MiCA Deadline Passed: Check If Your Crypto Card Platform Still Has an EU Licence

The rules changed after 1 July

On 1 July 2026 the MiCA transition period in the European Union formally expired. From that date, any platform without CASP (crypto-asset service provider) authorisation is no longer allowed to offer crypto-asset services to EU users. This is not an upcoming change to prepare for. It already happened, and the crypto-funded virtual card platforms many people have used for years are now split into three camps: those applying for licences to stay, those winding down EU customers in an orderly way, and those operating in a grey zone and hoping nobody asks.

Why should this matter if you are not in Europe? Because a large share of the issuing entities, payment corridors and treasury operations behind crypto-funded cards are registered in EU member states. Lithuania and Poland were popular homes for these companies. Their regulatory status flows straight down the money chain to the card in your wallet.

The numbers first

A few figures to anchor your judgement. The ESMA MiCA register showed roughly 279 authorised CASPs when the transition ended in early July 2026, growing to 331 by early September. Before MiCA, more than 3,000 firms held national crypto registrations across Europe. In other words, the overwhelming majority of the old registered entities never made it to a licence. Lithuania is the extreme case: about 345 registered companies collapsed to just 4 MiCA CASP licences. Poland, stuck in a legislative standoff after the president vetoed the implementing bill three times, still has no functioning authority to accept CASP applications, leaving well over a thousand registered firms in limbo.

One more number, from the other direction. Visa disclosed that its stablecoin settlement business reached a 7 billion US dollar annualised run rate by April 2026, up 50 percent quarter on quarter, with more than 130 stablecoin-linked card programmes running across 50-plus countries. The crypto card market itself is growing. The growth is concentrating on the compliant side, and the grey zone is shrinking.

What platform exits look like from the user side

ESMA issued a statement on 23 June spelling out orderly wind-down expectations for unauthorised firms: stop onboarding new clients immediately, stop marketing and solicitation, and limit remaining activity to what clients need to sell, transfer or close positions. Translated into user experience, that means one of three outcomes. Your account gets a deadline to withdraw. Your top-up channel quietly closes while spending still works. Or, worst case, the platform stops serving your region entirely and balance recovery becomes a long queue.

The past two months produced real examples. Several major exchanges notified users in Poland, Italy, Spain and France to extract assets within a fixed window because they lacked MiCA licences in those member states. These notices typically allow 30 to 90 days. Virtual card platforms hold far smaller treasuries than exchanges, so in a wind-down you stand further back in the queue.

Reverse solicitation is not your safety net either

Some platforms will tell you they keep serving EU customers under the reverse solicitation exemption: the customer came to them, they did no marketing. ESMA has been narrowing that reading for years. Online ads aimed at EU users, promotional pop-ups, localised landing pages, all of it can count as solicitation. CSSF, the Luxembourg regulator, put it bluntly in its post-deadline notice: firms wrongly relying on the exemption may be prohibited from providing services, and customer accounts may then have to be closed at short notice.

For a user the logic is simple. A platform with no EU licence that survives on a grey interpretation has a compliance status that can flip from arguable to clearly illegal overnight. Money you leave there is a bet on how gracefully the platform exits.

In practice: check three things before you get a card

First, search the ESMA register. The MiCA register on the ESMA website updates weekly and lists every authorised CASP plus e-money token issuers. Search by the operating company's legal name, not the product name. Found means licensed. Not found means move to the next check. Only a handful of the 331 entries are card-adjacent platforms; most are brokers and custodians.

Second, identify the operating entity. The app name and the company behind the card are often different things. Open the terms page or the footer, find the full legal entity name and registration number, then cross-check it against the national company register and that country's regulator list. One common red flag pattern: the terms cite a Lithuanian company, but Lithuania has exactly 4 MiCA CASPs. That gap deserves a question.

Third, look at both ends of the payment chain. The typical crypto card flow is: you send USDT to the platform, the platform converts to fiat through a licensed partner, and the fiat feeds the card via a BIN sponsor. MiCA governs the crypto end. Even a licensed platform loses top-ups if its upstream fiat corridor exits the EU. The Fiat24 incident in July 2026, when the SafePal-linked provider suspended deposits while spending kept working, is exactly what an upstream disruption looks like from the user side.

No licence does not mean imminent collapse, but reprice the risk

To be clear about scope: a platform with no EU licence that never served EU users is untouched by this deadline. Plenty of Asia-facing card platforms are registered in Hong Kong, Singapore or the United States, and their regulatory pressure comes from elsewhere. The MiCA deadline really bites two groups: people living in or frequently visiting the EU, and anyone using a platform whose issuer or corridors sit in the EU regardless of where they live.

For the second group, my read is this. Over the rest of 2026 you will see smaller platforms quietly close EU sign-ups or migrate their operating entity out of the EU. Migration itself is fine. The dangerous part is the gap during the move, when top-ups and withdrawals sit in limbo. The standard advice applies double here: keep only near-term spending money on the card, run a small test before any large top-up, and exercise the withdrawal path at least once a month. None of this prevents an exit scam. It caps how much of your money is exposed to a single point of failure.

FAQ

Q: I am in Asia and my platform is registered in Hong Kong. Does MiCA affect me at all?

Not directly, but check two indirect channels. First, whether the platform's issuing entity or treasury corridors sit in the EU. Many platforms rely on partner banks and BIN sponsors registered in Lithuania, Malta or the Netherlands, and an upstream wind-down shows up as suspended top-ups or failed card issuance. Second, whether the platform treats the EU as a target market. If its website runs German and French pages and buys EU ad traffic, it is inside MiCA's reach, and compliance pressure eventually turns into product changes such as stricter KYC or new fees.

Q: How do I tell if a platform is leaning on the reverse solicitation exemption?

Three markers: a site with no EU language versions that still displays euro pricing by default; terms that disclaim service to EU residents while the signup flow has no geo-blocking; marketing that lives entirely in community channels and influencer posts rather than open advertising. A platform in that posture can lose its EU users after a single regulator letter. Your only real hedge is keeping large balances out.

Q: Does a licence make a platform safe?

A licence answers the question of legality, not of survival. Licensed platforms carry capital, safeguarding and complaint-channel obligations, which cuts the incentive for a straight exit scam. But licensed firms also kill unprofitable product lines for ordinary commercial reasons, and more than one licensed operator has dropped its card programme between 2024 and 2026. A licence reduces malice risk. Business risk still needs diversification.

Q: My platform is not in the ESMA register but advertises a US MSB and a Hong Kong MSO. Now what?

Those licences cover their own jurisdictions only. They do not authorise service to EU users under MiCA. If you are in the EU, that platform is unlicensed for you. If you are elsewhere, you can verify those registrations in the FinCEN and Hong Kong Customs public lists respectively. Directory listings usually note such licences, but the regulator's own register is the final word.

The arbitrage window is closing

For a decade the crypto card business ran on regulatory arbitrage: incorporate in whichever jurisdiction sold cheap registrations with light oversight, serve everyone. Lithuania was the poster child. Around 2022 you could get a crypto registration for a few hundred dollars and a few weeks, enough facade to build a card business on. MiCA tore the facade down. The collapse from 345 firms to 4 says the EU meant it this time: not a higher hurdle for renewal, but a forced exit for most of the incumbents.

The lesson for users is that "is it licensed" needs a follow-up question: licensed where, for which services, and does your usage fall inside that scope. A platform holding a US MSB while serving EU users is the same mismatch as an EU CASP serving US users. The overlap between the regulatory map and the product map is a better basis for judgement than any marketing copy.

Signals worth watching next

Three things to track. The weekly increments in the ESMA register, because new card-adjacent entrants mean compliant supply is growing. The resolution of Poland's legislative standoff, because a breakthrough triggers a wave of applications from the thousand-plus firms in limbo. And formal adoption of PSD3 and the PSR during 2026, since the Council published final compromise texts in April and the licensing setup for payment and e-money institutions will reshuffle once they land, pushing compliance costs for card platforms up another notch. Tighter regulation rewards the licensed platforms. For your wallet, it is one more variable that deserves a periodic check. For cross-referencing entities and card programmes, use the platform directory and the card BIN directory alongside the register; the subscription cancellation and balance guide covers what to do when a platform fails, and the BIN sponsor ecosystem breakdown explains how upstream issuers decide whether your card keeps working.