ESMA Launches MiCA Custody Reviews Across EU
The European Securities and Markets Authority (ESMA) will conduct a common supervisory action on crypto custody providers' operational resilience under MiCA, with reviews lasting through mid-2027. National regulators will assess key management, governance, and incident response at authorized CASPs, then consolidate findings into a final report.
Quick Take
ESMA initiates EU-wide supervisory action on crypto custody services.
Reviews focus on operational resilience, key management, and governance.
National regulators will assess CASPs through first half of 2027.
Findings will be consolidated into a final report by end of 2027.
Market Impact Analysis
NeutralRoutine regulatory review under MiCA; no immediate market-moving catalyst, but it reinforces compliance standards.
Speculation Analysis
Key Takeaways
- ESMA kicks off EU-wide review of crypto custody providers' operational resilience under MiCA.
- National regulators will assess key management, governance, and incident response at authorized firms.
- Supervisory action runs through the first half of 2027, with a final report due later that year.
- BitGo launched a MiCA-compliant platform as the industry adapts to the new regulatory landscape.
What Happened
The European Securities and Markets Authority announced a common supervisory action targeting the operational resilience of crypto custody providers. With the MiCA transition period ending on July 1, regulators are now intensifying oversight. National competent authorities across the EU will conduct risk-based examinations of authorized crypto-asset service providers. The reviews zero in on key management, storage practices, and incident response capabilities. ESMA's move signals a coordinated push to enforce the bloc's crypto rulebook, ensuring custody services meet stringent standards.
The Numbers
The supervisory campaign began shortly after the July 1, 2026 MiCA deadline and will span 18 months, concluding in the first half of 2027. A final report consolidating findings is expected in the second half of 2027. While ESMA did not disclose how many CASPs will be examined, the framework applies to all authorized providers across the 27 EU member states. BitGo, meanwhile, launched a Europe-focused crypto-as-a-service platform last month, reflecting the industry's scramble to comply.
Why It Happened
The end of MiCA’s transition phase activated full regulatory authority over crypto services. ESMA and national authorities are now tasked with ensuring firms meet operational standards. Custody providers, holding billions in client assets, represent a systemic risk if mismanaged. The reviews aim to prevent security lapses and bolster trust in the market. This proactive stance aligns with the EU’s broader strategy to create a secure crypto environment while avoiding heavy-handed enforcement later.
Broader Impact
The action sets a precedent for how EU regulators will enforce MiCA across all crypto services. Custody reviews may lead to industry-wide best practices and could influence other jurisdictions drafting similar frameworks. For CASPs, the process offers a chance to demonstrate compliance maturity, potentially easing future regulatory interactions. The final report in 2027 will likely shape the next round of policy refinements.
What to Watch Next
- Preliminary findings from national reviews may surface as early as late 2026, signaling enforcement trends.
- Watch for any guidance or enforcement actions against non-compliant custody providers during the review period.
- The final report’s recommendations could trigger new technical standards or amendments to MiCA.
This article is for informational purposes only and does not constitute financial advice.
Always late to trends?
Join for the latest news, insights & more.
Disclaimer: Bytewit is an independent media outlet that delivers news, research, and data.
© 2026 Bytewit. All Rights Reserved. This article is for informational purposes only.
