MiCA Purge May Saddle Surviving Crypto Firms with Higher-Risk Clients

Only 281 of 1,343 crypto service providers that TRM identified as operating across the European Economic Area had secured authorization under the Markets in Crypto-Assets Regulation, or MiCA, when its transitional period ended on 1 Jul. The remaining 1,062 must leave the market, restructure or move customers to an authorized provider.

The new regime replaces the previous patchwork of national registrations with a single standard. Before MiCA, requirements varied widely between member states, allowing firms to operate under very different levels of regulatory scrutiny.

Higher risk concentrates outside

The gap is not just numerical. Among firms that TRM was able to risk-rate, 12% of unauthorized providers were classified high or severe risk, compared with 2% of authorized firms. Every severe rating in the sample belonged to a company that failed to secure MiCA approval.

Most firms leaving the regime showed little direct exposure to illicit activity, with half of the companies recording no measurable exposure at all. But a smaller group of unauthorized firms routed between 1% and 12% of their volume directly to illicit addresses, while no authorized firm exceeded 1%. Unauthorized firms also sent $5bn directly to sanctioned counterparties, compared with $1.7bn from authorized firms.

The regulation has pushed some prominent companies and products out of regulated EU markets. Exchange operator Binance was forced to stop serving EU customers after failing to secure authorization before the 1 Jul deadline. Stablecoin issuers have also been hit, with exchanges across the region removing or restricting tokens including Tether's USDT, DAI, PayPal's PYUSD, Ripple's RLUSD, First Digital's FDUSD and Paxos' USDP.

That concentration creates a practical problem for firms taking on departing customers. If large numbers of clients move to authorized providers at once, those firms may inherit higher-risk customers and transaction flows, increasing the burden on due diligence and transaction monitoring. Europe's Anti-Money Laundering Authority has warned that such transfers could materially change a provider's risk profile and make supervision more difficult.

Licensing power narrows

Authorizations have also clustered among a relatively small number of regulators. Germany approved 55 firms, while France and the Netherlands authorized 29 each. Lithuania approved only eight despite having one of Europe's largest pre-MiCA registers, while Poland issued none.

Passporting means an authorization granted in one member state can support services across the bloc. That gives national supervisors influence well beyond their domestic markets and places greater importance on consistent enforcement.

MiCA has therefore done more than reduce the number of crypto firms operating in Europe. It has shifted customers, risk and supervisory responsibility into a much smaller authorized market, making the quality of ongoing oversight as important as the license count itself.