July 1, 2026 is not a soft target. MiCA Article 143(3) sets it as the absolute outer limit of the EU transitional regime for crypto-asset service providers. On that date, every CASP operating without a MiCA authorization loses its legal basis to serve EU clients. Country of operation doesn’t matter. Neither does product type or years of prior registration.
The headline figure: roughly 210 CASPs authorized across 23 EU member states as of May 2026. Before MiCA, over 1,200 VASP entities held national registrations across the bloc. That conversion rate tells the story. The deadline is weeks away and most of the EU crypto market has not cleared it.
This article is a country-by-country reference. Each entry covers the current transitional regime status, whether applications are being accepted, known process issues, and typical authorization timelines as of May 2026.
How MiCA Transitional Regimes Work#
MiCA Article 143(3) allowed member states to grant existing CASPs up to 18 months to keep operating under national rules while pursuing authorization. Member states could shorten that window, but not push it past July 1, 2026. Several chose shorter periods. The result: some jurisdictions closed their transitional regimes months ago, and operators there have been exposed since.
|
Country |
NCA |
Transitional end |
Applications accepted |
CASPs authorized (May 2026) |
|---|---|---|---|---|
|
Lithuania |
Bank of Lithuania |
January 1, 2026 |
Yes |
~6 |
|
Estonia |
Finantsinspektsioon |
July 1, 2026 |
Yes |
Few |
|
Netherlands |
AFM |
June 30, 2025 |
Yes |
~26 |
|
Germany |
BaFin |
December 30, 2025 |
Yes |
53 |
|
Poland |
KNF |
N/A |
No |
0 |
|
France |
AMF |
July 1, 2026 |
Yes |
~13 |
|
Italy |
Consob / Banca d’Italia |
July 1, 2026 |
Yes |
Few |
|
Spain |
CNMV |
July 1, 2026 |
Yes |
~3 |
|
Malta |
MFSA |
July 1, 2026 |
Yes |
~12 |
|
Cyprus |
CySEC |
July 1, 2026 |
Yes* |
Few |
|
Czech Republic |
Czech National Bank |
July 1, 2026 |
Yes |
~6 |
|
Luxembourg |
CSSF |
July 1, 2026 |
Yes |
Few |
*CySEC required existing CASPs to file a MiCA application by February 27, 2026 to retain transitional status.
Lithuania: Window Closed January 1, 2026#
Lithuania shortened its transitional period to December 31, 2025. Any operator still running on a pre-MiCA registration after January 1, 2026 lost its legal basis immediately. There was no grace period after the cutoff.
The Bank of Lithuania processes CASP applications in approximately six months for clean files, the fastest turnaround in the EU. An application filed by mid-2025 could have cleared authorization before the window closed. Lithuania has issued approximately 6 CASP authorizations under MiCA. The contrast with its pre-MiCA registered population of roughly 370 entities shows how few operators cleared the full threshold.
For applications filed now, Lithuania still offers the shortest EU authorization timeline. The closed window bars continued operation under old rules; it does not bar applying for a new one.
Estonia: Full 18-Month Regime, Slim Authorization Pipeline#
Estonia applied the full 18-month transitional period. CASPs operating under Estonia’s MLTFPA virtual asset service license before December 30, 2024, and that filed a complete MiCA application with Finantsinspektsioon by that date, may continue operations until their application is decided or July 1, 2026, whichever comes first.
Estonia’s 2022 VASP regulatory reforms cut through the large population of low-substance operators that had registered there in earlier years. The remaining MLTFPA licensees are a smaller group with higher baseline compliance. Finantsinspektsioon examines governance structure, AML/CFT controls, ICT resilience, and outsourcing in detail.
As of May 2026, Estonian MiCA CASP authorizations remain limited. Operators on the MLTFPA register that have not filed MiCA applications hold no transitional cover after July 1. New applicants should plan for nine to fifteen months of processing.
Netherlands: Transitional Regime Ended June 30, 2025#
The AFM applied a six-month transitional window, the shortest in the EU among jurisdictions actively accepting applications. It closed June 30, 2025. The AFM issued its first MiCA CASP licenses on December 30, 2024. Approximately 26 CASPs hold AFM authorization as of May 2026.
Operators without authorization by the Dutch deadline were expected to implement mitigating measures or stop EU-facing activity. The AFM takes enforcement action against unlicensed CASPs actively marketing to Dutch residents.
AFM authorization takes nine to twelve months from submission. Substance requirements are applied at intake: registered office in the Netherlands, genuine local staff, real operational presence. Those reviews happen before an application advances, not at the end of the process. Shell structures are flagged early. For firms targeting Dutch clients from outside the Netherlands, passporting from another EU authorization covers the market, provided the passporting notification has been filed and accepted.
Germany: December 2025 Cutoff, 53 Authorized CASPs#
BaFin shortened Germany’s transitional period to December 30, 2025. Operators still on pre-MiCA registrations lost their standing at year-end. With 53 authorized CASPs as of May 2026, Germany leads all EU jurisdictions by a significant margin. That number reflects the pre-existing licensed financial sector converting to MiCA, not an accessible entry path for new players.
BaFin applications are the most documentation-intensive in the EU. A complete file typically exceeds 200 pages before the first feedback round. Processing runs twelve to twenty-four months, and supplemental information requests are routine. Total advisory costs from submission through authorization regularly reach €80,000–€200,000.
For operators targeting German clients after July 1, a direct BaFin application is a multi-year project from a standing start. Passporting from Lithuania or the Netherlands covers the German market faster, and compliantly, once a home-state authorization is in place.
Most operators assessing their options at this stage read how ItisPay solves this without your own license rather than opening a BaFin application with a 24-month horizon.
Poland: Two Presidential Vetoes, No Licensing Path#
As of May 2026, Poland is the only EU member state that has not enacted MiCA implementing legislation. Every other member state has a designated NCA, a legal framework, and an active application pipeline. Poland has none of that.
The breakdown: President Karol Nawrocki vetoed the Crypto-Assets Market Act on December 1, 2025. Parliament ran the bill again. Nawrocki vetoed it a second time on February 12, 2026. An override required 263 votes. The Sejm produced 243. Nobody has introduced a third bill.
Without legislation, the KNF has no legal basis to accept or process CASP applications. Operators sitting on pre-MiCA VASP registrations are stuck. A Polish authorization doesn’t exist. From July 1, there is no lawful way to provide crypto-asset services in Poland without a MiCA license, and Poland cannot grant one.
On February 10, 2026, the KNF addressed this in a public statement. It confirmed the problem without solving it. Operators with Polish business face a real choice: file for authorization elsewhere in the EU and passport into Poland, shut down Polish operations, or sit on their hands and hope parliament moves faster than it has.

France: AMF, Full 18-Month Period, 13 CASPs Authorized#
France applied the full 18-month transitional window until July 1, 2026. The AMF accepts applications from registered PSAN (prestataire de services sur actifs numériques) holders and new entrants. Approximately 13 CASPs hold AMF authorization as of May 2026. France had over 100 PSAN registrations pre-MiCA.
AMF processing runs twelve to eighteen months. France’s pre-MiCA PSAN regime was demanding relative to most EU jurisdictions. Existing French registrants arrive with documented AML/CFT history, which reduces some friction at first review. Governance and documentation standards remain strict throughout.
Italy: Consob and Banca d’Italia, Full Period Running#
Italy applies the full 18-month transitional period. MiCA supervisory responsibilities are split: Consob handles conduct and market integrity; Banca d’Italia handles prudential supervision for custody and settlement functions. Italy held over 150 VASP registrations pre-MiCA. Authorized CASP numbers remain low.
Processing runs twelve to eighteen months at minimum. Firms with Italian operations that have not filed MiCA applications by now have no realistic path to authorization before July 1. The Italian market will see disruption at the deadline for operators still in the authorization queue or that never filed.
Spain: CNMV Regime Active, Minimal Authorizations#
Spain applies the full 18-month transitional period until July 1, 2026. The CNMV began accepting CASP applications in September 2024. As of May 2026, approximately three CASPs hold CNMV authorization. BBVA is the highest-profile name. Spain’s pre-MiCA crypto market was substantial; the authorized population reflects how few have completed the process.
The CNMV has stated the July 1 deadline will be enforced. Firms operating under Spain’s pre-MiCA advertising registration and VASP framework lose grandfathering protection after that date without a CASP authorization.
Malta: MFSA, 12 Authorized CASPs#
Malta’s MFSA has authorized approximately 12 CASPs plus two EMT issuers as of May 2026, a strong figure for Malta’s market size. MFSA published detailed MiCA rulebook guidance in March 2025. Processing typically runs six to nine months, faster than Germany, France, or Italy. Malta is now among the top five EU jurisdictions by authorized CASP count.
Malta applies the full 18-month transitional period. Its pre-MiCA VFA (Virtual Financial Assets) framework was one of the more structured in Europe. Existing VFA license holders had a documented conversion path, which accounts for the relatively high authorization rate.
Cyprus, Czech Republic, Luxembourg: Full Period Running#
CySEC set a hard internal filing deadline: February 27, 2026. Existing CASPs that missed it lost their transitional cover and had to submit a wind-down plan. The firms that filed in time are still in review. They can keep running under national rules until CySEC decides their application or July 1 hits, whichever comes first. Cyprus applies the full 18-month period, but that window was functionally shorter for anyone who waited.
The Czech National Bank ran its own early cutoff: operators needed to file by July 31, 2025 to benefit from transitional protection. Around six CASPs have cleared CNB authorization. Processing typically runs nine to fifteen months.
Luxembourg’s CSSF is on the standard 18-month schedule. CSSF processing reflects the jurisdiction’s financial services heritage: detailed, consistent, and slow enough that operators should count on twelve months minimum. For firms with genuine EU substance, Luxembourg is a credible choice. The CSSF doesn’t shortcut its reviews.
After July 1: Three Operational Paths#
ESMA’s April 2026 statement on the end of transitional periods put NCAs on notice: enforce July 1 as written. No extension is coming at the EU level. For operators still outside the authorization perimeter, three paths exist.
Cease EU-facing services. Straight compliance. No CASP authorization means no lawful basis to serve EU clients from July 1. Operators take geographic restrictions, turn off EU onboarding, and wait for their own authorization to process.
Passport from a licensed group entity. If a parent company or affiliate holds a CASP authorization anywhere in the EU, MiCA’s passporting mechanism lets that authorization cover other member states. The licensed entity needs real substance, not shared branding. Passporting notifications go to both the home NCA and each host NCA, and must be accepted before services start. Groups without an existing authorized entity have to either acquire one or begin the authorization process from scratch, which puts them back in the queue.
Access licensed infrastructure through a partner. For a product company that needs to stay live in 2026, this is the fastest option. Exchange, transfer, and custody services for EU clients run through a licensed CASP and Payment Institution that already holds the relevant authorizations. The licensed partner carries the regulatory exposure. The client-facing product stays under the operator’s brand. For teams without the appetite for a €300K–€700K year-one spend and an 18-month wait, see the software-layer alternative to applying.
The authorization map is set. Germany and the Netherlands closed their transitional windows last year. Lithuania closed January 1. Every other jurisdiction on this list hits the EU-wide cutoff in weeks. Poland still has no licensing framework five weeks out, and most of the 1,200+ pre-MiCA operators across the EU have not converted.
If building your own compliance stack isn’t the right move right now, plug into a licensed CASP + PI partner instead — that’s exactly what itispay.com/mica is built for.
This article is for informational purposes only and does not constitute legal or regulatory advice. Verify with qualified counsel before acting.


