The short version: on 21 Oct 2026, ESMA's interim MiCA register listed 372 firms that may provide crypto-asset services in the EU (379 rows; 2 more were withdrawn). 120 are banks, investment firms and other already-regulated financial firms that only had to notify their crypto services (Article 60). 75 hold a new CASP authorisation (Article 63). For the other 177, the file does not say which route was used. 173 passport to 27 or more EEA states; 146 serve only their home state.
Germany is home to 106 of the 372 firms. 98 of them are notifications under Article 60, mostly savings and cooperative banks and securities firms that already had a German licence. Firms that need a new CASP authorisation have tended to choose other states: France (36), Netherlands (28), Cyprus (24), Malta (23), Spain (16). One authorisation is valid in every EEA state once the firm passports its services (Articles 59 and 65 of MiCA).
Most Entries Came in the Run-Up to 1 July 2026
Entries by month of authorisation/notification date (11 without a full date excluded). Source: ESMA. Download: SVG · PNG · CC BY 4.0
The busiest month in the register was June 2026, the month before the last national transitional periods ended. Dates are the authorisation or notification dates in the ESMA file; 11 entries have no full date and are left out of the chart.
What Firms Are Allowed to Do
Service codes as in Art. 3(1)(16) MiCA. Source: ESMA. Download: SVG · PNG · CC BY 4.0
MiCA lists ten crypto-asset services. Custody (a) and transfer services (j) are the most common; few firms operate a trading platform (b). Each firm page lists its services with ESMA's letter codes.
How to Read the Register
The ESMA file is an interim register compiled from national authorities' notifications. It is updated irregularly; the national register of the home state is the reference.
A row is a legal entity. We group a few rows into one well-known brand where the legal entity is clearly that brand's EU company (for example two Payward companies for Kraken).
“Basis not stated” means the legal-basis column is empty in ESMA's file. ESMA's field description says the date column is the date of authorisation, but for these rows we do not label them as Article 63 or Article 60.
VASP Tracker, “372 firms are in ESMA's MiCA register. Where they are and what they may do”, https://vasptracker.com/en/eu/analysis/mica-casp-register-who-is-authorised/ (accessed 21 Oct 2026). CC BY 4.0.