From the journal

Spain's MiCAR Grandfathering Period Expired 1 July 2026 for Crypto-Asset Service Providers

The transitional period under Article 143(3) of Regulation (EU) 2023/1114 (MiCAR) expired on 1 July 2026 in Spain, ending the right of previously registered crypto-asset service providers to continue operating without a full MiCA authorisation. Spain selected a 12-month transitional period, the shortest permissible under MiCAR. Providers without authorisation must now cease offering crypto-asset services or face enforcement action by the CNMV.

2 min read

Article 143(3) of Regulation (EU) 2023/1114 (MiCAR) permits member states to apply a transitional period of up to 18 months for crypto-asset service providers (CASPs) registered under prior national law. Spain selected the 12-month option, setting 1 July 2026 as the expiry date. ESMA confirmed in April 2026 that member state transitional periods would not be extended.

Article 143(3) of MiCAR provides that member states 'may decide to apply a transitional period of up to 18 months' for entities authorised or registered under national law before 30 December 2024. In Spain, entities on the Banco de España's virtual asset service provider register as of 30 December 2024 could rely on grandfathering until 1 July 2026. That right terminated earlier if a MiCA authorisation application was refused before that date. The CNMV is the primary MiCA competent authority for most CASP categories in Spain.

CASPs operating in Spain, including cryptocurrency exchanges, custody wallet providers, and portfolio managers, needed a MiCA authorisation from the CNMV by 1 July 2026 to continue serving clients. Operators without authorisation must stop providing crypto-asset services. Clients of unauthorised providers should expect account restrictions or mandatory migration to authorised platforms.

CASPs that submitted a timely MiCA authorisation application before 1 July 2026 may be able to continue operating pending a CNMV determination, subject to Spanish national law and CNMV discretion. EU-licensed CASPs passporting services into Spain from another member state are not affected by Spain's transitional period. Branches of third-country firms face separate requirements under Article 60 of MiCAR.

Licentium advises crypto-asset service providers on MiCA authorisation strategy, including application preparation for the CNMV and Banco de España. Work we undertake includes MiCA licensing triage, CASP authorisation application drafting, AML/CFT programme alignment, white paper review, and cross-border passport notification.

Source: ESMA, Statement on the End of Transitional Periods under MiCA, April 2026

Crypto Regulatory

More from the journal

See all
Illia Prokopiev

AI Regulation Goes Operational: Five Global Developments

Five official measures with different legal force. It covers IOSCO supervision, Hong Kong SFC circulars, Singapore guidance, a UAE policy approval, and an EU amending regulation. The question is which measures bind a cross-border business on 24 July 2026. A second question is how each measure affects supervision, liability, and implementation. This analysis assumes no identified entity, licence, product, deployment, contract, or territorial nexus. Local status, operator role, product classification, use, placement date, and contract terms therefore control applicability.

SEC Commissioner Peirce Addresses Securities Law Application to Crypto Vaults, 22 July 2026

On 22 July 2026, SEC Commissioner Hester M. Peirce published a statement titled 'Headstands and Summervaults' addressing whether federal securities laws apply to on-chain crypto vault products. The statement distinguishes programmatic vaults governed by immutable smart contracts from managed vaults where a third party allocates user assets, and indicates that managed vaults may require registration under the Securities Act of 1933 and the Investment Company Act of 1940.

Celsius Network Founders to Pay $16.5 Million to Resolve FTC Charges, July 2026

The Federal Trade Commission announced on 20 July 2026 that Celsius Network Inc. former CEO Alexander Mashinsky, former CFO Shlomi Daniel Leon, and co-founder Hanoch 'Nuke' Goldstein will pay a combined $16.5 million to resolve consumer deception charges. The settlement imposes permanent bans on specified crypto commercial activities on all three executives. The FTC's complaint in this matter was originally filed in July 2023.