European Securities and Markets Authority guidance published today instructs crypto-asset service providers authorized under the Markets in Crypto-Assets Regulation to cease providing services linked to asset-referenced tokens and e-money tokens that fail to meet MiCA standards. The measure covers the full range of regulated activities for EU clients, including trading platforms, exchanges, order execution, custody, transfers, investment advice and portfolio management.

Deadline and Enforcement Expectations

National competent authorities must ensure compliance by setting a firm deadline of January 8, 2027, for addressing existing client holdings in non-compliant stablecoins. ESMA has advised that national regulators require MiCA-authorized firms to take action as soon as possible, with the three-month window serving as the outer limit for remediation. The instruction applies across the European Union to create a consistent supervisory timetable.

Firms are directed to implement technical, contractual and organizational controls that prevent EU clients from acquiring new positions or increasing exposure to the unauthorized tokens. Any ongoing services must support an orderly wind-down for existing holdings only.

Permitted Temporary Wind-Down Services

Regulators may authorize limited, temporary services for clients who already hold non-compliant stablecoins. These include liquidation, conversion to compliant alternatives, withdrawals, transfers and safekeeping. Such activities must remain strictly supervised, temporary and confined to helping clients exit their positions without introducing new buyers or increasing exposure.

ESMA stressed that disclosures or customer acknowledgments alone cannot substitute for the full issuer protections required under MiCA for asset-referenced and e-money tokens. Firms must instead focus on orderly removal of risk for legacy clients through supervised mechanisms.

Background and Scope Expansion

The latest opinion builds directly on earlier supervisory expectations issued in January 2025, which had focused on restrictions involving trading and exchange services for non-compliant stablecoins. The October 2026 guidance expands the framework to encompass every MiCA-regulated activity that could sustain client exposure, including custody, portfolio management and transfers.

MiCA requires issuers of qualifying e-money tokens to operate under credit institution or electronic money institution authorizations, with strict rules on reserves, governance and redemption. Asset-referenced tokens face separate requirements covering collateral, disclosure and ongoing supervision. The new position highlights the risks to EU clients from continued access to tokens lacking these protections.

Operational Implications for Providers

Authorized crypto service providers will need to redesign onboarding processes, trading rules, custody arrangements and portfolio tools to block new or expanded holdings of non-compliant stablecoins. National regulators will monitor implementation closely, requiring documentation of technical safeguards, contractual terms and internal controls.

The approach does not extend to holding non-MiCA stablecoins outside the scope of authorized crypto services. It targets only the regulated offerings supplied by MiCA-authorized entities to EU clients.

Timeline and Monitoring

ESMA has published the opinion on October 8, 2026, establishing January 8, 2027, as the clear endpoint for full remediation of remaining exposures. National authorities will work with the regulator to ensure timely application of the measures and will report on progress.

The deadline aligns with the ongoing rollout of the MiCA regime and follows the formal end of transitional arrangements for certain activities. Providers are expected to demonstrate compliance through proactive controls rather than reactive pauses.