MiCA · CASP register statistics

Where MiCA CASP licences are actually issued: the ESMA register in numbers.

As of 16 Sep 2026, the ESMA interim MiCA register lists 352 CASP authorisations held by 349 legal entities across 26 EEA states. Issuance is concentrated: Germany’s BaFin accounts for 27% of all entries, and the five busiest regulators — Germany, France, the Netherlands, Cyprus and Malta — for 58%. Four EU member states — Poland, Greece, Hungary and Romania — have not notified a single authorisation. Timing is just as uneven: 75 licences, 21% of the total, were granted in June 2026, the last month before the transitional regime closed on 1 July 2026. The most frequently authorised service is custody (222 CASPs), followed by transfer services (202) and execution of orders (187). This page recalculates every figure from the official ESMA CSV after each release; it does not reproduce the list of firms, which the register itself already provides.

Source: ESMA interim MiCA register, release of 16 Sep 2026 · recalculated 22 Sep 2026
352
CASP authorisations

Entries in the ESMA register across 26 EEA states; 349 distinct legal entities.

27%
issued by one regulator

Germany’s BaFin alone. The five busiest authorities account for 58% of all entries.

4
EU states at zero

Poland, Greece, Hungary and Romania have not notified a single authorisation.

The register at a glance

Six figures that describe the CASP market

ESMA INTERIM MiCA REGISTER · CASPsRELEASE OF 16 SEP 2026
SIZE
352 register entries held by 349 legal entities. 2 entries carry an end date, so 350 authorisations are in force. 3 entities appear twice because the scope of their authorisation was extended in a later notification.
350 in force
CONCENTRATION
Germany 94 entries (27%), France 35, the Netherlands 29, Cyprus 25, Malta 22. Together the five busiest regulators hold 58% of the register; the remaining 21 states share the other 42%.
Top 5 = 58%
ZERO
Poland, Greece, Hungary and Romania have no entry. Every direct neighbour of Poland that is in the EU has issued at least one licence: Czechia 12, Slovakia 6, Lithuania 6.
4 of 27 EU states
PEAK MONTH
75 authorisations were notified in June 2026, 21% of everything issued since the register opened — the month before the transitional period closed on 1 July 2026. December 2025 was the second peak with 44.
June 2026: 75
SERVICES
Custody appears in 222 entries, transfer services in 202, execution of orders in 187. 95 CASPs are authorised for a single service; only 22 may operate a trading platform.
Custody first
PASSPORTING
A CASP authorisation is notified for use in other EEA states. The average entry lists 15 host states, and 144 entries are notified for the entire EEA.
15 states on average
By home member state

Which regulators issue MiCA CASP licences, and how many

Every entry in the register names the home member state and the competent authority that granted it. Sorted by the number of authorisations; the four EU states without an entry are listed at the end. Countries we file in link to the page that sets out capital, fees and the regulator’s actual timeline.

Competent authorityAuthorisationsShareFirstLatest
GermanyFederal Financial Supervisory Authority (BaFin)9427%17 Jan 202515 Sep 2026
FranceAutorité des Marchés Financiers (AMF)3510%23 May 202528 Jul 2026
NetherlandsNetherlands Authority for the Financial Markets (AFM)298%30 Dec 202416 Jul 2026
CyprusCyprus Securities and Exchange Commission (CySEC)257%16 Jan 202520 Jul 2026
MaltaMalta Financial Services Authority (MFSA)226%27 Jan 202530 Jun 2026
SpainComision Nacional del Mercado de Valores (CNMV)154%5 Mar 202531 Jul 2026
LuxembourgCommission de Surveillance du Secteur Financier (CSSF)134%7 Feb 20253 Jul 2026
CzechiaCzech National Bank (CNB)123%11 Feb 202629 Jul 2026
IrelandCentral Bank of Ireland (CBI)123%25 Jun 202528 Apr 2026
Liechtenstein (EEA)Finanzmarktaufsicht (FMA)123%1 Dec 202510 Jul 2026
AustriaAustrian Financial Market Authority (FMA)113%9 Apr 20257 Jul 2026
LatviaLatvijas Banka103%3 Dec 20258 Jul 2026
ItalyCommissione Nazionale per le Societa e la Borsa (CONSOB)93%27 Apr 202630 Jun 2026
DenmarkFinanstilsynet72%15 Sep 202530 Jun 2026
CroatiaCroatian Financial Services Supervisory Agency (HANFA)62%9 Apr 202617 Jun 2026
LithuaniaBank of Lithuania (LSC)62%13 May 202526 Feb 2026
Norway (EEA)Norwegian Financial Supervisory Authority (Finanstilsynet)62%2 Feb 202629 Jun 2026
SlovakiaNational Bank of Slovakia (NBS)62%18 Dec 202515 Jan 2026
BulgariaFinancial Supervision Commission (FSC)51%22 Dec 202510 Sep 2026
FinlandFinanssivalvonta (FIN-FSA)51%2 Jul 20252 Dec 2025
SloveniaSecurities Market Agency (ATVP)41%4 Oct 202524 Aug 2026
EstoniaEstonian Financial Supervision Authority (EFSA)31%17 Nov 202515 Jun 2026
BelgiumNational Bank of Belgium (NBB)21%20 Jul 202620 Jul 2026
Iceland (EEA)Central Bank of Iceland10%25 Jun 202625 Jun 2026
PortugalBanco de Portugal10%19 May 202619 May 2026
SwedenFinansinspektionen10%13 Oct 202513 Oct 2025
GreeceHCMC — Hellenic Capital Market Commission00%——
HungaryMNB — Magyar Nemzeti Bank00%——
PolandKNF — Polish Financial Supervision Authority00%——
RomaniaASF — Financial Supervisory Authority00%——

Volume and speed are different things. Germany’s total is inflated by banks and cooperative banks adding crypto-asset services to an existing banking licence — 59 of the 94 German entries carry a bank in their name. The regulators that matter for a new crypto firm are the ones that started late and still moved: the Czech National Bank notified its first authorisation on 11 Feb 2026 and reached 12 by 29 Jul 2026; Latvijas Banka went from zero to 10 between 3 Dec 2025 and 8 Jul 2026. A zero in this table means no notification reached ESMA by the release date; it is not a count of refusals.

By month

When the licences were granted

Authorisations notified to ESMA per calendar month, from the first entries in December 2024 to the current release. The gold bar is the peak; the pale bar is the month of the release and is incomplete.

0 25 50 75 Jan 2025 Jul 2025 17 22 44 Jan 2026 14 14 18 75 31 Jul 2026 17

The shape is a deadline curve, not a growth curve. 75 licences in June 2026 — 21% of the register — arrived in the last month before the transitional period ended on 1 July 2026, and 44 arrived in December 2025 as national regimes closed. Between the two peaks the run-rate was 8–18 a month. For an applicant this means the queue you join is shaped by other people’s deadlines: filing in a quiet month buys the regulator’s attention that a deadline month does not.

Monthly figures as a table
AuthorisationsCumulative
Dec 202444
Jan 2025711
Feb 2025213
Mar 2025316
Apr 2025723
May 20251134
Jun 2025943
Jul 2025952
Aug 2025658
Sep 20251169
Oct 20251786
Nov 202522108
Dec 202544152
Jan 20268160
Feb 202614174
Mar 202614188
Apr 202612200
May 202618218
Jun 202675293
Jul 202631324
Aug 202617341
Sep 2026 (partial)8349
Oct 2026 (partial)2351
By authorised service

Which crypto-asset services the licences actually cover

MiCA defines ten crypto-asset services (Article 3(1)(16) of Regulation (EU) 2023/1114). Each authorisation lists the services it covers; a CASP that holds custody and exchange is counted once under each. Counts are entries, out of 352.

Regulation wordingCASPs authorisedShare
a. Custody and administrationproviding custody and administration of crypto-assets on behalf of clients22263%
b. Operating a trading platformoperation of a trading platform for crypto-assets226%
c. Exchange for fundsexchange of crypto-assets for funds18051%
d. Exchange for other crypto-assetsexchange of crypto-assets for other crypto-assets14942%
e. Execution of ordersexecution of orders for crypto-assets on behalf of clients18753%
f. Placing of crypto-assetsplacing of crypto-assets3510%
g. Reception and transmission of ordersreception and transmission of orders for crypto-assets on behalf of clients8925%
h. Advice on crypto-assetsproviding advice on crypto-assets4011%
i. Portfolio managementproviding portfolio management on crypto-assets5315%
j. Transfer servicesproviding transfer services for crypto-assets on behalf of clients20257%

Service mix by regulator — the eight busiest home states

CASPsCustody (a)Exchange for funds (c)Execution (e)Transfer (j)Trading platform (b)
Germany94171465172
France35272120271
Netherlands29211510203
Cyprus25242021172
Malta22211616203
Spain15115590
Luxembourg131087111
Czechia1299592

The mix says what each supervisor is used to seeing. Germany’s column is dominated by execution of orders — the bank model, where a client’s existing securities account gains a crypto line. France, the Netherlands and Malta are custody-and-transfer markets, the profile of an exchange or a wallet provider. Trading-platform authorisations are rare everywhere: 22 in the whole register. If your model is a platform, the number of regulators with any experience of it is small, and that is a reason to choose among them deliberately — see the three CASP licence classes.

One passport.
Twenty-six doors.

Reading the numbers

What the register tells you before you choose a jurisdiction

The passport is real; the queues are national. A CASP authorisation from any home state is valid across the EEA, and the average entry is notified for 15 host states. But the file is assessed by one national regulator, and this table shows that the experience is concentrated in a handful of them. Choosing a home state is choosing a supervisor, its workload and its habits.

Late starters can be fast. Czechia issued nothing until 11 Feb 2026 and then 12 authorisations in under six months. Latvia’s first entry is dated 3 Dec 2025; it now has 10. Slovakia went from its first licence on 18 Dec 2025 to 6. Small regulators that opened late had short queues, and the pages for Czechia, Latvia, Slovakia and Lithuania set out what each one actually asks for.

Zero means the door is not open, not that it is narrow. Poland has no entry because the act designating the KNF as the MiCA authority has not entered into force; a Polish firm that needs a licence today files elsewhere and passports back. We wrote about the Polish situation in Poland, the country that failed to put MiCA into practice.

Volume is not a recommendation. Germany’s 94 entries are mostly banks; Cyprus’s 25 and Malta’s 22 are mostly crypto-native firms. The right question is not which regulator has issued the most licences but which has issued licences to firms like yours — which is what the service-mix table above is for, and what our Cyprus, Malta and Netherlands pages compare in detail.

Source and method

Where the data comes from and how it is counted

Source

The ESMA interim MiCA register, CSV file CASPS.csv, release of 16 Sep 2026. ESMA compiles it from notifications by national competent authorities and republishes it at regular intervals; completeness depends on those notifications. Reproduction of ESMA material is authorised provided the source is acknowledged (ESMA legal notice).

Counting rules

An entry is one row of the register. A legal entity can hold two rows when the scope of its authorisation was extended, so entities are counted separately by LEI. Rows with an authorisation end date stay in the register and in the total; the “in force” figure excludes them. Monthly figures use the authorisation notification date; one row without a date is omitted from the monthly series. 6 entries carry a notification date after the release date as published by ESMA and are counted in the month shown. Service codes are the ten services of Article 3(1)(16) as recorded by the notifying authority.

Updates

Every figure on this page is recalculated by script from the current CSV after each ESMA release. Last recalculation: 22 Sep 2026. Firm names are deliberately not reproduced here; the register and the trackers built on it already do that.

FAQ

Questions people ask about the MiCA register

01How many CASPs are authorised under MiCA?＋

As of 16 Sep 2026 the ESMA interim register contains 352 CASP entries, held by 349 distinct legal entities; 2 authorisations are marked as ended, so 350 are in force. The register is republished roughly weekly and this page is recalculated after each release.

02Which country has issued the most MiCA CASP licences?＋

Germany. BaFin accounts for 94 of 352 entries (27%), well ahead of France (35), the Netherlands (29), Cyprus (25) and Malta (22). A large share of the German entries are banks extending an existing licence to crypto-asset services rather than new crypto firms (59 of 94 German entries carry a bank in their name).

03Which EU countries have not issued any CASP licence?＋

Poland, Greece, Hungary and Romania have no entries in the ESMA register as of 16 Sep 2026. For Poland the reason is legislative: the national act that would designate the KNF as the MiCA authority has not entered into force, so applications cannot be processed there yet. The register is compiled from national notifications, so a zero means no notification was received, not that a regulator refused every applicant.

04Why were so many licences granted in June 2026?＋

The MiCA transitional period for firms operating under national rules ended on 1 July 2026. Regulators cleared their queues in the final month: 75 authorisations were notified in June 2026, 21% of everything issued since December 2024. December 2025 shows the second peak with 44 authorisations, when the Lithuanian and other national regimes closed.

05Which crypto-asset services are most commonly authorised?＋

Custody and administration (service a) appears in 222 entries, transfer services (j) in 202, execution of orders (e) in 187, exchange for funds (c) in 180 and exchange for other crypto-assets (d) in 149. Operating a trading platform (b) is the rarest full authorisation with 22 entries. 95 of 352 CASPs hold a single service.

06Where is the official MiCA CASP register and how is this page calculated?＋

The official source is the ESMA interim MiCA register, published as CSV files on esma.europa.eu and updated as national authorities notify new authorisations. Protegra downloads the CASPS.csv file, counts entries by home member state, notification month and service code, and republishes the totals with the release date. No firm names are listed here.

Reference: licensing statistics by regulator in the Licensing Atlas.

Written by Anastasia Sidorenkova ·
Get started

Choosing where to file?

Tell us the services you intend to provide and where your clients are. We will say which of these regulators has actually authorised firms like yours, and what the file for each of them looks like.

Blog

Latest news from Protegra

#CASP in Poland#MiCA
23 Sep 2026

Poland Used to Be a Thriving Crypto Hub. MiCA Was Built for a Different Market

Poland used to be one of Europe’s most active crypto markets. Its virtual-currency register contained 1,841 businesses, ranging from small peer-to-peer operators…

Read ⟶
#CASP#MiCA#The Netherlands
19 Aug 2026

MiCA Licensing in the Netherlands, and Why Amsterdam Isn’t Just a Mailing Address

The AFM published its MiCA expectations before applications opened. What Dutch CASP licensing really takes: two regulators, real substance, class choice.

Read ⟶
#European Union#MiCA#Regulation
7 Aug 2026

Brussels Is Rewriting Its Own Rulebook While Brazil Builds One From Scratch. What That Means for Crypto in 2026

Brussels reopened MiCA on 20 May 2026, months after its transition ended, while Brazil writes its first crypto rulebook. What both mean for 2026 plans.

Read ⟶