MiCA's transition window closed on July 1. What it left behind is a lopsided map. Roughly 1,700 crypto platforms have stopped serving European users because they never secured authorization under the MiCA rulebook. The number that did clear it: 323. That is the entire licensed field for a bloc of 440 million people, and regulators estimate up to 10 million users may need to move their assets to a firm that made the cut.
The rule was written to protect those users. This month it is also handing scammers their best script in years.
The migration itself is the attack surface
A forced move of millions of accounts is exactly the confusion a phisher wants. France's AMF says it has already logged cases of criminals impersonating its own staff and posing as licensed exchanges, steering people toward wallets the attacker controls. Stephane Pontoizeau, the AMF's executive director, put it plainly: this moment is an opportunity for scammers more than usual. ESMA and the Dutch AFM issued parallel warnings the same week.
The official advice is narrow, and it is worth repeating exactly. Check the provider against the MiCA register directly. Not through a search result, not a social post, not a message that arrived unprompted claiming your funds must be transferred for compliance. European firms already carry real fraud costs; one exchange's card unit recently watched its fraud losses nearly erase a full quarter of revenue, all without a bloc-wide migration pushing anxious users toward unfamiliar sign-up pages.
Who cleared the register, and who did not
The licensed list carries most of the names a European trader would recognize. One absence stands out.
| Exchange | MiCA authorization |
|---|---|
| Kraken | Authorized |
| Coinbase | Authorized |
| OKX | Authorized |
| Crypto.com | Authorized |
| Bybit | Authorized |
| Binance | No matching entry |
Binance is the largest exchange by volume. As of mid-August its name did not appear in ESMA's MiCA register of authorized providers, a gap independent license trackers confirm. That matters because of pull. A user whose platform is winding down will reach for a familiar brand, and the fake compliance notices are built to sit in that exact gap between a shuttered account and a trusted-sounding replacement.
None of this is the first time regulators have leaned hard on the industry. Coinliva has tracked the pattern from Seoul's orders to its exchanges to the 11 billion dollars in consumer losses authorities were chasing before MiCA arrived. The MiCA cleanup was meant to shrink that surface. For the next few months it widens it, because 10 million people hunting for a new home for their coins is the largest pool of uncertain users the European market has produced in one stretch.
Ten million users, one public list
The MiCA register is public and searchable at ESMA. What it cannot do is make a user moving accounts under time pressure verify the receiving entity before sending funds, the exact step the migration scams count on people to skip. The safest move for anyone at a shuttered platform is dull: open the register, find the legal entity, and ignore any unsolicited notice that hurries the transfer along.
