MiCA-Licensed Crypto Exchanges and Providers (EU Register)

Last updated: November 4, 2026. Data: ESMA interim MiCA register, version of October 30, 2026 (CASPS.csv). Updated every month. Information only, not investment advice.

Since July 1, 2026, a company needs a MiCA authorisation, or a notification under Article 60 if it is already a regulated bank or investment firm, to provide crypto services in the European Union. This page lists every provider in the official register, in full and without ranking, so you can check a platform before you open or keep an account. It contains no affiliate links and no paid placements: providers are grouped by home country and sorted by date.

The source is the interim MiCA register published by the European Securities and Markets Authority (ESMA), which compiles the decisions of national authorities such as the AMF (France), BaFin (Germany), the CSSF (Luxembourg), the Central Bank of Ireland and the MFSA (Malta). For background on the rulebook itself, see our stablecoin guide and our coverage of ESMA's deadline for non-MiCA stablecoins such as USDT.

What changed on July 1, 2026

MiCA's rules for service providers applied from December 30, 2024, but Article 143(3) let firms already operating under national law continue for up to 18 months, until July 1, 2026, or until their application was decided. Several countries chose shorter windows: ESMA's list of national periods shows 6 months for the Netherlands, Poland, Hungary, Latvia, Slovenia and Finland, 9 months for Sweden and 12 months for Germany, Ireland, Austria, Lithuania, Slovakia and Norway.

In a statement of April 17, 2026, ESMA said any unauthorised CASP "must have implemented its wind-down plan" by July 1, 2026, must warn clients beforehand and must help them move assets to an authorised provider or a self-hosted wallet. After that date, serving EU clients without authorisation is a breach of EU law. Non-EU firms may not solicit EU clients, except under the narrow reverse-solicitation exemption. France's AMF relayed the message on June 23, 2026, adding that unauthorised firms may only carry out operations "strictly necessary to settle their affairs".

ESMA also reminded investors that MiCA protections attach to the authorised EU legal entity only. A global brand can run several companies, and only the one named in the register is covered, so the entity on your contract matters more than the logo on the app.

How to check a provider yourself

1. Find the legal entity. Look at the terms of service or the footer of the app for the company name that contracts with you (for example "Coinbase Luxembourg S.A." rather than "Coinbase").
2. Search the ESMA register. Open the ESMA MiCA page and download the "Crypto-asset service providers" file (CASPS.csv). Search the legal name or the LEI code. ESMA updates the files regularly; the version used here is dated October 30, 2026.
3. Confirm with the national authority. The home regulator's register is the legal reference: AMF white lists (France), BaFin company database (Germany), CSSF entity search (Luxembourg), Central Bank of Ireland registers, MFSA Financial Services Register (Malta), AFM crypto-asset register (Netherlands) and CySEC (Cyprus).
4. Check the services. An authorisation covers specific services (letters a to j below). A firm licensed only for custody cannot run an exchange.
5. Check the passport. The register lists the host countries where a CASP has notified cross-border services. Large platforms such as Coinbase, Kraken and Bitpanda passport to almost every EU/EEA state.
6. Check the warning lists. ESMA's non-compliant entities file (NCASP.csv) and national blacklists name firms acting without authorisation.

Even with a licence, custody risk remains: read our explainer on how a hardware wallet supply-chain attack worked and our report on the $6.3 billion Binance hack.

Services legend

a custody and administration of crypto-assets · b operation of a trading platform · c exchange of crypto-assets for funds · d exchange of crypto-assets for other crypto-assets · e execution of orders · f placing of crypto-assets · g reception and transmission of orders · h advice on crypto-assets · i portfolio management · j transfer services. Art. 63 = full CASP authorisation; Art. 60 = notification by an already regulated bank, investment firm or other financial entity; n/a = basis not filled in by the national authority.

Providers by country (summary)

Full list of MiCA-authorised crypto-asset service providers

All 390 active entries, grouped by home country and sorted by date of authorisation or notification, as published by ESMA. Names and dates are reproduced as filed by national authorities. ESMA does not publish one web page per entity, so each country links to the ESMA file and, where available, to the national register. Dates marked * are later than today: they are Article 60 notifications whose start date is in the future.

Germany (122)

Register entries: ESMA interim MiCA register (CASPS.csv) · BaFin company database

France (36)

Register entries: ESMA interim MiCA register (CASPS.csv) · AMF white lists

Netherlands (28)

Register entries: ESMA interim MiCA register (CASPS.csv) · AFM crypto-asset register

Cyprus (24)

Register entries: ESMA interim MiCA register (CASPS.csv) · CySEC entities

Malta (23)

Register entries: ESMA interim MiCA register (CASPS.csv) · MFSA Financial Services Register

Spain (16)

Register entries: ESMA interim MiCA register (CASPS.csv)

Luxembourg (13)

Register entries: ESMA interim MiCA register (CASPS.csv) · CSSF entity search

Austria (12)

Register entries: ESMA interim MiCA register (CASPS.csv)

Czech Republic (12)

Register entries: ESMA interim MiCA register (CASPS.csv)

Ireland (12)

Register entries: ESMA interim MiCA register (CASPS.csv) · Central Bank of Ireland registers

Liechtenstein (12)

Register entries: ESMA interim MiCA register (CASPS.csv)

Latvia (12)

Register entries: ESMA interim MiCA register (CASPS.csv)

Italy (10)

Register entries: ESMA interim MiCA register (CASPS.csv)

Denmark (7)

Register entries: ESMA interim MiCA register (CASPS.csv)

Croatia (6)

Register entries: ESMA interim MiCA register (CASPS.csv)

Lithuania (6)

Register entries: ESMA interim MiCA register (CASPS.csv)

Norway (6)

Register entries: ESMA interim MiCA register (CASPS.csv)

Slovakia (6)

Register entries: ESMA interim MiCA register (CASPS.csv)

Bulgaria (5)

Register entries: ESMA interim MiCA register (CASPS.csv)

Finland (5)

Register entries: ESMA interim MiCA register (CASPS.csv)

Slovenia (5)

Register entries: ESMA interim MiCA register (CASPS.csv)

Greece (4)

Register entries: ESMA interim MiCA register (CASPS.csv)

Estonia (3)

Register entries: ESMA interim MiCA register (CASPS.csv)

Belgium (2)

Register entries: ESMA interim MiCA register (CASPS.csv)

Iceland (1)

Register entries: ESMA interim MiCA register (CASPS.csv)

Portugal (1)

Register entries: ESMA interim MiCA register (CASPS.csv)

Sweden (1)

Register entries: ESMA interim MiCA register (CASPS.csv)

Authorisations withdrawn or ended

Platforms that left or were blocked in the EU

These cases are documented by official notices or, where marked, by press reports. A platform not in the register can still have a pending application; absence from the list means it has no authorisation recorded by ESMA as of October 30, 2026.

• Binance. No Binance entity appears in the register. Reuters reported on June 16, 2026 that Greece's capital markets regulator was set to deny its application; Binance then withdrew the Greek filing. According to Euronews (June 25, 2026), its French entity told clients it could no longer accept new users and would stop crypto services from July 1, with similar messages in other EU markets and assets remaining accessible for withdrawal. (Press reports; no official Binance notice found.)
• Bitget (France). In an official notice of January 16, 2026, Bitget stopped French sign-ups that day, new orders and deposits on March 16 and services on March 31, 2026. The AMF has listed Bitget on its blacklist since November 7, 2023. No Bitget entity appears in the ESMA register.
• MEXC (Netherlands). Finance Magnates reported on August 25, 2026 that MEXC was offboarding Dutch users, with final offboarding on November 16, 2026. (Press report; no official MEXC notice found.)
• Italy's site blocking. CONSOB said in June 2026 that it had ordered 1,736 websites blocked in total, 204 of them crypto-related.
• ESMA non-compliant list. The NCASP.csv file lists 188 entities flagged by national authorities (Italy's CONSOB, Belgium's FSMA, the Czech National Bank and others) for offering crypto services without authorisation.

FAQ

Is my exchange licensed under MiCA?

Search the table above for the legal entity named in your contract, then confirm on the national register. If the entity is missing, check ESMA's latest CASPS.csv: new authorisations are added in each update.

What is the difference between Article 63 and Article 60?

Article 63 is the full authorisation a new crypto firm needs. Article 60 lets entities already regulated under EU law, such as banks, investment firms or e-money institutions, provide crypto services after notifying their supervisor. That is why many German cooperative banks appear in the list.

Can a MiCA-licensed firm serve me in another EU country?

Yes. A CASP authorised in one member state can "passport" its services to others after notifying them. The ESMA file lists those host countries for each entity.

Can a non-EU exchange still serve EU residents?

Only if the client approaches it on their own initiative (reverse solicitation), an exemption ESMA interprets narrowly. Marketing to EU residents without authorisation is not allowed.

Does a MiCA licence mean my crypto is safe?

No. It means the firm meets EU rules on capital, governance, custody, conflicts of interest and disclosure, and is supervised. Crypto-assets remain volatile, are not covered by deposit guarantee schemes, and platforms can still be hacked or fail.

Are stablecoins covered by this list?

No. Stablecoin issuers are recorded in separate ESMA files (EMT and ART). See why the EBA now supervises USDC and the digital euro versus the US CBDC ban.

How often is this page updated?

Every month, from the latest ESMA register, with a new "Last updated" date. Corrections can be sent through our contact page.

Latest: US cuts MEXC off from American banks over $16 billion in illicit flows (Nov. 6, 2026)

Related reading

• EU gives crypto platforms until January 8 to drop non-MiCA stablecoins
• EU names USDC its first "significant" stablecoin
• Circle secures OCC approval for a national trust bank
• SEC proposes first crypto custody rules for advisers and funds
• Polymarket blocked in France
• What are Bitcoin ETFs and how flows move the price
• What is Bitcoin: the complete guide

Sources: ESMA interim MiCA register (CASPS.csv and NCASP.csv, update of October 30, 2026); ESMA statement ESMA75-113276571-1679 (April 17, 2026); ESMA list of grandfathering periods; Regulation (EU) 2023/1114 (MiCA); AMF (June 23, 2026); national registers linked above; Bitget, Reuters, Euronews, Finance Magnates and CONSOB as cited.

This page is for information only and is not investment, legal or tax advice. It contains no affiliate links and no paid placements; inclusion reflects the official register only. Crypto-assets are highly volatile and you can lose all of your capital. Always verify a provider's status with the competent authority before using it.