MiCA Confusion Opens Door to New Crypto Scams in Europe

European financial regulators warned that fraudsters are exploiting confusion surrounding the Markets in Crypto-Assets regulation, or MiCA, to impersonate licensed exchanges and government officials.

The scams are targeting customers of crypto platforms that failed to get authorization before the EU’s transitional period ended on July 1. Some victims have reportedly been contacted by people posing as regulators and instructed to move their assets to supposedly compliant platforms that are actually fraudulent websites.

Stéphane Pontoizeau, an executive director at France’s Autorité des Marchés Financiers, said the regulatory shift created “an opportunity for scammers more than usual.”

The AMF identified cases where fraudsters pretended to be members of its staff and contacted customers of unlicensed exchanges. Victims were then directed to fake websites where they were told to transfer their crypto.

The Dutch Authority for the Financial Markets also warned that criminals may target investors searching for an alternative provider after their existing exchange lost access to the EU market.

Meanwhile, the European Securities and Markets Authority said scammers have used its name, branding and logo to promote fraudulent services. ESMA warns that it never contacts investors to recover lost funds or request administrative fees. Criminals may also create counterfeit documents, copy official websites or claim to be investigating a crypto company.

The scams are particularly effective because legitimate exchanges may also be contacting customers about account restrictions, withdrawals and transfers. Fraudsters can imitate these messages and create a false sense of urgency.

MiCA’s main rules have applied since December of 2024, but eligible crypto companies were allowed to continue operating under national arrangements during a transitional period. That grandfathering window ended on July 1, 2026.

More than 320 legal entities have now received authorization, according to ESMA’s interim register, which was last updated on Aug. 5. However, estimates mentioned by the Financial Times suggest that more than 1,700 other entities may have to restrict or discontinue their EU operations.

Authorized crypto-asset service providers can use their approval to offer services across the bloc. Unlicensed firms, however, are expected to implement an orderly wind-down rather than continue normal business operations.

Binance is among the largest exchanges that missed the deadline. The company withdrew its MiCA application in Greece and remains in discussions with other EU regulators about submitting a new application. Binance co-CEO Richard Teng said in July that the exchange is still committed to obtaining authorization in the region.

ESMA has advised investors to check its official MiCA register before transferring assets or opening an account with a new provider.

Users should verify the company’s exact legal entity rather than relying only on its brand name. A crypto group may operate several entities under the same branding, but MiCA protections apply only when an EU customer is served by the specifically authorized European entity.

Investors should also avoid moving funds through links received in unexpected emails, calls or social media messages. Regulators and legitimate exchanges will not ask users to share passwords, recovery phrases or private keys.