European financial authorities have reported a surge in impersonation fraud targeting cryptocurrency users in the wake of the Markets in Crypto-Assets regulation fully taking effect. Scammers are exploiting the requirement for unlicensed firms to wind down or restrict EU services, tricking customers into transferring holdings to fraudulent sites and accounts.

Forced Asset Transfers Create Opening for Criminals

The July 1 deadline marked the end of the transition period under the EU framework. Crypto-asset service providers that failed to secure authorization must now operate illegally if they continue serving clients in the 27 member states and are required to instruct customers to withdraw or transfer their assets. Licensed firms gain passporting rights to operate across the bloc under a single regime.

According to the European Securities and Markets Authority register updated at the end of July, approximately 323 entities have obtained licenses. Data provider VASPnet estimated last month that more than 1,700 unlicensed companies would need to cease EU operations. Among licensed operators are Coinbase, Kraken and OKX. Binance stands out as a major platform that has not secured authorization and faces limits on EU services.

This mass migration of customer funds has created conditions favorable to fraud. Officials described the period as presenting an elevated opportunity for criminals to intercept transfers while users seek alternative licensed providers.

How the Scams Operate

France’s Autorité des Marchés Financiers has identified cases in which suspects posed as its own staff. They contacted customers of unlicensed exchanges and directed them to move assets to websites controlled by the fraudsters. The authority has also noted similar attempts involving impersonation of legitimate crypto firms.

The European Securities and Markets Authority confirmed awareness of fraudulent practices that misuse its logo and identity, including the creation of falsified documents to promote scams. The Dutch Autoriteit Financiële Markten cautioned that bad actors may target investors searching for replacement licensed platforms.

Criminals rely on fake websites, counterfeit official-looking materials and social engineering. Users of platforms required to exit the market are particularly exposed because legitimate instructions to transfer funds create confusion that scammers can exploit.

Regulatory Response and Precautions

The French regulator has deliberately avoided setting an aggressive wind-down deadline for unlicensed firms operating in France. Officials reasoned that artificial urgency increases the risk of hasty transfers into fraudulent channels. Cases involving impersonation of the authority or licensed companies will be referred to law enforcement.

Authorities across the bloc have urged users to verify any request to move assets independently. Confirmation should come only through official websites, apps and the ESMA public register of authorized providers rather than unsolicited messages or links. Regulators have also advised licensed firms against overstating the protections attached to their services in promotional materials.

Broader data from Chainalysis indicates crypto scam and fraud losses reached $17 billion in the previous year, compared with $6 billion five years earlier, with impersonation schemes among the categories showing rapid growth.

Users remaining with providers that missed the authorization deadline face the practical necessity of relocating holdings. Taking time to confirm the status of any new platform through official channels remains the primary defense against the current wave of activity.