Circular to the Industry on the Submission of Independent Practitioner’s Assurance Report

Circular Triq l-Imdina, Zone 1 Central Business District, Birkirkara CBD 1010 +356 2144 1155 communications@mfsa.mt www.mfsa.mt Circular to the Industry on the Submission of Independent Practitioner’s Assurance Report In March 2025, the Malta Financial Services Authority (the “MFSA” or the “Authority”) published the Markets in Crypto-Assets Rulebook (the “MiCA Rulebook”) for Crypto-Asset Service Providers (“CASPs”) licensed under the Markets in Crypto- Assets Act (the “Act”). Moreover, on 4 April 2025, the Authority issued a circular informing all CASPs of the publication of the Crypto-Asset Service Provider Return (the “CASP Return”). Pursuant to R3-2.6 of the MiCA Rulebook, Authorised Persons are required to submit to the Authority a copy of their Audited Financial Statements (“AFS”), together with the documents specified therein and in the manner prescribed under the same rule. In relation to the Auditor’s report on the annual financial statements or consolidated financial statements, as applicable, and as specified in R3-2.6.1 (iv) the Authorised Person is required to submit an Independent Practitioner’s Assurance Report. The Independent Practitioner’s Assurance Report shall be duly signed by an external independent auditor, in accordance with International Standards on Assurance Engagements, and shall provide an independent limited assurance opinion on the consistency between the information reported by the Authorised Person in its CASP Return; and the AFS for the corresponding financial year. Finally, to facilitate a seamless transition for entities licensed as Virtual Financial Assets Service Providers, such Authorised Persons will likewise be required to submit an Independent Practitioner’s Assurance Report in accordance with R3-3.5.4.2 of Chapter 3 of the VFA Rulebook. Any queries in relation to the above, or any other related or ancillary matter, may be sent via email to SUFintechMICA@mfsa.mt. 15 December 2025