CySEC Warns That the MiCA Transition Is Over: What Crypto Clients Should Check

CySEC reminded investors that Cyprus’ MiCA transitional period ended on July 1, 2026. Clients using unauthorised providers do not receive MiCA safeguards, including client-asset protections.

Key facts

• CySEC says the transition ended July 1, 2026.
• Crypto services may be provided only under MiCA in scope.
• Clients of unauthorised CASPs do not benefit from MiCA safeguards.
• CySEC directs clients to verify providers in the ESMA register.

What CySEC announced

CySEC reminded investors that, after the transitional period ended, crypto-asset services in Cyprus may be provided only in accordance with MiCA. The July 10 announcement repeats an ESMA warning that clients of unauthorised EU or non-EU providers do not benefit from MiCA safeguards, including protections for client assets.

The announcement invites clients to verify the provider in the ESMA register and act promptly if it is not authorised. It mentions transferring to an authorised CASP, where one is identified, or to a self-hosted wallet, while advising clients experiencing difficulties to contact the provider first.

Who may be affected

The relevant question is whether the legal entity provides a crypto-asset service covered by MiCA in the EU. A group may operate brokerage, CFD and crypto services through different entities and permissions.

What readers should do now

Verification should happen before initiating a transfer, because address mistakes and unsupported assets can be irreversible.

• Find the exact provider in the ESMA MiCA register.
• Check the domain and legal entity against the account agreement.
• Review asset custody and transfer terms.
• Contact the provider through a verified channel if status is unclear.
• Keep transaction records and allow for network and platform restrictions.

What this alert does not mean

The announcement does not say every non-EU provider is fraudulent. It says clients of unauthorised providers do not receive MiCA safeguards and that unauthorised cross-border services may face coordinated action.

SafeGate should separate crypto-service authorisation from other licences and update reviews at legal-entity level.

Verify a provider

Read broker reviews

Frequently asked questions

Sources and verification

• CySEC: end of MiCA transition and public warning — published July 10, 2026; jurisdiction: Cyprus / EU; accessed August 25, 2026.

Last reviewed: August 25, 2026. Recheck dates, status, legal entities and live terms immediately before publication.

Image brief: EU/Cyprus authorisation checkpoint with CASP register, client assets and transfer decision path.

Disclosure

SafeGate Advisors is not a broker and does not accept deposits. This article is general information, not investment advice. SafeGate may receive compensation from some brokers through affiliate partnerships, but editorial assessments should follow the published methodology and verified evidence.