How to Check if a Crypto Exchange Is MiCA Licensed (ESMA Register Guide 2026)

Since 1 July 2026, a crypto exchange serving customers in the EU needs a MiCA licence, and "we have applied" is no longer enough. The good news: you can check if a crypto exchange is MiCA licensed yourself, for free. This guide shows how to use ESMA's interim MiCA register, double-check with your national regulator such as BaFin, read the key fields and spot red flags. If you want the background on what MiCA is, start with our plain-language MiCA explainer. This post is the practical part.

Why it matters after 1 July 2026

MiCA's rules for crypto-asset service providers (CASPs) have applied since 30 December 2024, but firms already operating under national law got a transitional period. Each country chose its own length. ESMA's list of grandfathering periods shows, for example, 6 months for the Netherlands, Poland and Finland, 12 months for Germany, Ireland and Austria, and 18 months for France, Italy and Spain. BaFin confirms that Germany shortened its period to 31 December 2025.

The last periods ended on 1 July 2026. In its April 2026 statement, ESMA said that any entity providing crypto-asset services to EU clients without a MiCA licence after that date is in breach of EU law. Its June 2026 statement adds that clients of unauthorised providers do not benefit from MiCA safeguards, including protections for client assets.

How to check if a crypto exchange is MiCA licensed: step by step

1. Find the legal entity in your contract

Do not search for the brand only. Open the exchange's terms of service or the imprint and note the exact company name, for example "Payward Europe Solutions Limited" rather than just "Kraken". ESMA warns that MiCA protections apply only to the specific authorised EU legal entity, not to other companies in the same group and not to non-EU entities.

2. Download the CASP file from ESMA

Go to ESMA's MiCA page and scroll to "Interim MiCA Register". It is a set of five CSV files you open in Excel, LibreOffice or Google Sheets; you want "Crypto-asset service providers". ESMA republishes the files weekly, so a very recent decision may appear in a national register first. When we checked, the page showed "Last update: 22 October 2026".

3. Search the file and read the key fields

Use Ctrl+F for the legal name; one brand can have several entries. Check these fields:

  • Competent Authority and Home Member State: who licensed the firm and where.
  • Name of the CASP and LEI: must match the company in your contract.
  • Website of the CASP: must match the site or app you actually use.
  • List of crypto-asset services: for example custody, exchange of crypto for funds, or transfer services.
  • Member States where the CASP intends to provide services: your country should be listed.
  • Date of the authorisation and Date of the withdrawal: a withdrawal date means the licence has ended.

4. Check the services and passporting

A licence covers specific services, not everything a brand offers. Under Article 65 of MiCA, an authorised provider that wants to serve other EU countries must notify its home regulator, listing the countries and services. It may start there at the latest 15 calendar days after notifying. So an exchange licensed in Ireland or Malta can serve you in Germany, but only if your country and service appear in its entry.

5. Cross-check with your national regulator

In Germany, open the BaFin database of companies and choose the category "crypto-asset service provider". BaFin publishes the authorisations it grants there and in ESMA's register; firms licensed elsewhere in the EU are easier to find in the ESMA file. In other countries, use your own regulator, such as the AMF in France or the AFM in the Netherlands.

6. Check the non-compliant entities list

ESMA's fifth file, "Non-compliant entities", lists firms that national authorities have flagged for offering crypto services without the required licence, often linking to a public warning. If your provider appears there, stop depositing.

What about the white papers file?

The "White papers for crypto-assets other than ART and EMT" file lists white papers that were notified for tokens. ESMA states clearly that these white papers have not been reviewed or approved by any competent authority, and the issuer or offeror is solely responsible for their content. A listing is not a quality stamp. Stablecoin issuers have separate EMT and ART files.

Examples: well-known exchanges in ESMA's CASP file

We checked the ESMA CASP file dated 22 October 2026. Entries change, so check them yourself.

BrandLegal entity in the registerAuthorising regulatorHome state
KrakenPayward Europe Solutions LimitedCentral Bank of IrelandIE
OKXOKX Europe LimitedMalta Financial Services AuthorityMT
CoinbaseCoinbase Luxembourg S.A.CSSFLU
BitpandaBitpanda GmbHAustrian Financial Market Authority (FMA)AT
DeblockDEBLOCK SASAutorité des Marchés Financiers (AMF)FR

Notice two things. Some brands have more than one entity: Kraken also has "Payward Global Solutions Limited" listed for operating a trading platform in only two countries. And the services differ: Deblock's entry lists exchange and order execution services, while Kraken's and OKX's entries also include custody and transfer services.

Red flags when you check an exchange

  • The company in your contract is outside the EU, or does not match any register entry.
  • The exchange says it is "licence pending" or still "in the transitional period". That status ended on 1 July 2026 at the latest.
  • The website or app domain differs from the one in the register. Clone sites copy real brand names.
  • Your country, or the service you use, is missing from the entry.
  • The entry shows a withdrawal date, or the firm appears on the non-compliant list.
  • Someone contacted you first and pushes you to deposit quickly. Our guide to spotting crypto investment scams covers these tactics.

What to do if your exchange is not licensed

ESMA's advice is to act promptly: transfer your crypto-assets to an authorised provider or to a self-hosted wallet, or consider closing your positions. When you pick a new platform, our practical guide to Bitcoin exchanges for beginners explains what else to compare beyond the licence.

FAQ

Does a MiCA licence mean my crypto is guaranteed?
No. A licence means the firm is authorised and supervised for the listed services. It does not protect you from price falls, and crypto is not covered by bank deposit insurance.

My bank offers crypto. Does it need a separate CASP licence?
Not necessarily. Certain regulated firms, such as banks, can offer crypto services after notifying their regulator under Article 60 of MiCA. Many appear in the same ESMA file with the legal basis "Article 60".

Is there an official search website instead of CSV files?
ESMA had planned to integrate the register into its IT systems by mid-2026, but at the time of writing it still publishes the CSV files.

Useful sign-ups: Kraken, OKX, Deblock. All three appeared in ESMA's CASP file dated 22 October 2026; check the current entry yourself before signing up. (Affiliate links: Advice Me may earn a commission. Not a recommendation, check the risks and availability in your country first.)

Important disclaimer

This article is general information, not financial, legal or tax advice. Crypto assets are volatile and you can lose money. Register entries, licences and national rules change, so always check the latest ESMA register and your national regulator before you deposit money or crypto.

Bottom line

To check if a crypto exchange is MiCA licensed, find the legal entity in your contract, look it up in ESMA's CASP file, confirm the website, services and your country, and cross-check with your national regulator. Also scan the non-compliant entities list. If the firm is not there, move your assets to an authorised provider or your own wallet.

Sources

Advice Me publishes general information only. We are not financial advisers. Always do your own research and check the latest rules in your country before buying, selling or storing crypto.

Comments

Post a Comment