ESMA Opens Dedicated Review of Crypto Custody Providers in the EU

ESMA, the EU’s financial markets watchdog, announced a common supervisory action on crypto-asset service providers focused on digital operational resilience. The initiative coordinates national competent authorities across EU member states to assess how licensed providers handle custody and safekeeping obligations under the Markets in Crypto-Assets Regulation. For related coverage, see New Hampshire to review $100M Bitcoin-backed bond at hearing.

The action follows the end of MiCA’s transitional period, during which existing crypto firms were allowed to continue operating under national regimes. ESMA confirmed in a public statement that this transitional window has now closed, meaning all crypto-asset service providers in the EU must hold full MiCA authorization. For related coverage, see Wallet 0x77ee Opens $31.08 Million 40x Bitcoin Short on HyperliquidX.

Why custody sits at the center of EU crypto oversight

Custody providers hold client assets on behalf of investors, making them a critical control point in the digital asset value chain. When a custodian fails or mishandles assets, losses fall directly on end users, which is why regulators treat custody as a frontline supervisory priority. For related coverage, see Coinbase Spot Delists IDEX, LRC, OMNI, PIRATE and FIS.

Under MiCA, firms offering custody and administration of crypto-assets must meet specific requirements around segregation of client funds, operational resilience, and governance controls. ESMA’s coordinated review signals that the regulator intends to verify compliance with these requirements across jurisdictions rather than relying solely on individual national authorities.

The supervisory focus on custody aligns with broader moves by exchanges seeking banking licenses in Europe to meet higher institutional standards. For firms that built their operations during the lighter-touch pre-MiCA era, the review represents a concrete compliance checkpoint.

What custody providers and market participants should watch

A common supervisory action typically involves ESMA coordinating national regulators to examine a specific risk area across multiple firms simultaneously. The results often lead to published findings, updated guidelines, or in some cases enforcement referrals.

Custody providers operating in the EU should expect information requests and supervisory engagement from their national competent authority as part of this coordinated exercise. Firms that have not fully aligned their operational resilience frameworks with MiCA requirements face the most immediate scrutiny.

The review also carries implications beyond the EU. As regulators in the United States advance their own crypto regulatory agendas, ESMA’s approach to custody oversight may influence how other jurisdictions define custodial standards for digital assets.

Market participants should monitor ESMA’s official communications for scope details, timelines, and any interim findings from the supervisory action. The regulator has not announced a deadline for the review’s completion, but common supervisory actions typically produce public reports within 12 to 18 months of launch.

Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.