ESMA’s Crypto Custody Warning: What MiCA’s New Rules Could Mean for Your Digital Assets

Ever wonder how Europe’s crypto watchdogs are juggling the delicate dance between banning and then embracing digital assets? Well, the European Securities and Markets Authority (ESMA) is diving headfirst into this balancing act, setting up a fresh new process to scrutinize crypto custody providers under the freshly minted Markets in Crypto-Assets (MiCA) framework. As the MiCA transition wrapped up on July 1st, regulatory eyes are sharpening, spotlighting the resilience and operational guts of crypto-asset service providers, especially those guarding your digital keys. It’s like a high-stakes game of “who’s got the safest vault?” stretching all the way to mid-2027, with national regulators spread across the EU digging into governance, transaction controls, and even the tiniest operational hiccups. If you’ve ever wondered what it takes to keep your crypto safe and sound under the watchful gaze of Europe’s crypto cops, this unfolding saga might just surprise you. LEARN MORE.

The European Securities and Markets Authority (ESMA), a key EU regulator supporting the implementation of the Markets in Crypto-Assets (MiCA) framework, is launching a dedicated process for reviewing crypto custody providers.

ESMA plans to conduct a common supervisory action (CSA) focused on the operational resilience of crypto-asset service providers (CASPs), with a specific emphasis on custody services, according to an official announcement on Wednesday.

“The CSA will assess the maturity of CASPs’ digital operational resilience frameworks in relation to custody activities,” ESMA said, adding that the reviews will focus on areas including key and storage management, alongside other operational risks.

The move comes shortly after the end of MiCA’s transition phase on July 1, prompting increased attention to how EU authorities will supervise compliance with the new framework, including potential enforcement questions.

National regulators to conduct custody reviews

ESMA said the supervisory action will be conducted by national competent authorities (NCAs) across the EU, which will assess a risk-based sample of authorized CASPs.

The reviews will run from now through the first half of 2027, with regulators examining how companies handle custody-related operational risks.

In addition to reviewing key and storage management, NCAs are expected to assess areas such as governance structures, transaction controls, incident detection and response, and dependencies on external service providers.

ESMA will later consolidate the findings into a final report to be submitted to its Board of Supervisors after the exercise concludes in the second half of 2027.

The review comes as some custody providers have stepped in to support crypto platforms adapting to Europe’s new regulatory environment.

Last month, crypto custody company BitGo launched a Europe-focused crypto-as-a-service platform aimed at helping platforms maintain access to the market while working through MiCA-related compliance requirements.

Magazine: How crypto laws changed in 2025 — and how they’ll change in 2026

Cointelegraph is committed to independent, transparent journalism. This news article is produced in accordance with Cointelegraph’s Editorial Policy and aims to provide accurate and timely information. Readers are encouraged to verify information independently.