MiCA regulators in the ESMA register
| Home state | Competent authority | Authorised CASPs |
|---|---|---|
| Germany | Federal Financial Supervisory Authority (BaFin) | 117 |
| France | Autorité des Marchés Financiers (AMF) | 36 |
| Netherlands | Netherlands Authority for the Financial Markets (AFM) | 29 |
| Cyprus | Cyprus Securities and Exchange Commission (CySEC) | 25 |
| Malta | Malta Financial Services Authority (MFSA) | 23 |
| Spain | Comision Nacional del Mercado de Valores (CNMV) | 16 |
| Luxembourg | Commission de Surveillance du Secteur Financier (CSSF) | 13 |
| Liechtenstein | Finanzmarktaufsicht (FMA) | 12 |
| Ireland | Central Bank of Ireland (CBI) | 12 |
| Latvia | Latvijas Banka | 12 |
| Czechia | Czech National Bank (CNB) | 12 |
| Austria | Austrian Financial Market Authority (FMA) | 12 |
| Italy | Commissione Nazionale per le Societa e la Borsa (CONSOB) | 10 |
| Denmark | Finanstilsynet | 7 |
| Norway | Norwegian Financial Supervisory Authority (Finanstilsynet) | 6 |
| Lithuania | Bank of Lithuania (LSC) | 6 |
| Slovakia | National Bank of Slovakia (NBS) | 6 |
| Bulgaria | Financial Supervision Commission (FSC) | 5 |
| Finland | Finanssivalvonta (FIN-FSA) | 5 |
| Slovenia | Securities Market Agency (ATVP) | 5 |
| Croatia | Croatian Financial Services Supervisory Agency (HANFA) | 5 |
| Estonia | Estonian Financial Supervision Authority (EFSA) | 3 |
| Greece | Hellenic Capital Market Commission (HCMC) | 3 |
| Belgium | National Bank of Belgium (NBB) | 2 |
| Croatia | Croatian National Bank | 1 |
| Sweden | Finansinspektionen | 1 |
| Greece | Bank of Greece | 1 |
| Iceland | Central Bank of Iceland | 1 |
| Portugal | Banco de Portugal | 1 |
Counted from ESMA's interim MiCA register (CASPS.csv), downloaded 24 October 2026. One firm can appear more than once if it holds several entries.
What MiCA regulators do
- Assess applications and grant or refuse authorisation.
- Supervise authorised firms on an ongoing basis.
- Forward passport notifications to other countries, ESMA and the EBA.
- Take action against firms that break the rules, including unauthorised firms.
- Publish registers and warnings for consumers.
Regulators usually do not resolve individual disputes, as the guide to complaints about a crypto exchange explains.
Why the number of firms per regulator differs
Some countries host many crypto firms, often banks, investment firms and fintechs that added crypto services to an existing business.
Others have only a handful, and some have none listed in the register at the time of download.
A large number does not mean a regulator is stricter or looser; it reflects where firms chose to set up.
MiCA regulators and the home state
For each exchange on this site, the regulator shown on the card is the competent authority of its home Member State, taken from the ESMA register.
| Exchange | Regulator | Home state | MiCA authorised |
|---|---|---|---|
| Kraken | CBI | Ireland | 25 June 2025 |
| Crypto.com | MFSA | Malta | 27 January 2025 |
| OKX | MFSA | Malta | 27 January 2025 |
| Bit2Me | CNMV | Spain | 31 October 2025 |
| bitFlyer Europe | CSSF | Luxembourg | 26 June 2026 |
| Bitpanda | FMA | Austria | 9 April 2025 |
| Bitvavo | AFM | Netherlands | 26 June 2025 |
| eToro | CySEC | Cyprus | 16 January 2025 |
| SwissBorg | AMF | France | 5 March 2026 |
| Revolut | CySEC | Cyprus | 20 October 2025 |
| Bitstamp | CSSF | Luxembourg | 15 May 2025 |
| Blockchain.com | MFSA | Malta | 22 October 2025 |
| Trade Republic | BaFin | Germany | 28 April 2025 |
| Coinmotion | FIN-FSA | Finland | 2 July 2025 |
| Gate EU | MFSA | Malta | 29 September 2025 |
| Robinhood | LSC | Lithuania | 29 May 2025 |
| Bybit EU | FMA | Austria | 28 May 2025 |
| Northcrypto | FIN-FSA | Finland | 25 November 2025 |
| Coinbase | CSSF | Luxembourg | 20 June 2025 |
| Backpack EU | Latvijas Banka | Latvia | 27 May 2026 |
Regulator, home state and authorisation date of each listed exchange, from the ESMA register.
MiCA regulators and ESMA
ESMA, the European Securities and Markets Authority, coordinates supervision, publishes the interim MiCA register and issues guidelines and technical standards.
It does not authorise exchanges itself; national regulators do.
For stablecoins, the European Banking Authority (EBA) has its own role, especially for significant tokens.
How to use a regulator's website
- Find the regulator: from the ESMA register or the MiCA licence checker.
- Open its website yourself: not through a link from the firm.
- Search its register: for the firm's legal name.
- Read its warnings: many regulators list unauthorised firms, as the guide to regulator warning lists explains.
MiCA regulators: types of authority
The authorities that supervise crypto-asset service providers differ between countries.
- Securities or financial markets authorities: such as France's AMF or Spain's CNMV.
- Integrated financial supervisors: such as Germany's BaFin, Austria's FMA or Finland's FIN-FSA.
- Central banks: such as the Central Bank of Ireland, the Bank of Lithuania or Latvijas Banka.
The names shown in the table above come directly from the register.
MiCA regulators of the listed exchanges
The exchanges compared on this site are authorised by a range of regulators, with Malta, Austria, Ireland, Cyprus and Luxembourg among the home states.
Under MiCA's common rules, the choice of home state does not change the core protections a customer receives.
MiCA regulators and consumer contact
Most regulators publish consumer information pages, warning lists and contact forms for reporting suspected unauthorised firms.
When contacting a regulator, include the firm's name, website, how you were contacted and any payment details, and keep a copy.
MiCA regulators and the European level
ESMA works with national regulators to promote consistent supervision and publishes the interim register built from their information.
The European Banking Authority has a role for stablecoins, and both authorities issue guidelines and draft technical standards under MiCA.
MiCA regulators: authorisations and notifications
| Legal basis named in the register | Entries | What it means |
|---|---|---|
| Article 63 (CASP authorisation) | 76 | The regulator assessed and granted a crypto-asset service provider authorisation |
| Article 60 (notification) | 131 | An existing financial entity notified the regulator that it provides crypto-asset services |
| Not stated | 180 | The legal basis field is empty in the file |
Counted from ESMA's interim CASP register file downloaded on 24 October 2026, 387 entries.
The split may help explain why some countries have many entries: their regulators supervise many banks and investment firms that can use the notification route.
MiCA regulators: what they can and cannot do for you
| Regulators can | Regulators usually cannot |
|---|---|
| Authorise and supervise crypto-asset service providers | Recover money lost to a scam |
| Publish warnings about unauthorised firms | Decide individual disputes about refunds |
| Take action against firms that break the rules | Protect you against falling prices |
| Receive information from consumers about firms | Give personal investment advice |
MiCA regulators: contacting one about a provider
- Find the right authority: the competent authority named in the provider's register entry.
- Complain to the provider first: using its published complaints procedure.
- Prepare the facts: dates, amounts, screenshots and the provider's reply.
- Use the official channel: the consumer or complaints page on the regulator's own website.
- Expect limits: the regulator may use your information in supervision without solving your individual case.
The guide to complaints about a crypto exchange covers the whole process.
MiCA regulators: beware of impersonation
Scammers sometimes pretend to be regulators, police or ESMA, often to sell fake recovery services.
A real regulator will not ask you to pay a fee to release funds or to move money to a "safe" account.
If in doubt, contact the regulator through the address on its own website, never through details given in the message.
MiCA regulators: questions readers ask
Is a firm supervised in another country less safe? Under MiCA, the same rules apply in every Member State, and a passported firm is supervised by its home regulator.
Can I complain to my own country's regulator? You can contact it, but the home regulator in the register supervises the firm, so your regulator may pass the matter on.
Who publishes the register? ESMA publishes the register based on information from national regulators, as Articles 109 and 110 of MiCA provide.
MiCA regulators: where to find their warning lists
Most national regulators publish warnings about firms offering financial or crypto services without authorisation.
ESMA's register also contains a list of non-compliant entities, which this site summarises on the not MiCA-authorised page.
The guide to regulator warning lists explains how to search them.
A firm that appears on a warning list should not be trusted with money, whatever it promises.
MiCA regulators: reading the register's authority names
The register gives each authority's full name, such as the Federal Financial Supervisory Authority (BaFin) in Germany or the Autorité des Marchés Financiers (AMF) in France.
Searching that exact name online, and checking that the result is the regulator's own website, leads you to the right contact details.
Saving the regulator's official website as a bookmark protects you from fake sites that copy its name.
Use that bookmark whenever you need to check a warning or send information about a provider.
Frequently asked questions
Who are the MiCA regulators?
The national competent authorities of each EU and EEA country, such as financial supervisors and central banks, listed in ESMA's register.
Does ESMA authorise crypto exchanges?
No. National regulators authorise and supervise them. ESMA coordinates and publishes the interim register.
Which regulator supervises my exchange?
The authority of its home Member State, shown in the ESMA register and on every exchange card on this site.
Can I complain to a MiCA regulator?
Many regulators accept reports from consumers, but they usually do not resolve individual disputes.
Why are counts in the MiCA regulators table different from other sites?
They are counted directly from the ESMA file on the date shown, and one firm can have more than one entry.
Sources
- ESMA interim MiCA register, CASPS.csv
- Regulation (EU) 2023/1114 (MiCA), Articles 59, 63 and 65