The marketing-relevant subset of MiCA plus the ESMA Guidelines, written for marketers. In force since 30 December 2024 for stablecoins; 30 June 2024 for utility tokens and CASP services.
The marketing rules cluster in Titles II–IV, refined by ESMA’s 2024–2025 guidelines on influencer and KOL marketing.
One sourced, filterable view of which exchanges are authorised, restricted, or withdrawn — register-verified facts only.
ESMA’s register of non-compliant crypto-asset service providers — 164 entries as of 16 July 2026 — and what a listing does and does not mean.
On the public record, yes — via Coinbase Luxembourg S.A., MiCA-authorised by the CSSF (June 2025), passportable EU-wide.
Not as a MiCA-regulated service — Binance withdrew its Greek application on 24 June 2026 and told EU users services would stop from 1 July 2026, with withdrawals staying open.
KuCoin EU Exchange GmbH is register-authorised (Austria’s FMA, 27 November 2025) — yet the FMA published on 18 May 2026 that “the commencement of business operations still remains inadmissible”.
On the public record, yes — via its EU entity, MiCA-authorised by the Central Bank of Ireland (June 2025) and on the ESMA register.
On the public record, yes — authorised by Germany’s BaFin (announced 27 January 2025) and on the ESMA register.
On the public record, yes — via OKX Europe Limited, authorised by Malta’s MFSA (27 January 2025).
On the public record, yes — via Foris DAX MT Limited, authorised by Malta’s MFSA (27 January 2025).
On the public record, yes — licensed by the Netherlands’ AFM (announced 27 June 2025), covering the EU plus Norway, Iceland and Liechtenstein.
On the public record, yes — eToro (Europe) Ltd holds a MiCA permit from Cyprus’ CySEC (announced 19 February 2025).
The entity-level lookup: Cyprus Company No. HE 200585, CySEC licence 109/10, and how it maps to the MiCA permit.
On the public record, yes — Bitstamp Europe S.A., approved by Luxembourg’s CSSF (announced 16 May 2025), with EEA passporting.
Named among 37 CASPs added in ESMA’s first post-transition register update (15 July 2026, 280 authorised in total), via a Luxembourg subsidiary (CSSF).
A dated, sourced list of firms suspended, withdrawn, or restricted around MiCA — Binance, Gemini, KuCoin and others.
Grandfathering is closed, unlicensed service breaches EU law, and the penalty ceiling reaches €5M or 3% of annual turnover.
The transitional period ends 1 July 2026, no extensions — what changes on the day and the marketing exposure of an unauthorised CASP.
Enforcement is national and varies hard by member state — from orderly wind-down expectations to blacklisting and criminal exposure.
Licence, cease, orderly wind-down, transfer clients, or merge — and why reverse solicitation will not save a platform still advertising into the EU.
Only ~17–20% (~210–244 of 1,200+) are fully authorised; ESMA expects the rest to have wound down. Penalties run €5M/3% to €15M/12.5%.
Unauthorised CASPs must wind down EU activity in an orderly way — no intermediate status after 1 July; ~280 CASPs authorised as of 9 July.
Two routes after 1 July 2026: get authorised as a CASP, or genuinely stop marketing into the EEA.
The narrow “own exclusive initiative” exemption — and ESMA’s 17 April 2026 statement that it cannot be relied on systematically.
Only authorised e-money tokens may be offered to EU users — USDC and EURC comply; USDT is excluded.
Not a MiCA-authorised e-money token, so licensed venues withdrew it from trading — but ESMA guidance lets custody and transfer continue.
The jurisdiction map: where your passport reaches, and how to geo-block or withdraw from a market without a new finding.
“Clear, fair, and not misleading.” Most enforcement actions in 2025–2026 trace back to here.
A hero promise needs a paired, visually-balanced risk warning. Footer disclosures don’t satisfy it.
Every marketing claim must be consistent with the published whitepaper — the number-one audit finding.
Paid endorsements are marketing communications — disclosed and substantiated. The 2026 enforcement vector that caught HTX.
Paste any crypto marketing copy or URL. Verdict against MiCA in seconds.
Run your MiCA / FCA / GDPR marketing against the full rule packs yourself. €49 single · €199 for all nine packs.
A signed audit across MiCA, FCA, and GDPR. Five business days.
The line item that fails first is marketing. Pre-enforcement essay from 1 May 2026.
The eight-question pre-flight check before any banner ships into MiCA jurisdictions.
Paste a URL or your copy — the full verdict lands in seconds. Free, no signup.