What MiCA covers

MiCA — the Markets in Crypto-Assets Regulation — is the European Union’s dedicated, cross-border rulebook for crypto-assets and the firms that deal in them. Formally it is Regulation (EU) 2023/1114. Its aim is to bring crypto-assets that were not already covered by existing EU financial law into a single, harmonised framework, replacing the patchwork of differing national rules that firms previously navigated.

This article is an educational overview of what MiCA does and does not cover. It is not legal or compliance advice. Accounting standards and licensing regimes differ by jurisdiction and change over time, so anyone with a real regulatory question should consult a qualified professional and read the regulation itself.

The problem MiCA was built to solve

Before MiCA, a crypto firm operating across Europe could face 27 different national approaches. Some member states had bespoke regimes, some applied existing financial rules by analogy, and some had very little. That fragmentation made compliance costly and left consumers with uneven protection. MiCA’s central idea is a single authorisation that, once granted by one member state’s competent authority, can be “passported” to operate across the whole EU.

How MiCA categorises crypto-assets

MiCA does not treat every token identically. It sorts crypto-assets into three broad categories, each with different obligations:

• Asset-referenced tokens (ARTs). Tokens that aim to keep a stable value by referencing a basket — for example several official currencies, one or more commodities, or one or more crypto-assets, or a combination. Issuers face the most demanding requirements, including authorisation and reserve rules.
• E-money tokens (EMTs). Tokens that aim to keep a stable value by referencing a single official currency — in effect a digital stand-in for one fiat currency. These are subject to specific requirements drawing on electronic-money concepts.
• Other crypto-assets. A catch-all covering tokens that are neither ARTs nor EMTs, including many so-called utility tokens. These carry lighter obligations, centred on a transparent whitepaper.

The two stablecoin-style categories — ARTs and EMTs — attract the heaviest rules because a token that promises stability and is used widely for payments can pose risks to consumers and, at scale, to financial stability.

What MiCA requires of issuers

For most “other” crypto-assets, an issuer that offers a token to the public or seeks admission to trading must publish a crypto-asset white paper containing prescribed information — a description of the project, the rights and obligations attached to the token, the underlying technology, and the associated risks — and must notify it to the relevant authority. The white paper must be fair, clear and not misleading.

For ARTs and EMTs the bar is higher. Issuers generally need prior authorisation, must maintain adequate reserves backing the tokens, must have governance and conflict-of-interest controls, and face rules on how reserves are held and redeemed. Large, widely used tokens can attract additional supervision because of their potential systemic significance.

What MiCA requires of service providers (CASPs)

MiCA also regulates the firms that provide crypto services, known as crypto-asset service providers (CASPs). Services covered include operating a trading platform, exchanging crypto for funds or for other crypto, executing orders, providing custody and administration of crypto-assets on behalf of clients, and giving advice, among others.

A CASP must be authorised and then meets ongoing requirements such as governance and fit-and-proper standards for management, prudential safeguards, rules on safekeeping client assets, complaint handling, conflict-of-interest management, and market-abuse provisions designed to deter insider dealing and manipulation. How firms are authorised to operate is explored further in our piece on how crypto exchanges are licensed.

Consumer protection and market integrity

A recurring theme across MiCA is protecting the people who use crypto and keeping markets orderly. On the consumer side, the white-paper and marketing rules are meant to ensure buyers get fair, clear and non-misleading information before they commit, and communications must be identifiable as marketing. Custody rules aim to keep client assets safe and, in principle, separable from a provider’s own funds if the provider fails.

On the market-integrity side, MiCA imports concepts familiar from securities markets — prohibitions on insider dealing, unlawful disclosure of inside information, and market manipulation — and applies them to crypto-asset trading. The intent is that a token traded on an authorised venue should not be subject to the abuses the wider financial system already tries to police. These provisions do not promise that any given asset will hold its value; they are about conduct and disclosure, not guarantees of outcome.

What MiCA does not cover

MiCA is deliberately bounded. Notable exclusions include:

• Crypto-assets that are already financial instruments. If a token qualifies as a financial instrument under the existing Markets in Financial Instruments Directive (MiFID II) framework, it stays under that existing law rather than MiCA. The dividing line between the two regimes matters a great deal in practice.
• Unique, non-fungible tokens. Genuinely unique NFTs are largely outside MiCA — though the substance matters, and issuing a large series of apparently unique tokens that in practice function like a fungible collection can bring them back into scope.
• Central bank digital currencies and crypto-assets issued by central banks acting in their monetary capacity, plus certain public bodies.
• Certain assets and activities already covered by other EU financial-services legislation, such as some deposits and specified funds.

Who supervises MiCA, and when it applied

MiCA operates through national competent authorities in each member state, coordinated at EU level by the European Securities and Markets Authority (ESMA) and the European Banking Authority (EBA), which also develop detailed technical standards fleshing out the regulation. The regulation entered into force in 2023 and applied in phases: the rules for asset-referenced tokens and e-money tokens (Titles III and IV) applied from 30 June 2024, and the rules for crypto-asset service providers and the remaining provisions applied from 30 December 2024. Some member states adopted transitional arrangements for firms already operating under national regimes.

Common misunderstandings

A few points trip people up. MiCA is not a global regime — it governs activity in the EU, and a firm authorised elsewhere is not automatically covered by it. Authorisation under MiCA is also not a value guarantee or an endorsement of any token; it addresses disclosure, conduct and, for stablecoin-style tokens, reserves, not whether a price will hold. And MiCA does not override existing financial law: if a token is already a financial instrument, that regime continues to apply, which is exactly why the boundary between MiCA and securities rules matters so much. Finally, the phased application dates mean the rules did not all switch on at once, and transitional arrangements varied between member states.

What this means

MiCA’s significance is that it replaces national improvisation with one EU-wide framework built around a few clear ideas: classify the token, hold issuers to disclosure and — for stablecoin-style tokens — reserve and authorisation requirements, and license the service providers that sit between users and the market. Its boundaries are just as important as its contents: financial-instrument tokens, genuine NFTs and central bank digital currencies sit outside it.

For anyone studying the space, the key points to remember are that MiCA is EU-specific, that the category a token falls into drives the obligations, and that the line between MiCA and existing securities law is where much of the real complexity lives. Because MiCA is still bedding in and its technical standards continue to develop, and because rules differ sharply between the EU and other regions, treat this as an orientation rather than a compliance checklist and seek qualified advice for any specific situation.