ESMA targets MiCA supervision for CASPs

TLDR

ESMA is shifting its MiCA work from writing rules to actively supervising crypto asset service providers (CASPs) with a tighter, EU-wide playbook.

1. ESMAs 2027 priorities center on CASP operational resilience, outsourcing, liquidity, reverse solicitation, asset classification, and harmonized reporting under MiCA.
2. CASPs will face closer scrutiny of key management, tech vendors and EU presence, with a new EU-wide surveillance system (MIDAS) tracking market abuse.
3. Findings from this supervision will feed into a 2027 MiCA review that could tighten rules on areas like DeFi access and stablecoins, affecting how EU users access crypto services.

Deep Dive

1. ESMAs New Supervisory Priorities

ESMAs 2027 work program sets clear supervisory priorities for MiCA implementation, and the focus is now from rulemaking towards supervision and convergence for CASPs.

Reports highlight that ESMA will coordinate national regulators around six main topics: operational resilience, outsourcing risk, liquidity management, reverse solicitation practices, sufficient EU-based operations, and crypto asset classification under MiCA. These priorities are detailed in ESMAs work program and summarized in outlets like Cointelegraph and TokenPost.

ESMA also aims to harmonize periodic CASP reporting and introduce common risk indicators and supervisory dashboards so national authorities supervise CASPs with more consistent standards across the EU.

2. How CASPs And Users Are Affected

For CASPs, ESMA and national regulators will probe the plumbing of operations. Supervisory actions already announced cover governance, private key management, custody controls, incident response and reliance on third-party tech providers under MiCA and the EUs Digital Operational Resilience Act.

ESMAs MIDAS market surveillance system is planned to be fully operational in 2027 and will monitor for market abuse across crypto markets, with a second phase adding analytics and broader data coverage. ESMAs own data show that authorized firms have far lower high-risk scores and send less volume to sanctioned entities than unauthorized ones, underlining why supervisors want tighter oversight of CASP behavior.

For users, this likely means more emphasis on authorized, passportable providers and more pressure on firms using reverse solicitation or serving EU clients from outside the blocs regulatory perimeter.

3. Next Steps And Possible Rule Tightening

ESMA will channel supervisory findings into the European Commissions MiCA review, expected by June 2027, which could lead to legislative proposals. Supervisory convergence on CASPs will be a key input to that review.

In parallel, the European Banking Authority and the European Central Bank are already urging changes to MiCA, including stronger controls on crypto lending and broader bans on stablecoin remuneration, especially where CASPs act as gateways to DeFi or stablecoin yield products. ESMAs CASP supervision will interact with those debates by showing where current rules work and where gaps remain.

Conclusion

ESMAs pivot to MiCA supervision makes CASPs operational and compliance quality a central regulatory concern, not just their license status. That should gradually push activity toward authorized, better monitored providers while shaping the 2027 MiCA review, especially around DeFi access and stablecoin use. For crypto firms and users in Europe, the key shift is that enforcement and ongoing oversight will matter as much as the text of MiCA itself.