ESMA Tells Unauthorized Crypto Firms to Wind Down as MiCA Deadline Nears

TLDR

• ESMA told unauthorized CASPs to wind down as MiCA transition ends July 1.
• Unlicensed crypto firms must stop onboarding new EU clients immediately.
• Unauthorized CASPs may only support exits, transfers and position closures.
• AML, sanctions screening and client protection duties remain active during wind-down.
• Ripple received preliminary Luxembourg approval for a MiCA CASP license.

The European Securities and Markets Authority has told unauthorized crypto-asset service providers to begin an orderly wind-down as the Markets in Crypto-Assets transitional period ends on July 1.

The warning applies to crypto firms that continue serving European Union clients under national regimes but do not obtain MiCA authorization before the deadline. ESMA said such firms must immediately stop onboarding new EU clients, stop opening new accounts and end marketing or solicitation activity.

The regulator said unauthorized crypto-asset service providers, known as CASPs, must protect client interests while exiting the market. The guidance arrives as authorized firms prepare to operate under MiCA passporting rules, which allow a licensed provider in one EU member state to offer services across the bloc.

ESMA Sets Wind-Down Rules for Unauthorized CASPs

ESMA said unauthorized CASPs must limit services to actions required for clients to exit safely. Those actions may include selling or transferring crypto-assets, reallocating assets or closing open positions.

Custody services may continue only for the period strictly needed to complete an orderly exit. The regulator said firms should not use custody arrangements as a way to keep providing unauthorized services after the transitional period ends.

CASPs must communicate clearly and repeatedly with both retail and institutional clients about wind-down plans. ESMA said clients should receive timelines for disposing of, transferring, reallocating or closing positions, including deadlines for any residual positions that may be closed automatically.

The regulator also said firms must explain client protection requirements and the measures being taken to safeguard assets. The guidance places responsibility on unauthorized firms to avoid disorderly exits that could harm customers during the transition.

AML and Client Protection Duties Remain in Force

ESMA said wind-down arrangements must comply with relevant EU and national conduct rules, as well as anti-money laundering and counter-terrorist financing obligations. Unauthorized firms must maintain customer due diligence, transaction monitoring, sanctions screening and suspicious activity reporting during the exit process.

The regulator also reminded firms to keep records and follow transfer-of-funds and crypto-asset transfer traceability obligations. These requirements apply even when a provider is no longer allowed to conduct normal crypto services for EU customers.

Where customers are moved to a MiCA-authorized provider, the receiving CASP must complete required onboarding checks. That includes customer due diligence and any additional AML or compliance steps required under the applicable legal framework.

ESMA also warned non-EU crypto firms that they cannot provide MiCA services to EU clients or solicit them without authorization. The restriction applies in business-to-business settings as well, limiting the ability of offshore providers to serve European firms without proper licensing.

Ripple Moves Toward MiCA Approval in Luxembourg

The ESMA notice comes as several crypto firms seek MiCA approvals to continue operating across the EU. Ripple said it received preliminary approval for a Crypto Asset Service Provider license in Luxembourg from the Commission de Surveillance du Secteur Financier.

A full Luxembourg CASP license would allow Ripple to offer stablecoin payment services to European companies and expand into broader crypto functions under the MiCA framework. Approval in one EU member state would give Ripple passporting rights across all 27 EU countries.

MiCA has created a clearer authorization path for firms that meet regulatory standards, while narrowing options for firms that miss the deadline. Authorized CASPs can continue onboarding and serving EU clients, while unauthorized firms must shift to exit-only activity.

The July 1 deadline marks a turning point for Europe’s crypto market. ESMA’s guidance makes clear that firms without MiCA authorization must stop growth activity, communicate exit plans and keep compliance controls active while clients move assets or close positions.