How to Verify EU Crypto Exchange Compliance Using the New CASP Tracker

MiCA Just Gave You a Compliance Search Engine. Use It.

The MiCA Crypto Alliance built it because digging through ESMA's raw downloadable files was a latency nightmare for anyone trying to do basic counterparty checks. The timing isn't subtle — MiCA's transition period slammed shut on July 1, meaning any unlicensed outfit operating in the EU should have already stopped onboarding new clients and marketing regulated services. If your venue isn't in this tracker, ask why.

What the Tracker Actually Exposes

The tool filters by company name, country, regulator, authorization date, and — critically — the specific service categories cleared. That last field is where most retail users get burned. MiCA defines ten distinct regulated services: custody, trading platform operation, crypto-to-fiat exchange, crypto-to-crypto exchange, order execution, token placement, order transmission, advisory, portfolio management, and asset transfers. A firm authorized for custody is not automatically cleared to run an order book or execute client orders. The tracker lets you isolate exactly what scope a license covers. Slippage through an order book is one thing; routing capital to a counterparty that's not even licensed to touch it is another.

The Gap Nobody's Talking About

Crypto lending and borrowing sit entirely outside MiCA's regulated service categories. ESMA has confirmed this explicitly. That means a venue can appear in the register with full authorization and still run unregulated yield products, lending desks, or structured earn programs. The tracker doesn't flag this — it simply won't show those activities because they're not part of the licensing framework. For anyone parking capital in CeFi yield, this is a blind spot with direct liquidation-engine implications if a counterparty blows up on the lending side.

The data itself has a refresh lag — ESMA's interim register updates on a weekly cycle, most recently dated July 31, 2026. The tracker inherits that cadence. New authorizations won't appear instantaneously, and national regulators feeding data back to Brussels can introduce additional delays. Factor that into your due-diligence timing.

What This Means for Your Book

Institutional capital is already flowing in at scale. A Fireblocks survey of roughly 600 European financial executives shows banks and asset managers accelerating crypto infrastructure spend, driven directly by MiCA's regulatory clarity. More institutional participation means more order-book depth and tighter spreads on licensed venues — but it also means the gap between compliant and non-compliant platforms is widening fast. Unlicensed venues operating in the EU post-transition are doing so under explicit ESMA instruction to wind down. If you're still routing significant size through a platform that can't show up in this tracker, you're carrying counterparty risk that the regulator itself has flagged.

My verdict: bookmark the tracker, cross-reference your active venues against the service categories, and treat any platform missing from the register as an open position you need to close. The era of "we're applying for a license" as cover is over.