European Union Compliance Report

Generated 2026-09-22

Comprehensive Framework

Regulatory Overview

Regulatory Status: Dedicated crypto/VA legislation, licensing regime, active enforcement
Key Regulator(s): European Commission, European Banking Authority
Risk Level: low
Primary Legislation: MiCA Regulation (EU 2023/1114) (2023), Transfer of Funds Regulation (recast) (2023), Regulation (EU, The Regulation establishes a comprehensive framework covering: issuers of crypto, The Markets in Crypto-Assets (MiCA) Regulation (EU) 2023/1114 was published in t
Travel Rule: Adopted — Threshold: Implemented
Tax Reporting: DAC8 (effective 2026) — crypto reporting directive. Tax treatment varies by member state.. Personal Income Tax Rates: In the EU, personal income tax rates vary by Member State but are typically progressive. As of 2023, Germany imposes a top rate of 45% on taxable income above €58,300, while Hungary's highest rate is 15%. These rates are subject to change annually based on national budgets (European Union).. Corporate Tax Structure: The EU average corporate tax rate was approximately 20% in 2022, with variations across member states. For instance, Ireland maintains a competitive statutory corporate tax rate of 12.5%, whereas France's rate stands at 25%. Corporate tax rates are influenced by each country’s fiscal policy and economic objectives (How EU tax policy works - Consilium).. Tax Identification Number (TIN): Required for all taxable persons engaging in economic activities within the EU. The TIN is issued by the member state where the entity is established (European Commission - Taxation and Customs Union).. Business Registration: Entities must register with national authorities, such as the German Bundesanzeiger or French Société des Personnes Morales.

Key Facts

aml European Banking Authority (EBA) – responsible for AML/CFT supervision in financial institutions across EU member states. European Union Agencies: Financial Stability, Supervision and Markets (ESM) and European Commission provide overarching guidance. Directive (EU) 2015/849 – established the Fifth Anti-Money Laundering Directive (5AMLD), extending AML obligations to virtual currency service providers. Status: In force since June 10, 2018; updated in 2023 with amendments relevant to digital assets. 1 Regulation (EU) No 596/2014 – defines the scope of AML obligations for virtual asset service providers (VASPs). Status: Effective from June 10, 2018; includes provisions for beneficial ownership transparency and cross-border reporting. 2 Buying, selling, or exchanging virtual currencies. Providing custodial services for virtual assets.
custody The European Union (EU) has established a comprehensive regulatory framework for custody services, particularly focusing on digital assets and financial instruments, to ensure security, transparency, and compliance with anti-money laundering (AML) and know-your-customer (KYC) standards. Joint Physical Custody in Europe: A Comparative Exploration Licensing requirements for custody services are stringent, mandating adherence to strict operational standards and capital adequacy conditions to safeguard assets held by custodians. Parental responsibility, custody and visiting rights ... - Europa.eu AML/KYC obligations are central to the EU's approach, requiring custody providers to implement robust customer due diligence processes and ongoing monitoring to prevent illicit activities. Parental responsibility - child custody and contact rights The regulatory landscape for custody services in the EU is shaped by directives such as MiCA (Markets in Crypto-Assets Regulation), which establishes clear obligations regarding custody and control of digital assets. MiCA Regulation: Custody and Control Key to European ... The EU's approach integrates the principles of parental responsibility, emphasizing shared custody responsibilities for digital assets akin to familial obligations. Joint Physical Custody in Europe: A Comparative Exploration Custody services require a license under the EU’s Capital Requirements Directive (CRD) and the MiCA regulation, ensuring that providers meet capital adequacy standards to protect client assets. Crypto Custody in Europe: Guide to Secure Digital Assets The licensing process involves thorough scrutiny of operational capabilities, risk management practices, and compliance with EU-wide AML/KYC standards. AML/KYC obligations mandate that custody providers conduct comprehensive customer identification procedures, including verifying the source of funds and assessing potential risks of money laundering or terrorist financing. The Role of the Custody Industry
enforcement In January 2026, the French Autorité des Marchés Financiers (AMF) became the first NCA to publicly announce a formal enforcement action under MiCA, issuing a cease-and-desist order against an unregistered non-EU CASP (CryptoFlow Ltd., registered in the Cayman Islands) for soliciting French residents without authorization; the AMF noted this action as a "test case" for MiCA enforcement coordination across NCAs AMF MiCA Enforcement Action January 2026 A March 2026 analysis by the European Systemic Risk Board (ESRB) identified that 8 of the 27 EU NCAs had not yet finalized their MiCA enforcement guidelines by Q1 2026, creating "supervisory fragmentation risks" for CASPs operating across multiple member states; the ESRB warned that this could lead to inconsistent application of authorization requirements and investor protections by the April 2026 enforcement date ESRB Analysis of MiCA Supervisory Fragmentation The European Commission's March 2026 enforcement update confirmed that the Netherlands Authority for the Financial Markets (AFM) had issued formal warnings to 14 crypto-asset firms for failing to submit complete authorization applications by the February 28, 2026 deadline; the AFM warned that firms without approved authorization by April 1, 2026, would face immediate suspension orders European Commission MiCA Enforcement Update March 2026 By April 2026, NCAs have the mandate under Article 114 to process authorization applications, monitor ongoing compliance, and initiate enforcement actions against non-compliant entities, particularly those operating without authorization and not covered by transitional provisions; enforcement powers include suspension of services, imposition of fines, and public warnings MiCA Article 114 Enforcement ESMA has issued a public statement in December 2024 reminding market participants that unregulated entities offering services to EU retail clients without authorization or transitional grandfathering may face enforcement actions, and has called for convergent supervisory practices across Member States ESMA December 2024 Statement Practical enforcement examples by April 2026 remain limited; however, in late 2025, the Dutch Authority for the Financial Markets (AFM) issued warnings against several unregistered crypto firms operating without transitional provisions AFM Crypto Warnings The application of national transitional provisions under Article 127 is optional for Member States, leading to significant variability: for example, Germany has applied a transitional period until June 30, 2026 for existing CASPs, while France opted for a shorter period ending March 31, 2025, creating uneven enforcement intensity across jurisdictions BaFin Transitional Provisions; AMF France MiCA By April 2026, ESMA and NCAs will have conducted at least one round of thematic reviews and supervisory stress tests on authorized CASPs, focusing on governance, custody of client assets, and disclosure requirements, as part of ESMA's 2025-2026 Supervisory Convergence Work Programme ESMA Work Programme 2025
general Horizon Europe: This is the current, flagship funding program. It aims to foster collaborative research projects across multiple EU member states and partner countries. It funds projects across the entire scientific spectrum—from fundamental science to applied technology. Structure: Projects are typically managed through large consortia (groups of universities, research institutes, and companies) collaborating on a specific theme. Other Funding Streams: Complementary funding can come from national governments (e.g., German BMBF funds, French CNRS funds) or through regional development funds. Renewable Energy: Advanced storage solutions (batteries, green hydrogen). Circular Economy: Developing methods to reuse and recycle complex materials (plastics, electronics) at high efficiency. Sustainable Mobility: Research into electric transport, rail, and hydrogen-powered vehicles. Artificial Intelligence (AI): Developing ethical, trustworthy, and robust AI systems (e.g., AI guidelines, explainable AI). Quantum Technology: Investing heavily in quantum computing and secure communication networks.
licensing EBA — Stablecoin supervision (ARTs/EMTs), significant issuer oversight ESMA — Market integrity, CASP oversight, RTS/ITS development National Competent Authorities — CASP authorization in home member state (AMF, BaFin, CNMV, CBI, etc.) MiCA Regulation (EU 2023/1114) (2023) — Comprehensive CASP authorization, token issuance, white paper requirements — fully effective Dec 30, 2024 Transfer of Funds Regulation (recast) (2023) — Travel Rule — EUR 0 threshold (no de minimis) AMLD6 (2024) — AML/CFT harmonization across EU DAC8 (2024) — Crypto reporting directive for tax authorities — effective 2026 VASP: CASP authorization under MiCA via home NCA. 9 service classes: custody (EUR 50K), trading platform (EUR 150K), exchange (EUR 125K), order execution (EUR 50K), placing (EUR 50K), reception/transmission (EUR 50K), advice (EUR 50K), portfolio mgmt (EUR 50K), transfer services (EUR 50K). Prudential: higher of fixed minimum or 1/4 prior year fixed overhead.
securities Crypto assets that qualify as "financial instruments" under MiFID II are legal in the European Union and are subject to comprehensive securities regulation, while those falling outside this definition currently face a fragmented national approach. European Commission - Investment services and regulated markets The primary regulator at EU level is the European Securities and Markets Authority (ESMA), with national competent authorities (NCAs) in each Member State responsible for licensing and supervision of investment firms operating in their jurisdictions. MiFID II | European Securities and Markets Authority A license as an "investment firm" under MiFID II (Directive 2014/65/EU) is required for firms providing investment services in crypto assets that constitute financial instruments, with authorization granted by the relevant NCA of the home Member State. Mifid II | European Securities and Markets Authority No EU-wide crypto-specific securities license exists as of 2025–2026; instead, crypto securities are regulated under the existing MiFID II framework, which has been transposed by all EU Member States into national law. Directive - 2014/65 - EN - mifid ii - EUR-Lex Practical reality: while the MiFID II framework applies to crypto-assets classified as financial instruments, the classification of many digital assets, particularly utility tokens and certain stablecoins, remains uncertain, creating practical challenges for market participants seeking to determine their regulatory obligations. European Commission - Investment services and regulated markets The EU has established a comprehensive set of rules on investment services and activities with the aim to promote financial markets that are fair, transparent, efficient, and integrated. European Commission - Investment services and regulated markets The primary legislative framework governing securities and financial instruments in the EU is the Markets in Financial Instruments Directive II (MiFID II), formally Directive 2014/65/EU of the European Parliament and of the Council of 15 May 2014, which was adopted as a recast of the original MiFID (Directive 2004/39/EC). Directive - 2014/65 - EN - mifid ii - EUR-Lex MiFID II was published in the Official Journal of the European Union on 12 June 2014 (OJ L 173, 12.6.2014, pp. 349–496) and became applicable starting 3 January 2018. Directive - 2014/65 - EN - mifid ii - EUR-Lex European Commission - Investment services and regulated markets
stablecoin Reserve Requirements: Issuers must maintain 100% backing with high-quality, liquid assets (e.g., same currency as the token for EMTs), held in segregated accounts with reputable custodians. Reserves must match outstanding tokens 1:1, with no interest paid to holders and compliance with existing e-money rules. Limits apply to non-euro stablecoins for payments to protect monetary sovereignty. Issuer Licensing: Only EU-authorized credit institutions or e-money institutions (for EMTs) or approved ART issuers (EU-incorporated) can issue stablecoins. Requires publishing a white paper approved by national competent authorities (NCAs), plus ongoing disclosures and governance meeting European Banking Authority (EBA) standards. Crypto-asset service providers (CASPs) must verify issuer compliance via due diligence. Redemption Rights: Holders of EMTs have guaranteed redemption at par value without fees. ARTs have similar stabilization mechanisms but stricter reserve rules. Algorithmic Stablecoins: Effectively banned; MiCA (Article 43) requires all ARTs to maintain reserve assets, prohibiting purely algorithmic or non-collateralized stablecoins from being offered or traded in the EU. CBDC Interaction: MiCA does not directly regulate central bank digital currencies (CBDCs), which fall under separate monetary policy frameworks. It limits non-euro stablecoin payment volumes to mitigate risks to euro stability and CBDC adoption, with EBA/ECB oversight for significant tokens (e.g., >€5 billion reserves or >10 million users).
status European Union regulatory status: comprehensive All Regulatory Technical Standards (RTS) and Implementing Technical Standards (ITS) mandated for CASPs under MiCA (including those under Articles 39(1) for ARTs and 59(1) for EMTs) were required to be adopted by the European Commission and be in force by December 30, 2024, ensuring full operational framework availability well ahead of April 2026 MiCA Article 126 and RTS Deadline The European Commission adopted delegated regulations for RTS on: content of white papers (Article 6), authorization of CASPs (Article 62), complaint handling procedures (Article 71), and conflict of interest management (Article 68); all were published in the Official Journal by mid-2024 European Commission Delegated Acts MiCA EBA published final RTS on stress testing of ARTs (mandated under Article 44) and on recovery plans for ARTs (Article 46) in December 2024, which became applicable from January 2025 EBA Final RTS ARTs ESMA published final ITS on the register of CASPs (Article 111) and the format of white papers in September 2024, ensuring full operational readiness by December 30, 2024 ESMA Final ITS The Markets in Crypto-Assets (MiCA) Regulation (EU) 2023/1114 was published in the Official Journal of the European Union on June 9, 2023, establishing a comprehensive regulatory framework for crypto-assets not covered by existing EU financial services legislation Official Journal of the EU MiCA entered into force on June 29, 2023, with a phased application: Titles III and IV (governing asset-referenced tokens (ARTs) and e-money tokens (EMTs)) became applicable on June 30, 2024, while the full framework, including requirements for crypto-asset service providers (CASPs), will apply from December 30, 2024 ESMA The European Securities and Markets Authority (ESMA) published its final reports on draft Regulatory Technical Standards (RTS) and Implementing Technical Standards (ITS) under MiCA on June 26, 2024, covering classification of crypto-assets, white paper content, sustainability indicators, and business continuity requirements. These Level 2 measures are not yet legally binding; they require formal adoption by the European Commission and publication in the Official Journal to become effective ESMA Final Report on RTS and ITS
tax DAC8 (effective 2026) — crypto reporting directive. Tax treatment varies by member state. Personal Income Tax Rates: In the EU, personal income tax rates vary by Member State but are typically progressive. As of 2023, Germany imposes a top rate of 45% on taxable income above €58,300, while Hungary's highest rate is 15%. These rates are subject to change annually based on national budgets (European Union). Corporate Tax Structure: The EU average corporate tax rate was approximately 20% in 2022, with variations across member states. For instance, Ireland maintains a competitive statutory corporate tax rate of 12.5%, whereas France's rate stands at 25%. Corporate tax rates are influenced by each country’s fiscal policy and economic objectives (How EU tax policy works - Consilium). Tax Identification Number (TIN): Required for all taxable persons engaging in economic activities within the EU. The TIN is issued by the member state where the entity is established (European Commission - Taxation and Customs Union). Business Registration: Entities must register with national authorities, such as the German Bundesanzeiger or French Société des Personnes Morales. Customer Due Diligence: Involves verifying the identity of customers, assessing their risk profile, and monitoring transactions for suspicious activity (Compliance and Tax). Reporting Obligations: Financial institutions must report large cash transactions and potentially suspicious activities to national authorities. The European Union's AML directive mandates consistent reporting standards across member states (EU - Value Added Tax (VAT)). Penalties for Non-Compliance: Include significant fines, interest on unpaid taxes, and in severe cases, criminal sanctions. For example, non-compliance with VAT regulations can lead to penalties of up to 20% of the tax due (European Union).
travel rule Travel Rule adopted — threshold: EUR 0 (no threshold under TFR recast) Adoption and Effective Date: Adopted as part of the TFR recast in May 2023 (Regulation (EU) 2023/1113 entered into force June 2023). Full compliance is mandatory from December 30, 2024, following European Banking Authority (EBA) guidelines finalized in 2024. Threshold Amounts: No de minimis threshold; the rule applies to all crypto-asset transfers, exceeding basic FATF requirements. Covered VASPs: Applies to all CASPs (Crypto-Asset Service Providers) and potentially Intermediate Crypto-Asset Service Providers (ICASPs), defined under the Markets in Crypto-Assets Regulation (MiCAR). This covers entities handling virtual asset transfers, aligning VASPs with financial institutions under AML/CFT rules. Technical Implementation Requirements: CASPs must securely transmit and retain detailed data on originators (e.g., name, address, wallet addresses) and beneficiaries during transfers. EBA's Travel Rule Guidelines (finalized July 2024, applicable December 30, 2024) specify detecting/handling missing data, risk-based approaches, and compliance with prior guidelines like JC/GL/2017/16. The EU mandates more extensive data points than FATF or jurisdictions like Singapore. Regulation (EU) 2023/1113 (TFR recast): Core law extending Travel Rule to crypto. Available via official EU sources. EBA Travel Rule Guidelines: Final report on info requirements for funds/crypto transfers. Direct PDF: https://www.eba.europa.eu/sites/default/files/2024-07/6de6e9b9-0ed9-49cd-985d-c0834b5b4356/Travel%20Rule%20Guidelines.pdf

Sources

This report is AI-generated from publicly available regulatory sources. Last updated: 2026-09-22. View full profile