TL;DR
- EU watchdogs warned that fraudsters are impersonating crypto companies and regulators after MiCA’s July 1 deadline created confusion among investors across Europe.
- French authorities identified scammers posing as AMF employees and directing customers to fraudulent websites, while ESMA reported official misuse of its logo in campaigns.
- About 320 entities held MiCA licenses by August 5, while estimates suggested more than 1,700 providers might need to stop operating under the framework.
European financial watchdogs are warning that fraudsters are exploiting the confusion created by MiCA’s July 1 deadline, impersonating crypto companies and regulators to target investors. Exchanges that secured authorization can operate across the bloc under one regime, while unlicensed firms must restrict services or wind down. The regulatory transition meant to clarify Europe’s crypto market has instead opened a temporary window for highly convincing deception. Customers facing genuine account changes, platform exits or provider searches may now struggle to distinguish legitimate compliance messages from carefully constructed attempts to steal their digital assets during the transition.
Regulatory Confusion Creates New Openings for Impersonation Scams
French regulator AMF has identified cases in which suspects posed as its employees and instructed customers to move assets to fraudulent websites. Stéphane Pontoizeau, an executive director at the watchdog, described the post-deadline period as offering scammers an unusually favorable opportunity. The fraud works by turning regulatory authority itself into the bait, making fake instructions appear safer precisely because they sound official. The AMF has therefore avoided imposing an aggressive deadline for unlicensed exchanges to stop operating, seeking to reduce the panic and rushed transfers that criminals could exploit among affected users across the region.
The Netherlands’ financial markets authority issued a similar warning, saying bad actors may target investors searching for an alternative licensed provider. ESMA also said it was aware of fraudulent campaigns using its logo to promote scams. Impersonation is spreading across both sides of the transition, attacking customers leaving unauthorized platforms and those searching for approved replacements. That creates an awkward problem for regulators: publicizing licensing requirements helps investors check providers, yet the same announcements give criminals language, branding and urgency they can imitate when directing victims toward fraudulent websites or asset-transfer instructions online at scale.
MiCA became fully effective on July 1 after its final transition period ended, placing crypto firms under a comprehensive European framework. Around 320 entities had obtained licenses on ESMA’s list updated August 5, while earlier estimates suggested more than 1,700 providers might need to cease operations. The enormous gap between authorized and potentially departing firms explains why the compliance deadline has become fertile ground for social engineering. Binance was among the exchanges that had not secured authorization by the deadline, underscoring how familiar names can leave customers navigating restrictions, uncertainty and messages that demand verification.
