← Back to blog

Implement MiCA Stablecoin Rules Now: 3 Pillars for Compliance Officers

September 27, 2026
Implement MiCA Stablecoin Rules Now: 3 Pillars for Compliance Officers

MiCA requires anyone issuing a stablecoin to the EU public to be authorised, hold prescribed reserves and own funds, publish a compliant white paper, and maintain recovery and redemption plans. Tokens classified as significant face direct EBA supervision and stricter liquidity and own funds calibrations. The regime splits stablecoins into e-money tokens and asset-referenced tokens, each with distinct issuer eligibility rules.

Cryptoverselawyers
Build a MiCA-Ready Token Framework
CRYPTOVERSE Legal advises on tokenization, AML/CTF policies, governance frameworks, and cross-border digital asset regulation.
Explore legal guidance

Regulatory mandate and scope under MiCA

MiCA's Titles III and IV create two statutory categories for stablecoins, and the distinction determines who may issue them and under what prudential regime. An e-money token (EMT) references a single official currency and functions economically like electronic money, so only credit institutions or authorised electronic money institutions may issue one. An asset-referenced token (ART) references a basket of assets, currencies or commodities, and issuance requires a dedicated MiCA authorisation from a national competent authority regardless of whether the issuer also holds a banking licence.

Both categories require authorisation before the token is offered to the public or admitted to trading inside the EU. This territorial trigger matters more than the issuer's country of incorporation: a firm established outside the EU cannot rely on a home-market licence to serve EU holders, and MiCA does not recognise third-country equivalence for ART or EMT issuance. Co-issuance and multi-issuer arrangements, where several entities distribute the same token under shared reserve backing, are permitted but each issuing entity must separately satisfy authorisation, governance and reserve requirements.

Practical scope points for compliance teams:

  • EMTs are limited to credit institutions and electronic money institutions; ARTs allow a broader range of authorised non-bank issuers.
  • Passporting exists within the EU once authorised, but there is no passporting into the EU from outside it.
  • Multi-issuer schemes must demonstrate that each issuer independently meets reserve and governance standards, not just the group as a whole.

Firms weighing where MiCA sits against other digital asset frameworks may find it useful to review this overview of MiCA's legal framework before deciding which token category fits their model.

Licensing and authorisation requirements for stablecoin issuers

An authorisation application under MiCA is not a formality. Competent authorities assess the applicant's white paper, governance structure, AML/CTF controls and evidence of own funds before granting market access, and incomplete applications routinely stall at the assessment stage rather than being rejected outright.

A complete application file typically includes:

  • A white paper meeting MiCA's disclosure standard, covering the token's mechanics, redemption rights and risk factors.
  • Governance documentation showing management body composition, fitness and propriety assessments, and internal control mapping.
  • AML/CTF policies and procedures aligned with the issuer's home member state transposition of EU anti-money laundering law.
  • Proof of own funds meeting the applicable minimum, plus a capital plan for scaling issuance.

Once authorised, the issuer can passport its token across the EU without seeking separate national approval in each member state, though the competent authority in the home state retains primary supervisory responsibility and coordinates with host-state regulators on conduct issues. Issuers operating through a credit institution or an electronic money institution face a dual compliance overlay: banking or e-money licensing conditions continue to apply alongside MiCA's token-specific rules, and the two regimes are not mutually substitutable. Counsel structuring a token launch should map both licence conditions from the outset rather than treating MiCA authorisation as a standalone gate; see this guide to legal support for token launches for the sequencing issues that commonly arise.

Capital, reserve composition and liquidity rules for issuers

MiCA's prudential architecture rests on three pillars: reserve composition, liquidity buckets and own funds, and treasury teams need to model all three before choosing a business model.

The deposit requirement obliges issuers to hold a portion of reserve assets as cash deposits with credit institutions rather than in securities or other instruments. The European Central Bank's macroprudential analysis explains why this deposit floor functions as a liquidity buffer: it guarantees a pool of assets that can be accessed immediately during a redemption surge, rather than assets that must first be sold into potentially illiquid markets. The ECB's analysis also flags that concentration limits on where those deposits sit are critical, since a run on one banking partner could transmit stress into sovereign bond markets if reserves are heavily invested in government paper.

Reserve liquidity allocation across cash and securities

Statistic callout: The European Central Bank sets out how the deposit calibration and liquidity-bucket interaction are designed to reduce contagion risk from large euro-denominated stablecoins into sovereign bond markets during stress.

On top of the deposit requirement, the European Banking Authority has consulted on draft regulatory technical standards that classify remaining reserve assets into liquidity buckets according to how quickly they mature, distinguishing daily-maturing instruments from those maturing within a week. Own funds requirements scale with issuance volume, and tokens classified as significant face a higher own-funds floor akin to a capital buffer rather than a fixed minimum.

  • Reserve assets must be segregated from the issuer's own balance sheet and held in custody arrangements that survive insolvency.
  • Liquidity buckets require issuers to hold a defined proportion of reserves in same-day or short-maturity instruments.
  • Own funds scale with issuance size, and significant issuers face enhanced capital calibrations reviewed by the EBA.

Readers exploring how reserve composition rules interact with tokenised real-world assets can find further detail in this analysis of MiCA and tokenised real estate, bonds and RWAs.

Governance, risk management and operational controls

Supervisors assess governance before they assess anything else, because a weak management body undermines every other control an issuer claims to have. MiCA expects the management body to take direct responsibility for the reserve policy, the recovery plan and the risk framework, rather than delegating those functions wholesale to operational teams. Fitness and propriety assessments apply to directors and senior managers, and competent authorities expect a clear separation between those who approve treasury decisions and those who execute them.

Risk management expectations extend to liquidity risk, operational risk, concentration risk in banking relationships, and third-party vendor management where custody, technology or market-making functions are outsourced. Issuers should expect supervisors to request evidence of vendor due diligence and contingency arrangements if a key vendor fails.

  • The management body must approve and periodically review the reserve policy, recovery plan and risk appetite statement.
  • Concentration risk controls should limit exposure to any single banking or custody counterparty.
  • Incident reporting procedures must cover technology failures, de-pegging events and reserve shortfalls, with defined escalation timelines to the competent authority.

Pro Tip: Build the incident reporting template before an incident occurs; supervisors expect issuers to produce standardised management information on demand, not to assemble it retrospectively.

AML/CFT obligations and travel rule implications

MiCA authorisation does not substitute for anti-money laundering compliance. Issuers and crypto-asset service providers remain subject to the AML/CFT baseline set out in FATF's updated guidance for virtual assets and VASPs, which expects robust know-your-customer procedures, sanctions screening and ongoing transaction monitoring regardless of the token's MiCA classification. The travel rule requires that transfers between crypto-asset service providers carry originator and beneficiary information, mirroring the data that accompanies traditional wire transfers, and issuers whose tokens circulate through multiple CASPs need to confirm that each counterparty in the chain actually applies this rule rather than assuming compliance.

Practical alignment steps include:

  • Map existing VASP AML programmes against MiCA's authorisation conditions to identify gaps rather than duplicating controls.
  • Confirm travel-rule data-sharing arrangements with every CASP that lists or transfers the token.
  • Extend sanctions screening to cover reserve-asset counterparties, not only token holders.

Firms building or refreshing AML frameworks across multiple jurisdictions may find comparative value in this review of AML and KYC rules for crypto VASPs, which illustrates how travel-rule expectations recur across regimes beyond the EU.

Technology, custody and reserve asset management practicalities

Reserve rules only work if the technology and treasury operations behind them are disciplined. Supervisors will ask how an issuer reconciles the tokens in circulation against the reserve assets backing them, and a credible answer requires daily, not periodic, reconciliation.

  1. Segregate reserve assets legally and operationally from the issuer's corporate balance sheet, using custody arrangements that remain enforceable in insolvency.
  2. Reconcile on-chain token supply against off-chain reserve holdings on a daily basis, flagging any variance immediately to the risk function.
  3. Select a custody model, whether third-party custodian, qualified bank custody or a hybrid arrangement, and document private-key management controls including multi-signature authorisation.
  4. Maintain a tested playbook for liquidating or accessing reserve assets rapidly during a redemption surge, including pre-agreed lines with deposit-taking banks.

Reserve strategies that involve tokenised assets carry their own custody and legal structuring questions; this guide to tokenisation and RWA structuring sets out the considerations relevant to issuers holding tokenised instruments as part of their reserve mix.

Enforcement exposure and the penalty framework issuers face

Competent authorities hold a graduated set of powers under MiCA, ranging from formal warnings and fines through to suspension of trading and, in serious cases, withdrawal of authorisation entirely. Where a token is classified as significant, the European Banking Authority takes on a direct supervisory role and coordinates with national authorities on cross-border enforcement, reflecting the systemic weight these tokens can carry.

Early enforcement activity tends to concentrate on a predictable set of failures:

  • Governance deficiencies, particularly unclear accountability for reserve and recovery-plan decisions.
  • Reserve composition shortfalls against the deposit requirement or liquidity-bucket standards.
  • Disclosure breaches, including white papers that understate risk or omit redemption mechanics.

Issuers that treat governance and disclosure as the first compliance priority, rather than an afterthought to token engineering, tend to fare better once supervisory reviews begin.

Practical structuring considerations for issuers and sponsors

Choosing between bank-issued and EMI-issued structures is a capital allocation decision as much as a legal one. Balance-sheet issuance through a credit institution can simplify some banking relationships but exposes the issuer to full prudential banking regulation on top of MiCA. EMI-based issuance keeps the regulatory footprint narrower but concentrates all reserve and liquidity risk within a non-bank entity that must independently satisfy MiCA's capital floors.

Banking partners add a further constraint: some banks treat stablecoin-related deposits as full outflows for liquidity coverage ratio purposes when the ultimate token holder is unidentified, which raises the cost of holding reserve deposits and pushes issuers toward diversifying banking relationships rather than concentrating reserves with a single bank.

  • Weigh bank issuance against EMI issuance on the basis of capital cost, not just licensing speed.
  • Diversify reserve deposits across multiple banking partners to reduce concentration and LCR-driven cost pressure.
  • Draft recovery plans with clearly defined triggers, at least one capital option and one liquidity option, and a rehearsed communications protocol, in line with the EBA's final guidelines on recovery plans under MiCAR.

Pro Tip: Test the recovery plan against a simulated de-pegging scenario before submitting it to the competent authority; the EBA's guidelines expect indicators calibrated to the issuer's own business model, not a generic template.

Readers weighing enforcement timelines against transitional arrangements will find further detail in this guide to full MiCA enforcement and transitional waivers.

How advisers should sequence MiCA compliance work

Governance accountability and the reserve model decision come first: everything else, from disclosure drafting to recovery-plan indicators, depends on who owns those decisions and how reserves are structured. Treasury and technology controls should be built in parallel so that reconciliation and reporting are ready before the application is filed, not after. Specialised counsel is worth retaining early wherever cross-border structuring, co-issuance or a non-EU parent entity is involved, since these arrangements carry the highest risk of application delay.

— CRYPTOVERSE

Cryptoverselawyers

Getting MiCA-ready means coordinating governance, treasury and legal workstreams that rarely sit under one roof, and some legal consultancies offer coordination to help integrate these advisory areas. Services may cover MiCA licensing support, recovery and redemption plan drafting, treasury and reserve modelling, AML/CTF policy drafting, and supervisory engagement support through the authorisation process.

  • Diagnostic reviews of governance, reserve structure and disclosure documents against MiCA's authorisation standards.
  • Prioritised remediation plans sequencing legal, treasury and technology fixes ahead of filing.
  • Retainer options for end-to-end licensing support, from application drafting through to ongoing supervisory liaison.

Start with a review of your current structure through our crypto legal services page to map what MiCA authorisation will require for your specific issuance model.

Sources

Boards preparing for MiCA supervision should work from a short, disciplined checklist rather than a sprawling project plan.

FAQ

Which stablecoins are MiCA compliant?

MiCA compliance depends on authorisation status rather than the token's brand: any e-money token or asset-referenced token issued by an entity authorised under MiCA and meeting its reserve, own-funds and disclosure requirements qualifies. Issuers must be checked individually against national competent authority registers rather than assumed compliant from public reputation alone.

Which cryptocurrencies are MiCA compliant?

MiCA's authorisation requirements apply specifically to asset-referenced tokens and e-money tokens rather than to cryptocurrencies generally, so most decentralised cryptocurrencies fall outside these particular stablecoin rules. Crypto-asset service providers handling any crypto-asset still face separate MiCA authorisation and conduct requirements under other parts of the regulation.

Is XRP MiCA compliant?

XRP is not a stablecoin and does not fall within MiCA's asset-referenced token or e-money token categories, so the reserve, own-funds and recovery-plan rules discussed here do not apply to it directly. Exchanges and service providers listing it in the EU still need their own MiCA authorisation as crypto-asset service providers.

Is Coinbase MiCA compliant?

Whether a specific exchange holds MiCA authorisation depends on its own licensing status with a national competent authority, and that status can change, so readers should check the relevant authority's public register directly rather than rely on general claims. MiCA authorisation for a crypto-asset service provider is separate from stablecoin issuer authorisation.

What is the deposit requirement under MiCA's reserve rules?

MiCA requires stablecoin issuers to hold a portion of reserve assets as cash deposits with credit institutions, calibrated to function as an immediately accessible liquidity buffer during redemption pressure. The European Central Bank explains that this calibration also limits concentration risk that could transmit stress into sovereign bond markets.