CoinDesk
The EU's Markets in Crypto-Assets (MiCA) framework came into full force on July 1, forcing more than 1,700 unlicensed crypto platforms to stop serving European customers and direct them to licensed alternatives. Only 323 companies held valid MiCA authorization at the time, a gap that left up to 10 million users navigating a forced migration, and that regulators now warn is being exploited by scammers impersonating official bodies and licensed exchanges to steal funds.
Why it matters
WhiteBIT data shows social engineering accounted for nearly 41% of crypto incidents in 2025, more than any other category. The European Securities and Markets Authority (ESMA), France's AMF, the Netherlands' AFM, and Austria's FMA have all issued warnings that criminals are copying regulator language, logos, and falsified documents to push users onto fake platforms. France's AMF said scammers posed as AMF employees and demanded upfront administrative fees to recover stolen funds. Austria's FMA went further, warning that hundreds of platforms lost legal status on July 1 and urging users to verify providers against official databases before moving assets, or to transition to self-hosted wallets to avoid migration traps entirely.
The pattern is not EU-only. The UK's Financial Conduct Authority logged 4,465 reports of fake FCA impersonations in the first half of 2025 alone, with 480 victims actually losing money. Common tactics include fake screen-sharing sessions used to set up fraudulent crypto accounts on victims' devices and fabricated notices claiming a wallet was opened illegally in the victim's name.
Market impact
The migration window turns legitimate-seeming communications into attack surfaces. Genuine licensed exchanges are pushing withdrawal, transfer, and account-restriction notices to users, which makes it trivial for scammers to mimic those messages and manufacture urgency. All four regulators told CoinDesk they never ask customers to transfer funds and never contact them via private messages; the AMF, AFM, and FMA direct users to verify any provider on the official ESMA or national registers before moving assets.
Frequently asked questions
-
How many EU users were forced to migrate under MiCA?
Up to 10 million EU users had to move assets after MiCA's July 1 deadline, with 1,700+ unlicensed platforms shut out and only 323 MiCA-authorized firms remaining to absorb them.
-
What scam tactic is exploiting the MiCA migration?
Regulator impersonation. Scammers copy official language, logos, and falsified documents from ESMA, AMF, AFM, and FMA to push users onto fake platforms or demand fake recovery fees.
-
How big is the social engineering problem in crypto?
WhiteBIT data shows social engineering accounted for nearly 41% of crypto incidents in 2025, the largest single category. The UK's FCA logged 4,465 fake FCA impersonations in H1 2025, with 480 victims losing money.
-
How can investors verify a legitimate MiCA-licensed provider?
Check the specific legal entity on the official ESMA register, not just the parent brand. A group-level license elsewhere does not automatically cover every subsidiary serving EU customers.
-
Will regulators ever contact users asking for fund transfers?
No. ESMA, AMF, AFM, and FMA all state they never ask customers to transfer funds and never contact them via private messages. Any such outreach is a scam.
TheBlock
CoinTelegraph
WatcherGuru
WuBlockchain