MiCA Regulation & High-Risk Crypto Payments in the EU: What Changes in 2026

TL;DR: The EU's Markets in Crypto-Assets (MiCA) regulation is fully in force in 2026, requiring all crypto asset service providers, including payment processors and merchants accepting crypto, to hold a CASP licence or work through a licensed intermediary. For high-risk merchants using crypto payments as a processing alternative, MiCA changes the compliance baseline significantly but does not eliminate crypto as a viable payment channel.
For years, crypto payments existed in a regulatory grey zone in Europe, useful precisely because they were fast, cross-border, and largely outside the compliance frameworks that made card payment processing so burdensome for high-risk merchants. MiCA closes that grey zone.
The EU's Markets in Crypto-Assets Regulation, fully applicable from December 2024, with full CASP authorisation requirements enforced through 2025–2026, introduces a comprehensive licensing framework for crypto asset services across all 27 EU member states. For high-risk merchants who accept crypto payments, use crypto payment gateways, or operate in crypto-adjacent verticals, 2026 is the year MiCA's real-world impact lands on their merchant services stack.
What Is MiCA and Why Does It Matter for High-Risk Merchants?
MiCA - Markets in Crypto-Assets Regulation: is the EU's first comprehensive regulatory framework specifically designed for crypto assets. It was adopted in 2023 and came into full force in December 2024, replacing the patchwork of national crypto regulations that previously applied across EU member states with a single, harmonised framework.
MiCA covers:
- Crypto-Asset Service Providers (CASPs): any entity providing crypto exchange, custody, portfolio management, payment, or advisory services
- Asset-Referenced Tokens (ARTs): stablecoins referencing multiple assets (previously largely unregulated)
- E-Money Tokens (EMTs): stablecoins referencing a single fiat currency (the most commercially relevant category for high-risk payment processing)
- Other crypto assets: utility tokens and general crypto assets not covered by existing financial regulation
For high-risk merchants, the two most operationally relevant parts of MiCA are the CASP licensing requirements (which govern who can provide crypto payment services) and the stablecoin framework (which governs the most practical crypto payment instruments for merchant use).
MiCA's CASP Framework: Who Needs a Licence?
Under MiCA, any entity providing crypto asset services to EU customers must either:
- Hold a CASP authorisation from their national competent authority (which then passports across the EU), or
- Operate through a MiCA-authorised CASP as an intermediary
Crypto asset services that require CASP authorisation include:
- Operating a crypto trading platform or exchange
- Exchanging crypto assets for fiat currency (and vice versa)
- Executing crypto payment transactions, directly relevant to crypto payment gateways
- Providing custody and administration of crypto assets
- Providing crypto portfolio management services
- Providing advice or order transmission on crypto assets
What This Means for High-Risk Merchants Who Accept Crypto
A high-risk merchant that simply accepts Bitcoin or stablecoin payments through an existing crypto payment gateway, without themselves operating any of the above services, is not required to hold a CASP licence. The licensing obligation sits with the payment provider or payment gateway facilitating the crypto transaction.
However, the practical implication is critical: your crypto payment gateway must be MiCA-licensed. If your current crypto processor does not hold CASP authorisation (or operate through a CASP-licensed entity), accepting their payments exposes you to regulatory risk and, more immediately, to the risk that your processor is forced to cease operations by European regulators.
Verifying Your Crypto Payment Provider's MiCA Status
ESMA (the European Securities and Markets Authority) maintains a public register of authorised CASPs under MiCA. Merchants should verify:
- Is your crypto payment gateway listed on the ESMA CASP register?
- If not, are they operating through a white-label arrangement with a licensed CASP?
- What jurisdiction issued their CASP authorisation?
- Does the CASP licence cover the specific services they provide to you?
The transition period for existing crypto businesses to obtain CASP authorisation runs until July 2026 in most member states, after which unlicensed CASPs must cease EU operations.
Stablecoins Under MiCA: The High-Risk Merchant Perspective
For practical merchant payment processing, stablecoins, particularly USDC, USDT, and EUR-denominated stablecoins, are far more commercially useful than volatile cryptocurrencies like Bitcoin. MiCA's stablecoin framework directly governs these instruments.
E-Money Tokens (EMTs) - The Primary Merchant-Relevant Category
EMTs are stablecoins pegged to a single fiat currency, EUR, USD, GBP. Under MiCA:
- EMT issuers must be authorised as Electronic Money Institutions (EMIs) under existing EU e-money regulation and comply with MiCA's additional requirements
- EMTs can be used for payment transactions, making them the most compliant crypto payment instrument for merchant use
- EMT issuers must maintain 100% reserve backing in liquid assets held at authorised credit institutions
- Significant EMTs (those with high transaction volumes) face additional requirements including transaction volume limits
What this means for high-risk merchants: USDC (Circle), the leading regulated stablecoin, obtained EMT compliance in the EU through Circle's French EMI licence. USDT (Tether) has been more complex, Tether did not initially seek MiCA compliance, and as of 2026, EU exchanges have been delisting USDT in compliance with MiCA requirements. High-risk merchants accepting stablecoin payments should confirm their payment gateway settles in MiCA-compliant EMTs.
Asset-Referenced Tokens (ARTs) - Lower Merchant Relevance
ARTs reference multiple assets (e.g., a basket of currencies). MiCA imposes strict requirements including ART issuer authorisation, reserve management, and transaction volume caps. ARTs are less commercially relevant for direct merchant payment processing but matter for offshore merchants using multi-currency payment instruments.
What Changes for High-Risk Crypto Payments Under MiCA in 2026
1. AML/KYC Requirements Significantly Strengthened
MiCA aligns crypto AML requirements with the EU's Transfer of Funds Regulation (TFR), which from 2025 requires crypto transfers to carry full sender and recipient identification data (the "travel rule") for all transactions, regardless of value. Previously, transfers under €1,000 were partially exempt.
Impact on high-risk merchants:
- Crypto payment gateways must collect and verify customer identity data for all transactions
- Anonymous crypto payments are effectively eliminated for EU-regulated flows
- High-risk merchants using crypto to bypass KYC requirements will find MiCA closes this route entirely
- Compliance overhead for crypto payment processing is now comparable to card-based processing
2. Stablecoin Transaction Limits for Significant EMTs
MiCA introduces daily transaction volume caps for EMTs classified as "significant", those with large user bases or transaction volumes. USDC, if classified as significant, faces a €200 million per day transaction volume cap across all EU transactions.
For most individual high-risk merchants, this cap is unlikely to affect daily operations. But for large-scale offshore merchants processing significant EU crypto payment volume, this limit is operationally relevant and requires monitoring.
3. Crypto Payment Gateways Must Be MiCA-Compliant
Any crypto payment gateway processing EU transactions must hold or operate under a CASP licence from July 2026. High-risk merchants currently using non-EU-licensed crypto processors for European customer payments should be transitioning to MiCA-compliant providers now.
4. Consumer Protection Requirements
MiCA introduces consumer protection obligations for CASPs that have indirect implications for high-risk merchants:
- Clear disclosure of fees, risks, and terms, relevant to merchant services agreements with crypto processors
- Complaint handling procedures, CASPs must have documented procedures
- High-risk merchants in crypto-adjacent verticals may face enhanced due diligence from MiCA-compliant processors
MiCA vs Previous EU Crypto Regulation: Key Differences
Factor
Pre-MiCA (2023 and before)
MiCA (2024–2026)
Regulatory framework
National — varied by member state
EU-wide harmonised regulation
CASP licensing
National licences (inconsistent)
Single CASP licence, EU passporting
Stablecoin oversight
Minimal — largely unregulated
EMT and ART framework with reserve requirements
AML/Travel Rule
Partial — €1,000 threshold
Full — all transactions, no threshold
Anonymous transactions
Partially possible
Eliminated for regulated flows
Consumer protection
Limited
Mandatory disclosure, complaint handling
Stablecoin transaction limits
None
€200M/day cap for significant EMTs
Enforcement
National regulators (inconsistent)
ESMA + national competent authorities
MiCA-Compliant Crypto Payment Gateways for High-Risk Merchants (2026)
Provider
MiCA/CASP Status
High-Risk Experience
Supported Stablecoins
Settlement
Coinbase Commerce
CASP-licensed (via Coinbase EU)
✅ Good
USDC, ETH, BTC
Fiat + crypto
BitPay
MiCA transitional compliance
✅ Strong
USDC, BTC, ETH
Fiat settlement
Circle (USDC)
EMI-authorised (France)
✅ Strong
USDC
EUR/USD fiat
Transak
CASP-licensed
⚠️ Moderate
Multi-asset
Fiat settlement
NOWPayments
MiCA compliance in progress
✅ High-risk experienced
Multi-asset
Crypto + fiat
CoinsPaid
Estonian VASP — MiCA transition
✅ Strong — iGaming specialist
BTC, ETH, USDT, USDC
Crypto + fiat
CoinsPaid is particularly relevant for high-risk merchants in iGaming and adult verticals, it has deep vertical experience and is actively working through MiCA compliance under its Estonian regulatory standing.
Pros and Cons of Crypto Payments for High-Risk Merchants Under MiCA
Pros
- Near-zero chargebacks: Crypto transactions are irreversible; no card scheme chargeback mechanism applies
- Cross-border efficiency: Crypto settles across borders instantly without correspondent banking intermediaries
- Payment processing diversification: Crypto provides a genuine alternative channel when card merchant accounts face restrictions
- MiCA clarity: Regulatory certainty replaces the grey zone, merchants know what compliant crypto processing looks like
- CASP passporting: A single MiCA licence passports across all 27 EU member states, simpler than navigating 27 national frameworks
- Stablecoin stability: EMT-compliant stablecoins provide predictable value without Bitcoin-style volatility
Cons
- AML/KYC overhead now equivalent to card: MiCA's travel rule eliminates anonymous transactions; compliance burden is now comparable to card processing
- USDT uncertainty: Tether's MiCA compliance status creates uncertainty for merchants using USDT; EU exchange delistings affect liquidity
- Volume caps on significant EMTs: €200M/day limit on significant stablecoins may affect large-volume merchants
- Provider transition risk: Crypto payment gateways that fail to obtain CASP authorisation by July 2026 must cease EU operations, merchant disruption risk if provider chosen poorly
- Consumer crypto adoption gaps: Despite MiCA's clarity, consumer crypto payment adoption remains low in most EU markets, limiting APM conversion benefits
- Volatility risk for non-stablecoin crypto: Bitcoin and ETH payments require immediate conversion to avoid value erosion
Frequently Asked Questions
Q: Do I need a CASP licence to accept crypto payments as a merchant? A: No, merchants accepting crypto payments through a licensed CASP payment gateway do not need their own CASP licence. The licensing obligation sits with the payment service provider. Your obligation is to use a MiCA-compliant provider.
Q: Is USDT still usable for merchant payments in the EU under MiCA? A: As of 2026, Tether's USDT has not achieved MiCA EMT compliance. EU-regulated exchanges have begun delisting USDT, and MiCA-compliant payment gateways are moving toward USDC and other EMT-compliant stablecoins. Merchants should transition away from USDT-denominated payments in EU flows.
Q: Does MiCA apply to offshore merchants serving EU customers? A: Yes, MiCA applies based on where the customer is located, not where the merchant is incorporated. Offshore merchants providing crypto services to EU customers must work through MiCA-licensed CASPs.
Q: How does MiCA affect crypto payment processing for iGaming merchants? A: iGaming high-risk merchants using crypto payments for EU players must use MiCA-compliant CASPs and comply with the travel rule KYC requirements. MiCA does not change gambling licensing requirements, UKGC, provincial licences, or national gambling authorities still govern the gambling activity itself.
Q: What is the CASP passporting benefit for payment providers? A: A payment provider that obtains CASP authorisation in one EU member state can passport that licence across all 27 member states without separate national applications, significantly reducing compliance overhead compared to the pre-MiCA national fragmentation.
Q: When is the deadline for crypto payment gateways to obtain CASP authorisation? A: The transition period runs until July 2026 in most member states. After this date, crypto businesses that operated under national transitional provisions must hold full CASP authorisation or cease EU operations.
Final Thoughts
MiCA represents the end of crypto's regulatory grey zone in Europe, and for high-risk merchants, that is simultaneously a constraint and a clarification. The constraint is real: anonymous transactions are gone, KYC requirements match card-equivalent standards, and your crypto payment gateway must be licensed. The clarification is valuable: merchants who use MiCA-compliant crypto payment processing can do so with regulatory certainty, access EU passporting benefits, and build crypto payment infrastructure that withstands regulatory scrutiny.
The merchants best positioned in 2026 are those who have already transitioned their crypto payment flows to MiCA-compliant CASPs and moved away from non-compliant stablecoins. The ones least positioned are those still treating crypto as a compliance-free workaround, because that workaround closed in December 2024.
→ Explore MiCA-compliant crypto payment gateways and high-risk merchant services solutions at TheFinRate's payments directory. https://thefinrate.com/mica-regulation-high-risk-crypto-payments-in-the-eu-what-changes-in-2026/
Comments
Post a Comment