MiCA cuts crypto field to 210

Tomorrow, 1 July 2026, the grace period for MiCA, the EU's first common rulebook for crypto-assets, expires. Crypto firms without a licence must stop taking new customers and start winding down. Press and industry estimates suggest that by late June only around 210 out of more than 1,200 previously registered crypto firms had secured full authorisation (Euronews). ESMA has not confirmed that figure officially, but the direction is clear enough: Europe's crypto market is about to shrink.

For Malta, this is not a distant Brussels exercise. Financial services assets exceed 500% of GDP, and the island has spent years trying to show that a small, business-friendly jurisdiction can also be a serious supervisor. MiCA now turns that argument into a live test. Crypto firms that want EU market access must meet one standard, and national regulators, including the MFSA, have to show they can apply it credibly.

ESMA, the European Securities and Markets Authority, set out the consequences in a June statement. Unauthorised firms must stop onboarding clients, stop marketing, and allow existing users to withdraw funds, while keeping anti-money-laundering controls in place during the wind-down. There will be no extension. ESMA said that in April.

The mechanism is simple. MiCA creates a single licensing standard across the EU. Firms that cannot meet it, or whose national regulators have not processed their applications in time, are pushed out of the legal market. What remains is a smaller industry led by companies able to pay for compliance staff, audits, capital buffers and reporting systems.

One Rulebook, Twenty-Seven Queues

MiCA is a single EU regulation, so it applies directly in every member state. But each country still has to name a supervisor, build the application process and handle licences. That national layer is where the trouble has appeared.

Poland is the clearest example. The domestic law that would formally make KNF, Poland's financial supervisor, responsible for MiCA has not entered into force. Rzeczpospolita reported that no national body has been empowered for most MiCA supervision, leaving Polish firms without a licensing route at home. Binance Poland has already stopped accepting new users and told clients to move assets elsewhere (TVN24, Money.pl).

Portugal changed its legal framework but then ran into delays. The industry association ANIPE warned that authorised firms remained "reduced to the minimum" just days before the deadline, meaning some businesses may have to stop serving clients even after applying (ECO). Banco de Portugal did not apologise for moving slowly, telling parliament it is being "very demanding" in authorisations (RTP).

France started from a stronger position because the AMF already had a structured national registration system. Established firms such as Coinhouse and Paymium have moved into MiCA licensing more smoothly, though smaller operators still face the cost problem (Cryptoast). Spain's CNMV expected to close June with roughly 20 authorised operators (Cinco Días).

Who Gains, Who Loses

The winners are large, well-capitalised firms that can absorb the real cost of a licence: compliance teams, external audits, minimum capital requirements and regular supervisory reporting. In Germany, bank-linked players such as Boerse Stuttgart Digital, Bitpanda and Trade Republic are among those positioned to take market share (Handelsblatt).

MiCA's passporting system gives them the key advantage. One licence in one EU country allows a firm to serve customers across the bloc. For a large operator, that turns compliance into a cost of scale. For a small operator, it can become the wall that blocks entry.

The losers are smaller firms that cannot afford the machinery, and firms caught in slow national queues even if they are genuine businesses. A company can be operating, have applied, and still be legally unauthorised from tomorrow.

Consumers get better protection from authorised providers: governance rules, asset safeguarding and clearer disclosure. They also get fewer options. In countries where only a handful of firms secured licences, users face forced withdrawals or pressure to move assets before platforms shut their doors.

Where the Risk Goes Next

The headline figures need caution. Estimates suggesting 75% to 83% of firms could lose market access come from crypto-media sources, not from regulators.

The real question is where users go once unauthorised platforms stop serving them. If they move to licensed EU providers, MiCA will have done what it was designed to do: clean up a fragmented market and bring crypto activity inside the supervisory perimeter. If they move to offshore exchanges beyond EU control, the risk will not disappear. It will simply move somewhere harder to supervise.

Nobody has solid data yet on which way users will move. That answer will take months. It will decide whether MiCA becomes consumer protection in practice, or mainly a selection process that leaves the market to the biggest firms.