MiCA

The law is Regulation (EU) 2023/1114, and its rules for crypto-asset service providers have applied since December 30, 2024. One authorization passports across all 27 European Union member states. For a buyer, MiCA decides which platforms may legally hold your euros, what they owe you if they lose your coins, and which familiar names quietly stopped serving Europe.

How it works

MiCA is two regulations bound into one: rules for people who issue crypto-assets, and rules for firms that provide services in them. Bitcoin only meets the second half.

The issuance titles cover an offeror who brings a crypto-asset to the public. That offeror must publish a white paper with prescribed disclosures and notify a national regulator before selling anything. Bitcoin has no offeror, no issuer and no promoter to hold to a disclosure standard, and the European Commission confirmed through ESMA's published question and answer 2552 that no white paper is required for a crypto-asset with no identifiable issuer, not from a platform operator and not from anyone else. The stablecoin chapters, covering asset-referenced tokens and e-money tokens, have applied since June 30, 2024 and do not reach bitcoin at all.

The services title is the half that reaches you. It creates the crypto-asset service provider, shortened to CASP, and lists ten activities that need authorization: custody and administration, operating a trading platform, exchanging crypto-assets for money, exchanging them for other crypto-assets, executing orders, placing them, receiving and transmitting orders, advice, portfolio management, and making transfers for clients. Authorization requires a registered office and real management inside a member state, initial capital of 50,000 to 150,000 euros depending on which of those services the firm offers, client assets kept separate from the firm's own money, a published complaints procedure, and a disclosure of the environmental footprint of the consensus mechanism behind each listed asset. ESMA keeps the resulting register, so the license is a fact you can look up rather than a claim on a marketing page.

Firms already trading legally under a national regime before December 30, 2024 got a transitional window, and member states picked different lengths for it. Finland, Hungary, Latvia, the Netherlands, Poland and Slovenia allowed six months, closing June 30, 2025. Sweden allowed nine. Austria, Germany, Ireland, Lithuania and Slovakia allowed twelve, closing December 30, 2025. Every remaining window shut on July 1, 2026, which is why one platform could be lawful in Dublin and unlawful in Amsterdam in the same month.

Why this matters when you buy bitcoin

MiCA quietly reorganized the list of places a European can actually buy, and the reshuffle is visible in the records on this site.

Of the 24 exchanges reviewed here, the two with the strongest European standing both earned it under this regime. Bitpanda holds three MiCAR licenses, the first granted by Germany's BaFin in January 2025, which made it the first major platform authorized under the new rules, with further licenses from Austria's FMA and in Malta. Relai, the Swiss bitcoin-only app that sends purchases straight to a wallet you control, received its crypto-asset service provider authorization from France's Autorite des Marches Financiers in October 2025 and passports it across the bloc.

Absence of a license has become information too. Changelly, the instant-swap aggregator, has announced no authorization and was added to the UK Financial Conduct Authority warning list in July 2024, which leaves its European standing unclear now that the transitional period is over. That is the practical value of the regime for a buyer: an entity with an address, a supervisor, minimum capital and a public register entry, in place of a website.

Geography matters as well. This single rulebook covers 27 of the 231 countries in our guides, which is why the advice on the German, French and Irish pages converges and why the Swiss and British pages do not follow it. Switzerland supervises through FINMA under its own law, and the United Kingdom left the bloc before this regulation existed and is building a separate regime.

What the license is worth when an exchange fails

A MiCA authorization is not deposit insurance, and reading it as insurance is the most expensive mistake available here.

What it does give you is concrete. Client crypto-assets and client money must be held separately from the firm's own, so they are identifiable rather than pooled into the general estate. A custodian is liable to you for crypto-assets lost through an incident attributable to it, with that liability capped at the market value of what was lost. Firms owe a complaints procedure and a supervisor who can act. Against the Celsius and FTX pattern, where customers discovered in bankruptcy court that their balances were unsecured claims, those are real improvements.

What it does not give you is a government guarantee that you get your bitcoin back. There is no European equivalent of the 100,000 euro bank deposit guarantee for crypto-assets, and a licensed firm can still go under. The safest reading is that authorization improves the odds at the buying step, and self-custody remains the answer for anything you intend to hold.

MiCA vs the Travel Rule

MiCA and the Travel Rule landed on the same day and get treated as one thing. The Travel Rule for crypto lives in Regulation (EU) 2023/1113, the recast transfer of funds regulation, which also applied from December 30, 2024. It is an information law: it says what sender and beneficiary data must accompany a transfer, and what a provider has to do when the other side is a wallet nobody operates commercially. The licensing regulation is a permission law: it says who is allowed to run the business at all. A firm can hold a license and still breach the transfer rules, and both apply at once to every authorized platform.

MiCA vs Virtual Asset Service Provider status

A crypto-asset service provider is a European legal category; a virtual asset service provider is a global standard-setting label. The Financial Action Task Force invented the second in June 2019 as a template for countries to copy, and it carries no force by itself. Europe copied the anti-money-laundering parts into its own instruments and then went considerably further, adding capital, governance, custody and conduct duties that the task force never asked for. So every authorized European platform is also a virtual asset service provider in the global sense, but a firm registered as one in a jurisdiction outside the bloc has cleared a much lower bar and cannot serve European customers on that basis.