firms must do to comply.
The Markets in Crypto-Assets Regulation (MiCA) is the most consequential piece of crypto legislation the European Union has ever enacted. For crypto-asset service providers (CASPs) operating across EU member states, the clock has been ticking since MiCA’s CASP provisions became applicable on 30 December 2024. An absolute ceiling of 1 July 2026 marks the end of any grandfathering protection — after which no unauthorised CASP may legally serve EU customers, regardless of which member state they are based in.
This guide explains how the transitional provisions work, why deadlines vary by country, and what your firm must do right now to remain on the right side of European regulators.
MiCA establishes a unified licensing framework for crypto-asset service providers across all 27 EU member states. Rather than forcing every existing firm to comply overnight, the regulation includes a transitional (grandfathering) mechanism set out in Article 143(3). Firms that were already providing crypto-asset services under applicable national law before 30 December 2024 were permitted to continue operating temporarily — either until they received a MiCA authorisation, were refused one, or until the transitional period in their member state expired.
The key word is temporarily. Grandfathering is not a permanent exemption; it is a runway, and that runway has a hard end date.
For a broader grounding in the regulation, see our MiCA Explained: The Complete Guide to EU Crypto Regulation.
This is where many compliance teams get caught off guard. MiCA allowed each member state to choose its own transitional period length, subject to a maximum of 18 months from the 30 December 2024 application date. That ceiling lands on 1 July 2026.
Member states that chose shorter windows have already closed theirs. Based on ESMA’s official published list of grandfathering periods under Article 143(3), the breakdown is broadly as follows:
Some member states modified their initially communicated period over the course of 2025 — Spain, for example, extended from 12 months to 18 months. Because individual country positions can change, CASPs should verify their applicable deadline directly against ESMA’s current official list rather than relying on any third-party summary, including this one.
The practical implication: A CASP that serves customers across multiple EU member states is not bound by a single deadline — it is bound by the earliest applicable deadline among all the countries where it actively operates. A firm with customers in the Netherlands and Belgium faced a Dutch deadline of June 2025, even if its Belgian operations were covered until July 2026.
Grandfathering under MiCA is frequently misunderstood. It does not mean a firm can operate as it always has and ignore MiCA until the last day. The European Securities and Markets Authority (ESMA) has stated in its supervisory communications on MiCA transitional measures that national competent authorities (NCAs) are expected to monitor grandfathered CASPs throughout the transitional period and verify that firms are actively working toward full MiCA compliance.
ESMA has also reinforced that NCAs should apply rigorous and consistent scrutiny to all authorisation applications, meaning that submitting an application close to a deadline does not guarantee a smooth or expedited outcome.
What the transitional period does provide:
MiCA authorisation is not a simple registration. Under Article 62, firms must submit a comprehensive application to their home member state’s NCA. The application must cover, among other things:
Regulators in larger member states — including the Autorité des marchés financiers (AMF) in France and BaFin in Germany — have published detailed national guidance on what a complete application must contain.
Whether your firm is approaching the 1 July 2026 ceiling or is in a member state whose window already closed, the following checklist captures what authorised and grandfathered CASPs alike must address.
Once the transitional period for a given member state expires, any CASP that has not received MiCA authorisation — and is not actively awaiting a decision on a pending application — must cease providing crypto-asset services to customers in that jurisdiction. Operating without authorisation after the deadline constitutes a regulatory breach subject to supervisory enforcement by the relevant NCA, which can include public warnings, fines, and orders to suspend services.
NCAs in several member states have already taken supervisory action against firms that failed to meet earlier transitional deadlines. ESMA coordinates oversight across the bloc to prevent regulatory arbitrage. Attempting to restructure into a non-EU entity to serve EU customers without authorisation is unlikely to succeed; MiCA’s geographic scope captures services offered to EU residents regardless of where the provider is domiciled.
MiCA primarily targets centralised CASPs — exchanges, custodians, brokers, and portfolio managers in crypto-assets. However, several adjacent categories require attention.
Stablecoin issuers operating under MiCA’s e-money token (EMT) or asset-referenced token (ART) provisions face different requirements and in some cases earlier applicable dates that pre-date the CASP transitional period.
DeFi protocols remain in a regulatory grey zone. Truly decentralised protocols with no identifiable legal entity may fall outside MiCA’s scope, but protocols with governance tokens, identifiable developers, or fee-taking front-ends are increasingly scrutinised. ESMA has indicated it will continue assessing where decentralised services meet the definition of regulated CASP activity.
For context on cross-border security risks that regulators also weigh when assessing crypto infrastructure, our DeFi Bridge Exploits Explained: How They Happen guide covers one of the operational risk categories NCAs examine.
While EU firms navigate MiCA’s transitional mechanics, their US counterparts operate in a fundamentally different — and significantly more fragmented — environment. There is no single federal crypto-asset licence equivalent to MiCA authorisation, and state-level money transmission and BitLicense frameworks vary dramatically. Our US Crypto Regulation by State: 2026 Tracker provides a current breakdown of how different US states approach crypto licensing requirements.
On the enforcement side, our coverage of SEC Crypto Enforcement 2026: Latest Actions Explained highlights how US federal regulators have been using enforcement actions to fill the gaps that congressional legislation has not yet addressed — a sharp contrast to MiCA’s pre-emptive, comprehensive approach.
Last updated: June 2026