EU warns of crypto scams after MiCA compliance deadline

Europe’s crypto cleanup has opened new doors for fraudsters. According to EU officials, crooks pretending to be regulatory authorities and licensed exchanges have increased their activities after the July 1 deadline for compliance with Markets in Crypto-Assets (MiCA), which required unlicensed businesses to stop operating and drove customers to look for compliant alternatives.

The migration—not crypto prices—is the bigger story. As hundreds of firms stop serving EU investors, many users are being asked to move accounts or assets, creating the uncertainty that impersonation scams thrive on. In the meantime, cryptocurrency markets continue to experience stability with Bitcoin trading around $64,700 and Ether at $1,910 on the morning of August 6.

Scammers exploit MiCA transition

MiCA’s transition phase came to an end on July 1, and crypto firms lacking authorization to operate as crypto-asset service providers (CASPs) could not legally provide services to customers within the EU and EEA anymore.

This shift has prompted many users to take their assets into a licensed exchange or self-custody wallet. Cybersecurity professionals have been warning for years about the risks associated with large migrations owing to the fact that the average investor is expecting to see emails, proof of identity, and instructions on how to transfer the money. The criminals would just copy these messages.

The Financial Times reported that French regulators, Dutch authorities and those at the EU have all said that there has been an increase in these scams. The Dutch Authority for the Financial Markets (AFM) has warned that investors who are looking for licensed providers could be targeted.

How the fake regulators operate

Stéphane Pontoizeau, head of market intermediaries and infrastructure supervision at France’s Autorité des Marchés Financiers (AMF), reportedly stated. The transition has created “an opportunity for scammers more than usual.”

French government has revealed instances of law violators passing off as AMF agents and directing investors to counterfeit websites made to look like government services.

European Securities and Markets Authority (ESMA) issued a similar alert after criminals began using ESMA’s name, logo, and branding in their phishing schemes. The regulatory body has assured that official communications always come from an email address ending with @esma.europa.eu and that the authorities would never ask investors to transfer cryptocurrency for compliance purposes.

🛑 #Fraud alert: scammers are impersonating #ESMA and exploiting the end of the #MiCA transition!

❌ Don’t engage with suspicious messages
📤 Report scams to your national authorities
🛡️ Verify sources.
Official ESMA emails → @esma.europa.eu
Website → https://t.co/TrxPfYfR1Y pic.twitter.com/MaMIUoyO4c

— ESMA – EU Securities Markets Regulator 🇪🇺 (@ESMAComms) July 9, 2026

According to experts specializing in security, these scams make use of psychological techniques rather than technical hacks to deceive their victims. Criminals use official brand logos, regulatory terms, and create pressure on the victims to make them act quickly in order to avoid being in violation of any law. Verifying the instructions by going to the regulator’s website rather than replying to the messages or emails is one of the most efficient means of protection.

EU crypto migration fuels phishing

The extent of the implementation of MiCA clarifies why the swindlers are putting their emphasis on the transition.

As of July 31, MiCA’s registry reported 338 registered CASPs, up from about 194 in May, which means an increase of approximately 74% in three months. Still, this amount only represents a tiny percentage of more than 3,000 crypto companies that were registered under national licenses before. According to VASPnet, it is estimated that more than 1,700 companies will cease operating for EU clients eventually.

The imbalance has resulted in a large proportion of investors flocking to a few licensed platforms. Every campaign promoting the migration from the old to the new platform provides fraudsters with another opportunity to masquerade as the rightful destination for displaced users.

Binance was one of those who suffered from losing the MiCA license ahead of time and terminating services for users in the EU. Clients from unlicensed major platforms are forced to update their accounts, verify their identities and transfer their assets. This is when they are the most vulnerable to phishing.

Various national regulators are revealing the names of violators. Belgium’s Financial Services and Markets Authority (FSMA) has raised awareness among the general public about different unauthorized crypto businesses while reminding investors that their investments in cryptocurrency are usually not eligible for compensation.

A trend that predates the deadline

Impersonation scams were not initiated by MiCA, but it gave a much-needed opportunity to fraudsters.

Chainalysis predicts that scam and fraudulent activities related to cryptocurrencies raked in around $17 billion in illegal revenue in 2025 as AI-powered social engineering techniques are used to enhance the effectiveness of phishing attacks through counterfeit websites, phony customer support agents and emails that look authentic.

This lesson has applications beyond Europe, as important legal changes, whether related to new licensing rules or even upcoming exit from the exchanges (moving from one platform to another), create opportunities for redirecting clients, which lasts for a short period of time that fraudsters are quick to exploit. Although MiCA is supposed to boost investors’ protection over time, its introduction shows that regulatory changes in the industry can result in short-term risks, which means that it is equally important for investors to check who they work with and whether they use licensed platforms.