MiCA focus shifts from rulemaking to supervision, ESMA chair says
On Sept. 28, 2026 the chair of the European Securities and Markets Authority (ESMA) signaled a shift in the European Union's Markets in Crypto-Assets (MiCA) regime from rulemaking toward active supervision. ESMA said it will concentrate supervisory attention on crypto-asset service provider (CASP) resilience, outsourcing arrangements and the application of reverse solicitation rules, while pursuing harmonized reporting across national regulators.
ESMA’s supervisory priorities under MiCA
The announced pivot emphasizes operational resilience for CASPs as a core focus. That includes continuity planning, incident management and the systemic robustness of trading venues, custody providers and other service operators. Outsourcing — the delegation of activities to third parties, including cloud and managed services — is another highlighted area where supervisors will seek to evaluate risk concentrations and governance controls.
Reverse solicitation, a cross-border compliance concept whereby a service is provided only after being specifically requested by a client in another jurisdiction, is also flagged for scrutiny. ESMA's emphasis on harmonized reporting aims to reduce fragmentation between national competent authorities by standardizing how incidents, exposures and compliance data are submitted and shared for supervisory use.
Why this matters for the crypto market
The move from drafting additional rules to supervising implementation changes the regulatory calculus for firms operating in the EU. Supervision implies continuous oversight, reporting obligations and potential enforcement actions rather than a one-time compliance milestone. Exchanges, custodians, wallet providers and stablecoin issuers could face more frequent information requests, targeted audits and coordinated examinations by national regulators under ESMA’s supervisory umbrella.
Harmonized reporting across regulators can reduce regulatory arbitrage and improve the comparability of supervisory data, but it also raises operational burdens for firms that must align internal systems to new templates and timelines. Outsourcing scrutiny is likely to put third-party providers, including cloud infrastructure and custodial technology vendors, under greater due diligence and contractual pressure from CASPs.
For key crypto assets such as Bitcoin and Ether, the supervisory shift is not about asset-level bans or endorsements but about the market plumbing that supports trading, custody and settlement. Stricter resilience and outsourcing rules could affect liquidity arrangements, the availability of custody services, and the operational costs of listing and maintaining trading pairs on EU-regulated venues.
Implications and what participants should watch next
Institutional participants and market infrastructure operators will need to monitor how ESMA and national regulators operationalize supervision: the specific reporting formats, the frequency of supervisory interactions, and the expectations around outsourcing contracts and business continuity testing. Market structure may be influenced if smaller CASPs struggle with the compliance and reporting load, potentially concentrating certain services with larger firms that can absorb supervisory costs.
Next, market participants should watch for published supervisory guidance, templates for harmonized reports, coordination arrangements between ESMA and national authorities, and any enforcement actions that clarify supervisory priorities. These developments will shape compliance programs, service agreements and operational investments across exchanges, custodians, stablecoin issuers and other crypto intermediaries in the EU.