Crypto expert opinion

Your MiCA Licence Is Now a Ten-Second Public Check

The ESMA CASP register reached ~325 firms by mid-August. It is now a verification layer: your bank, counterparties and customers can read your exact scope.

Contents

Two things happened to the MiCA register in the first half of August 2026, and only one of them got attention.

The visible one: the count kept climbing, reaching roughly 325 authorised CASPs across the EEA by mid-month, spread across about 30 EU and EEA markets and 26 national competent authorities. The quieter one, and the more consequential: it barely climbed at all. ESMA’s update on 31 July took the population to around 321. A fortnight later it was 325. In early July, the same register was absorbing batches of 37 and 14 firms at a time.

When a register stops filling quickly, it is showing you what the settled market looks like.

Key takeaways
  • The ESMA CASP register held roughly 325 firms in mid-August 2026 — up only about four from the 31 July figure.
  • The backlog argument is expiring: absence from the register increasingly says something about the firm itself.
  • The register publishes scope as well as status, including which service types you hold, your authorising regulator, your authorisation date, LEI and domain.
  • Independent indexes now make it searchable in seconds; the CASP Tracker launched 5 August 2026, syncing from the official ESMA register.
  • Practical consequence: your marketing claims and your register entry are now trivially comparable by any bank, counterparty or competitor.

The curve was the story

When the transitional regime closed on 1 July 2026, the standard defence for any firm still outside the register was administrative: the national authorities are backed up, applications are in review, the count will keep rising. That was a reasonable thing to say in July, and we said a version of it ourselves when we read the register at roughly 294 firms and worked through what the conversion rate from the pre-MiCA VASP field implied.

Six weeks of data have made it much less reasonable. Going from 294 in mid-July to 321 by the end of the month and 325 by mid-August looks like a queue that has largely drained. Single-digit fortnightly growth against a pre-MiCA field of well over a thousand registered VASPs means the population of firms Europe has decided can hold crypto for its citizens is close to settled.

Treat that as a planning input rather than a talking point. If your firm is not on the register and not in an active, advanced file with a named competent authority, the real reading of the curve is that the market has re-formed without you, and the question is no longer when does my application clear but which of the remaining structures am I actually building. We set out the options in full in the what unlicensed crypto firms do now guide, and the structural choice between authorisation and offshore in EU CASP versus offshore VASP.

Scope is public, and that is the part firms underestimate

The register was always public. What changed in August is how little effort it now takes to read.

The MiCA CASP Tracker, launched on 5 August 2026 and syncing from the official ESMA register, turns dense regulatory filings into something anyone can search — by country, by regulator, by company name, by authorisation date, and by the specific services a firm is licensed to provide. Alongside the entity and its home state, the exposed data includes the competent authority, the authorisation date, LEI and company registration numbers, the official domain, and the MiCA service types held.

That last field is the one to sit with. Your scope is public. The register shows which of the MiCA service classes you were actually granted (custody, exchange, execution, placement, transfer, advice and the rest), as well as whether you are authorised at all. Any counterparty running diligence can now compare what your website says you do against what your regulator says you may do, in less time than it takes to open a data room.

The usual exposure is a real licence described too broadly.

Outright false claims of MiCA authorisation are the easy case and the register kills them instantly. The commercially dangerous version is quieter: a group that holds a genuine CASP authorisation in one entity and markets as though it covers the whole group; a firm authorised for a narrow set of services whose homepage implies the full suite; a landing page that says “MiCA licensed” without saying for what. None of that survives a ten-second lookup, and all of it is the sort of thing an acquiring bank’s compliance team screenshots. Audit your own public claims against your own register entry this week — it is an hour of work and it is the cheapest risk reduction available to a licensed firm right now.

What a verification layer does to the market

Public, structured, searchable licence data changes behaviour in three predictable places.

Banking and payments. For a licensed crypto business, the scarcest resource has usually been a bank that will hold the fiat. Frictionless verification helps here, because the reflexive institutional caution toward crypto has always been partly an information problem. A counterparty that can confirm your authorisation and your exact permitted services in seconds is a counterparty with one fewer reason to defer the decision. Pair the authorisation with an EMI or crypto-friendly neobank relationship early; that half of the build is still the one that quietly sinks timelines.

Counterparty diligence. Expect register checks to become a standard item in onboarding packs and vendor questionnaires rather than a bespoke request, and expect a counterparty to run it on you before the first call.

Marketing discipline. The gap between what a crypto firm claims and what it holds has been a durable feature of this industry. It is now a gap with a public, dated, machine-readable measurement. The firms that benefit are the ones whose claims were already precise.

The uncomfortable symmetry

There is a version of this that cuts against licensed firms too, and it is worth naming. A public register with authorisation dates and service scopes is also a competitive-intelligence surface: your rivals can see when you were authorised, by whom, for what and, by inference, what you had to drop or defer to get there. Some firms will find that their narrowest service class is now the first thing a prospect learns about them.

The practical response is to make sure the scope you hold matches the business you are actually selling, and to widen it deliberately rather than rhetorically. Adding service classes to an existing authorisation is a defined process with a defined cost; describing classes you do not hold is neither. If your commercial plan has outgrown your permission, the fix is a filing to widen the authorisation rather than new copy, and the same discipline applies to keeping the authorisation current once it is issued, which we cover in the crypto licence renewal guide.

For firms still deciding where to sit, the underlying definitions and the shape of the regime are in our MiCA explainer and the VASP, CASP and MiCA breakdown, and the current fast, credible routes are ranked in best crypto licences of 2026.

Where this leaves you

Now that the register is easy to read, it works less as a scoreboard and more as the reference anyone dealing with you will check first. It shows your authorised scope whatever your marketing says.

Vantegris structures MiCA CASP authorisations across the EU, alongside Gulf and offshore alternatives where the EU is not the right home — company, capital, MLRO, ICT and Travel-Rule framework included, and kept current after issuance rather than only up to it. Book a free consultation and we will tell you whether authorisation, expansion of an existing scope, or a clean offshore structure is the right answer for what you are actually building.

Frequently asked questions

How many CASPs are on the MiCA register now?

Roughly 325 authorised CASPs across the EEA as of mid-August 2026, spanning about 30 EU/EEA markets and 26 national competent authorities. ESMA's 31 July update took the count to around 321, so the register added only a handful of firms in the following fortnight — a very different rate from early July, when batches of 37 and 14 were being added at a time.

Why does the flattening curve matter?

Because the standard reassurance for firms outside the register was that national regulators still had backlogs to clear. If the count is now moving in single digits rather than tens, that argument is expiring. A register that has stopped filling quickly is close to the steady-state population of MiCA-authorised firms, which makes absence from it a statement about your firm rather than about a queue.

What can someone see about my firm on the register?

More than most firms assume. The public data covers the legal entity and its home country, the competent authority that authorised it, the authorisation date, LEI and company registration numbers, the official website or domain and, critically, which of the MiCA service types the firm is actually authorised to provide. The register shows your scope as well as your status.

Is the ESMA register the only place to check?

ESMA's register is the authoritative source. What changed in August 2026 is accessibility: independent tools now mirror and index it into a searchable interface — the MiCA CASP Tracker launched on 5 August 2026 and syncs from the official ESMA register, letting anyone filter by country, regulator, company name, authorisation date and service type. For anything that matters commercially or legally, verify against ESMA itself and treat third-party trackers as a fast index rather than the record.

What happens if a firm claims a licence it does not hold?

It is now trivially falsifiable, and by anyone — a counterparty, an acquiring bank, a journalist or a competitor. The higher-risk version is subtler: firms that hold a genuine authorisation but describe a broader scope than they were granted, or imply the authorisation covers a group entity that it does not. Both are visible against the register in seconds, and neither reads well in a supervisory conversation.

We missed the transition deadline. Does the register help or hurt?

Neither; it makes the position explicit. The transitional regime closed on 1 July 2026 and unauthorised providers were instructed to stop taking on new EU clients. The routes forward are unchanged: obtain a CASP authorisation if EU clients are core to the business, or restructure to serve non-EU markets from a properly run offshore VASP. What the register removes is the ability to remain ambiguous about which of those you are doing.

Sources

Christina S.
Crypto Licensing at Vantegris

Christina S. is part of the Vantegris team, which prepares and files licence applications across 40+ jurisdictions. This article was reviewed by Vladyslav S. (Compliance & Legal).

Related service Crypto CASP licensing →

This article is for general informational purposes only and is not legal, tax or financial advice. Consult a qualified professional before acting.

Share
TG share on Telegram X In share on LinkedIn WA share on WhatsApp Reddit Mail share by email
Talk to a specialist.

We'll map the fastest route to a licensed, banked, live operation.

Book a free consultation →

Stay ahead of the rules.

Licence fees, rules and deadlines change through the year. Subscribe and we'll email you Vantegris licensing updates.

We use your email to send these updates and note where you signed up. Unsubscribe any time from any email. Privacy policy.

Licence, done right.

300+ operators licensed across 40+ jurisdictions. Book a free consultation.

Book a free consultation