ESMA sets 2027 MiCA oversight priorities

TLDR

Europes markets regulator ESMA has set its 2027 supervision plan for MiCA, shifting from writing crypto rules to actively overseeing how firms operate and report.

1. ESMA will focus MiCA oversight on operational resilience, outsourcing, liquidity, reverse solicitation and crypto asset classification, coordinated across national regulators.
2. Crypto asset service providers must strengthen custody, tech and reporting controls, maintain substantial operations inside the EU and expect closer market abuse monitoring via ESMAs MIDAS system.
3. From 2027, ESMA will also treat AI and tokenization as strategic supervisory priorities, feeding into the European Commissions MiCA review, which could tighten rules on DeFi and stablecoins.

Deep Dive

1. Core MiCA Priorities For 2027

ESMAs 2027 work program sets out key MiCA focus areas: operational resilience, outsourcing risk, liquidity management, reverse solicitation and asset classification for crypto asset service providers (CASPs), coordinated at EU level. Reports on the work program highlight a shift from rulemaking towards supervision and convergence, with ESMA aiming to harmonize how national regulators apply MiCA and interpret asset types across the bloc.

A major goal is standardizing periodic reporting by CASPs, with common risk indicators and supervisory dashboards so supervisors can compare firms consistently, rather than relying on fragmented national templates.

2. Impact On Crypto Firms And Market Abuse Oversight

For CASPs, supervision will go deeper into how businesses actually run: governance, private key management, transaction controls, incident response and reliance on third-party tech vendors, alongside basic capital and conduct rules described in MiCA. ESMA has stressed that authorized firms must keep sufficient operations inside the EU, and that reverse solicitation claims (serving EU clients while claiming they are foreign-initiated) will be scrutinized more closely.

ESMA will also advance its centralized crypto surveillance platform MIDAS to monitor potential market abuse, with a first phase expected fully operational in 2027 and an expanded analytical phase planned later. This gives regulators a shared view of suspicious trading and cross-venue activity.

3. AI, Tokenization And The MiCA Review

Starting in 2027, ESMA will run a Union Strategic Supervisory Priority on digital innovation, initially focused on AI and tokenization, alongside its MiCA work. EU supervisors will map how regulated firms use AI and tokenized products in client-facing services, assess governance and data reliability, and review outcomes for investors, as described in ESMAs innovation program.

These findings, plus broader supervisory experience under MiCA, will inform the European Commissions MiCA review due by mid 2027, which could lead to legislative changes. Parallel input from bodies like the EBA on crypto lending and stablecoin structures suggests the review may consider expanding MiCAs scope or tightening specific segments.

Conclusion

ESMAs 2027 agenda signals a clear move from designing MiCA to enforcing it, with coordinated scrutiny of operations, outsourcing and market abuse across the EU. For crypto firms, the edge will increasingly come from robust infrastructure, transparent reporting and compliant use of AI and tokenization, rather than exploiting regulatory gaps. Watching ESMAs supervisory findings and the European Commissions MiCA review will be key to anticipating where rules tighten next.