
The European Union's Markets in Crypto-Assets Regulation (MiCA) framework has resulted in significant market contraction, with only 281 of 1,343 crypto service providers securing authorization by the July 1, 2026 deadline. According to blockchain intelligence firm TRM Labs, this leaves more than 1,000 firms outside the regulatory regime and must either leave the market, restructure operations, or transfer customers to authorized providers. The regulation replaced the fragmented national systems across European countries, with companies previously operating under separate registration or licensing systems now required to obtain common EU authorization.
The regulatory gap reveals significant differences in risk profiles between authorized and unauthorized providers. As reported by TRM Labs, 12% of unauthorized firms carry High or Severe risk ratings, compared with just 2% of authorized providers. Every firm assigned a Severe rating belongs to the unauthorized group, while unauthorized providers recorded $5 billion in direct exposure to sanctioned counterparties, approximately three times the $1.7 billion recorded among authorized firms. Unauthorized providers also sent $19 billion to high-risk exchanges and $15.3 billion to gambling services, compared with $14.2 billion and $13.4 billion respectively among authorized providers.
Authorization has been uneven across European jurisdictions, with Germany leading at 55 authorized firms, followed by France and the Netherlands each authorizing 29 providers. Malta approved 20 firms and Cyprus 19, while Italy issued only 9 home authorizations despite having 145 firms operating there. Notably, Poland issued no authorizations despite its previous register containing more than 1,800 entries, while Lithuania converted 8 firms from a register of more than 400 providers. The passporting system allows CASPs approved in one member state to operate across the EU, with firms like B2C2 securing Luxembourg authorization to serve all 27 EU member states.
The MiCA implementation represents a significant market contraction, with more than 3,000 crypto firms registered across Europe before the regulation, while only 194 secured authorization by May 2026. Hogan Lovells estimated that approximately 75% of firms registered under previous systems could lose their status as national transition periods expired. By July 3, ESMA's interim register had expanded to 300 authorized crypto-asset service providers after adding 57 firms around the July 1 deadline, including Standard Chartered and FalconX. The regulatory shift positions Europe as the global leader, with the U.S. typically following European frameworks, though the current fragmented U.S. regulatory landscape remains approximately one year behind the EU in regulatory clarity.
The EU's Anti-Money Laundering Authority has prioritized oversight of customer transfers and exit plans as unauthorized providers leave the market. AMLA has asked supervisors to coordinate with regulators when customers move across borders, noting that compressed exit schedules can pressure anti-money laundering controls. ESMA has launched reviews of authorized crypto custodians, examining custody controls, private-key management, and third-party provider risks. TRM Labs found no correlation between the number of authorizations issued by a jurisdiction and the illicit exposure of firms supervised there, emphasizing that entity-level screening provides better risk assessment than jurisdiction-level metrics.