EU Crypto Scams Surge as 1.7K Unlicensed Platforms Miss MiCA Deadline

Point of Focus

• Crypto impersonation and phishing scams have risen since MiCA’s July 1 licensing deadline.
• Fraudsters are posing as EU regulators and licensed exchanges to redirect customer assets.
• Only 323 companies have secured MiCA authorization, while more than 1,700 unlicensed platforms may have to leave the EU market.

European regulators are warning crypto investors about a rise in impersonation and phishing scams following the July 1 deadline for companies to obtain authorization under the Markets in Crypto-Assets (MiCA) regulation.

Fraudsters are posing as financial watchdogs and licensed crypto businesses, targeting customers who must move assets away from platforms no longer permitted to operate in the European Union.

Fake messages often create urgency, directing users to fraudulent websites or wallets presented as secure destinations for their funds.

The disruption has created an unusually effective opening for criminals because many customers are already expecting legitimate withdrawal or migration instructions.

Scammers exploit platform exits

MiCA’s transition period allowed crypto asset service providers operating under earlier national regimes to continue until July 1, 2026, or until their license applications were approved or rejected.

Companies without authorization must now stop providing regulated services and help customers transfer assets to a licensed provider, sell their holdings, or move funds to a self-hosted wallet.

https:/twitter.com/thisisksa/status/2085252981814169665

Several European financial watchdogs have reported that scammers are copying the names, branding, and communications of regulators and exchanges to intercept those transfers.

“This moment is an opportunity for scammers more than usual,” Stéphane Pontoizeau, an official at France’s Autorité des Marchés Financiers (AMF), told the Financial Times.

In some cases, criminals have impersonated AMF representatives and used fake websites to convince victims that transferring crypto was necessary for regulatory protection or compliance.

Thousands of firms face EU exit

Only 323 companies had secured MiCA authorization by the end of July, according to figures cited from the European Securities and Markets Authority’s (ESMA) register. Data provider VASPnet estimated that more than 1,700 unlicensed firms could be required to stop serving EU customers.

Before MiCA took full effect, more than 3,000 crypto companies operated through a patchwork of national registration systems.

The new regime imposes continuing requirements covering governance, capital, cybersecurity, complaints, market conduct, and Anti-Money Laundering controls. Those obligations represent a substantial change from lighter registration systems previously used in some member states.

The AMF warned that unauthorized providers must cease regulated activities and organize an orderly exit that protects customers’ ability to recover their assets.

Investors urged to verify every request

The ESMA said criminals have misused its name and logo and forged documents to make fraudulent communications appear official. Customers looking for replacement platforms may be particularly vulnerable because they are already navigating an unfamiliar licensing system.

Investors should independently confirm whether a provider appears in the ESMA’s MiCA register before transferring funds. They should also access exchange and regulator websites directly instead of following links in unsolicited emails, text messages, or social media posts.

Urgent demands, unfamiliar wallet addresses, and requests supposedly made on behalf of a regulator should be treated as warning signs.

MiCA was designed to increase consumer protection and accountability across Europe’s crypto market. During the transition, however, the scale of platform exits has produced confusion that scammers are moving quickly to exploit.