Reverse Solicitation Under MiCA: When Crypto Firms Can ...

Since MiCA became fully operational on 30 December 2024, non-EU crypto firms have been asking the same question: can we keep serving EU clients without getting a CASP license if the client comes to us first? The answer from ESMA is technically yes, practically almost never. The February 2025 guidelines on reverse solicitation under Article 61 of MiCA leave so little room for the exemption that treating it as a viable business strategy borders on negligence.

What Article 61 actually says

Article 59(1) of MiCA is unambiguous: only entities authorized as Crypto-Asset Service Providers (CASPs) under Article 63, or certain EU-authorized financial entities, may provide crypto-asset services in the EU. Authorization requires a registered office in an EU member state. There is no passporting from non-EU jurisdictions.

Article 61 provides a single exception. A third-country firm may provide crypto-asset services to an EU client if, and only if, the service was initiated at the "own exclusive initiative" of the client. The client must have approached the firm without any solicitation, promotion, or marketing by the firm or by any party acting on its behalf.

Article 61(3) mandated ESMA to issue guidelines clarifying what constitutes solicitation and how national authorities should detect circumvention. ESMA published its final guidelines on 26 February 2025, following a consultation that ran from January to April 2024 and drew 35 responses.

ESMA chose the strictest possible interpretation

ESMA's guidelines adopt what the regulator calls a "restrictive" reading of Article 61. In practice, this means the exemption applies in "only very limited and narrow circumstances." The guidelines are not suggestions: national competent authorities across the EU are expected to implement them, with compliance deadlines set for 1 January 2026 or 31 March 2026 depending on the jurisdiction.

The definition of solicitation is broad. It covers any form of advertisement, marketing, or promotional activity targeting EU clients, whether conducted directly by the third-country firm or through third parties acting on its behalf or with "close links" to it. ESMA chose to interpret "person acting on behalf of" a third-country firm broadly, noting that solicitation can occur even without a formal agreement or obvious remuneration between the firm and the person directing EU clients toward it.

Sponsorship of international events where EU athletes or national teams participate? ESMA considers this solicitation, disqualifying the firm from relying on Article 61 for any EU clients who subsequently approach it. An EU credit institution or payment provider redirecting clients to a third-country crypto firm's services (for instance, via a website link)? Also treated as solicitation.

Social media advertising, search engine optimization targeting EU jurisdictions, localized websites in EU languages, partnerships with EU-based influencers or affiliates: all of these fall within ESMA's definition. If there is any evidence that the third-country firm took steps to make itself known to EU clients, the exemption collapses.

The time limitation most firms overlook

Even when a client genuinely approaches a third-country firm on their own initiative, the exemption is time-limited in a way that undermines ongoing business relationships.

Article 61(1) refers to a "relationship" between client and firm, which might suggest the exemption covers the entire duration of a long-term client relationship. ESMA explicitly rejects this interpretation. The guidelines state that the exemption applies only for a "very short period of time" following the client's initial request. If an EU client requests the purchase of a specific crypto-asset, the firm may at that point offer crypto-assets of the same "type" as permitted under Article 61(2). But a month later, the firm cannot market new products or services to that client and still claim reverse solicitation.

This time limitation is the provision that makes reverse solicitation unworkable as a business model. A crypto exchange that onboards an EU client through genuine reverse solicitation cannot later send that client promotional emails about new token listings, yield products, or staking opportunities. Each new service would require a fresh instance of exclusive client initiative, documented and verifiable. The compliance burden of proving this for each client interaction across thousands of accounts makes the exemption commercially impractical at scale.

How national authorities will enforce this

ESMA's guidelines direct national competent authorities to look at the totality of circumstances when assessing whether reverse solicitation was genuine. This includes examining the firm's marketing footprint in the EU (including historical marketing that predates MiCA), the sequence of events leading to account opening, whether the firm has EU-specific features (language options, EUR payment rails, EU-targeted content), and whether other clients from the same jurisdiction were onboarded in patterns suggesting organized solicitation rather than spontaneous client initiative.

Enforcement will likely be complaint-driven initially, with regulators investigating third-country firms when EU clients report losses or when licensed CASPs flag competitors operating without authorization. But ESMA has signaled that proactive detection, including monitoring advertising channels, social media, and payment flows, will become part of the supervisory toolkit.

The penalties for getting this wrong are significant. MiCA gives national authorities powers to issue fines, block payment processing, and coordinate with other EU member states to enforce compliance. A third-country firm found to have systematically relied on a reverse solicitation defense while actively marketing to EU clients faces not only regulatory action but potential liability to clients who could argue they were exposed to unregulated services.

What this means for non-EU crypto firms

The strategic calculation is simple. If the EU is a material market for your crypto business, you need a CASP license. Article 61 does not provide a workable alternative for any firm that wants to actively acquire or retain EU clients.

Some firms will try to structure around the guidelines: maintaining minimal EU-facing marketing, relying on organic search traffic, and documenting client-initiated account openings. This approach is fragile. A single marketing campaign, influencer partnership, or sponsored event with EU visibility could invalidate the exemption for the firm's entire EU client base. ESMA's broad interpretation of "close links" and "acting on behalf of" means that even indirect promotional activities by affiliated entities could be attributed to the firm.

The transitional period is closing. National competent authorities are expected to be fully implementing the guidelines by Q1 2026. Firms that have been serving EU clients without authorization on the assumption that reverse solicitation provides cover should be either applying for a CASP license through an EU member state, partnering with a licensed EU CASP to serve their EU client base, or preparing to exit the EU market entirely.

Waiting is the worst option. CASP license applications take 6 to 12 months in most jurisdictions, and the pipeline of applications already exceeds the processing capacity of several national regulators. Firms that begin the licensing process now may still face a gap between when enforcement intensifies and when their authorization comes through. Those that have not started will find the door closing.