What is ESMA, and what does it do for crypto in the EU?
ESMA is the EU's securities markets authority, based in Paris. It does not license most firms itself, but it writes much of the rulebook and keeps the EU-wide register of crypto firms under MiCA.
Education only, not investment, tax or legal advice. Crypto-assets are high-risk — risk disclosure.
The short answer
ESMA is the European Union's financial markets regulator and supervisor. It was set up on 1 January 2011 under Regulation (EU) No 1095/2010 and sits in Paris. For crypto, it keeps the EU-wide MiCA register and writes technical rules, while national authorities license crypto firms.
Key takeaways
- ESMA began work on 1 January 2011, replacing the Committee of European Securities Regulators, under Regulation (EU) No 1095/2010.
- It works with national regulators: they supervise most firms, while ESMA sets common standards and directly supervises a few firm types, such as credit rating agencies.
- Under MiCA, national authorities authorise crypto-asset service providers; ESMA publishes the central register and technical standards.
- MiCA's grandfathering window for crypto firms already operating under national law ran until 1 July 2026 at the latest.
- White papers listed in ESMA's register have not been reviewed or approved by any authority, so a listing is not an endorsement.
What is ESMA and why was it set up?
The European Securities and Markets Authority (ESMA) describes itself as the EU's financial markets regulator and supervisor. It is an independent authority, accountable to the European Parliament, the Council of the EU and the European Commission1.
ESMA grew out of a review of how the EU supervised its financial system. It was established on 1 January 2011, following recommendations in the 2009 de Larosière report, and replaced the Committee of European Securities Regulators (CESR)1. Its legal basis is Regulation (EU) No 1095/2010 of 24 November 20102, which also fixes its seat in Paris2.
Its mission is to enhance investor protection, promote orderly financial markets and safeguard financial stability1. In practice that means writing detailed technical rules, pushing national regulators to apply EU law the same way, and supervising a handful of market players directly.
How does ESMA work with national regulators?
The EU does not have one single financial regulator. ESMA is one of three European supervisory authorities in the European System of Financial Supervision, alongside the European Banking Authority (EBA) and the European Insurance and Occupational Pensions Authority (EIOPA)1. For most firms, including crypto-asset service providers, licensing and supervision sit with each country's national competent authority3.
Figure · Who does what in EU markets
- L4EU institutionsParliament, Council, Commission
- L3ESMAstandards, convergence, registers
- L2National authoritiesauthorise and supervise most firms
- L1Firmsbrokers, funds, crypto providers
ESMA and national authorities under MiCA Source: [3]
| Task | Who does it |
|---|---|
| Authorise a crypto-asset service provider | National competent authority |
| Publish the EU-wide register of crypto firms and white papers | ESMA |
| Draft technical standards and guidelines | ESMA |
| Promote consistent supervision across countries | ESMA |
What does ESMA supervise directly?
For a few types of firm whose work spans the whole EU, ESMA is the direct supervisor rather than a national authority1:
- Credit rating agencies.
- Trade repositories and securitisation repositories, which collect data on trades and deals.
- Data reporting services providers.
- Administrators of EU critical benchmarks.
- Certain central counterparties (clearing houses) based outside the EU.
Its founding regulation also lets ESMA temporarily prohibit or restrict certain financial activities that threaten the orderly functioning and integrity of markets or the stability of the EU financial system2. That is a backstop power, not routine licensing.
What is ESMA's role under MiCA, as of October 2026?
MiCA is the Markets in Crypto-Assets Regulation, Regulation (EU) 2023/1114 of 31 May 20234. It created one rulebook for crypto issuers and service providers across the EU. Our MiCA explainer covers the rules in detail; here is how ESMA fits in.
MiCA milestones relevant to ESMA's register
| Date | What happened |
|---|---|
| 31 May 2023 | Date of the MiCA Regulation4 |
| 30 June 2024 | Rules for asset-referenced tokens and e-money tokens apply3 |
| 30 December 2024 | Remaining MiCA rules, including those for service providers, apply3 |
| 1 July 2026 | Latest end of the grandfathering period for firms already operating under national law3 |
ESMA does not authorise crypto-asset service providers; the national competent authority in each member state does3. ESMA's jobs are to publish the central register, develop technical standards and guidelines, and promote consistent supervision3.
The grandfathering clause let firms that provided crypto services under national law before 30 December 2024 keep operating until 1 July 2026, or until they were granted or refused MiCA authorisation, whichever came first3. By October 2026 that window has closed, so no firm can still rely on it; look for an authorised entry instead.
How do you use ESMA's MiCA register?
ESMA built an interim MiCA register to meet MiCA's legal deadline. It is a set of five downloadable CSV files and was due to be folded into ESMA's IT systems from mid-20263.
Checking a crypto firm in the EU
- 1
Open ESMA's MiCA page
Find the register files on ESMA's MiCA page or its databases and registers page3.
- 2
Search the authorised-firm list
Look for the firm's legal name in the list of authorised crypto-asset service providers3.
- 3
Check the non-compliant list
A separate file lists entities flagged as providing services without authorisation3.
- 4
Cross-check nationally
ESMA updates the register weekly, so news in a national register may not appear at once3. Check the authorising country's register too; our guide on checking a regulated firm explains how.
Risk warning
A listed white paper is not an approval
ESMA states that the crypto-asset white papers in its register have not been reviewed or approved by any competent authority in any EU member state, and that the offeror or issuer alone is responsible for their content3. Treat claims in a white paper with the same caution as any sales document.
How do you complain about a crypto firm in the EU?
Start with the firm. MiCA requires crypto-asset service providers to set up and maintain a procedure for handling client complaints4. Put your complaint in writing and keep copies of everything.
If the firm does not resolve it, the next stop is the national competent authority that authorised the firm, because that authority, not ESMA, licenses and supervises crypto-asset service providers3. MiCA Article 108 requires every national authority to accept written complaints, including electronic ones, about suspected breaches of MiCA by crypto firms and token issuers5.
Where a crypto complaint goes in the EU
Note
If you think you have been scammed
Contact your bank or payment provider and your local police straight away, keep every record, and be wary of anyone who offers to recover your money for a fee.
What mistakes do people make about ESMA?
Common beginner mistakes
Thinking ESMA licenses crypto firms
Under MiCA, licences come from national authorities. ESMA keeps the shared register.
Reading a white paper listing as approval
White papers in the register have not been reviewed or approved by any authority.
Checking only one list
The register is updated weekly. Check the national register of the authorising country as well.
Assuming EU rules protect you everywhere
MiCA protections apply to firms authorised under MiCA. An offshore app with no EU authorisation sits outside that system.
Risk warning
Regulated does not mean risk-free
Even with an authorised provider, crypto prices can fall sharply and you can lose money. Read our risk disclosure before you invest.
Frequently asked questions
Is ESMA part of the European Commission?
No. It is an independent EU authority, accountable to the European Parliament, the Council and the Commission1.
Where is ESMA based?
In Paris; its founding regulation sets its seat there2.
Can ESMA ban a financial product?
Its founding regulation lets it temporarily prohibit or restrict certain financial activities that threaten orderly markets or financial stability2.
Does ESMA approve crypto white papers?
No. ESMA says the white papers in its register have not been reviewed or approved by any competent authority3.
What did ESMA replace?
It replaced the Committee of European Securities Regulators (CESR) when it started on 1 January 20111.
The bottom line
ESMA is the EU's securities markets authority, created by Regulation (EU) No 1095/2010 and working since 1 January 2011. It writes common rules and directly supervises a few EU-wide firm types, but national authorities license crypto firms under MiCA. Use ESMA's MiCA register alongside national registers, and remember that a white paper listed there is not an approval.
Sources
- About ESMA — European Securities and Markets Authority Primary source
- Regulation (EU) No 1095/2010 establishing a European Supervisory Authority (European Securities and Markets Authority) — EUR-Lex, Official Journal of the European Union, 2010 Primary source
- Markets in Crypto-Assets Regulation (MiCA) — European Securities and Markets Authority, 2026 Primary source
- Regulation (EU) 2023/1114 on markets in crypto-assets (MiCA) — EUR-Lex, Official Journal of the European Union, 2023 Primary source
- MiCA Article 108: Complaints-handling by competent authorities — ESMA Interactive Single Rulebook, 2023 Primary source
- List of links for complaints-handling under Article 108 of MiCA — European Securities and Markets Authority, 2024 Primary source
- Financial Dispute Resolution Network (FIN-NET) — European Commission, 2026 Primary source
How we checked this page: every figure above links to the numbered source it came from. Spotted an error? Tell the desk — see our editorial policy.
Read next
Policy · ExplainerWhat is MiCA, and how does the EU regulate crypto-assets?Since the end of 2024 one law has set the ground rules for crypto issuers and service providers across the European Union. Here is what it covers and what changed when its transition ran out in July 2026.
Policy · ProfileWhat is the FCA, and how does it regulate crypto in the UK?The FCA polices how around 35,500 UK firms treat their customers. Here is where its powers come from, what it does with crypto as of October 2026, and how to use its register and scam tools.
Policy · ExplainerHow do you check whether a financial or crypto firm is regulated?A licence number in a website footer proves nothing until you check it yourself. Official registers are free, public and take a few minutes. Here is which one to use and what to look for.
Finance · ExplainerWhat is a stablecoin, and how does it stay at one dollar?Stablecoins are crypto tokens built to stay boring: one token, one dollar. Whether they manage it depends on what backs them, who can redeem them and what the law requires.
Finance · ExplainerWho really holds your crypto? Custody, keys and wallets explainedWith crypto, whoever controls the private key controls the asset. Custody is the question of who holds that key, and the answer decides what you can lose, and to whom.
Policy · ExplainerWhat is the FATF Travel Rule, and why does your crypto exchange ask who you are sending to?Banks have long had to pass on who is sending and receiving a wire transfer. Since 2019 the global anti-money-laundering standard has asked crypto firms to do the same, which is why exchanges now ask for a recipient's name.