MiCA compliance in France: who is in scope and what is owed
How MiCA applies to companies operating in or serving France — scope tests, the obligations that follow, and the primary sources to verify each one against.
Markets in Crypto-Assets Regulation (MiCA) establishes the regulatory framework for issuers of crypto-assets and crypto-asset service providers operating within the European Union, including France. Organisations established in France or targeting customers in France must evaluate their scope under the regulation. Compliance teams review issuance requirements, operational authorizations, and ongoing supervisory standards.
Extraterritorial Scope and Market Access in France
The application of Regulation (EU) 2023/1114 (MiCA) — full text reaches entities issuing crypto-assets or providing services related to crypto-assets within the European Union. Entities established in France must adhere to authorization and conduct rules set forth by European and national supervisors. The framework applies to public offers of crypto-assets and the admission of crypto-assets to trading platforms. Organisations offering services to clients within France must determine whether their activities trigger regulatory perimeters. Entities providing core services fall under definitions detailed in the glossary/crypto-asset-service-provider reference. When foreign entities solicit clients located in France without a physical establishment, specific exemptions or local rules apply. Reviewing the core definitions helps compliance teams establish whether their operating model falls within the scope of the regulations/mica text. Operations involving certain token types require specific categorizations. For example, asset-referenced tokens follow the standards outlined in glossary/asset-referenced-token, while electronic money tokens align with glossary/e-money-token. Assessing jurisdictional touchpoints involves analyzing website targeting, marketing language, and payment flows originating from France. Entities that do not establish direct operational presence must still evaluate if their cross-border activities meet the jurisdictional thresholds defined in the primary EU texts. Legal operations teams frequently consult the guides/crypto-token-launch-compliance-guide to map out token issuance obligations.
Obligations for Issuers of Crypto-Assets
Issuers offering crypto-assets other than asset-referenced tokens or e-money tokens to the public in France must draw up, notify, and publish a crypto-asset white paper. This document must contain mandatory disclosures regarding the issuer, the project, the rights and obligations attached to the crypto-assets, and the underlying technology. Guidance on document preparation is linked to the glossary/crypto-asset-white-paper definition. Issuers must act honestly, fairly, and professionally, communicating with holders in a fair, clear, and not misleading manner. Issuers of asset-referenced tokens face more stringent requirements, including authorization from competent authorities and maintenance of a specific reserve of assets. Issuers of significant asset-referenced tokens, as identified under glossary/significant-asset-referenced-token, are subject to direct supervision by the European Banking Authority. The regulatory burden scales with the systemic importance of the token. Teams launching tokens must align their disclosure practices with the requirements set by ESMA — Markets in Crypto-Assets Regulation (MiCA). The European Commission — crypto-assets policy context provides additional background on why these disclosure regimes were established across member states. Issuers must also maintain robust complaints-handling procedures and manage conflicts of interest effectively.
Obligations for Crypto-Asset Service Providers
Entities providing services such as custody, trading platforms, exchange services, execution of orders, and portfolio management must obtain authorization as crypto-asset service providers. Authorization requires maintaining minimum capital reserves, establishing robust governance arrangements, and ensuring directors and shareholders possess good repute. Operational resilience and cybersecurity standards are mandatory for all authorized entities. Service providers operating across multiple member states can utilize the single market passporting framework. This mechanism allows entities authorized in one member state to provide services in France following notification procedures managed through glossary/passporting provisions. Compliance teams must coordinate with regulatory authorities to verify that cross-border notifications are correctly processed before commencing commercial activities in new jurisdictions. The European Securities and Markets Authority coordinates supervisory convergence across member states to ensure uniform application of conduct rules. Service providers must implement policies to prevent market abuse, insider dealing, and unlawful disclosure of inside information. Record-keeping obligations require maintaining complete logs of all transactions and orders for inspection by competent authorities.
Exclusions and the Reverse Solicitation Principle
Certain entities and activities are excluded from the scope of Regulation (EU) 2023/1114 (MiCA) — full text, such as central banks, public international organizations, and specific liquidities or intra-group transactions. Decentralized finance protocols where services are provided in a fully decentralized manner without any intermediary may fall outside traditional authorization perimeters. Organizations structured as decentralized autonomous organizations examine their structural risks using resources like guides/dao-legal-structure-guide. A critical exception for third-country firms is the reverse solicitation principle. When a client established in France initiates an exclusive request for crypto-asset services from a non-EU entity on their own initiative, that specific service provision is generally exempt from mandatory authorization. However, this exception is strictly interpreted by regulators. Firms cannot rely on broad marketing or general solicitation while claiming reverse solicitation. The parameters of glossary/reverse-solicitation require careful documentation of client interactions. Compliance teams must maintain audit trails proving that the client approached the firm independently without prior solicitation, inducement, or promotion directed at the French market.
Supervisory Authorities and Enforcement Framework
Supervision of crypto-asset markets in France is divided between national competent authorities and European supervisory bodies. The Autorité des Marchés Financiers and the Autorité de Prudential Résolution et de Résolution work alongside the European Securities and Markets Authority and the European Banking Authority. These bodies hold investigative and supervisory powers, including the ability to request documents, conduct on-site inspections, suspend public offers, and prohibit non-compliant services. National competent authorities cooperate with European authorities to investigate cross-border infractions and enforce penalties. The regulatory oversight ensures that entities operating within France adhere to uniform transparency, capital, and conduct standards. Organizations must monitor regulatory updates published by ESMA — Markets in Crypto-Assets Regulation (MiCA) and European Commission — crypto-assets policy portals to stay informed of delegated acts, regulatory technical standards, and implementing technical standards. Compliance teams must implement continuous monitoring procedures to address supervisory inquiries promptly and maintain transparent lines of communication with regulatory examiners.
Categorisation and Operational Compliance Summary
Compliance teams operating within the French regulatory perimeter must systematically categorize their tokens and services to determine the applicable legal regime. The following matrix outlines the core categories, regulatory references, and supervisory oversight bodies applicable under the European framework:
| Token or Service Type | Regulatory Definition Reference | Primary Supervisory Body | | --- | --- | --- | | Standard Crypto-Asset | glossary/crypto-asset-white-paper | National Competent Authority | | Asset-Referenced Token | glossary/asset-referenced-token | National Competent Authority | | Significant Asset-Referenced Token | glossary/significant-asset-referenced-token | European Banking Authority | | E-Money Token | glossary/e-money-token | National Competent Authority | | Crypto-Asset Service Provider | glossary/crypto-asset-service-provider | National Competent Authority / ESMA |
Maintaining accurate mappings across these categories ensures that internal compliance documentation aligns with the statutory text of Regulation (EU) 2023/1114 (MiCA) — full text. Operational teams update their policies continuously to reflect changes in regulatory guidance issued by supervisory authorities.
BizLegal AI is regulatory research software, not a law firm. This page is general information, not legal advice, and does not create a lawyer-client relationship. Verify every deadline, threshold and obligation against the primary source cited before you act on it, and consult qualified counsel in the relevant jurisdiction.
Frequently asked questions
How does MiCA apply to foreign firms targeting French customers?
Foreign firms marketing crypto-asset services to customers in France without an establishment in the EU must generally obtain authorization, unless the service is initiated exclusively at the own initiative of the client via reverse solicitation.
What is the primary document required for issuing a standard crypto-asset?
Issuers must prepare and publish a crypto-asset white paper containing detailed disclosures about the project, issuer, and rights attached to the tokens, satisfying regulatory transparency standards.
Which European bodies share supervisory duties under the regulation?
Supervision is shared between national competent authorities in member states and European authorities, specifically the European Securities and Markets Authority and the European Banking Authority.
Are decentralized finance protocols automatically regulated?
Fully decentralized protocols where no intermediary exercises control or provides services may fall outside the scope, though hybrid structures with centralized control points remain subject to review.
Sources
BizLegal AI is regulatory research software, not a law firm. This page is general information, not legal advice, and does not create a lawyer-client relationship. Verify every deadline, threshold and obligation against the primary source cited before you act on it, and consult qualified counsel in the relevant jurisdiction.
Last reviewed 2026-11-07.