MiCA Compliance Crisis: EU Watchdog Slams Malta’s ’Inadequate’ Crypto Licensing Framework

Europe's financial regulators just dropped a bombshell on Malta's crypto ambitions—and it's not pretty.

The island nation's 'blockchain island' dream hits a regulatory wall as EU authorities flag serious MiCA compliance gaps.

Subheader: License to Fail?

Malta's once-lauded Virtual Financial Assets Act now looks like a regulatory relic. The European Securities and Markets Authority (ESMA) found multiple red flags during its MiCA preparedness review—because nothing says 'financial innovation' like playing catch-up with Brussels.

Subheader: The Compliance Countdown Begins

With MiCA's full implementation looming, Malta-based exchanges face a brutal choice: overhaul operations or risk becoming crypto's next cautionary tale. Meanwhile, traditional finance sharks circle—already placing bets on which offshore jurisdiction will next fail the regulatory sniff test.

Closing thought: Maybe next time, Malta will read the fine print before banking its economy on volatile digital assets. Just a suggestion.

Malta’s regulator, MiCA compliance

According to the report, while the MFSA possesses a solid foundation of expertise and sufficient resources for supervising CASP applications, its latest authorization process fell short of expected standards.

The review committee found that the regulator granted approval despite outstanding material issues and an inadequate risk assessment. The report noted that these lapses raise questions about Malta’s commitment to ensuring full compliance with the MiCA framework.

The Peer Review Committee expressed concern that the MFSA failed to use the authorization phase to compel the unnamed CASP to resolve key shortcomings. ESMA emphasized that a more rigorous approach could have helped bring the entity fully in line with MiCA obligations before granting its license.

Malta remains one of the EU’s most active MiCA license issuers. Since MiCA’s enforcement began, the country has issued five CASP licenses, ranking just behind Germany and the Netherlands.

Recent data shared by Circle executive Patrick Hansen shows that 53 firms have secured MiCA licenses within six months of the framework taking effect. These licenses enable crypto firms to operate across all 30 European Economic Area (EEA) countries without additional regulatory approvals in each jurisdiction.

This wave of compliance marks a major step for the industry, with major players such as Circle and Kraken already approved under the MiCA regime.

Recommendations

Considering this, the report urged national European regulators to strengthen their oversight during the CASP licensing process.

It emphasized the need for close scrutiny in several high-risk areas. These include business model sustainability, governance structures, potential conflicts of interest, intragroup relationships, ICT architecture, and the promotion of unregulated crypto services.

Beyond that, the financial regulator also flagged emerging sectors such as DeFi and Web3 for more careful evaluation.

It added:

“The PRC encourages NCAs to review, as part of the authorisation assessment, user interfaces and customer journeys to ensure that relevant risk warnings are clearly presented to users and that the overall customer experience is in line with MiCA requirements.”