Ecuador

The scale of the market's adjustment to this deadline is significant. A 29 June 2026 snapshot recorded only around 230 to 244 MiCA-authorised CASPs against a base of more than 3,000 firms that had been registered as VASPs under prior national regimes across the EU. That gap looked stark at the moment the deadline fell, but the count moved quickly afterward — to 283 authorised firms by 10 July 2026 and 323 by 21 July 2026 — indicating a wave of post-deadline authorisations working through national competent authorities rather than a permanent contraction of the licensed population. Any reading of the 230-244 figure should treat it as a point-in-time snapshot rather than a settled total.

A further calibration is needed on the deadline itself. While 1 July 2026 functions as the EU-wide backstop for the end of national transitional arrangements, it is not a uniform national compliance date. Several Member States exercised the discretion MiCA affords them to shorten their own transitional periods: Germany and Ireland set a twelve-month period, the Netherlands, Poland, Latvia, Hungary and Slovenia set six months, and Sweden set nine months. Effective compliance deadlines in those jurisdictions therefore fell earlier than the EU-wide 1 July 2026 date, and the composed record here reflects a downgraded confidence rating on any claim that treats 1 July 2026 as a uniform national cliff-edge, pending dedicated Member-State-level verification.

Outlook

The near-term question is enforcement follow-through: how national competent authorities and ESMA handle the substantial population of firms that had not secured MiCA authorisation by the EU-wide deadline, and whether the rapid post-deadline authorisation growth observed in July 2026 continues to close the gap between previously-registered VASPs and MiCA-licensed CASPs. A secondary and more granular question, flagged as an under-indexed area at the EU supra-national level, is how enforcement plays out differentially across the Member States that adopted shorter national transitional periods, where firms have already been operating outside grandfathering protection for longer than the EU-wide backstop would suggest.

The perimeter around this taxonomy is also settled. Unique, non-fungible NFTs — the factsheet examples given are virtual real estate and domain names — sit outside MiCA's scope entirely. That exclusion has a carve-back, however: NFTs issued as part of a fungible series or collection can still fall within MiCA's scope despite the underlying non-fungible-token label, so issuers relying on the NFT exclusion need to look at series structure rather than the NFT label alone.

Operational classification authority sits with the European Banking Authority, which runs a formal decision-based procedure (EBA/DC/558) for classifying ARTs and EMTs as 'significant'. That designation matters structurally: once an ART or EMT is classified as significant, supervisory responsibility transfers from the national competent authority to the EBA directly, and a supervisory college is established around the token. This significance mechanism is the primary lever by which the largest stablecoins in the EU market move under centralised EU-level supervision rather than remaining with individual Member State regulators.

Outlook

The token classification layer is not itself a live policy question in the way licensing or on-chain activity treatment are — the taxonomy is codified in the MiCA text and operating with EBA/ESMA guidance behind it. The main forward-looking element to track is the pace and outcome of significance designations as stablecoin issuance scales, since each designation shifts supervisory responsibility to the EBA and changes which authority a firm answers to.

Context on the scale of what is currently unregulated: value locked in DeFi protocols represents around 4% of all crypto-asset market value globally, with EU adoption trailing several other developed economies. That relatively modest footprint may be part of why the EU has not moved urgently to build a bespoke framework, but it does not resolve the underlying gap — no dedicated EU legislative framework currently regulates DeFi, staking-as-a-service, or crypto lending/borrowing distinct from MiCA's issuer/CASP-centred regime. The European Commission's 2026 MiCA review consultation is actively assessing whether new rules are warranted, but that assessment is ongoing rather than concluded.

Outlook

This module carries the most uncertainty of the seven surveyed here. The Commission's review consultation, expected to close around the third quarter of 2026, is the single event most likely to determine whether DeFi and staking activities gain a dedicated EU regulatory perimeter or continue to be governed only indirectly through MiCA's existing issuer/CASP framework. Given that the underlying evidence base for this module leans on an analytical (non-prescriptive) joint report and a forward-looking review process rather than settled rules, this area should be treated as provisional pending the consultation's outcome.

Supervisory architecture for the largest issuances runs through the EBA's significance-assessment procedure, which can designate an ART or EMT as significant (an s-ART or s-EMT), transferring supervisory responsibility from the national competent authority to the EBA and establishing a supervisory college around that token. Separately, the EBA issued an opinion on supervisory priorities as the transition period under its No-Action Letter addressing the interplay between PSD2 and MiCA for EMT issuers ended on 2 March 2026, working through authorisation-process coordination between the two frameworks.

The one substantive gap in an otherwise mature regime concerns cross-border and multi-jurisdictional issuance. MiCA currently lacks a mechanism to defer to foreign frameworks for stablecoin issuance, which leaves the treatment of tokens issued through entities spanning multiple jurisdictions unresolved. That gap is exactly what the Commission's 2026 review consultation is understood to be examining, alongside the competitiveness question raised by comparison with other jurisdictions' stablecoin regimes.

Outlook

Watch the Commission's MiCA review consultation output on cross-border/multi-jurisdictional stablecoin issuance treatment, expected to close around the third quarter of 2026 — this is the single item most likely to change the shape of this module's regime in the near term, given that the prudential core (reserves, redemption, disclosure, significance supervision) is already settled and binding.

Operational protections extend to complaint handling and custody. Issuers of ARTs and EMTs must establish and maintain effective, transparent procedures for handling holder complaints promptly, fairly and consistently. CASPs are separately prohibited from outsourcing or delegating certain services — notably custody — to entities that are not themselves authorised as CASPs, closing off a route by which client assets could otherwise end up with unregulated sub-custodians.

Alongside these binding duties sits a layer of non-binding guidance and communication. ESMA's 2025 Guidelines on the knowledge and competence of crypto-asset staff constitute non-binding guidance rather than directly enforceable MiCA requirements, though they set expectations regulators will likely reference in supervisory practice. The three Joint European Supervisory Authorities (EBA, EIOPA and ESMA) have also jointly warned consumers that crypto-assets can be risky and that legal protection may be limited depending on which crypto-assets or providers are used, urging consumers to verify a provider's MiCA authorisation status before engaging.

Outlook

The consumer-protection module is comparatively settled relative to the other six surveyed here — the binding obligations are codified and operative, and the main forward motion is in non-binding guidance (staff competence, consumer warnings) rather than in unresolved legislative gaps. The item most worth tracking is how the reverse-solicitation restriction on third-country CASPs is enforced in practice as the post-transitional wind-down of unauthorised firms proceeds, since that boundary is where enforcement pressure and marketing practice are most likely to collide.

One characterisation within this module remains actively disputed and is being held rather than published as settled. The Interpreter's baseline record states that DAC8 reporting obligations apply only to centralised, custodial crypto-asset service providers and do not extend to decentralised exchanges, peer-to-peer transactions, or private self-custody wallets. A Challenger review flagged this as a potential factual error, arguing that CARF/DAC8 may in fact treat CASP-initiated transfers to unhosted or self-custody wallet addresses as reportable transactions — even where the wallet holder itself is not a regulated entity — and that reporting-CASP scope may extend to certain DeFi platforms. That dispute has not been resolved against primary OECD CARF/DAC8 implementing text, and the claim is being held pending that verification rather than published as a confirmed exclusion.

Outlook

Two items anchor the forward calendar here. First, the September 2027 target for the first cross-border exchange of 2026 crypto-asset activity data will be the first live test of whether the DAC8 reporting architecture built through 2026 functions as designed. Second, and more immediately consequential for compliance scoping, is the resolution of the disputed self-custody-wallet reporting question — until that is verified against primary implementing text, the boundary of what centralised CASPs must report on customer-initiated transfers to external wallets should be treated as unsettled rather than confirmed.

Operational detail sits in EBA Travel Rule Guidelines, which specify the steps CASPs and payment service providers must take to detect missing or incomplete originator/beneficiary information accompanying crypto-asset transfers, and the procedures to manage transfers that lack such information. Electronic money tokens are explicitly treated as crypto-assets for the purposes of these cross-border information requirements, closing off any argument that EMT transfers sit outside Travel Rule scope. A further, more technical mechanism sits in Article 23 MiCAR, which sets the thresholds competent authorities and the EBA use to assess whether an ART or EMT — including one denominated in a non-EU currency — meets the criteria requiring enhanced reporting or significance classification, a mechanism with direct relevance to how non-EU-currency-denominated stablecoins are tracked across borders.

Outlook

This is among the most settled modules in the composed record: the Travel Rule has been operative for over eighteen months with detailed EBA guidance behind it, and no near-term legislative change is flagged in this cycle's evidence. The item worth tracking is less legislative than administrative — how Article 23's non-EU-currency significance thresholds interact with the broader stablecoin cross-border issuance question that the Commission's ongoing MiCA review is examining under the stablecoin_regime module.