ESMA shifts MiCA focus toward supervision

TLDR

ESMA is moving MiCA from a rule-writing phase into an intensive supervision phase for crypto service providers across the EU.

1. ESMAs 2027 work program shifts MiCA focus from rulemaking towards supervision and convergence, with priorities like operational resilience, outsourcing and liquidity.
2. Crypto firms face tighter, more harmonized oversight on issues such as reverse solicitation, EU presence and periodic reporting, raising compliance stakes but improving clarity.
3. By 2027, ESMA plans full rollout of its MIDAS surveillance system and will feed findings into the European Commissions MiCA review, which could lead to further rule tightening.

Deep Dive

1. New Supervisory Priorities

ESMA Chair Verena Ross has said the authoritys MiCA work is shifting from rulemaking towards supervision and convergence, meaning the core framework is largely written and attention now moves to how firms behave under it. Recent coverage of ESMAs 2027 program highlights supervisory focus on operational resilience, outsourcing risks, liquidity, reverse solicitation and asset classification for crypto asset service providers (CASPs) across the EU.

ESMA wants national regulators to apply MiCA in a coordinated way, harmonizing CASPs periodic reporting and building common risk indicators and supervisory dashboards, reducing room for regulatory arbitrage between member states. This is reflected in public summaries of ESMAs work program and Rosss remarks to the European Parliaments economic committee, as reported by Cointelegraph and CoinsKid community analysis of ESMAs plans.

2. Impact On Crypto Firms And Users

For CASPs, MiCA already governs authorization and passporting rights, but ESMAs new emphasis is on ongoing supervision of that authorization. One detailed review notes that after the final MiCA transition period ended on 1 July, only 281 of 1,343 crypto service providers in the European Economic Area remained authorized, while 1,062 stayed unauthorized, with unauthorized firms sending around $5 billion to sanctioned counterparties versus $1.7 billion for authorized firms.

Supervision priorities such as sufficient operations inside the bloc, outsourcing controls and cyber resilience mean larger exchanges, custodians and brokers must prove they are not hollow shells booking EU business from offshore while outsourcing critical functions without proper oversight. For users, the upside is clearer licensing status and better safeguards; the downside for marginal providers is increased risk of being pushed out if they cannot meet MiCA standards.

3. Surveillance, MiCA Review And Next Steps

ESMA is also building out MIDAS, its centralized crypto market surveillance system, with first phase full operation targeted in 2027 and an analytics heavy second phase planned for late 2027, subject to board approval. MIDAS is meant to detect potential market abuse under MiCA, feeding data back to national regulators and ESMA itself.

Supervisory findings from this new regime will go into the European Commissions MiCA review, due by June 2027. That review can lead to legislative changes, for example tightening rules around reverse solicitation, stablecoin backing, or CASP risk management if early supervision reveals gaps. Until then, national regulators remain the primary supervisors, but ESMAs program clearly aims for more consistent and data driven oversight.

Conclusion

MiCA is now entering its enforcement era, with ESMA pivoting from drafting the rulebook to actively supervising how crypto firms apply it across the EU. For market participants, the key is to watch authorization status, supervisory themes like operational resilience and outsourcing, and the rollout of tools like MIDAS, because those will shape which platforms thrive, which struggle and how the next iteration of MiCA is written.