Fraudsters Impersonate EU Regulators to Prey on MiCA Licensing Fallout
Scammers are targeting 'stranded' crypto users after more than 1,700 unlicensed firms were forced to exit the EU market.
Criminals are impersonating staff from European financial regulators to steal digital assets from users caught in the wake of the EU's MiCA licensing deadline. The fraud targets customers of unlicensed crypto firms who are now scrambling to migrate their funds after being forced out of the European market.
Fraudsters are posing as officials from the European Securities and Markets Authority (ESMA) and France's Autorité des marchés financiers (AMF). These scammers contact users of non-compliant platforms, offering fraudulent guidance on how to move assets to avoid loss. Victims are typically tricked into transferring their holdings to fake websites or accounts controlled by the attackers. This surge in activity follows the July 1, 2026, deadline for the Markets in Crypto-Assets (MiCA) regulation, which required all crypto service providers to be authorized to operate within the EU.
The Regulatory Vacuum
The MiCA framework was designed to standardize crypto-asset oversight across 27 EU member states, aiming to bring stability and consumer protection to a fragmented market. However, the transition period created a massive operational shift. VASPnet estimates that over 1,700 unlicensed crypto firms had to cease EU operations or fundamentally alter their operating models to comply with the law.
Among the most prominent examples is Binance, which failed to obtain a MiCA license by the July 1 deadline. This failure led to the suspension of services or the imposition of strict restrictions—such as withdrawal-only modes—for many of its European customers. This mass migration of assets created a window of urgency and uncertainty that criminals were quick to exploit.
The Regulatory Paradox
This wave of fraud highlights a "regulatory paradox" where a framework intended to protect consumers inadvertently creates a vulnerability during its implementation. By forcing a sudden exit of non-compliant firms, the regulation created a pool of "stranded" users who are desperate for legitimate guidance on how to recover or move their funds.
With global crypto scam losses reaching $17 billion last year, the scale of the MiCA-driven migration significantly increases the risk of retail losses. Stéphane Pontoizeau of the AMF noted that the current environment provides "an opportunity for scammers more than usual," as users struggle to distinguish between official regulatory instructions and sophisticated phishing attempts.
What to Watch
Regulators continue to warn users that official authorities will not contact individuals directly to request the movement of funds to specific external accounts. Investors are advised to verify all migration instructions through official, authenticated channels. As more firms wind down their EU operations, the industry is watching whether these impersonation tactics evolve into more complex social engineering schemes targeting the remaining licensed entities.