ESMA’s 2027 MiCA supervision: what firms should expect

The useful part

Summary ESMA will focus its 2027 MiCA supervision on operational resilience, outsourcing, liquidity, reverse solicitation and crypto firms maintaining sufficient EU operations. The regulator plans common risk indicators and reporting standards for national authorities supervising crypto asset service providers. ESMA expects the first phase of its MIDAS crypto market surveillance system to become fully operational in 2027.

How it works

• ESMA said in its 2027 work program published Monday that its work on MiCA will concentrate on coordinating national regulators and developing more consistent supervision of crypto asset service providers...
• ESMA will focus MiCA supervision on operational risks Operational resilience will be one of the main areas under scrutiny as ESMA works with national competent authorities responsible for supervising CASPs.
• Outsourcing risks, liquidity, reverse solicitation and the classification of crypto assets are among the other areas identified for coordinated work in 2027.
• In July, crypto.news previously reported that ESMA had started reviewing MiCA custodians to test how authorized providers manage operational risks.
• 23 that the new work will initially focus on how supervised entities use artificial intelligence and tokenization, while the resilience priority has been in place since 2025.

What to take from it

Supervisors will pay attention to whether firms maintain sufficient operations within the EU instead of relying heavily on functions or infrastructure based elsewhere. The regulator intends to promote common risk indicators and supervisory dashboards that authorities can use when monitoring licensed firms. Data cited in that August report showed that 12% of unauthorized firms carried High or Severe risk ratings, compared with 2% of authorized providers.

Example or evidence

• Supervisory findings will feed into the European Commission's MiCA review expected by June 2027.
• The exercise moved scrutiny beyond whether a firm had obtained authorization and toward the controls used after receiving a license.
• Cyber and operational resilience will remain an EU wide supervisory priority in 2027 alongside a new priority covering digital innovation.

Details worth keeping

How will ESMA supervise crypto firms under MiCA in 2027? Share Link copied The European Securities and Markets Authority has set operational resilience, outsourcing and sufficient EU based operations among its main crypto supervisory priorities for 2027 as the bloc moves further into enforcement of the Markets in Crypto Assets Regulation. MiCA places specific requirements on outsourcing by CASPs.

Related coverage

• Cointelegraph: ESMA will focus on CASP resilience, outsourcing and reverse solicitation while pursuing harmonized reporting across national regulators.
• Cointelegraph: National regulators will map client-facing uses of the technologies, check a subset of firms and develop common approaches to oversight.
• Regulationtomorrow: On 24 September 2026, the European Banking Authority (EBA) published its response to the European Commission's (Commission) targeted consultation on the review of the Regulation on Markets in Crypto-assets...
• Regulationtomorrow: On 28 September 2026, the European Securities and Markets Authority (ESMA) published its work programme for 2027.
• Cyclingnews: The ultimate guide to the pro cycling transfer window, tracking every move across the men's and women's WorldTours