A Cayman spot exchange and custodian has existing customers in France and Germany and marketing pages accessible there. The question is how this composite hypothetical exchange should handle new business and existing accounts under MiCA. For services outside Article 61, it must choose between EU authorisation, service through an authorised provider and market exit. Assume the Cayman entity holds the permissions required for its actual activities and the assets fall within MiCA’s scope. The alternatives below concern hypothetical acquisition histories, service arrangements and account positions. They describe neither a client event nor a regulatory finding.
Executive Summary
- EU: Pause new EU onboarding to the Cayman entity and EU solicitation while the account review proceeds. Resume solicited business only through an appropriately authorised structure. An application does not confer interim permission. (Regulation (EU) 2023/1114 (MiCA), arts. 59, 61–63.)
- France and Germany: Neither national transition supports ordinary unauthorised service on 15 October 2026. France’s maximum transition ended on 1 July 2026; Germany selected a shorter, 12-month transition. Earlier eligibility depended on compliance with national law. (MiCA, art. 143(3); ESMA, List of MiCA grandfathering periods, France and Germany entries.)
- EU: A genuinely client-initiated continuing relationship can qualify under Article 61. Its age neither establishes the exception nor automatically terminates it. Original solicitation, subsequent promotion and service expansion require separate assessment. (MiCA, art. 61; ESMA, Final Report ESMA35-1872330276-1899, paras. 45–51.)
- Cayman Islands: Custody and operation of a qualifying virtual asset trading platform ordinarily require the relevant virtual asset service licence. Registration for other activities does not establish those permissions or EU market access. (Virtual Asset (Service Providers) Act (2024 Revision), as amended, ss. 2–4, 6, 8.)
- EU and Cayman Islands: Segment existing accounts without delaying restrictions required by law. Protect assets and preserve lawful withdrawals during necessary cessation work. For accounts without a defensible continuation basis, prefer genuine migration to an authorised EU provider where executable; otherwise exit without waiting for a future authorisation. (MiCA, arts. 59, 61, 73, 75(9); ESMA, Statement ESMA75-113276571-1710, pp. 1–2; CIMA, Rule and Statement of Guidance: Market Conduct for Virtual Asset Service Providers (2026), rr. 7.3, 12.10.)
EU permission and expired national transitions
Ordinary EU customer acquisition requires a lawful MiCA service structure. Article 59 permits authorised CASPs and specified financial entities acting under Article 60. A Cayman permission falls outside those routes. Article 61 creates a client-specific exception where the EU client exclusively initiates the relevant service, including its specifically related relationship. It does not authorise an EU-facing offshore business generally. (MiCA, arts. 59–61.)
The service-provider provisions applied from 30 December 2024. Article 143(3) allowed qualifying incumbents to continue only within their applicable national transition, ending earlier upon authorisation or refusal. France selected 18 months; Germany selected 12. Even an exchange that qualified historically cannot use that transition in October 2026. Opening an account before MiCA does not establish either historical national compliance or present Article 61 eligibility. (MiCA, arts. 143(3), 149(2); ESMA, List of MiCA grandfathering periods.)
Enforcement can interrupt a planned migration. MiCA requires national authorities to have powers to prohibit unlawful services and order immediate cessation of unauthorised activity. French law also empowers the AMF to require cessation of practices contrary to MiCA. The exchange should involve the AMF and BaFin when arranging cessation of services that lack a lawful basis. An internal migration timetable cannot override an enforceable order. (MiCA, art. 94(1)(c), (h); Code monétaire et financier, art. L. 621-7-4, I, 5°; ESMA, Statement ESMA75-113276571-1710, pp. 1–2.)
Cayman permission and the actual exchange model
The commercial phrase “Cayman VASP license” requires an activity-level explanation. Since 1 April 2025, virtual asset custody and qualifying trading-platform operations fall within the licensing phase. Other virtual asset services can require registration instead. Statutory waivers and legacy application arrangements require separate examination. The platform definition examines how trades occur and whether the operator controls assets or performs specified matched transactions. A “spot exchange” label cannot determine the category. (Virtual Asset (Service Providers) Act (2024 Revision), as amended, ss. 2, 4, 6, 8, 16; CIMA, VASP FAQ, licensing and transition questions; Commencement Orders, SL 17 and SL 18 of 2025, para. 2.)
For the licensed branch of this hypothetical, assume the licence covers the actual custody and platform functions. Management should still match the entity, permitted services, conditions and approved business plan against the operating arrangement. Cayman permission governs the approved Cayman business; MiCA independently determines access to French and German customers. The Cayman entity has no EU passport through that permission. (Virtual Asset (Service Providers) Act, ss. 8(5)–(5A), 9(3)(ca)–(cb); MiCA, arts. 59, 61.)
The boundaries of MiCA reverse solicitation
The decisive question is who initiated the specific relationship or service. Article 61 excludes reliance on client initiative where the firm, its representatives or closely linked persons solicited EU customers. Contractual declarations cannot reverse contrary facts. A client clicking “I approached independently” after a targeted advertisement does not satisfy the exception. Employee location does not change this rule: solicitation can originate inside or outside the EU. (MiCA, art. 61(1).)
ESMA’s current guidance treats promotion broadly, including brand advertising, affiliates, retargeting and informal intermediaries. Website accessibility alone requires examination of surrounding circumstances. Language, geographic targeting and distribution arrangements matter. Pure education is distinguishable from material that promotes the exchange. Removing a disclaimer or adding an EU exclusion notice does not resolve the underlying conduct. (ESMA, Guidelines ESMA35-1872330276-2030, paras. 11–24 and annex.)
A request for one service does not open the entire catalogue. ESMA requires a granular assessment of service and asset types, including token category and liquidity risk. Its guidance confines same-type marketing to the original transaction context; different-type marketing cannot rely on that request. Accordingly, an unsolicited exchange request cannot automatically justify promotional offers of custody or other services. A genuinely independent later request requires its own assessment. (MiCA, art. 61(2); ESMA, Guidelines, paras. 25–33.)
An ongoing relationship requires a different temporal analysis. ESMA expressly explains that its marketing restriction does not impose a time limit on a relationship needed to deliver the genuinely requested service. Thus, documented unsolicited custody can remain defensible without repeated artificial “reverse solicitation” declarations. This does not permit later reactivation campaigns or product expansion under the original request. Neither passage of time nor transaction count supplies a substitute eligibility test. (ESMA, Final Report ESMA35-1872330276-1899, paras. 47, 50–51, 62.)
The guidelines express supervisory interpretation under the ESMA Regulation; they do not amend Article 61. Their significance is practical as well as interpretative. ESMA’s compliance table records affirmative responses for the AMF and BaFin under its “complies or intends to comply” heading. (ESMA, Guidelines, paras. 6–9; Compliance Table ESMA35-24871704-2592, updated 10 July 2026, France and Germany entries.)
New onboarding and acquisition evidence
Management should pause new EU accounts with the Cayman entity during the review. This precaution exceeds what Article 61 requires for a proven unsolicited request, but avoids creating further disputed relationships. Disable EU-directed acquisition campaigns, affiliate referrals and promotional customer messages. Include broader campaigns that solicit EU clients even when they are not exclusively EU-targeted. Restrict access to new service activation without blocking account statements, support or withdrawal instructions. ESMA identifies non-acceptance of EU accounts and geographic access controls as possible precautions, rather than a universal statutory website-blocking rule. (ESMA, Guidelines, paras. 11–16 and n. 3.)
Preserve dated marketing pages and targeting settings without delaying the suspension. The proposed account file should link the first customer contact to referral records, campaign identifiers, staff communications and contract versions. It should distinguish the requested service from later activations. Preserve contemporaneous evidence; do not replace it with a bulk customer certification campaign. ESMA expects records tracking client initiative; the timing of requests and subsequent offers matters. (ESMA, Guidelines, paras. 26–28.)
A defensible hypothetical file would contain an unsolicited request naming the service, consistent acquisition logs and conduct confined to that request. A contrary file might contain a paid referral, an employee’s sales message or targeted advertising that prompted the relationship. Marketing subsequently sent to a genuine reverse-solicited customer requires separate review. Missing acquisition records do not prove solicitation, but management should not approve ordinary service on an unsubstantiated exception. These are evidential applications of the Article 61 test, not presumptions that every accessible website solicits every visitor. (MiCA, art. 61(1)–(2).)
Existing-account decisions
Begin with the contracting and performing entities. If an authorised EU entity already genuinely serves an account, assess that entity’s permission and service arrangements. A shared brand or an EU affiliate elsewhere in the group does not establish that result. ESMA warns that protections attach to the authorised entity rather than every group company. (ESMA, Statement ESMA75-113276571-1679, pp. 2–3.)
For a Cayman-served account with documented exclusive initiative, management can approve continuation only within the qualifying service relationship. Record the permitted functionality and review triggers. A custody instruction does not establish permission to promote trading; an exchange instruction does not establish every later custody arrangement. Evidence of solicitation or expansion outside the protected relationship defeats the corresponding continuation case. (MiCA, art. 61.)
For a solicited account, or one whose exception management cannot substantiate, the recommended setting is cessation rather than ordinary trading. Stop new exposure and new business deposits. Retain only functions needed for lawful settlement, disposal, transfer and closure under an executable exit plan. ESMA’s June 2026 statement permits no business-as-usual assumption: its residual-service expectations concern strictly necessary wind-down activity, including temporary custody. The statement preserves Article 61 in footnote 3. It creates no separate authorisation exemption and cannot override national enforcement directions. (ESMA, Statement ESMA75-113276571-1710, pp. 1–2 and n. 3.)
A dormant account with no assets or orders can follow the applicable contractual closure process without a reactivation offer. An account with disputed ownership, a legal freeze or inaccessible assets needs a separate exception record and escalation. “Withdrawal-only” should describe a finite cessation process, not an indefinite offshore custody product. Neither an authorisation application nor negotiations with a prospective EU provider justify extending normal service. (MiCA, arts. 59, 62–63; ESMA, Statement ESMA75-113276571-1679, pp. 1–2.)
Orders, assets and contractual notices
The operations team should distinguish unexecuted orders from completed trades awaiting settlement. Disable recurring purchases and new orders outside any defensible continuation category, while preserving orders lawfully necessary for the wind-down. Cancel unexecuted instructions only under an applicable legal or contractual power. Do not treat an executed trade as though cancellation of an account automatically reverses it. Preserve the settlement and transfer steps necessary to discharge obligations. CIMA requires an exiting provider to honour commitments and complete outstanding business consistently with applicable law. (CIMA, Rule and Statement of Guidance: Market Conduct for Virtual Asset Service Providers (2026), r. 7.3; ESMA, Statement ESMA75-113276571-1710, pp. 1–2.)
Reconcile client entitlements against wallets, fiat accounts and outstanding transactions before transfers. Maintain security, segregated assets and accessible support while balances remain. Continue applicable anti-money-laundering, sanctions and transaction-monitoring controls during exit. Suppress new deposit instructions and account for unexpected incoming transfers. CIMA’s current rules require client-asset segregation and frequent reconciliation. These duties support controlled release of assets rather than a blanket withdrawal freeze. (CIMA, Market Conduct Rules, rr. 7.2, 16.1–16.2, 16.6, 16.13–16.14; ESMA, Statement ESMA75-113276571-1710, pp. 1–2.)
Give customers neutral written notices identifying the serving entity, restrictions, effective dates and available withdrawal or migration steps. Explain fees, order treatment, residual balances and complaint channels. CIMA requires adherence to agreements unless law requires otherwise or clients waive terms. Contract amendments require prior written disclosure and a reasonable opportunity to accept, reject or terminate without penalties beyond outstanding obligations. No universal 30-day or 60-day closure period follows from those rules. (CIMA, Market Conduct Rules, rr. 10.16, 10.18.)
ESMA expects clear, repeated exit communications. Its reference to automatic closure of residual positions does not itself grant a forced-sale or contract-transfer power. Establish the legal authority for each proposed cancellation, conversion or migration before execution. Offer lawful transfer to an accepting authorised provider or a customer-controlled wallet, subject to applicable financial-crime controls. A receiving provider must perform its own customer due diligence; an exported customer database does not complete onboarding. (ESMA, Statements ESMA75-113276571-1679, pp. 1–2, and ESMA75-113276571-1710, pp. 1–2.)
CIMA also requires notification of a decision to cease virtual asset services and approval of the cessation-communication plan. Changes to the approved business plan can require prior written approval. Coordinate those steps with EU cessation requirements, without treating either regulator’s silence as permission to continue. Whole-business licence cancellation is a separate procedure from leaving the EU market. (CIMA, Market Conduct Rules, r. 12.10; Virtual Asset (Service Providers) Act, s. 9(3)(cb); CIMA, Rule: Cancellation of Licences, Registrations, or Waivers for Virtual Asset Service Providers, rr. 6.1–6.6.)
The three operating routes
An own-authorisation strategy requires an EU entity meeting Article 59’s establishment and management conditions, with permission for each actual service. Platform operation, exchange using proprietary capital, order execution and custody are distinct service categories. Management must map the proposed operating model before seeking authorisation and making the required cross-border notification. The search phrase “crypto exchange license Europe” cannot replace that service analysis. An application supplies no interim permission for the Cayman entity’s existing accounts. (MiCA, arts. 3(1)(16), 59(2), 59(6)–(8), 62–63, 65.)
A genuine EU-provider arrangement is the preferred near-term route where the business intends to retain EU customers and a suitable provider can accept them. That provider must actually contract for and perform, or lawfully outsource, the authorised services. It must retain responsibility and resources. For related payment services, the CASP or its third-party provider must hold authorisation under Directive (EU) 2015/2366. A branded interface that redirects customers into Cayman contracts does not accomplish migration. Solicitation by an EU affiliate on the Cayman entity’s behalf still engages Article 61. The board should make provider acceptance, permission scope and completed customer onboarding conditions of any transfer. (MiCA, arts. 61, 70(4), 73, 75(1); ESMA, Opinion ESMA75-453128700-1048, paras. 19–23.)
Custody creates a specific constraint. Article 75(9) permits an EU custodian to use only another Article 59-authorised custodian for that service. ESMA treats pre-funding client orders with a third party using client crypto-assets as sub-custody. It distinguishes transfers needed to settle an already executed specific order. Separately, ESMA’s broker opinion does not categorically prohibit routing, execution or hedging on non-EU venues. Each arrangement still requires examination for circumvention. An EU provider’s own permission does not exempt Cayman-to-EU business-to-business services from Articles 59 and 61. A Cayman custody licence alone cannot satisfy the EU sub-custody condition. (MiCA, arts. 59, 61, 75(9); ESMA, Q&A 2608, answer dated 9 July 2025; Opinion ESMA75-453128700-1048, para. 22; Statement ESMA75-113276571-1710, p. 2 and n. 3.)
The recipient must assess assets as well as accounts. On 8 October 2026, ESMA stated that authorised CASPs should cease services involving non-compliant asset-referenced and e-money tokens. Its opinion reaches custody and transfer services as well as trading. National competent authorities may allow closely supervised, time-limited residual functions to prevent client harm. ESMA calls for remediation as soon as possible and no later than three months after publication. This is a supervisory opinion, not a legislative amendment. An EU provider’s authorisation cannot justify assuming that every legacy stablecoin balance can migrate into ordinary service. (ESMA, Opinion ESMA75-113276571-1742, paras. 12–14, 21–27.)
Orderly exit is required where no lawful continuation or executable authorised-provider route exists. Keep an exit plan operational while considering an own-authorisation application. Migration must not become an open-ended reason to preserve unauthorised business. Customers who decline a proposed new provider need a lawful withdrawal or closure route; compulsory asset disposal requires its own authority. (MiCA, art. 59; ESMA, Statement ESMA75-113276571-1679, pp. 1–2.)
The strongest objection to migration or exit
The strongest objection is that existing clients may already qualify under Article 61. ESMA’s explanation of ongoing relationships supports that argument. A blanket shutdown would overstate MiCA and could force avoidable transfers, fees or sales. The recommendation therefore preserves a documented continuation category and rejects automatic liquidation. (MiCA, art. 61(1); ESMA, Final Report ESMA35-1872330276-1899, paras. 50–51.)
The objection does not establish eligibility for solicited accounts or justify EU growth through the Cayman entity. For customers outside the exception, a genuine authorised provider offers a lawful structure for future service if it accepts the relevant business. Where that condition fails, management should complete the exit rather than substitute declarations, a nominal EU contract or a pending application for permission. (MiCA, arts. 59, 61–63, 73, 75(9).)