Cyprus Under MiCA: What the End of the Crypto Transitional Period Means
The European Union's Markets in Crypto-Assets Regulation, known as MiCA, is now the single rulebook for crypto businesses across the bloc, and Cyprus is no exception. With the regime's transitional window having closed on 1 July 2026, the Cyprus Securities and Exchange Commission (CySEC) has moved firms that once operated under a national registration onto a full, EU-wide authorisation footing. Here is what that shift actually involves, stripped of the marketing.
What MiCA is
MiCA, formally Regulation (EU) 2023/1114, creates a harmonised framework for issuing crypto-assets and for providing crypto-asset services in the EU. It applied in two stages. Rules for so-called stablecoins — asset-referenced tokens and e-money tokens — took effect on 30 June 2024. Rules for crypto-asset service providers (CASPs), together with public offers of other crypto-assets, took effect on 30 December 2024. A firm authorised as a CASP in one member state can then passport its services across the EU and EEA without seeking a separate licence in each country.
The transitional deadline has passed
Article 143 of MiCA let each member state grant existing providers a grandfathering period of up to 18 months, running from 30 December 2024. Cyprus adopted the maximum, so firms already registered under its national CASP regime could keep operating until 1 July 2026. CySEC set an earlier internal cut-off: any such firm wanting to convert to a MiCA licence through Cyprus had to file a complete authorisation application by 27 February 2026.
The deadlines are firm. CySEC has stated that a pending application does not automatically extend a firm's right to operate beyond 1 July 2026, and providers that did not apply were required to submit a wind-down plan and stop offering services. The European Securities and Markets Authority (ESMA) has likewise told unauthorised providers to cease EU activity while safeguarding client assets. Anyone using a Cyprus-based platform can check its status on ESMA's central public register of authorised CASPs.
Where custody fits in
"Custody and administration of crypto-assets on behalf of clients" is one of the specific services MiCA regulates, alongside operating a trading platform, exchanging crypto for funds or other crypto, executing orders, and providing advice or portfolio management. Authorised custodians must safeguard clients' holdings and their means of access, keep a register of positions, and remain liable for losses arising from incidents within their control. These are baseline obligations that apply across the EU rather than a Cyprus-specific advantage.
What it means for Cyprus
Cyprus has genuine ingredients that make it a plausible base for crypto-asset firms: it is an English-speaking EU jurisdiction, it hosts a large cluster of investment firms and service providers supervised by CySEC, and it ran an early national CASP register before MiCA arrived. Whether that translates into any kind of EU "leadership" in digital-asset custody is a claim worth treating with caution. Authorisation numbers, market share and the calibre of firms that ultimately relocate will tell that story over the coming years, not press releases.
For now, the practical takeaway is simpler. The national transitional regime is over; only firms holding a MiCA authorisation may lawfully provide crypto-asset services from Cyprus, and the same standards apply in every other member state. Businesses and investors should verify a provider's authorisation directly rather than rely on marketing that promises "leadership" or a head start.