484

What MiCA Means If You Run a Business That Accepts Crypto from European Customers

What MiCA Means If You Run a Business That Accepts Crypto from European Customers
Key Takeaways
  • MiCA is the EU’s single crypto regulation, in full effect since December 2024. It replaced 27 separate national regimes with one framework
  • Any business offering crypto-asset services to EU clients after July 1, 2026 needs full CASP authorization, not just a legacy VASP registration
  • If you accept crypto payments from EU customers through an unlicensed provider, your counterparty risk just changed
  • The Travel Rule applies to every crypto transfer between CASPs in the EU, with no minimum value. Sender and recipient data travels with the payment, and transfers above €1,000 to or from a self-hosted wallet trigger an extra ownership check
  • MiCA sorts stablecoins into regulated token categories, EMTs and ARTs. Only compliant tokens can be offered to EU users, which decides what a business can settle in
  • Paybis holds MiCA CASP authorization and a PSD2 Payment Institution lisence, both issued by the Bank of Latvia in May 2026, covering all 27 EU member states
  • Businesses that do not want to hold their own license can integrate a licensed crypto on-ramp and keep crypto acceptance running under a compliant provider’s framework

Crypto assets can increase or decrease in value. Paybis is a payment gateway, not an investment service. This content is for informational purposes only and does not constitute financial advice.

Quick Answer: MiCA regulates the infrastructure a business uses to accept crypto from EU customers, not usually the business itself. After July 1, 2026, every provider in the chain needs full CASP authorization. Travel Rule data accompanies every transfer between providers, with no minimum value. Stablecoins pegged to one currency must be MiCA-compliant e-money tokens to reach EU users. The practical check is to ask each provider for its license reference and verify the legal entity on ESMA’s register. Paybis holds CASP authorization 27-55/2026/6 and PSD2 Payment Institution license 27-55/2026/7, covering all 27 EU member states.

Most MiCA coverage is written for exchanges. If you run a business that accepts crypto from European customers, the regulation still applies to you, just from a different angle.

You are probably not a CASP. But the platforms you use to process crypto payments are, or they should be, after July 2026. Which ones hold genuine authorization, what breaks when they do not, and what MiCA compliance actually requires from your side of the transaction. These are the questions this article covers.

What Is MiCA and Who Does It Apply To?

MiCA is the EU’s Markets in Crypto-Assets Regulation. It replaced the patchwork of national crypto regimes across Europe with a single rulebook, applied uniformly across all 27 member states. A platform authorised in one country can passport that authorization across the whole EU.

For businesses accepting crypto, the part of MiCA that matters most is the CASP framework. A Crypto-Asset Service Provider is any business that offers custody, exchange, transfer, or payment services involving crypto-assets on a commercial basis. Under MiCA, those businesses need a CASP license to operate in the EU. A legacy VASP registration, which is an AML notification rather than a financial services authorization, does not qualify. The VASP vs CASP guide covers that distinction in full.

Does MiCA Apply to Your Business Directly?

It depends on what you do. If your business accepts crypto as payment for goods or services but does not itself offer crypto-asset services, you are generally outside the CASP framework. Your customers send you crypto, you receive it. That is a payment, not a regulated service.

Where it gets complicated is the infrastructure you use to do that. The wallet provider, the exchange you convert through, the settlement provider who converts crypto to fiat and sends it to your bank account: those businesses are CASPs. After July 2026, if they are not authorised, they cannot legally operate in the EU. And if they cannot operate legally, your ability to accept crypto from EU customers runs through an unregulated chain.

That is where MiCA lands on your operations, even if you are not a CASP yourself.

What Changed on July 1, 2026?

The MiCA transition period closed. Before that date, platforms that were already operating under legacy national VASP registrations were permitted to continue while their CASP applications were processed. That window is now shut across most EU member states.

A platform still running on a legacy registration after that date cannot legally serve EU clients. In practice, that can mean frozen withdrawals, restricted services, or a provider quietly restricting EU customer access while it works through a compliance backlog. For a business relying on that provider to process crypto acceptance, the interruption is operational, not theoretical.

The full picture of what CASP authorization covers is in the Europe crypto regulation guide.

What Is the Travel Rule and How Does It Affect Your Payments?

The Travel Rule is the requirement that has the most direct impact on day-to-day crypto transactions. Under the EU’s Transfer of Funds Regulation, which operates alongside MiCA, every crypto transfer between CASPs must carry originator and beneficiary data. There is no minimum value. The sender’s name, account details, and address travel with the payment whatever its size.

€1,000 is where a second, separate obligation starts. Under the EBA’s Travel Rule guidelines, a transfer above that amount to or from a self-hosted wallet requires the provider to confirm that the customer owns or controls that wallet.

This changes something practical for B2B crypto acceptance. If your settlement provider is not CASP-authorised, it is not part of the Travel Rule network. That means transfers between your provider and licensed counterparties carry compliance gaps that Travel Rule-compliant CASPs cannot legally ignore. Some will reject transfers from non-compliant sources outright.

EMTs, ARTs, and What the Token Categories Mean for Settlement

MiCA splits crypto-assets into three buckets, and for a business the split decides what it can legally settle in.

E-money tokens (EMTs) are stablecoins pegged to one official currency. Euro and dollar stablecoins are the obvious cases. Their issuers must be authorised in the EU as credit institutions or e-money institutions, and holders can redeem at par.

Asset-referenced tokens (ARTs) track a basket of currencies or assets and carry their own authorization regime. Everything else, Bitcoin and Ethereum included, sits in the general other crypto-assets category with lighter issuer obligations.

The business consequence is concrete. EU-licensed platforms can only offer compliant tokens to EU users. ESMA told crypto-asset service providers in January 2025 to stop making non-compliant ARTs and EMTs available for trading, and EEA venues acted on it. Binance delisted eight stablecoin pairs for EEA users on 31 March 2025, including USDT and DAI, keeping compliant tokens such as USDC available.

So a business that invoices or settles in a stablecoin needs two things. The token has to be a compliant EMT, and the payout leg needs a provider licensed for it. That is the combination Paybis’s dual licensing covers: CASP authorization for the crypto leg, and the PSD2 Payment Institution license for regulated stablecoin payouts and e-money token transactions across all 27 member states.

Before standardizing settlement on any stablecoin, run two checks. Is the issuer EU-authorised for that EMT, and does the provider’s license cover EMT transactions rather than crypto exchange alone?

What Does Your Crypto Acceptance Provider Actually Need to Hold?

Two things, depending on how the settlement works.

If your provider handles the crypto leg only, a CASP license covers it. That covers receiving, converting, and transferring crypto-assets.

If your provider also holds your fiat float while it converts and settles to your bank account, that is a payment service under PSD2, and it needs a Payment Institution license on top of the CASP authorization. A business operating that settlement flow without a PI license is sourcing the fiat leg from a partner bank or EMI. That adds a counterparty you never chose into every payment you receive.

The PI license article explains the fiat leg in detail and what breaks when it is rented rather than licensed in-house.

What About DAC8 and Tax Reporting?

DAC8 is the EU tax reporting directive that came into effect in 2026. Licensed crypto platforms are now required to collect and report user transaction data to national tax authorities, who share it across member states.

For businesses accepting crypto from EU customers, this means the platform processing your settlements is collecting and reporting that data. If you are using an unlicensed provider, it is outside the DAC8 reporting framework. That may look convenient in the short term. Regulators are increasingly treating gaps in DAC8 coverage as a signal for additional scrutiny rather than a clean absence of liability.

What Are the Practical Options for a Business That Is Not a CASP?

There are two routes.

The first is to obtain CASP authorization. This is the right path if crypto acceptance is core to your product and you are processing volume that justifies the compliance infrastructure. The getting a crypto license guide covers what the process involves. It is not fast, and it is not cheap, but it gives you direct control over the full chain.

The second is to integrate through a licensed provider. This is the path most businesses take. You integrate a CASP-authorised on-ramp or settlement provider, and your crypto acceptance runs under their regulatory framework. Identity verification (KYC), anti-money-laundering monitoring, Travel Rule compliance, and the CASP obligations all sit with the provider. Your business benefits from that coverage without building the infrastructure independently.

For this to work, the provider you choose has to actually hold the authorization. Not a legacy registration. Not a transitional arrangement. A current CASP license, checkable on ESMA’s interim MiCA register.

How CASP Passporting Works for Infrastructure Buyers

Passporting is what makes one CASP authorization cover the whole EU. A provider authorised by its home regulator notifies that regulator of the other member states it intends to serve, and the authorization extends there. No separate national licenses are needed.

For an infrastructure buyer this collapses the old VASP-era question, which was whether the provider was registered in each market, into a single check.

Three things are worth verifying rather than assuming.

  1. The authorization. Check the legal entity name and LEI on ESMA’s MiCA register. It also lists which services the authorization covers, because custody, exchange, and transfer are scoped separately. The license reference itself sits on the home regulator’s own list.
  2. The passport coverage. The register lists every member state the provider has notified. A provider serving a market it has not passported into is operating outside the framework there.
  3. The home regulator. The supervisor that granted the license examined the provider’s capital, governance, and AML infrastructure. It is also the authority with enforcement power over it.

Paybis holds CASP authorization 27-55/2026/6 from Latvijas Banka. The Latvijas Banka register lists SIA Paybis Europe as passported into all 27 EU member states, so one verification covers the full EU footprint.

What Should You Ask Your Current Crypto Acceptance Provider?

Three questions get to the point quickly.

  • Does the provider hold a current CASP license? Ask for the legal entity name and the license reference number. The entity is checkable on ESMA’s register, the reference on the national regulator’s own list. A provider that cannot give you a reference number quickly does not hold one.
  • Is the fiat settlement leg licensed in-house? If your provider converts crypto to fiat and sends it to your bank account, ask whether they hold a Payment Institution license for that leg. If the answer involves a partner bank or third-party EMI, you have a counterparty in the chain you have not vetted.
  • How does the provider handle Travel Rule compliance? A CASP-authorised provider runs Travel Rule checks on every eligible transfer. If the answer is vague, the infrastructure probably is not there.

How Does Paybis Handle This for Business Partners?

Paybis holds MiCA CASP authorization and a PSD2 Payment Institution license, both issued by the Bank of Latvia in May 2026. The CASP license passports across all 27 EU member states. The PI license covers the fiat settlement leg. Both sit under one roof.

For businesses integrating crypto acceptance, the Paybis on-ramp handles the full chain under that licensing base. KYC, AML monitoring, and Travel Rule compliance are handled on the Paybis side. For higher-volume institutional operations, the Corporate On/Off Ramp adds KYB for business clients and supports transactions up to $5 million per transaction across 140+ countries, SEPA and SWIFT rails, and 25 fiat currencies.

For businesses running outbound payments alongside crypto acceptance, mass crypto payouts run on named IBANs with API or dashboard execution, under the same licensed framework.

Bottom Line

MiCA goes beyond regulating crypto exchanges. It regulates the infrastructure that businesses use to accept crypto from European customers. After July 2026, that infrastructure either holds CASP authorization or it does not operate legally in the EU.

The check is straightforward. Ask your provider for a license reference and look it up. If the authorization is there, your crypto acceptance chain has a licensed entity behind it. If it is not, the counterparty risk that comes with an unlicensed provider falls on you.

About Paybis

Paybis is a licensed cryptocurrency exchange and payment infrastructure provider, operating since 2014. It holds MiCA CASP authorization, reference 27-55/2026/6, and a PSD2 Payment Institution license, reference 27-55/2026/7, both issued by the Bank of Latvia. Alongside EU authorization, Paybis holds FinCEN registration in the US, FINTRAC registration in Canada, VASP registration in Poland, and UK financial promotions approval under the FCA regime, approved by Gateway21 (reference #928013).

The platform powers businesses across 180+ countries, supports 90+ cryptocurrencies through 35 payment methods, and has processed close to $6 billion in total volume (May 2026). For businesses, Paybis provides on-ramp and off-ramp integration, mass payout infrastructure, and corporate exchange services with dedicated B2B support.

FAQ

Does My Business Need a CASP License to Accept Crypto from EU Customers?

Generally no, if you are simply accepting crypto as payment for goods or services. The CASP framework applies to businesses offering crypto-asset services on a commercial basis. However, the providers you use to process and settle those payments do need CASP authorization after July 2026.

What Happens If My Crypto Payment Provider Is Not CASP-Authorized?

After the July 2026 transition deadline, a provider without CASP authorization cannot legally serve EU clients. In practice, this can mean restricted services, frozen settlement flows, or being excluded from Travel Rule networks that licensed CASPs use to exchange compliance data. The impact lands on your operations even though the licensing gap sits with your provider.

What Is the Difference Between a VASP Registration and a CASP License?

A VASP registration is an AML notification. It confirms that a business exists and has committed to anti-money laundering rules. A CASP license is a full financial services authorization. A regulator has reviewed the business across capital requirements, governance, IT security, and AML infrastructure, and approved it to operate.

How Do I Check Whether a Crypto Provider Holds a Valid CASP license?

Ask for the legal entity name and the license reference number, then check ESMA’s public CASP register. It is updated weekly and shows the scope of each authorization and which national regulator granted it.

Can I Integrate Paybis Without Holding My Own Crypto License?

Yes. Businesses that integrate the Paybis on-ramp or Corporate On/Off Ramp operate under Paybis’s licensed framework. KYC, AML, and Travel Rule compliance are handled on the Paybis side. You do not need to hold a CASP license in each market to accept crypto from EU customers through the integration.

Are Stablecoins Regulated Under MiCA?

Yes, and more strictly than other crypto-assets. Stablecoins pegged to one currency are e-money tokens (EMTs). Only EU-authorized credit or e-money institutions can issue them, and holders are entitled to redemption at par. Basket-referenced tokens are ARTs, with their own regime. A business settling in stablecoins should confirm two things: the token’s EMT status, and that its provider is licensed for EMT transactions. That second part is what a PSD2 Payment Institution license adds on top of CASP authorization.

Disclaimer: Don’t invest unless you’re prepared to lose all the money you invest. This is a high‑risk investment and you should not expect to be protected if something goes wrong. Take 2 mins to learn more at: https://go.payb.is/FCA-Info