Under the EU's Markets in Crypto-Assets Regulation (MiCA), an exchange must hold a Crypto-Asset Service Provider (CASP) authorisation to serve EU clients, and one member state's licence passports across the EU/EEA. In our June 2026 research, OKX, Crypto.com, Gemini and Bitpanda were authorised via Malta (MFSA); Coinbase via Luxembourg and Ireland; Kraken via Ireland and Luxembourg; and Bitstamp via Luxembourg. We found no confirmed full CASP authorisation for Binance, Bybit or KuCoin at the search date, so we mark those pending. Always confirm the current status on the ESMA register — this is information, not financial advice.
EU MiCA CASP status by exchange — the Exchange Atlas regulatory matrix
This is the neutral, primary-source matrix the big comparison sites leave out: which major cryptocurrency exchanges hold a confirmed EU MiCA Crypto-Asset Service Provider (CASP) authorisation, where, and how to verify it yourself. A CASP licence from one EU/EEA member state passports across all 27 EU states plus the EEA. "Verified" means our research confirmed a full CASP authorisation against the ESMA-register angle; "pending" means we found no confirmed full authorisation at the search date — an honest "unverified", not a claim that the exchange is unlicensed. Authorisations change; always confirm the live entry before relying on it.
Status as of 23 June 2026. Source basis: ESMA interim MiCA register and the issuing national competent authority. Verify the current entry before relying on it.
| Exchange | Founded | EU MiCA CASP | Where authorised | Structure | Verify |
|---|---|---|---|---|---|
| Coinbase | 2012 | Verified | Luxembourg + Ireland (CSSF / CBI) | US-listed (Nasdaq: COIN) | Register |
| Kraken | 2011 | Verified | Ireland + Luxembourg (CBI / CSSF) | Private, US-headquartered | Register |
| OKX | 2017 | Verified | Malta (MFSA) | Private, global | Register |
| Crypto.com | 2016 | Verified | Malta (MFSA) | Private, app-first | Register |
| Gemini | 2014 | Verified | Malta (MFSA) | Private, US + EU presence | Register |
| Bitpanda | 2014 | Verified | Malta (MFSA) | Private, Austria-based | Register |
| Bitstamp | 2011 | Verified | Luxembourg (CSSF) | Private, EU-based (oldest) | Register |
| Binance | 2017 | Pending | Not confirmed in research | Private, global (largest by volume) | Register |
| Bybit | 2018 | Pending | Not confirmed in research | Private, derivatives-heavy | Register |
| KuCoin | 2017 | Pending | Not confirmed in research | Private, broad altcoin range | Register |
As of May 2026 our research recorded roughly 204 entities authorised across all CASP service categories, of which 14 were centralised exchanges with full CASP authorisation. "Pending" rows are not negative findings — they mean we could not confirm a full CASP authorisation from a primary source at the search date. A MiCA CASP authorisation is a consumer-protection signal, not a guarantee, and it does not exempt an exchange from national advertising rules. Verify every entry on the ESMA register before relying on it.
What MiCA authorisation actually means
MiCA entered into application on 30 December 2024, and the EU-wide transitional 'grandfathering' period ends on 1 July 2026. After that date, providing crypto-asset services to EU clients without a CASP authorisation is a breach of EU law. A CASP licence granted by one EU/EEA member state passports across all 27 EU states plus the EEA, which is why an exchange may be authorised 'via Malta' yet legally serve clients across the whole bloc.
As of May 2026, our research recorded roughly 204 entities authorised across all CASP service categories, of which 14 were centralised exchanges with full CASP authorisation. A CASP authorisation is a meaningful consumer-protection signal — it brings capital, custody, conduct and disclosure obligations — but it is not a guarantee against loss, and it does not exempt an exchange from each country's national advertising rules. That is why crypto promotion across the EU remains restricted rather than free, even for a fully licensed exchange.
How to verify a CASP authorisation yourself
Treat any 'MiCA-compliant' marketing claim as unverified until you find the entry. The authoritative source is the ESMA interim MiCA register, which lists authorised CASPs as supplied by national competent authorities; it is published at weekly intervals and is being integrated into ESMA's IT systems through mid-2026. Cross-check the exchange's legal entity name — not just its brand — because a group may operate several entities, and only the authorised one carries the licence.
Then confirm with the issuing national authority: the MFSA in Malta, the CSSF in Luxembourg or the Central Bank of Ireland, for example. A passported CASP licence is EU-wide, but the authorisation is held by a specific entity in a specific member state. If you cannot find the entity on the ESMA register or the national authority's list, do not rely on a marketing claim alone.
Confirmed in our 2026 research (verify before relying)
The matrix above and the list below reflect what our research could confirm against the ESMA-register angle at the search date. Authorisations change — treat this as a sourced snapshot to verify, not a static fact, and always check the live ESMA register entry yourself before you deposit.
- Malta (MFSA): OKX, Crypto.com, Gemini, Bitpanda.
- Luxembourg / Ireland: Coinbase (Luxembourg + Ireland), Kraken (Ireland + Luxembourg), Bitstamp (Luxembourg).
- Pending in our research (no confirmed full CASP authorisation found at the search date): Binance, Bybit, KuCoin.
Frequently asked questions
How do I check if a crypto exchange is MiCA-licensed?
Check the ESMA interim register of authorised CASPs and the national regulator (for example the MFSA in Malta or the CSSF in Luxembourg) for the exchange's legal entity name. A CASP authorisation from any one EU/EEA member state passports across the bloc. Treat a marketing claim of being 'MiCA-compliant' as unverified until you find the entry. This is information, not financial advice.
Which crypto exchanges are MiCA-licensed in 2026?
In our June 2026 research, Coinbase (Luxembourg/Ireland), Kraken (Ireland/Luxembourg), Bitstamp (Luxembourg), and OKX, Crypto.com, Gemini and Bitpanda (all Malta/MFSA) held confirmed full EU MiCA CASP authorisation, checkable on the ESMA register. We found no confirmed full CASP authorisation for Binance, Bybit or KuCoin at the search date. Authorisations change — verify the live ESMA entry before relying on it.
Is Binance MiCA-licensed in the EU?
Our June 2026 research found no confirmed full EU MiCA CASP authorisation for Binance at the search date, so we mark its status pending rather than verified. This is not a negative finding about Binance — it means we could not confirm it from a primary source. Check the current ESMA register for the latest position before relying on it.
Sources & further reading
An independent publisher mapping the regulation of cryptocurrency exchanges. Our editorial desk verifies every licence and availability claim against primary sources — the ESMA MiCA register, the FCA register, ASIC, MAS, VARA and each exchange's own terms — and never accepts payment for a better assessment or placement. We publish information only; nothing here is financial advice.