As of July 1, crypto companies operating in the European Union without authorisation under the MiCA regulation are doing so illegally. The transition period that gave firms time to prepare has ended, and national regulators across the bloc have begun issuing notices demanding that unauthorised providers wind down operations or face enforcement.
Authorities in the Czech Republic, Bulgaria, Luxembourg and Italy have already moved to remind firms of their obligations. The Czech National Bank confirmed it can fine companies operating without authorisation up to 118.5 million Czech koruna, approximately $5.6 million, or 5% of annual turnover, whichever is greater.
The cost of compliance is significant but, according to industry lawyers, far lower than the cost of getting caught. Nicola Massella of Storm Partners estimated MiCA implementation costs between €350,000 and €600,000 for most crypto companies, covering anti-money laundering monitoring, Travel Rule infrastructure and custody segregation requirements. Penalties for non-compliance start at €5 million or 5% of annual turnover under current rules. The European Banking Authority proposed on June 26 raising that ceiling to 12.5% of annual turnover for certain stablecoin-related breaches.
One Rulebook for Regulators
MiCA creates a single legal framework across the EU, but enforcement sits with national competent authorities — each country’s own financial regulator. ESMA coordinates supervision and maintains the public register of authorised crypto service providers, while the EBA directly oversees significant stablecoin issuers. In practice, this means the rigour of enforcement will vary significantly in the early stages depending on each regulator’s resources, experience and priorities.
“How aggressively each regulator moves will depend on local resourcing and priorities,” said Eckehard Stolz of Amina EU. Peter Bidewell of Parfin warned that differing supervisory approaches could create opportunities for regulatory arbitrage — companies seeking the most permissive national regulator as an entry point into the broader EU market — despite MiCA’s explicit goal of eliminating exactly that dynamic. Ivo Grlica of GrlicaLaw noted that enforcement will become more systematic over time as regulators share information across member states, making it progressively harder for firms with a history of non-compliance to obtain authorisation later.
The EU Just Fired the Starting Gun on Global Crypto Regulation
MiCA’s enforcement phase matters well beyond Europe’s borders. It is the first comprehensive, binding crypto regulatory framework from a major economic bloc to reach full implementation, and the rest of the world is watching how it plays out. The US is still navigating a fragmented tug-of-war between federal regulators and individual states. Brazil just banned prediction markets. The UK is building its own regime. But none of them have reached the enforcement stage that Europe crossed on July 1.
For crypto companies, the practical consequence is straightforward. The EU market is no longer accessible without a licence, and the cost of obtaining one is now the price of entry into 450 million consumers. For the industry more broadly, MiCA represents the clearest signal yet that the era of operating in regulatory grey areas within developed markets is ending. The companies that treated compliance as optional during the transition period are now either winding down EU operations or running a clock that regulators are actively monitoring. The ones that built compliance infrastructure early have a genuine competitive advantage in the largest regulated crypto market on earth.
