Emergence of Scams in Europe Post-MiCA
Following the conclusion of the European Union’s final grandfathering period on July 1, a wave of scams has emerged targeting cryptocurrency users in Europe. The new regulatory framework, known as Markets in Crypto-Assets (MiCA), mandates that unauthorized crypto asset service providers (CASPs) cease operations and steer their clients either toward licensed firms or self-hosted wallets. The European Securities and Markets Authority (ESMA) had previously instructed these unlicensed providers to halt client onboarding and limit their activities solely to an orderly wind-down.
Regulatory Framework and User Protection
The urgency arises from the fact that the MiCA regulation aims to protect users, urging customers to consult the official MiCA register to confirm whether a CASP is authorized before moving any assets. Despite the genuine need for caution, malicious actors have taken advantage of this situation by impersonating regulators and authentic cryptocurrency exchanges, leading unsuspecting individuals to deceptive websites and fake services.
Scale of Regulatory Migration
The scale of the regulatory migration is noteworthy, with over 1,700 unlicensed platforms required to cease servicing EU clients following the enactment of MiCA. However, this figure, initially cited by the data provider VASPnet, has been misconstrued, as it was not an official estimate from ESMA. A snapshot released in late July revealed that only 323 crypto companies held valid MiCA authorization, creating a significant disparity between authorized and non-compliant platforms.
Further complicating the numbers, another analysis from TRM Labs identified 1,343 crypto service providers operating in the European Economic Area (EEA) as of July 1, only 281 of which had received the necessary MiCA approval. These figures highlight the need to approach the estimate of 1,700 halted platforms with caution, as the exact count requires a nuanced interpretation of the ongoing transitions. Under ESMA’s directive, unlicensed providers can only perform essential activities to facilitate the winding down of operations.
Concerns and User Vigilance
Concerns regarding user migration have prompted media estimates suggesting that up to 10 million customers could be affected. However, this figure lacks a concrete basis in ESMA’s official documents. The recognized stance from regulators remains clear: customers using unauthorized services do not benefit from the protections afforded by MiCA, prompting immediate action if their provider is not found on the official register.
Scams and Fraudulent Activities
The opportunity for social engineering scams is apparent. Reports have surfaced indicating that criminals are posing as regulatory employees, soliciting upfront fees from individuals in attempts to recover their investments.
Additionally, fraudsters have been known to misuse ESMA’s name and branding, creating counterfeit documents and imitating legitimate websites to deceive users.
Advice from Financial Authorities
Financial authorities have urged customers to be vigilant. The Dutch Financial Authority (AFM) has warned that retail investors seeking replacements may fall prey to these fraudsters. Meanwhile, Austria’s Financial Market Authority (FMA) has advised clients of unauthorized providers to utilize the ESMA register to confirm the legitimacy of their service providers and, when appropriate, transfer their assets to an authorized CASP or a self-managed wallet.
