ESMA (European Securities and Markets Authority) criticizes Malta’s crypto licensing under MiCA

The European regulation of cryptocurrencies is currently the focus of numerous debates. Especially in the spotlight: Malta, which in recent years has positioned itself as one of the leading locations for crypto companies. However, the island republic is now coming under scrutiny from European supervisory authorities. The reason for this is concerns related to the issuance of crypto licenses under the new European regulation MiCA (Markets in Crypto-Assets Regulation). The following will provide a detailed examination of the background, motivations, and possible consequences of this reprimand.

The MiCA regulation came into effect in June 2023 and is expected to be fully implemented across all EU member states by 2025. MiCA aims to harmonize the crypto market within the European Union, enhance investor protection, and curb market abuse, money laundering, and terrorism financing. The regulation governs, among other things, the licensing, supervision, and obligations of digital asset providers. Crypto service providers, including trading platforms, wallet providers, and stablecoin issuers, will henceforth have to meet strict requirements regarding transparency, capital adequacy, and governance.

Since 2018, Malta has established itself as a European center for blockchain and crypto companies with the introduction of the Virtual Financial Assets Act (VFAA). The Maltese government pursued an innovation-friendly policy that attracted numerous international players. The “Blockchain Island” promoted itself with regulatory clarity, openness to new technologies, and efficient licensing procedures. Several major exchanges like Binance and OKEx have temporarily set up on the island or used the Maltese framework for their expansion into Europe.

With the entry into force of MiCA, Malta is now under special scrutiny. According to statements from European supervisory authorities, especially the European Banking Authority (EBA) and the European Securities and Markets Authority (ESMA), there are concerns regarding transparency and due diligence in the licensing of crypto service providers. The EU authority accuses Malta of potentially granting MiCA-compliant licenses automatically or with only minor adjustments to companies that previously received licenses under national laws—without the necessary rigorous reassessment of business models, safeguards, and ownership structures.

Key Allegations

• Insufficient review of business models: The EU warns that existing licenses might be adopted without adequate verification for MiCA compliance. This poses the risk that not all providers meet the European minimum standards for consumer and investor protection.
• Risk of money laundering and fraud: The supervisory authorities see gaps in monitoring and enforcing anti-money laundering policies. Malta needs to improve to avoid serving as a gateway for dubious providers and money launderers.
• Regulatory “forum shopping”: There is concern that companies deliberately choose locations like Malta to benefit from allegedly more lenient controls and thus obtain EU-wide approval.

The Malta Financial Services Authority (MFSA) has acknowledged the criticism and emphasizes that it is working closely with European partners. The MFSA promises to strictly implement all MiCA requirements and to subject existing licenses to a comprehensive review. Nevertheless, Malta defends its previous approaches as innovation-promoting and points out that no EU country has introduced crypto regulation as early and consistently as Malta itself.

The reprimand from the EU authority has far-reaching consequences for companies and investors:

• Uncertainty among providers: Crypto firms must expect stricter reviews and possible delays in license issuance.
• Increased administrative burden: Companies face additional documentation and verification requirements.
• Potential relocation: If Malta tightens regulations and its location advantage diminishes, firms may choose other countries as their base.
• Strengthening consumer protection: In the long term, the harmonization of standards within the EU is expected to improve customer protection and boost trust in the sector.

The discussion about Malta is part of a global debate on the right balance between innovation and regulation in the crypto sector. While countries like the USA or the United Kingdom have not yet established unified crypto regulations, the EU aims to take a pioneering role with MiCA. Malta is becoming a test case to see whether new rules can actually be applied consistently and without gaps.

The reprimand from the EU authority directed at Malta is a wake-up call for all crypto hubs in Europe. It shows that an innovation-friendly policy must not come at the expense of transparency and security. Only with strict reviews, clear standards, and consistent implementation of the MiCA regulation can trust in the European crypto market be sustainably secured. Malta now faces the challenge of combining its pioneering role with compliance with strict European rules and thus continuing to exist as an attractive but safe location for crypto companies.

However, it is also an ambitious misconception to presume, as a European regulatory authority, to truly influence the global crypto market and to assume that EU regulations can be easily adopted worldwide. On the contrary, the EU is playing into the hands of locations like Seychelles, Shanghai, or Singapore.

In times of VPN and globally free internet, it is up to the crypto user to decide how, when, and where, and under what conditions they feel their interests are best served.

Nothing against the honorable goals of the EU, but protection is only granted to those who continue to deposit their funds in fixed-term accounts at a suitable bank.