Europe wrote the rulebook first

MiCA, the Markets in Crypto-Assets regulation, does for crypto services what banking and investment rules do for banks and brokers. It requires a licence, capital, governance, custody segregation, complaint handling and disclosure. It applies across the Union with a passport, so one licence covers all member states.

What it changed for a user

Client assets are segregated. A licensed provider must hold your coins so that they are not part of its own balance sheet and survive its insolvency. This is the provision that directly addresses how exchange collapses destroyed customer funds.

Stablecoins need reserves and a redemption right. Issuers of euro or dollar tokens offered in the Union must hold full reserves in liquid assets, publish their composition and honour redemption at par. Tokens whose issuers did not comply were delisted from European venues.

Marketing has rules. Promotional material must be fair, clear and not misleading, with risk warnings. The era of influencer promotion without disclosure is formally over, whatever happens in practice.

A white paper is mandatory for public offers. Notified to a regulator, with defined content, and the issuer is liable for what it says.

What it deliberately does not cover

Fully decentralised protocols with no identifiable provider fall outside, which is a large and knowingly left gap. Non-fungible tokens are mostly excluded unless issued in large fungible series. Tokens that qualify as financial instruments fall under existing securities law instead, which is stricter, and that boundary question is the single most common source of legal uncertainty in practice.

The cost, stated fairly

A licence is expensive. Capital requirements, compliance staff, audits and legal work put the annual cost of operating a compliant exchange in the millions. Small providers either exited, were acquired or restricted themselves to non-covered activity. That is a real reduction in competition and innovation, and defenders of the regulation should say so rather than pretend the cost is zero.

The counter-argument is the record. The failures of 2014 and 2022 were caused by exactly the practices MiCA prohibits: commingling client funds, lending them out, no capital, no governance, no disclosure. Regulation that raises costs and prevents that trade-off is a policy choice, and it is a defensible one.

The travel rule, which annoys everyone

Transfers between providers must carry sender and recipient information, similar to bank transfers. Transfers to a self-hosted wallet require the provider to verify that the customer controls it above certain thresholds. This is where privacy-minded users and compliance departments collide, and the implementation varies enough between providers that the same withdrawal is easy at one and blocked at another.

The global effect

MiCA arrived first, which means it became the default reference. The United States followed with stablecoin legislation in 2025, and several jurisdictions have adopted similar structures. This is the Brussels effect, the same pattern that made the GDPR a global privacy baseline: a large market writing a comprehensive rule, and multinational firms finding it cheaper to comply everywhere.

What to watch

Watch enforcement, because a licence regime is only as strong as the first action taken under it. Watch the boundary between MiCA and securities law, where the practical uncertainty lives. And watch euro-denominated stablecoins, which are strategically important to European policymakers and commercially small so far.