ESMA shifts MiCA enforcement toward supervision

TLDR

ESMA has confirmed that under the EUs MiCA framework it is moving from writing rules to actively supervising how crypto firms operate across Europe.

1. ESMAs 2027 work program shifts MiCA activity toward supervision and convergence, with clear priorities for how national regulators oversee crypto asset service providers.
2. Supervision will center on operational resilience, outsourcing, EU presence, liquidity, reverse solicitation, and standardized reporting, backed by a new EU-wide market abuse surveillance system.
3. Crypto firms and users should watch the 2027 roll out of ESMAs MIDAS surveillance platform and the European Commissions MiCA review, which could lead to tighter rules and fewer unauthorized providers.

Deep Dive

1. What ESMA Announced

ESMAs chair Verena Ross told EU lawmakers that its MiCA work is shifting from rulemaking towards supervision and convergence, meaning less focus on drafting guidelines and more on how they are enforced across countries.

In its 2027 work program, ESMA sets MiCA priorities around coordinated supervision of crypto asset service providers (CASPs), aiming for consistent expectations and practices among national regulators rather than fragmented national approaches.

Ross framed the goal as allowing innovation while providing clarity for firms and safeguards for investors, anchoring MiCA as a live supervisory regime rather than a static rulebook.

2. Impact On Crypto Firms

For CASPs, ESMA highlights operational resilience, outsourcing risk, adequate EU-based operations, liquidity management, reverse solicitation, and asset classification as core supervisory focuses across the bloc. Reports underline these themes as central to ESMAs operational priorities.

ESMA wants harmonized periodic reporting, common risk indicators, and supervisory dashboards, which should reduce regulator shopping and make it harder for weak controls or aggressive cross-border tactics to slip through.

Data cited by ESMA shows that, after MiCAs transition period ended, only around 300 of more than 1,300 firms in the EEA are authorized, with unauthorized firms sending far more funds to sanctioned counterparties and carrying higher risk ratings, according to a CoinsKid analysis.

3. What To Watch Next

ESMA plans to make its MIDAS crypto market surveillance system fully operational in 2027, then add broader data and analytics in a second phase, improving detection of market abuse under MiCA, as detailed in crypto industry coverage.

Supervisory findings from CASPs will feed into the European Commissions formal MiCA review by June 2027, which could lead to legislative tweaks on topics like reverse solicitation, outsourcing limits, or market abuse tools.

National regulators keep the direct supervisory role for now, but ESMAs convergence push means firms should expect less variation in expectations across EU jurisdictions over time.

Confidence: high because multiple regulatory and industry sources describe the same 2027 priorities and timelines.

Conclusion

MiCA has moved into its enforcement phase, and ESMA is positioning itself as the coordinator of a tighter, more consistent supervisory regime for crypto across Europe.

For crypto firms, the edge shifts from lobbying for favorable rules to proving robust operations, clean outsourcing, and transparent reporting under ESMAs supervision and MIDAS surveillance. For users, the practical result is likely fewer lightly controlled venues and a stronger emphasis on authorized, passported providers.