MiCA Takes Effect: What Changes for Spanish Fintech

December 30 changed the game

MiCA (Markets in Crypto-Assets Regulation) became fully applicable on December 30, 2024. Not a proposal. Not a draft. Not “under review.” It is enforceable law across all 27 EU member states.

For Spanish fintech, this is not newspaper news. It is an operational shift affecting licenses, capital reserves, advertising, and internal processes. If your company touches crypto-assets in any form, you need to know exactly what changed.

What MiCA regulates (and what it does not)

MiCA covers three major areas:

Crypto-asset issuance. Any company issuing tokens needs an approved whitepaper, must meet reserve requirements, and must register with the CNMV (Spain’s securities regulator) or the competent authority in their member state of operation. Fiat-referenced stablecoins have additional 100% reserve requirements.

Crypto-Asset Service Providers (CASPs). Exchanges, custodians, trading platforms, crypto advisory services. They need prior authorization, minimum capital (between EUR 50,000 and EUR 150,000 depending on the service), and corporate governance policies including client asset segregation.

Consumer protection. Transparency obligations, prohibition of misleading crypto advertising, and withdrawal rights for certain products.

What MiCA does not cover: pure DeFi (protocols without a centralized intermediary), NFTs that are genuinely unique (not fungible collections), and Bitcoin or Ether themselves as decentralized assets without an identifiable issuer. Though the European Commission has already announced it will review these exclusions in 2025.

The concrete deadlines

January 2025. Regulatory Technical Standards (RTS) and Implementing Technical Standards (ITS) are being published by the EBA and ESMA. These define operational details: whitepaper formats, reserve calculation methodologies, reporting templates.

July 2025. End of the transitional period for CASPs that were already operating under national regimes. In Spain, the Bank of Spain’s registry for virtual currency exchange service providers was the prior framework. Registered companies have until this date to obtain full authorization under MiCA.

If your company was already registered with the Bank of Spain as a virtual currency exchange service provider, you have six more months. If it was not, you need to start the authorization process now.

What a Spanish fintech needs to do

The specific actions depend on your business model, but there is a common core.

Assess whether you are a CASP. The definition is broad. If you offer custody of crypto-assets, exchange, transfer, advisory, or portfolio management for crypto, you are a CASP. Even if the crypto component is secondary in your product. A neobank that lets users buy Bitcoin is a CASP.

Calculate your minimum capital. EUR 50,000 for advisory services. EUR 125,000 for custody and exchange. EUR 150,000 for operating a trading platform. These are minimums; the CNMV can require more based on your risk profile.

Review your advertising. MiCA is strict about crypto-asset advertising. All commercial communications must be “fair, clear and not misleading, and consistent with the information contained in the whitepaper.” Influencers promoting tokens without disclosing the commercial relationship are, technically, in breach.

Implement asset segregation. Client assets must be segregated from the company’s own assets. This requires separate accounts, independent audits, and documented custody procedures.

For fintech that do not operate directly with crypto but whose services integrate with platforms that do (payment gateways, market data APIs), obligations are lighter but not nonexistent. Due diligence on your crypto service providers becomes a regulatory obligation, not just a best practice.

The opportunity

MiCA is not just regulatory cost. It is the first comprehensive crypto-asset regulation in the world. Spanish companies that obtain CASP authorization will have a passport to operate across all 27 member states without additional authorizations. That is a market of 450 million people.

Moreover, regulation eliminates non-serious actors. Companies that cannot meet capital and governance requirements exit the market. Those that can gain credibility and access to institutional clients who until now avoided crypto due to lack of regulatory framework.

Why does this matter for non-Spanish companies? Because Spain, along with France and Germany, is one of the first member states actively processing CASP authorizations. Getting licensed in Madrid gives you EU-wide access, and the CNMV has been proactive about establishing clear timelines.

If you need to assess MiCA’s impact on your operations, our consulting team works with European fintech on regulatory compliance. We also cover the fintech sector in depth in our fintech solutions section.