2026-07-07 | C790Added · Updated
The MiCA transitional period ended on 1 July 2026, requiring firms to obtain MiCAR-compliant authorization as crypto-asset service providers (CASPs) to continue operations. Unauthorised virtual asset service providers must implement robust wind-down plans, maintain adequate AML/CFT governance, and ensure up-to-date customer due diligence until activities cease. Authorised CASPs are required to scale transaction monitoring systems and apply individual risk-based customer due diligence rather than blanket de-risking when onboarding migrating customers. Regulated entities must assess ML/TF risks associated with unauthorised or offshore VASPs and enhance their risk-based approach under the Prevention and Suppression of Money Laundering Activities Law.