EU AML watchdog warns VASPs on MiCA

TLDR

The EUs new AML watchdog is warning that MiCAs full rollout is creating compliance stress for crypto service providers as customers migrate to licensed platforms.

1. The Authority for Anti-Money Laundering and Countering Terrorism Financing (AMLA) says mass customer movement after MiCAs July 1 deadline can strain VASPs AML controls and operations.
2. Unlicensed firms must wind down EU business while licensed crypto asset service providers absorb inflows, raising risks if withdrawal and onboarding controls are not robust.
3. AMLA and ESMA are ramping up reports, blockchain analytics and coordinated inspections, signalling a sustained tightening of EU oversight on crypto providers.

Deep Dive

1. AMLAs Warning In Plain Terms

AMLA chair Bruna Szego told the European Parliament that the end of MiCAs 18 month transition on 1 July means only licensed crypto asset service providers (CASPs) can keep serving EU customers, and many clients will rush to move funds away from non authorized platforms. In that briefing, she warned that firms exiting the EU could face surges in withdrawal requests, while licensed virtual asset service providers (VASPs) risk onboarding large volumes of new users without weakening anti money laundering standards, and urged them to keep compliance procedures efficient during the migration. AMLA had already issued an advisory note before the deadline, setting expectations for both winding down and licensed firms so AML controls remain effective during this shift, as described in its customer migration guidance.

2. What It Means For VASPs And Users

Under MiCA, any CASP serving EU residents now needs authorization, and the European Securities and Markets Authority (ESMA) has told unauthorized firms to immediately wind down EU activities, forcing clients onto licensed platforms. AMLA warns this two sided traffic spike withdrawals from exiting firms and onboarding at licensed ones can overwhelm KYC checks, transaction monitoring and suspicious activity reporting if systems are not ready, increasing money laundering risk and operational failures. For everyday users, this can translate into service interruptions at unlicensed venues, stricter identity checks or slower onboarding at regulated ones, and more scrutiny on high risk flows such as mixers or lightly documented stablecoin activity.

3. Next Steps In EU Crypto Oversight

AMLA plans to publish a crypto money laundering risk report before year end, comparing how national regulators supervise CASPs and highlighting gaps that need coordinated follow up, according to its oversight roadmap. The authority is expanding blockchain analytics to track on chain behaviour more deeply, while ESMA has launched a Common Supervisory Action on MiCA authorized custodians, testing private key management, transaction controls and incident response beyond the mere fact of holding a license. Together, these moves suggest that MiCA licensing is only the first layer and that ongoing supervisory intensity, data sharing and technical audits will define the regime for EU facing VASPs over the coming years.

Conclusion

AMLAs warning is less about changing MiCAs rules and more about how stressful the first full scale migration into those rules could be for both exiting and licensed crypto firms. As customers move to regulated venues, the combination of stricter licensing, deeper analytics and coordinated inspections should gradually raise the baseline for AML and operational resilience in the EU crypto market, while creating short term friction and consolidation for VASPs that are not fully prepared. For crypto users, the practical takeaway is that regulatory status and compliance strength of platforms are becoming core risk factors, not just background details.