Guide · Cross-niche editorial cluster · June 2026
MiCA CASP deadline (1 July 2026) — which crypto exchanges are EU-authorized
The 18-month national grandfathering period under MiCA (EU Regulation 2023/1114) ends 1 July 2026 — after which a crypto exchange must hold full CASP authorization from an EU national regulator to passport across the bloc. This guide explains what CASP authorization is, what the deadline changes, which major exchanges are already authorized (and where), and why a MiCA licence is becoming a baseline trust signal even outside the EU. An explainer, not legal or financial advice.
Markets covered in this guide
Markets covered
- European Union
1 July 2026 is the EU crypto market’s hard line. On that date the national grandfathering windows that let pre-existing crypto exchanges keep operating while their paperwork caught up expire in the member states that took the full transition — and from then on, serving EU users at scale means holding a full Crypto-Asset Service Provider (CASP) authorization under MiCA (EU Regulation 2023/1114). This guide explains what CASP authorization is, what the deadline actually changes, which major exchanges already hold it and where, and why — even if you never touch a euro — a MiCA licence has quietly become a baseline trust signal for any global exchange. It is an explainer, not legal or financial advice; regulatory status changes week to week, so confirm any specific exchange’s standing against the exchange itself and its home regulator’s public register before you rely on it.
What MiCA and “CASP authorization” actually are
MiCA — the Markets in Crypto-Assets Regulation, EU Regulation 2023/1114 — is the EU’s single rulebook for crypto issuers, exchanges, wallets, and other service providers. Its defining feature for exchanges is the CASP passport: a firm authorized by one EU national competent authority (NCA) can passport that authorization across all 27 EU member states plus the wider EEA — a roughly 30-state single market — without re-licensing in each one. That is a genuine structural shift from the pre-MiCA patchwork, where an exchange had to assemble a different national registration (a French PSAN, a German BaFin registration, an Italian OAM entry, and so on) country by country.
CASP authorization is not a light-touch registration. It requires a regulated EU legal entity, governance and capital requirements, custody and conflict-of-interest rules, and conduct standards — including how affiliate and influencer promotion must be disclosed, which align with ESMA finfluencer guidance. In practice that means a MiCA licence is expensive and slow to obtain, which is exactly why it functions as a signal: an exchange that holds one has cleared a real regulatory bar.
What changes on 1 July 2026
MiCA’s CASP provisions have applied since the end of 2024, but the regulation let each member state grant existing providers a transitional (“grandfathering”) period of up to 18 months to keep operating while they secured authorization. The states that took the maximum window reach the end of it on 1 July 2026. After that point, an exchange operating in those markets that does not hold full CASP authorization from an EU NCA — or confirmed transitional relief — can no longer rely on the old national arrangements to serve EU customers.
The practical effect is consolidation. Exchanges that secured a licence early can passport into the whole bloc; those that did not face a choice between rushing an application, restricting EU access, or exiting affected markets. It pairs with the EU’s reporting-side reform, DAC8, which from 1 January 2026 requires CASPs to report crypto transactions to tax authorities automatically — the EU cousin of the US 1099-DA and the UK’s CARF (covered in the 1099-DA crisis and the HMRC CARF guide). Authorization and reporting are arriving together: a MiCA-licensed exchange is also a reporting exchange.
Who’s authorized — a compliance snapshot
The list below reflects publicly announced authorizations as of mid-2026; by then 147+ exchanges held full MiCA authorization. It is a snapshot, not a live register — verify current status with the exchange and its home NCA before relying on it.
| Exchange | MiCA CASP status | Home authority |
|---|---|---|
| Coinbase | Full CASP (via its Bitstamp entity); first major US-headquartered firm authorized | Luxembourg (CSSF) |
| Kraken | Full CASP (granted 2025) | Ireland (Central Bank of Ireland) |
| OKX | Full CASP; among the first global exchanges licensed | Malta (MFSA) |
| Crypto.com | Full CASP | Malta (MFSA) |
| Bitpanda | Full CASP — holds multiple MiCA licences with EEA passporting | Austria (FMA) |
| Bitvavo | Full CASP + EU passport (2025) | Netherlands (DNB / AFM) |
A second group had fragmented or unconfirmed status approaching the deadline, and should be treated with care editorially rather than assumed compliant:
- Binance — operated on a mosaic of national registrations (for example a French PSAN) and had a full CASP application in progress, but had not confirmed a single EU-wide MiCA passport as of mid-2026.
- Bybit and Bitget — EU/MiCA standing was unconfirmed at the deadline in the source material; their access to specific EU markets after 1 July 2026 should be checked directly.
If you publish or rely on any of these, treat the status as “verify now,” not settled — this is precisely the kind of fact that moves between a draft and a deadline.
Why a MiCA licence matters even outside the EU
FintechPays grades crypto-exchange affiliate programs by 12-month true-EPC, and most of the exchanges we rank operate well beyond Europe — across the GCC and Asia. So why does an EU rule belong on the radar of a non-EU reader?
Because authorization is a durability signal. A MiCA licence tells you an exchange has stood up a regulated entity, met capital and custody requirements, and accepted ongoing supervision and reporting — the same attributes that make a platform less likely to vanish, freeze withdrawals, or be forced out of a market overnight. Our reliability factor already discounts exchanges with thin regulatory footing; a MiCA authorization is one of the cleaner positive marks an exchange can carry, and several of the names above (OKX, Crypto.com, Coinbase, Kraken) are exactly the globally-operating platforms a GCC or Asia reader is also choosing between. Conversely, an exchange that misses the EU deadline is demonstrating something about its compliance capacity that travels.
What to do before — and after — the deadline
- If you operate in or serve the EU: confirm your exchange’s CASP status on its home NCA’s public register, not just a press release, and understand which entity holds the licence (Coinbase’s sits with Bitstamp in Luxembourg, for instance, not the US parent).
- If you’re choosing an exchange anywhere: read a MiCA authorization as a trust marker alongside fees, custody, and payout reliability — not as the only factor, but as a meaningful one.
- If you’re a publisher: MiCA’s conduct rules govern how affiliate relationships must be disclosed to EU audiences; our affiliate disclosure appears above the fold on every page for exactly this reason.
MiCA does not change what an exchange charges or how good its product is — but from 1 July 2026 it changes who is allowed to offer that product to EU users at all, and it hands the rest of the world a clean, comparable signal of which platforms have done the regulatory work. Verify the specifics for your situation with the exchange and its regulator; this guide is an explainer, not legal advice.