MiCA Deadline Approaches With Only 14 CASPs Approved for Exchange Operation
The July 1, 2026 MiCA grandfathering deadline is 10 weeks away. As of April 15, 2026, ESMA's CASP register lists roughly 174 registered entities, of which only 14 are approved for centralized exchange operation. Against the pre-MiCA universe of around 1,200 EU virtual asset service providers, that is a genuine shortfall. Firms that have not yet begun serious authorization work are unlikely to be ready. For those still in the queue, RegTech automation has shifted from a competitive advantage to a requirement for survival.
The numbers as of mid-April
The ESMA register shows Germany with roughly 51 CASPs, the Netherlands with about 23, with the remainder scattered across Lithuania, Malta, Ireland, France, Italy, and Spain. Lithuania ended its national grandfathering on January 1, 2026. Germany, Ireland, and Austria closed theirs on December 31, 2025. The Netherlands, Finland, and Poland cut off grandfathering in mid-2025. Firms licensed under those national regimes that did not convert are already operating without authorization.
On April 9, Clearbank Europe became the first Dutch credit institution to receive MiCA CASP confirmation from the AFM, offering EURC and USDC via Circle Mint. April 15 was the hard deadline for Italian firms with pending applications to pay CONSOB's EUR 20,000 supervisory fee. No grace period is available.
What compliance actually costs
Capital requirements under MiCA range from EUR 50,000 for advisory-only CASPs to EUR 150,000 for trading platform operators. Application fees vary by national competent authority: EUR 5,000 to EUR 25,000. Professional fees for application preparation (legal, compliance, technical documentation) run EUR 200,000 to EUR 500,000.
Annual ongoing compliance costs: EUR 100,000 for small firms to several million euros for large platforms. Non-compliance penalties reach EUR 5 million. The DAC8 reporting obligation, active since January 1, 2026, adds another layer. CASPs must collect detailed user transaction data (including staking and lending activity) and report it to national tax authorities. First automatic cross-border exchanges between EU tax authorities begin in 2027.
Where automation helps
Blockchain analytics and AML screening (Scorechain, Chainalysis, TRM Labs) automate wallet screening, transaction monitoring, and risk scoring. Scorechain offers pre-built templates for BaFin, AMF, CNMV, and CSSF reporting formats. Machine learning-powered AML reduces false positive rates by 50 to 80%, which matters when manual review of each alert costs EUR 15 to 50 in analyst time.
Market integrity surveillance (Solidus Labs, Eventus, Nasdaq SMARTS) monitors for wash trading, spoofing, and other manipulation patterns that ESMA requires CASPs to detect and report. ESMA has published standardized machine-readable JSON schemas for order book and record-keeping data, which makes surveillance integration technically feasible for firms that invest in it. Marketing compliance tools (Sedric) monitor websites, social media, and influencer campaigns against ESMA's advertising guidance.
The supervisory fragmentation problem
RegTech cannot automate judgment. The governance and organizational requirements in MiCA Articles 68 to 72 require actual humans: a compliance officer, a risk manager, a sufficiently qualified board. Substance requirements mean a physical EU office with local staff. No amount of automation changes the need for a person who can answer the phone when the regulator calls.
MiCA created a single rulebook but left implementation to 27 national competent authorities. Each NCA has its own application portal, fee schedule, and interpretation of what "fit and proper" means for key personnel. Typical review windows run 3 to 6 months, which means applications filed in March or April 2026 may not clear before July 1. ESMA has explicitly warned that late applicants face heightened scrutiny and that NCAs are expected to enforce wind-downs on unauthorized operators.
What happens after July 1
The base case is enforcement at scale. If only ~14 firms are approved for centralized exchange operation by July 1 and another 160 are at various stages of review, a significant portion of the pre-MiCA industry will either be operating unlawfully or will have quietly wound down EU operations. ESMA's permanent MiCA database is expected to go live mid-2026, replacing the interim CSV register currently published.
For firms still in the queue, the practical advice is unchanged: invest in automation, staff up the compliance function, and prepare for NCA questions about substance. For firms that have not applied, the only realistic path is to exit the EU market or pursue authorization with the expectation of a post-deadline transition period that may or may not be granted.
Related Jurisdictions
Related Articles
Tokenized Securities Regulation 2026: Where Security Tokens Are Licensed
Security token licensing varies wildly across jurisdictions. The EU's DLT Pilot Regime faces a 2026 review, Switzerland approved its first regulated DLT exchange, and Singapore rewrote its tokenization guidance. Here is what each framework actually requires.
Gibraltar DLT Provider License: Requirements for Blockchain Firms
Gibraltar's DLT Provider license, built on ten regulatory principles, remains one of the few crypto-specific frameworks that predates MiCA. Here is what it actually takes to get one, what it costs in practice, and why Gibraltar still attracts blockchain firms despite its size.
EU Crowdfunding License (ECSP): What Platform Operators Need in 2026
The European Crowdfunding Service Provider regulation creates a single EU license for platforms raising up to EUR 5 million. Here is what authorization actually requires and which regulators process applications fastest.
AML Compliance for Crypto and Gaming Firms: What Regulators Actually Audit
Most AML failures are not about missing policies. They are about policies that exist on paper but fail in practice. Here is what regulators look for during inspections.