Regulatory scope reference

MiCA compliance in United States: who is in scope and what is owed

How MiCA applies to companies operating in or serving the United States — scope tests, the obligations that follow, and the primary sources to verify each one against.

The Markets in Crypto-Assets Regulation (MiCA) applies extraterritorially to certain entities outside the European Union, including organizations established in the United States that target EU-based clients. Supervised by the European Securities and Markets Authority (ESMA) and the European Banking Authority (EBA), these rules govern digital asset issuance and service provision. Organizations must assess their cross-border activities against specific regulatory triggers to determine whether they fall within scope.

Extraterritorial Scope and the Reverse Solicitation Exception

The application of the Markets in Crypto-Assets Regulation to entities located outside the European Union depends primarily on the direction of the service provision. When a United States-based entity offers digital asset services to clients residing within the European Union, the regulatory framework may apply. Supervision of these markets is coordinated by the European Securities and Markets Authority (ESMA) and the European Banking Authority (EBA). Organizations evaluating their exposure can consult the primary rules detailed in Regulation (EU) 2023/1114 (MiCA) — full text. Entities that provide services exclusively at the own exclusive initiative of a customer established in the European Union may benefit from the reverse solicitation exemption, though this narrow exception is interpreted strictly by regulators. If an organization actively solicits EU residents through marketing campaigns, localized websites, or sales agents, the exemption does not apply, bringing the United States entity directly within the scope of European supervision. Compliance teams must audit all digital touchpoints, user acquisition channels, and onboarding jurisdictions to verify whether customer acquisition qualifies as genuine reverse solicitation or active marketing. For ongoing monitoring, cross-border operations require careful coordination with the guidelines published on the ESMA — Markets in Crypto-Assets Regulation (MiCA) portal. Establishing clear geographical fences on digital platforms helps prevent inadvertent regulatory triggers, reducing the risk of unauthorized cross-border service provision under the oversight of European authorities. Organizations can also review broader policy contexts via the European Commission — crypto-assets policy reference page to understand the legislative intent behind these extraterritorial boundaries.

Obligations for Crypto-Asset Service Providers

United States entities determined to be in scope through targeted European activities must comply with authorization and operational requirements equivalent to those imposed on domestic European firms. Any entity operating as a crypto-asset-service-provider must establish a physical presence or subsidiary within the European Union to obtain the necessary authorization from national competent authorities. Operating without proper authorization when serving EU clients constitutes a breach of the regulatory framework and can lead to severe supervisory enforcement actions. The authorization process mandates robust governance structures, transparent management bodies, and adequate prudential safeguards. Firms must implement comprehensive risk management frameworks, IT systems resilience tests, and mandatory complaint handling procedures for European clients. Regulated entities must maintain segregation of client assets and ensure that digital assets held on behalf of customers are protected against insolvency risks. Internal control functions, including compliance officers and independent audit mechanisms, must be permanently integrated into the organizational hierarchy. Cross-border operational models must therefore weigh the administrative overhead of establishing a regulated EU subsidiary against the potential revenue generated from European markets. Failure to institute these operational safeguards can result in public warnings, administrative fines, and prohibitions on providing services within the European Union. Compliance teams utilize structured tools like the mica-readiness framework and the cross-border-compliance assessment matrix to evaluate operational gaps before undertaking European expansion initiatives. Maintaining continuous alignment with ESMA technical standards remains an essential operational requirement for any non-EU entity seeking to maintain active status within the single market.

Issuance and Public Offering of Digital Assets

Beyond intermediary services, the regulatory framework governs the public offering and admission to trading of digital assets. Any United States issuer seeking to offer tokens to the public within the European Union must draft, notify, and publish a crypto-asset-white-paper that meets stringent transparency and disclosure mandates. This document must contain detailed information regarding the issuer, the crypto-asset project, the rights and obligations attached to the tokens, and the underlying technology risks. The publication requirements differ depending on whether the asset is classified as an asset-referenced-token or an e-money-token. Tokens categorized under the latter categories face heightened regulatory scrutiny regarding reserve asset backing, custody arrangements, and redemption rights. If an issuance reaches high valuation thresholds or transaction volumes, it may be classified as a significant-asset-referenced-token, transferring direct supervisory authority from national regulators to the European Banking Authority. United States issuers accustomed to different disclosure regimes must adapt their documentation to satisfy European standards, including liability provisions for misleading statements in the white paper. Regulatory authorities do not evaluate the economic merit or viability of the underlying project, but they strictly enforce completeness, clarity, and accuracy of the disclosure documents. Issuers must also provide investors with a statutory right of withdrawal under specific conditions following the publication of the offering documentation. Managing these multifaceted issuance requirements demands meticulous legal engineering and coordination with specialized advisors familiar with both US securities laws and European digital asset regulations.

Passporting and Market Access Mechanics

Once a United States entity successfully establishes an authorized European subsidiary, it gains access to the single market through the passporting mechanism. This administrative process allows an entity authorized in one EU member state to provide its approved services across all other member states without seeking separate national authorizations. However, utilizing this mechanism requires advance notification to the home national competent authority, detailing the intended member states of operation and the specific categories of services to be offered. Compliance teams must prepare comprehensive notification files that outline operational readiness, marketing strategies, and IT infrastructure capabilities. The home regulator then transmits the notification package to the host regulators in the targeted jurisdictions within statutory timeframes. While passporting significantly reduces the administrative friction of multi-jurisdiction expansion within Europe, it does not exempt firms from complying with local consumer protection rules and general good conduct requirements imposed by host member states. Ongoing reporting obligations remain split between home and host regulators, necessitating robust compliance oversight across all operational footprints. Organizations can leverage automated evaluation tools such as the risk-engine and specialized calculators to model multi-jurisdictional exposure and monitor regulatory changes dynamically. Maintaining a centralized compliance repository ensures that regulatory inquiries from any participating member state can be answered swiftly and accurately, protecting the entity's passporting privileges from suspension or revocation.

Summary of Core Scope and Obligations for Non-EU Entities

To assist compliance and legal operations teams in evaluating their exposure, the following table summarizes the key regulatory touchpoints, applicable definitions, and operational requirements for organizations operating from outside the European Union.

Organizations must systematically review these dimensions against their business model. Teams seeking to benchmark their operational preparedness can utilize the mica-readiness framework and review upcoming milestones via the mica-deadlines tracking page. By maintaining clear records of customer acquisition channels and ensuring all public-facing materials adhere to European disclosure standards, legal operations teams can mitigate the risks associated with extraterritorial regulatory enforcement.

BizLegal AI is regulatory research software, not a law firm. This page is general information, not legal advice, and does not create a lawyer-client relationship. Verify every deadline, threshold and obligation against the primary source cited before you act on it, and consult qualified counsel in the relevant jurisdiction.

Frequently asked questions

Does a United States crypto exchange need an EU license if it does not market to Europeans?

Under the reverse solicitation principle, if European residents independently access a US platform without any prior active solicitation, marketing, or promotion by the platform, the service may fall outside active authorization mandates. However, any promotional activity directed at the EU removes this protection.

What happens if a US issuer publishes a white paper without meeting European disclosure standards?

Publishing incomplete or misleading disclosure documentation for tokens offered to the public within the European Union can result in administrative penalties, public reprimands, and mandatory suspension of the public offering by supervisory authorities.

Who supervises large stablecoin issuers operating across multiple European member states?

Issuers of tokens categorized as significant asset-referenced tokens or e-money tokens with substantial reach fall under the direct supervision of European supervisory authorities, specifically the European Banking Authority, rather than solely national regulators.

Can a US company use its domestic headquarters to provide crypto-asset services to EU clients?

Providing regulated digital asset services to EU clients typically requires establishing a physical presence and obtaining formal authorization within a member state, as pure remote service provision from a third country is restricted unless strict reverse solicitation conditions are met.

Sources

Last reviewed 2026-11-13.