MiCA left 339 crypto firms standing. Build like one.
The EU's MiCA transition ended grandfathering on July 1, 2026 and left 339 live authorizations across 26 countries. What that shortlist means for founders, and why your navigation is now a compliance surface.
On July 1, 2026 the EU stopped grandfathering crypto companies, and the industry got small very fast. I pulled ESMA's own register on September 9 and counted it: 339 live authorization records, 335 distinct legal entities, spread across 26 home states. That is the entire licensed crypto industry of the European Economic Area, and it would fit inside one office building.
If you are starting something in crypto in Europe right now, the license is not a milestone on the roadmap. It is the roadmap.
The authorized market is smaller than the pitch decks suggest
ESMA publishes the register as a CSV and refreshes it weekly, so anyone can do what I did: download it, count it, and see precisely who is allowed to serve the market. The concentration is the interesting part. Germany alone accounts for 81 of the 335 firms, which means BaFin supervises roughly a quarter of licensed crypto in Europe. France has 34, the Netherlands 28, Cyprus 24, Malta 22. After that it drops into a long tail of single digits.
Two numbers in that file matter more than the headline count. The first is 26, the number of home states, because a MiCA authorization passports into all of them from any one of them. The second is how short the list is at all. This is not a fragmented market waiting for regional champions. It is a roster.
ESMA wrote the shutdown flow for everyone who missed the date
A week before the cutoff, ESMA published a statement telling unauthorized providers exactly how to leave. Read it as a founder and it stops being a legal notice and starts being a product spec.
Unauthorized firms must immediately stop onboarding new EU clients, refrain from opening new client relationships or accounts, and cease marketing activities and solicitation. They must limit services to what is necessary to sell or transfer crypto-assets, reallocate assets, or close positions. And they must communicate clearly, promptly and repeatedly with clients about all of it.
That is a feature list. A signup kill switch scoped by jurisdiction. A read-only account mode that still permits withdrawals. A messaging system that can reach every user on a schedule and prove it did. I would build all three before launch – not because I expect to wind down, but because a company that cannot switch its own funnel off in an afternoon does not really control its product.
Your navigation is a regulated surface now
This is the part most teams have not absorbed. In July 2025 ESMA published guidance with the unglamorous title "Avoiding Misperceptions", aimed at licensed firms that also sell unregulated products. The core sentence: when offering both regulated and unregulated services, providers "must avoid creating confusion or misleading clients or prospective clients as to whether the service benefits from the protections afforded by MiCA".
Sit with what that regulates. Not your terms of service. Your tab bar. If MiCA-covered custody and an unregulated yield product share a nav row, the same card styling and the same confident tone, you have built precisely the confusion the statement describes. A disclaimer in the footer does not undo a hierarchy at the top.
A lot of my Web3 and crypto design work now lives on that seam, and the fix is never a longer paragraph. It is placement, naming, sequence and default state.
Compliance-shaped design is a discipline, and most teams skip it
The failure mode is old and it is not unique to crypto. In gambling I audited the mandatory player-protection controls across live casinos for a concept I called Playwise: deposit limits, reality checks, breaks, self-exclusion. Every licensed operator ships them. Almost nobody opens them, because they sit under Account settings, wear compliance-sounding names, and put identical friction on the safe choice and the risky one.
Those controls passed audit and failed users, both at the same time. The second half is what regulators eventually come back for.
The licensing team is reading your growth plan
If you want to know what an authorization actually gets examined on, ESMA has said so out loud. After peer-reviewing how Malta's MFSA licensed a provider, it published recommendations directing national authorities to scrutinize business growth patterns, conflicts of interest, governance and intragroup arrangements, ICT architecture, and – the phrase founders should reread – "Web3, decentralised products, and the promotion of unregulated services".
Your marketing surface is part of the file. Founders who write an aggressive growth story for investors and a careful one for the regulator are describing the same product to two audiences who compare notes.
The license is an asset, and the money already thinks so
Capital is consolidating in the same direction. Crunchbase News reported that fintech funding reached $28.6 billion in the first half of 2026, up almost 23% year over year, while deal count fell more than 25% to 1,605. Fewer companies, larger checks.
In a market where 335 firms hold a passport into 26 countries, an authorization stops being a cost line. It is the most defensible asset on the balance sheet, and the one a competitor cannot clone in a sprint. That reorders what you build first, and reordering that list is most of what I actually do as a founder and operator rather than as a designer for hire. The compliance surface is not the thing you bolt on after product-market fit. For a while it is the product.
Everyone in this industry spent a decade calling the license a tax. It turned out to be the moat, and on July 1 the drawbridge came up.
Sources
- ESMA – Markets in Crypto-Assets Regulation (MiCA) (register of authorised CASPs, downloaded and counted September 2026)
- ESMA – ESMA calls on unauthorised crypto-asset service providers to wind down orderly, while also safeguarding clients' interests, as MiCA transitional period ends (June 2026)
- ESMA – Statement on Avoiding Misperceptions: Guidance for Crypto-Asset Service Providers Offering Unregulated Services (July 2025)
- ESMA – ESMA identifies opportunities to strengthen MiCA authorisations (July 2025)
- Crunchbase News – Fintech Funding Surges 23% In H1 2026 As Investors Concentrate Their Bets On AI And Financial Infrastructure (July 2026)