MiCA explained: what changes for investors

MiCA stands for Markets in Crypto-Assets, formally Regulation (EU) 2023/1114 on markets in crypto-assets of 31 May 2023. It applies directly in every member state of the European Union, so it reaches readers in Dublin, Lisbon and Helsinki in the same way as readers in Berlin. In Germany it replaced the earlier workaround built on the Banking Act. For investors it means above all this: the provider needs a permission, and certain information and certain rights are no longer voluntary.

What the regulation covers

MiCA separates crypto-assets into three groups. Asset referenced tokens base their value on a basket of currencies or other assets, e-money tokens on a single official currency, and everything else runs as other crypto-assets, Bitcoin and Ether among them. Issuers in the first two groups have been subject to their own titles of the regulation since 30 June 2024, with requirements on reserves, redemption and authorisation.

The second pillar covers providers of crypto-asset services. Article 3 (1) no. 16 lists ten such services, among them custody and administration, operating a trading platform, exchange for funds or for other crypto-assets, execution of orders, advice, portfolio management and transfer services. Under Article 59 nobody may offer these services in the Union without being authorised, unless they fall under one of the exemptions for banks and other supervised institutions. Authorised providers must have their registered office in a member state, and at least one director must be resident in the Union.

The timetable, date by date

The regulation entered into force on 29 June 2023 and applies in stages. Three dates matter for investors: 30 June 2024, 30 December 2024 and, in Germany alone, 31 December 2025.

Article 143 (3) allows a transition period up to 1 July 2026 but leaves member states free to shorten it. Germany did shorten it, and this is a German particularity rather than a European rule: under section 50 (2) no. 3 of the German Crypto Markets Supervision Act (Kryptomärkteaufsichtsgesetz) the permission deemed to continue lapsed at the end of 31 December 2025 at the latest. Institutions holding a permission under the German Banking Act could use a simplified procedure under section 50 (3) of the same act and carry on working until their application was decided, but no longer than that cut off date. If you deal with a provider based in another member state, the transition date that matters is the one set there, and it may run until 1 July 2026.

Which rights investors gain from it

Four points are tangible in daily use. First the white paper: anyone offering crypto-assets to the public must act as a legal person under Article 4, draw up a white paper under Article 6, send it to the supervisory authority and publish it. Exemptions exist for offers to fewer than 150 persons per member state, for offers up to a total consideration of 1,000,000 euro over twelve months, and for offers made solely to qualified investors.

Second the right of withdrawal, and it is narrower than the name suggests. Article 13 (1) grants it to retail holders who acquire other crypto-assets either directly from an offeror or from a crypto-asset service provider placing those assets for that offeror. They then have 14 calendar days to withdraw, free of charge and without giving reasons; under paragraph 2 the money must be repaid within 14 days of the notice at the latest. Paragraph 4 also excludes crypto-assets that were already admitted to trading before the retail holder bought them. On an ordinary purchase at a trading platform the right therefore does not usually apply, because the acquisition situation of paragraph 1 is normally absent and the traded asset is already admitted to trading under paragraph 4. That conclusion reads the two paragraphs together; it is not a sentence written out in the regulation. Third the complaints route: Article 71 obliges providers to run a free and transparent complaints procedure with a template and a record. Fourth custody: Article 75 requires a contract with defined duties, a register of client positions and a separation of the assets held from the provider's own assets, so that its creditors cannot reach them in an insolvency; for losses attributable to the provider it is liable up to the market value at the time of the loss.

What MiCA expressly does not cover

The regulation does not make crypto-assets safe, it makes providers supervised. The price stays unsecured, and there is no deposit guarantee of the kind that covers a current account. That statement does not rest on the carve out in Article 2 (4), which only takes crypto-assets out of scope where they are themselves deposits or financial instruments. It rests on the mandatory warnings: Article 6 (5) point (f) requires the white paper to state clearly that the crypto-asset is not covered by the deposit guarantee schemes of Directive 2014/49/EU, and point (e) names the investor compensation schemes under Directive 97/9/EC alongside. The same warning appears for e-money tokens in Article 51 (4) and for advice and portfolio management in Article 81 (9). Bitcoin itself has no issuer the regulation could bind: Article 4 (3) point (b) exempts public offers of crypto-assets that are mined automatically as a reward for maintaining the distributed ledger or validating transactions from the duties of Title II, and recital 22 records that crypto-assets without an identifiable issuer fall outside Titles II, III and IV, while service providers dealing in them do not. What is regulated, then, are the companies around Bitcoin, not the protocol.

Two further gaps are deliberate. Unique and non fungible crypto-assets fall outside the regulation under Article 2 (3), which leaves a large part of NFT trading untouched. And the same recital 22 records that services provided in a fully decentralised manner without any intermediary fall outside the scope; for decentralised finance the regulation provides for nothing more than a report by the Commission at this stage. Anyone active there has no authorisation, no complaints route and no provider liability to fall back on. What this means for stable tokens is set out in the article on stablecoins and their risks.

Who supervises in Germany

This section describes the German arrangement; every member state names its own authority. In Germany that is BaFin, the German financial supervisory authority, in certain procedures together with the Deutsche Bundesbank, the German central bank. The national implementing act is the Crypto Markets Supervision Act, which sets out the powers of the supervisor, the criminal and administrative fine provisions and the transitional rules. The Bundesbank describes the split by saying that BaFin and the Bundesbank supervise issuers of stable tokens and providers of crypto-asset services.

The size of the audience shows in a survey BaFin ran in April 2026 and published on 25 August 2026: around 13 per cent of adults in Germany hold crypto-assets, which is more than nine million people. The sample was 1,000 people. The knowledge gap stands out. Across all 16 knowledge questions, all respondents together answered 36 per cent correctly and 19 per cent incorrectly, and for 45 per cent they said they did not know the answer. Among those who held crypto-assets themselves, 57 per cent of the answers were right and 31 per cent wrong. These are figures for that sample, not a count of the population. You can test your own standing in the crypto knowledge quiz.

How to check whether a provider works under MiCA

Start by looking the provider up in the register kept by the supervisory authority of the member state it is based in, and read which service is named there; an authorisation for custody is not the same as a registration for exchange. Second, check whether a white paper exists for the crypto-asset you intend to buy, and whether it names the issuer, the rights and the risks. Third, read the custody terms: Article 75 requires details on the custody policy, on the security systems and on the fees. Fourth, find out how to lodge a complaint before you need to.

If a provider stays vague on any of these questions, that is a warning sign, however professional the interface looks; the usual patterns are set out in our article on crypto fraud and its warning signs. And one thing MiCA does not change: tax stays national law. In Germany that means the income tax rules described under holding period and exemption limit, and elsewhere it means your own country's rules. Terms such as white paper, e-money token or custody are explained in the glossary.

Frequently asked questions

Sources