NorthPoint Regulatory Wire

Volume 1, Issue 1 — Week of 4 May 2026 (W18)

Curated regulatory intelligence for crypto marketing functions. Authored and signed by Jukka Blomberg. Distributed every Monday at 12:00 EET to AI Crypto CMO subscribers.

At a glance

🇪🇺 European Union — Markets in Crypto-Assets (MiCA)

MiCA transitional period ends 1 July 2026 — under eight weeks away

ESMA issued a statement on 17 April 2026 clarifying its expectations ahead of the end of the MiCA transitional periods. The substance is unambiguous: any entity providing crypto-asset services to EU clients without a MiCA licence after 1 July 2026 will be in breach of EU law and must cease offering such services. National regulators are expected to act on this swiftly. Penalties for non-compliance include fines of up to €5 million or 5% of annual turnover, cease-and-desist orders, executive sanctions, and bans on EU operations.

ESMA also clarified that authorized CASPs are expected to actively manage the migration of existing clients ahead of the deadline. In practice, this means the next eight weeks are a high-stakes communications window for licensed operators: every email to migrate users, every onboarding flow, every retention banner is now MiCA marketing copy under the eyes of national regulators who are watching the wind-down.

What this means for marketing: Two distinct buckets of work depending on where you sit. Licensed CASPs need to get their migration communications through MiCA Article 88 review before sending — particularly any language framing the migration as protective of user assets, since that framing is functionally a marketing claim. Unlicensed operators with EU users have eight weeks to either (a) stop accepting EU clients and run a clean wind-down with proper user notice, or (b) finalise a licence application. Either way, the public-facing copy on the homepage either changes or risks being part of the regulatory case.

What to ship around: Don’t launch new EU-facing campaigns between now and 1 July 2026 unless they are fully MiCA-cleared and the entity is authorised. The downside is asymmetric — a campaign caught flat-footed during the cliff is the kind of regulator letter that gets filed publicly in autumn 2026.

Sources: ESMA — MiCA hub · Regulation Tomorrow — ESMA statement on end of transitional periods · Digital Watch — ESMA confirms end of MiCA transition

🇬🇧 United Kingdom — FCA financial promotions regime

HTX High Court proceedings progress; precedent for cross-platform crypto marketing exposure

The FCA’s first enforcement action under the crypto financial promotions regime — against HTX (Huobi Global) — continues to develop. The action was announced publicly in February 2026 and is significant for two reasons. First, it involved the High Court route, not just regulatory sanction — that opens the path to injunctions, compensation orders, and (in serious cases) criminal sanctions. Second, the conduct cited was specifically the publication of promotions across TikTok, X, Facebook, Instagram, and YouTube — the regulator made no distinction between platforms, treating all five as the same surface for compliance purposes.

The FCA also requested app store removals and UK blocking of the relevant social media accounts, adding HTX to the Warning List. This is the first time the regulator has used a coordinated platform-takedown approach in a crypto matter, and it sets a meaningful operational precedent.

What this means for marketing: Three operational implications. First, any crypto marketing reaching UK consumers from any platform — regardless of where the entity is based — is now within scope. The HTX action targeted a Panama-based entity and that distinction did not protect them. Second, the multi-platform coordination is the new normal: the FCA expects compliance across TikTok, X, Facebook, Instagram, YouTube, and (presumably) any successor platform. Third, social-media accounts now carry account-level enforcement risk in addition to content-level risk.

In a separate development, the FCA carried out a coordinated crackdown on eight illegal peer-to-peer crypto trading hubs in London on 22 April 2026, in joint operation with HMRC and the South West Regional Organised Crime Unit. Different regulatory route (operational, not promotional) — but signals the FCA’s willingness to coordinate enforcement across agencies, which historically has been a precursor to broader sweeps.

What to ship around: If you’re not authorised to communicate financial promotions in the UK, do not market into the UK. This sounds basic; the HTX precedent shows it’s still the most common failure mode. If you are authorised, run all UK-facing campaigns through a UK-specific layer of review — the FCA’s standards diverge from MiCA’s in ways that catch teams who try to use a single piece of EU-MiCA-compliant copy across both jurisdictions.

Sources: FCA — common issues with crypto marketing · Lewis Silkin — FCA takes action against HTX · Freeths — Crypto promotions under fire · Coindesk — UK FCA P2P crackdown

🇺🇸 United States — SEC & CFTC

Marketing language is now the load-bearing factor in securities classification

The March 2026 joint SEC-CFTC interpretation continues to produce ripple effects. The substance worth knowing as a marketing operator: the interpretation classifies crypto assets into five categories — digital commodities, digital collectibles, digital tools, stablecoins, and digital securities — and the analysis of which category a token falls into is “transaction-focused”, with marketing, commitments, and ongoing managerial efforts central to determining whether an arrangement constitutes an investment contract under Howey.

In other words: the same token, marketed differently, can fall into different categories. The marketing copy is no longer downstream of the legal classification — it is constitutive of it. A token marketed with explicit representations of “essential managerial efforts that drive expected profits” creates an investment contract; the same token marketed without those representations may not. This is the most consequential change to US-facing crypto marketing copy in the past five years.

The SEC also continues to wind down legacy enforcement actions from the Biden era — the enforcement results for fiscal year 2025 confirm a meaningful drop in cases brought under the old “regulation by enforcement” approach. The shift from enforcement to guidance is real, but does not reduce the load-bearing role of marketing language. If anything, the guidance approach makes marketing review more important: the rules are now articulated, so the failure to comply with them is a failure of process, not a defensible interpretation gap.

What this means for marketing: US-facing teams need to revisit every token product page and audit for “essential managerial efforts” language. Phrases like “our team continues to develop the protocol”, “ongoing development driven by [team]”, “future enhancements led by [foundation]” are now first-order risk factors, even if you’ve used them for years. The shift is from what does the token do to what does the marketing say the team does for the token.

What to ship around: Don’t ship a US-facing token launch landing page in May 2026 without a Howey-language audit. The interpretation is recent enough that most existing copy was written under different assumptions. The risk window is now.

Sources: A&O Shearman — SEC unveils landmark interpretive guidance · Ballard Spahr — SEC/CFTC clarify when digital assets are securities · SEC — Enforcement results for FY 2025 · Cleary Gottlieb — 2026 Digital Assets Regulatory Update

🇸🇬 Singapore — MAS

Public-channel advertising ban remains the world’s strictest

Worth a periodic reminder for any team with Singapore-resident users: MAS continues to prohibit Digital Payment Token service providers from advertising in public spaces, mass media, or via social media influencers. Marketing is restricted to the firm’s own websites, apps, and official social media accounts. No banners on public transport. No newspaper or magazine spreads. No KOL-led campaigns that touch Singapore users. No third-party affiliate websites carrying DPT promotional content.

The June 2025 deadline closed the licensing exemption window — no entity providing DPT services from Singapore is exempt from full licensing requirements. This is increasingly relevant in 2026 as enforcement attention turns from “are you licensed” to “what are you publishing”. A Singapore team has more enforcement risk on its UK campaigns (where the FCA is active) than on its Singapore campaigns (where MAS marketing rules are simply binary), but the MAS rules remain the prototype illustration of how strict crypto marketing regimes can become.

What this means for marketing: If your audience-targeting rules don’t already exclude Singapore from KOL/influencer campaigns, fix that this week. The rule is binary; the enforcement is binary; getting it wrong is operationally simple to get wrong and operationally simple to avoid.

What to ship around: Don’t sponsor an event in Singapore that touches DPT services, even peripherally. Don’t run paid ads with Singapore in the geo-target. Don’t use a Singapore-resident influencer for any DPT-related campaign. The rule is dumber than you think it is, which means it’s harder to game than you think it is.

Sources: Sumsub — Singapore crypto regulations · WCR Legal — MAS framework explained · Global Legal Insights — Singapore

🇦🇪 UAE — VARA

19 firms fined; marketing violations now standalone enforcement triggers

VARA announced penalties against 19 entities in early 2026 for breaches of its regulatory framework. Penalties ranged from AED 100,000 to AED 600,000. What makes this particularly relevant for marketing functions: the violations included unlicensed virtual asset activity and marketing regulation violations as a separate category. Previously, VARA’s enforcement focused on operational activity. The 2026 actions confirm that marketing alone can trigger penalties if conducted without prior approval — even where no underlying operational issue exists.

VARA’s marketing rules also remain the most prescriptive in the world for specific banned phrases. Specifically prohibited terms include “risk-free profits”, “guaranteed returns”, and any messaging that suggests certain performance claims. Required elements include a prominent disclaimer that virtual assets may lose their value in full or in part and are subject to extreme volatility, plus a prohibition on sending any virtual asset to a wallet without prior consent or clear expression of interest.

In a separate development, VARA’s March 2026 framework for crypto derivatives and margin trading introduces sweeping new rules on derivatives marketing specifically. Any platform offering virtual-asset derivatives to UAE-resident users is now within scope.

What this means for marketing: If you market into the UAE, run every campaign through a VARA-aware review. The banned-phrase list is short, specific, and easy to grep — there is no good reason to ship a UAE-facing campaign with “guaranteed”, “risk-free”, or “passive income” in the copy in 2026. The pre-approval requirement is a separate process question and, depending on your VARA registration status, may require formal approval before campaigns ship.

What to ship around: Don’t run UAE-facing influencer campaigns without confirming pre-approval pathway. Don’t use the same campaign creative across UAE and other markets without a UAE-specific pass. The VARA banned-phrase list is the most-violated rule in the world for crypto marketers because the same words are normalised in other jurisdictions.

Sources: Linklaters — VARA crypto marketing regulations · Neoslegal — VARA fines 19 crypto firms · Crypto Times — VARA derivatives & margin rules

Jukka’s read

Signed read for AI Crypto CMO subscribers.

The dominant theme this week is convergence: regulators in five jurisdictions independently arrived at the same operational conclusion, which is that crypto marketing copy is the load-bearing surface for compliance enforcement, not just an output of the underlying compliance work. The MiCA cliff in eight weeks, the HTX cross-platform precedent in the UK, the SEC’s reframing of marketing as constitutive of securities classification, MAS’s ongoing prototype-strict regime, and VARA’s expanding enforcement against marketing violations alone — these are not five disconnected stories. They are the same story told in five regulatory languages.

If I had a single piece of advice for any crypto marketing function operating across these jurisdictions in May 2026, it would be this: stop treating compliance review as a downstream filter on already-shipped marketing. The shift the regulators are making is to treat marketing as a primary data point — what your homepage says the token does is now what the regulator thinks the token does. The implication for the marketing function is that pre-flight review, multi-jurisdiction read, and audit-trail discipline are not nice-to-haves. They’re the work.

Eight weeks until the MiCA cliff is the action window for licensed and unlicensed operators alike. Use it.

— Jukka Blomberg, NorthPoint

This wire is heuristic regulatory intelligence, not legal advice. For binding regulatory guidance, retain qualified counsel. NorthPoint provides marketing-side compliance and judgment via the AI Crypto CMO subscription. Subscribers receive this wire every Monday at 12:00 EET, plus the full audit perimeter (MiCA, GDPR, cross-jurisdiction reviews) and 24/7 emergency comms hotline.

Questions or corrections: jukka@northpoint.fi.

Sources

MiCA / EU

• ESMA — MiCA activities hub
• Regulation Tomorrow — ESMA statement on end of transitional periods
• Digital Watch — ESMA confirms end of MiCA transition period 2026
• Bitget News — MiCA Transitional Period for Crypto Market Regulation Ends

FCA / UK

• FCA — Common issues with crypto marketing
• FCA — CP25/41: Cryptoassets admissions, disclosures and market abuse regime
• Lewis Silkin — FCA takes action against HTX
• Freeths — Crypto promotions under fire: FCA takes High Court action against HTX
• Coindesk — UK FCA carries out coordinated crackdown on illegal P2P crypto trading
• Latham & Watkins — UK Cryptoasset Regulatory Tracker

SEC & CFTC / US

• A&O Shearman — SEC unveils landmark interpretive guidance
• Ballard Spahr — SEC and CFTC clarify when digital assets are securities
• Cleary Gottlieb — 2026 Digital Assets Regulatory Update
• SEC — Enforcement Results for Fiscal Year 2025
• Latham & Watkins — US Crypto Policy Tracker

MAS / Singapore

• Sumsub — Singapore crypto regulations 2025
• WCR Legal — Singapore crypto regulation 2026: MAS framework explained
• Global Legal Insights — Blockchain & cryptocurrency laws 2026: Singapore

VARA / UAE

• Linklaters — Dubai’s VARA issues new crypto marketing regulations
• Neoslegal — VARA fines 19 crypto firms in Dubai
• Crypto Times — Dubai’s VARA introduces sweeping rules on crypto derivatives & margin
• VARA — official site