MiCA Transition Is Over: What Unlicensed Crypto Firms Do Now
The MiCA transitional period closed on 1 July 2026 with no extension. Legacy EU VASP registrations are dead — here are the two routes forward.
The grace period is over. On 1 July 2026, MiCA’s transitional window closed across the EEA, and the legacy national VASP registrations that thousands of crypto firms have leaned on for years stopped authorising anything. ESMA said in April there would be no extension, and there wasn’t. If you are still serving EU clients on an old registration, you are not “running out of runway” — you are past the deadline, and the question is no longer whether to act but how to unwind the exposure fast.
- The MiCA transition closed 1 July 2026 — no extension. Legacy EU VASP registrations no longer authorise EU-facing crypto services.
- Roughly 280 CASPs were authorised in early July against 3,000+ pre-MiCA VASPs, a conversion of roughly one in eleven, so most of the field is now unlicensed for the EU.
- Penalties reach €5m or 5% of turnover, plus cease-and-desist orders, bans and executive liability. ESMA wants unauthorised firms wound down in an orderly way.
- Two routes: get a CASP (Lithuania/Bulgaria) if EU clients are core, or pivot to an offshore VASP and geo-fence the EU. Serious operators do both.
What actually changed on 1 July
MiCA has applied to crypto-asset services since the end of 2024, but member states were allowed to let existing VASPs keep operating under national rules during a transitional window. That window is what closed. There is now one door into the EU market, a CASP authorisation, and it passports across all 27 member states by notification, so a single licence covers the bloc. Everything else is legacy.
The scale of the shake-out is the story. As of early July, only around 280 CASPs were authorised EU-wide, against the 3,000-plus VASPs that held national registrations before MiCA, a conversion rate of roughly one in eleven. The rest either exited EU-facing services or are still in the queue. The register has kept filling since — our read of who actually got authorised two weeks past the deadline shows the composition matters as much as the count. Even large names moved late or stepped back: Binance formally withdrew its MiCA application from Greece’s Hellenic Capital Market Commission on 24 June 2026, halting new EU sign-ups while it regrouped. When the biggest exchanges are recalibrating at the deadline, smaller unlicensed firms have no cover.
A pending CASP file does not let you serve EU clients — only an issued authorisation does. The transitional relief that used to bridge that gap is exactly what expired on 1 July. If you’re mid-application, the compliant posture is to pause EU onboarding until the licence issues.
The two routes forward
There are only two real answers, and which one fits depends on a single question that runs through our best crypto licences by market comparison: whose clients are you onboarding?
Route one — get a CASP, because EU clients are core. If Europe is your market, there is no shortcut around it. Two cost-efficient member states to file in are Lithuania, where a complete file commonly takes three to six months, and Bulgaria, with a flat 10% corporate tax and a Financial Supervision Commission that works to a 40-working-day statutory clock. The capital bands are the MiCA standard everywhere (€50,000, €125,000 or €150,000 by service class), so you compete on fees, tax and speed rather than capital. But be clear-eyed about the build: a local company, qualified management, an MLRO and a DORA ICT framework are all part of the file. Our Lithuania and Bulgaria guides set out what each regulator actually reads for.
Route two — pivot offshore and geo-fence the EU. If EU users are not essential, the cleaner move is to stop serving them and run your book from a real offshore VASP. Seychelles (under the VASP Act 2024) and St Vincent (under the Virtual Asset Business Act 2022, in force since 31 May 2025) both offer supervised licences or registrations that issue in a few months at a fraction of a CASP’s cost, although they explicitly do not passport into the EU. That’s the trade: cheaper and faster, non-EU only. See the Seychelles crypto licence guide for the tiers and substance. Plenty of operators run both routes (a CASP for Europe and an offshore base for everywhere else), which is often the structure for a global exchange.
Don’t improvise the wind-down
Whichever route you take, the transition out of unlicensed EU activity has to be orderly, which is ESMA’s own word. Serving EU clients while you “sort out” a licence is the exposure that draws fines, cease-and-desist orders and, increasingly, personal liability for executives. The disciplined sequence is to stop EU onboarding first, communicate with existing EU users, then file the CASP (or stand up the offshore base) in parallel, instead of keeping the tap running and hoping the paperwork lands before enforcement does.
It is worth seeing how unusual MiCA’s firmness is. The United States passed its own federal stablecoin statute a year before Europe’s window closed, and although that statute is signed into law, its implementing rules are still in draft, so there is nothing final an operator can build against. Europe set a hard date, while US operators are still waiting on the rules. That asymmetry is precisely why an EU-facing book cannot borrow the wait-and-see posture that currently suits Washington.
One more thing operators underestimate is banking. Crypto banking and fiat settlement are often harder to secure than the licence, and they get harder the moment your regulatory status is in doubt. Line up your EMI or crypto-friendly neobank and settlement rails as part of the licensing plan — never a mainstream consumer processor, and never an afterthought once the licence is in hand. For the full picture of how VASP, CASP and MiCA fit together after the deadline, read our VASP, CASP and MiCA explainer, and if you’re weighing where to file, our MiCA regulation explainer has the mechanics.
The deadline removed the option of deferring the decision. If you’re serving EU clients on a registration that no longer exists, book a free consultation and we’ll map the fastest lawful route back into compliance, with government and service costs shown separately.
Frequently asked questions
Did the MiCA transition period really end on 1 July 2026?
Yes. The transitional window for legacy national VASP registrations closed on 1 July 2026 across the EEA, and ESMA confirmed in April there would be no extension. After that date, providing crypto-asset services to EU clients without a MiCA CASP authorisation is a breach of EU law. ESMA has told unauthorised firms to wind down in an orderly way.
How many crypto firms actually got licensed?
Very few relative to the field. As of early July 2026, roughly 280 CASPs were authorised across the EU, against the 3,000-plus VASPs that held national registrations before MiCA, a conversion rate of roughly one in eleven. Most legacy registrants either exited EU-facing services or are still mid-application, which is why enforcement attention is now high.
What are the penalties for serving EU clients without a CASP licence?
They are serious. National authorities can impose fines of up to €5 million or 5% of annual turnover, issue cease-and-desist orders, ban EU operations and pursue individual executives. There is no further grace period, because the transitional relief was the grace period and it has expired.
I missed the deadline — can I still get a CASP licence?
Yes, but you cannot serve EU clients in the meantime. The practical move is to stop onboarding EU users now, file a CASP application in a fast member state (Lithuania or Bulgaria), and run non-EU markets under an offshore VASP while the EU file is in review. The exposure comes from continuing to serve EU clients unlicensed while you apply.
Is it faster to relocate offshore than to get a CASP?
For non-EU markets, yes — an offshore VASP in Seychelles or St Vincent issues in weeks to a few months and costs a fraction of a CASP build. But it does not let you serve EU clients. If EU users are core to your business, there is no offshore shortcut and you need a CASP. Many firms run both: a CASP for Europe, offshore for the rest of the world.
Sources
This article is for general informational purposes only and is not legal, tax or financial advice. Consult a qualified professional before acting.
We'll map the fastest route to a licensed, banked, live operation.
Book a free consultation →Recommended reading.
Stay ahead of the rules.
Licence fees, rules and deadlines change through the year. Subscribe and we'll email you Vantegris licensing updates.
Licence, done right.
300+ operators licensed across 40+ jurisdictions. Book a free consultation.
Book a free consultation