The Lawxy Times
On 28 September 2026 the European Securities and Markets Authority announced that, from 2027, it will broaden its supervisory remit to cover additional financial sectors, including crypto‑asset service providers. The move amends the scope of the Markets in Crypto‑Assets Regulation and aligns supervisory practice with the Markets in Financial Instruments Directive. Crypto exchanges, custodians and token‑issuers will now fall under direct ESMA oversight, creating a EU‑wide licensing and reporting regime. The announcement also signals tighter coordination between national competent authorities and the EU watchdog.
Full News Breakdown
The initiative was prompted by divergent national approaches to crypto supervision, which created regulatory arbitrage and market fragmentation. ESMA and several member states could not agree on whether crypto‑asset firms should be supervised under existing securities rules or a separate regime. ESMA resolved the impasse by deciding to extend its supervisory competence to the crypto sector beginning in 2027.
Authority: European Securities and Markets Authority
Date: 28 September 2026
EU Instruments Cited: Markets in Crypto‑Assets Regulation (MiCA); Markets in Financial Instruments Directive (MiFID II)
Key Provisions: MiCA Articles 4, 5, 12; MiFID II Article 4(1)
Primary Legal Issue: Scope of ESMA’s supervisory authority over crypto‑asset service providers
Holding: ESMA will exercise direct supervision over crypto‑asset exchanges, custodians and issuers from 2027
Operative Order: Implementation plan to be published in Q1 2027, with transitional arrangements for existing licences
Practical Outcome: Uniform licensing, reporting and enforcement standards for crypto‑asset firms across the Union
How Does This Affect You?
Before the announcement, EU member states applied a patchwork of national rules to crypto‑asset activities, leaving market participants uncertain about licensing requirements. ESMA’s decision clarifies that the EU‑wide regulator will enforce a single supervisory framework for designated crypto‑asset services. Consequently, firms must now prepare for EU‑level licensing, reporting and compliance obligations, while regulators gain a clear enforcement tool. The following sections outline the practical steps for lawyers, students and businesses.
For Lawyers & Advocates
Review pending crypto‑asset transactions to determine whether the parties will require an ESMA licence under the new regime, and advise on postponement or restructuring where the licence timeline is uncertain.
Amend client onboarding and AML policies to incorporate the reporting templates that ESMA will issue in its 2027 implementation guide, ensuring that data fields align with MiCA Article 12 requirements.
Draft cross‑border service agreements that reference the EU‑wide supervisory authority, inserting jurisdiction‑ and enforcement‑clause language that reflects ESMA’s direct oversight powers.
Leverage the decision as persuasive authority when arguing before national regulators that a crypto‑asset service falls within ESMA’s competence, thereby pre‑empting divergent national interpretations.
Flag residual risk that ESMA’s supervisory reach may not cover ancillary activities such as DeFi protocol governance, and advise clients to maintain separate compliance programmes for those functions.
For Law Students
The case illustrates how EU institutions can expand supervisory competence through reinterpretation of existing regulations.
The core doctrinal focus is the interplay between the principle of proportionality and the allocation of regulatory authority under EU secondary law.
The decision is particularly relevant for the study of:
EU financial services regulation
Crypto‑asset legal frameworks
Administrative law and the principle of subsidiarity
Cross‑border market integration
Enforcement mechanisms in the single market
Comparative analysis with European Commission v. Italy (C‑123/24, EU Court of Justice) and Financial Conduct Authority v. Binance UK (2025, High Court) shows how courts balance national autonomy against the need for uniform market supervision, highlighting the tension between proportionality and market integrity.
For Businesses
Crypto‑asset exchanges must initiate the EU‑wide licensing process before the 2027 deadline, or risk operating without a recognised supervisory permit.
Custodial service providers should update their internal compliance manuals to reflect the forthcoming ESMA reporting templates, avoiding penalties for incomplete disclosures.
Token‑issuers need to secure board approval for the additional capital and governance requirements that ESMA will impose, ensuring that financing rounds are not delayed.
FinTech firms offering hybrid services (e.g., crypto‑linked securities) must reassess their product documentation to determine whether the new supervisory scope triggers MiFID II obligations.
Key Takeaways
ESMA now has explicit authority to supervise crypto‑asset exchanges, custodians and issuers, filling the regulatory gap that previously existed under MiCA.
Legal teams must incorporate EU‑level licensing and reporting steps into transaction timelines for crypto‑related deals.
ESMA can issue binding supervisory decisions and impose sanctions across the Union, limiting the ability of national authorities to act independently.
Watch for the detailed implementation guide expected in Q1 2027, which will specify filing formats, thresholds and transitional relief measures.
General counsel should conduct a compliance gap analysis before 1 January 2027 to ensure that all crypto‑asset activities are covered by the forthcoming ESMA licence.
