MiCA Is Not Just a Licence Application

Why the operating model matters as much as the authorisation process

In June 2026, Binance withdrew its MiCA authorisation application in Greece and said that it would seek authorisation in another EU Member State. Binance did not state that the application had been formally rejected. The timing was significant. The final deadline for MiCA transitional arrangements was approaching, and a pending application was not, by itself, a lasting basis for continuing to provide services in the EU.

For smaller crypto businesses, the practical point is straightforward. Access to the EU market is no longer simply a matter of choosing a country and submitting an application. MiCA requires a firm to show that it has the people, governance, controls and financial capacity to provide the services for which it seeks authorisation.

A licensing strategy that begins and ends with the application leaves the hardest business decisions unresolved.

Start with the regulatory perimeter

Before choosing a jurisdiction, a business needs to identify the regulatory perimeter.

The first question is not always whether a MiCA licence is required. It may be whether the product, token or service falls within MiCA at all, or whether another EU financial-services regime applies. MiCA does not apply to every digital asset or financial product. An arrangement may instead raise issues under MiFID II, the e-money framework, payment-services rules or other financial-services legislation.

That distinction matters. A conclusion that an activity falls outside the CASP regime is not necessarily a conclusion that it is unregulated.

The analysis should begin with the actual product and service model: what the business does, which assets it handles, who the customers are, how it markets its services and where the relevant activities take place.

One framework, different business decisions

MiCA allows an authorised crypto-asset service provider, or CASP, to provide its authorised services across the EU through the relevant notification process. That cross-border reach is attractive. It also means that the choice of home Member State affects the cost and viability of the operating model.

The important questions are practical:

• Where will the EU business actually be managed?
• Which senior people and control-function holders can the firm hire and retain there?
• Can the business support a credible local governance structure?
• What will banking, payment, safeguarding and fiat settlement arrangements require?
• Which functions can be outsourced, and which must remain subject to effective internal control?
• What will the regulated business cost after the application has been submitted?

A low-cost filing jurisdiction can become expensive if the company later needs to hire senior staff, build local governance, replace providers or demonstrate that material decisions are genuinely being made there.

Equally, a prestigious jurisdiction has limited value if the company cannot afford to maintain a sustainable operation there.

There is no single “best MiCA jurisdiction.” The right choice depends on the services to be provided, the client base, the group structure, the outsourcing model, the availability of suitable personnel and the business’s financial capacity.

What regulators will test

A regulator can read a policy. It also needs to understand whether the firm can carry it out.

Consider an applicant whose compliance policy describes escalation of suspicious activity, while the founder acts as chief executive, risk manager and the person responsible for every material compliance decision. Or a firm that describes sophisticated transaction monitoring but cannot explain how its systems, staff and outsourced providers will work together in practice.

The issue is not the number of pages in the application. It is whether the allocation of responsibilities, controls and decision-making makes sense for the proposed services, clients, technology and risk profile.

National competent authorities will assess effective local decision-making, suitable management, sufficient local substance and the extent of outsourcing. A group structure can work. The problem arises where the authorised EU entity cannot show that it makes meaningful decisions, understands and controls the risks it retains, and can be effectively supervised by its competent authority.

Outsourcing does not remove responsibility. A CASP may use group companies, technology providers, compliance vendors, cloud providers or other service providers, but it must remain able to oversee them, understand the underlying risks and intervene where necessary.

A lean management structure may be possible for an early-stage business. It must nevertheless demonstrate adequate capacity, independence and separation of responsibilities for the risks it proposes to manage.

Financial viability is part of the assessment

Minimum prudential requirements are only one part of the picture.

A CASP must be able to fund management, compliance, AML controls, technology, security, outsourced services and other operating costs as the business develops, including where revenues fall below expectations. A credible business plan should include realistic activity projections over a three-year horizon and consider what happens if revenues fall short.

Regulatory own-funds requirements are not the same as operating capital. A business may meet the minimum prudential threshold and still lack the liquidity needed to maintain compliance, technology, safeguarding arrangements and key outsourced services through a slower-than-expected launch.

This is often where early-stage businesses underestimate the real cost of MiCA. The relevant question is not only whether the company can finance the authorisation process. It is whether it can fund a compliant EU operation after launch.

A MiCA authorisation also does not, by itself, create access to banking, payment accounts, fiat rails or commercial counterparties. Those arrangements should be tested before the business commits to a licensing timetable, not after the licence has been obtained.

For technology-driven CASPs, the analysis should also include operational resilience, cyber-security and third-party ICT risk. Technology is not a post-authorisation issue. It is part of the operating model the regulator will assess.

Transitional rules are not a strategy

An existing national VASP registration should not be treated as automatic MiCA approval.

MiCA transitional arrangements were limited. They applied only to certain providers that had already been operating lawfully before MiCA became fully applicable, could be reduced or disapplied by individual Member States, and ended no later than 1 July 2026 or earlier if an authorisation was granted or refused.

A pending application alone was not a general right to continue providing in-scope services to clients in the EU. The position depended on the firm’s existing status, the relevant national transition regime, the services involved and the stage of the authorisation process.

Certain already regulated financial institutions may have notification-based routes for specific crypto-asset services. These routes are not a general shortcut for unregulated crypto businesses and must be assessed against the entity’s existing permissions and proposed service perimeter.

Firms should also be cautious about relying on reverse solicitation. It is a narrow exception for services provided at the exclusive initiative of an EU-based client. It is not a marketing strategy and should not be used to support a model built around actively reaching, onboarding or serving clients in the EU.

Is Europe the right market to build for now?

For a business planning to exchange crypto-assets, operate a trading platform, provide custody or offer other in-scope services to clients in the EU, MiCA authorisation may be central to the model.

For a company still testing its product, the more important question may be whether it is ready to finance and manage a regulated EU operation.

There may be a legitimate case for focusing initially on non-EU markets, changing the service model or concluding that a particular activity falls outside the CASP regime. That conclusion, however, should follow a careful analysis of the product, the services, the relevant assets, the client base, the marketing approach and the connection to the EU.

Neither a “B2B” label nor a non-EU operating location is conclusive.

The businesses best placed to benefit from MiCA will make these decisions early. They will identify the services that require authorisation, choose a jurisdiction that supports genuine operations, appoint people who can own the relevant risks and build a financial model that works after launch.

The authorisation can then support an EU business that the company is able to operate and fund.

ClearSky Network works across licensing, corporate structuring, banking, payments and operational partnerships. If Europe is part of your crypto strategy, we can help assess whether MiCA fits the business you intend to build and, if it does, align the licensing scope, entity, governance, banking and operating model before filing.