On 1 July 2026 the MiCA transitional period ends in all 27 member states at once. The legal change fits in one sentence. What that sentence does to your marketing function is six separate things, and most teams have audited none of them. Twenty-one days out, here is the list.
The one-sentence version of the legal change: from 1 July, providing crypto-asset services to EU clients without a MiCA authorisation is a breach of EU law, uniformly, with no national run-offs and no grandfathering left. The countries that offered longer transitional windows no longer do. ESMA said so in plain terms in April, and told consumers to check the Interim MiCA Register before moving funds anywhere.
Legal teams have read that sentence as a licensing question. It is one. But the sentence lands on the marketing function six different ways, and each of the six is a separate piece of work with a separate failure mode. If you run marketing at a CASP — authorised, pending, or neither — this is what is actually different about your job on that morning.
Through 30 June, an asset published under the old national regime sits in a grey zone the transitional period was built to tolerate. On 1 July the grey zone closes. The campaign that shipped in November, the evergreen blog post from 2024, the affiliate creative still rotating in three networks, the help-centre page nobody owns — each of these is, from that morning, either a compliant MiCA marketing communication or a documented breach with a publication date. Nothing about the asset changed. Its legal status did. The firms that ran the sixty-day inventory know what is live. The firms that did not will find out from a regulator's screenshot.
ESMA has pointed consumers at the register. That means every promise in your copy — "regulated," "licensed," "EU-compliant," "trusted by" — now sits next to a public database the reader can open in a second tab. A claim that does not match the register entry is no longer a nuance for lawyers; it is a complaint a consumer can file with the evidence already attached. The marketing implication is precise: audit every instance of regulatory language across every surface, and make each one match the register exactly — entity name, home state, service categories. "We are regulated" is not a brand line anymore. It is a checkable assertion with a wrong answer.
From 1 July, the influencer posting about your product is not a third party with an opinion. Their content is a marketing communication of the firm, and the firm carries the liability for what it says and what it fails to disclose. The KOL contract signed last autumn almost certainly obliges volume, not MiCA-aware risk disclosure. If the re-papering did not happen in May, the practical options in the remaining three weeks are narrow: pause the programme, or run it with a kill-switch and a one-page disclosure brief that every active creator has confirmed in writing. A paused KOL programme costs you reach. An unpapered one costs you the enforcement precedent with your name on it.
Member-state arbitrage is gone. Where you can market is now defined by your authorisation and its passporting notifications — not by where your ads happen to serve. The geo-targeting configuration in your ad accounts, set two growth cycles ago by someone who has since left, is now a regulatory control. So is the language list on your site. Reverse solicitation will not save a firm whose paid media is demonstrably reaching EU consumers; a served impression is not an unsolicited approach. The work is unglamorous: pull the actual delivery reports per country, compare against the passporting list, and close the gaps before someone else maps them for you.
For the firm that did not get the licence and will not have it by July, the instinct is to keep the brand warm while legal finds a path. That instinct is now dangerous. Marketing crypto-asset services to EU clients without authorisation is solicitation of a service you may not provide. The ads come down. The funnels close. The only compliant communication left is offboarding: telling clients clearly what happens to their assets, where they migrate, and by when. That is a real marketing task — the last one — and doing it well is what preserves the brand for a re-entry under a licensed entity later. Doing it badly, or not at all, is what regulators have said they will be watching for first.
Google, Meta, TikTok and X each run their own crypto-advertiser certification, and each ties EU eligibility to authorisation status. Their compliance teams read the same ESMA statements yours does, and their enforcement is faster: not a letter, but a paused account. Expect re-verification requests around the deadline, and expect them at the worst moment. The firm whose certification documents, register entry, and ad-account legal entity all match will keep serving. The firm whose EU ads run from a non-EU sister entity with identical branding — the exact intragroup structure ESMA flagged for scrutiny — should assume both the platform and the supervisor will ask the same question in July.
On 1 July there are only two kinds of marketing teams: the ones executing a runbook, and the ones improvising one.
The authorised firm's marketing team, if the work was done, spends the morning on confirmation: inventory frozen and matched to the register, disclosures live in every journey, KOLs papered or paused, geo-map reconciled, platform certifications current, and an incident runbook on the shelf for the first consumer report from Lithuania. The unauthorised firm's marketing team spends the morning shipping offboarding comms it should have drafted in May. Both mornings are marketing operations. Neither is a legal favour.
If some of the six are not done, three weeks is enough for triage, not for elegance. Freeze the asset inventory this week and stop publishing anything that has not passed the MiCA-comms check. Match every regulatory claim to the register. Get written disclosure confirmations from every active KOL or pause them. Reconcile ad delivery against the passporting map. Draft the July incident runbook — ten incidents, who answers, in what order. None of this requires a committee. All of it requires an owner with the reps to run a gate-stack under deadline. That seat is the one most firms still have not filled, and the deadline no longer moves.
— Jukka Blomberg, Helsinki, 10 June 2026
The six work-streams of the pre-deadline programme, written at the sixty-day mark. The essay this one is the deadline-week sequel to.
A fixed-scope audit of your live marketing surface against the MiCA-comms rules. The fastest version of the triage described above.
The seat that owns the runbook on 1 July. Exchange-grade CMO inside your org for the next 90–180 days. From €15,000/mo.