EBA Outlines Landmark EU Crypto Fines as New Rules Take Effect

The European Banking Authority (EBA) has published a consultation paper outlining how it plans to calculate fines for crypto asset issuers that breach the EU’s Markets in Crypto-Assets (MiCA) framework. The proposal—released June 26—signals that regulators intend to move from rulemaking to consistent, standardized enforcement for “significant” token issuers.

Under the draft methodology, the EBA would apply a structured two-step process: it would first establish a baseline severity for an infringement and then adjust the result based on aggravating or mitigating factors. The framework is designed to cover significant asset-referenced tokens (ARTs) and significant e-money tokens (EMTs), with penalty caps intended to be large enough to deter major market players.

Key takeaways

• The EBA’s June 26 consultation sets out a standardized method for determining MiCA-related fines for issuers of “significant” ARTs and EMTs.
• Fines could reach statutory ceilings of up to 12.5% of annual turnover for significant ART issuers and up to 10% for significant EMT issuers, or up to two times the profits from the violation.
• The EBA’s enforcement “teeth” arrive as MiCA licensing requirements take effect on July 1, ending a transitional period for many firms.
• Crypto firms that miss licensing deadlines face operational constraints—and potentially the very types of conduct targeted by the EBA’s fine methodology.
• Executives have a consultation window until September 28 to comment on the EBA’s approach, but the July 1 compliance deadline leaves little time for adjustments in practice.

A penalty playbook for MiCA breaches

MiCA is the EU’s landmark digital asset regulation, built to bring order to the market by requiring token issuers and crypto service providers to meet bank-like compliance expectations—covering issues such as consumer protections and capital reserves—to access the bloc’s single market.

In its consultation paper, the EBA focuses on enforcement for significant tokens as defined under MiCA. The document proposes a consistent approach to fines rather than leaving penalty levels to ad hoc determinations. According to the EBA, the methodology begins by evaluating the baseline seriousness of an infraction and then accounts for behavior-specific circumstances, such as factors that would increase or reduce culpability.

The proposed ceilings are explicitly framed as punitive. The consultation states that final penalties could be set up to statutory maximums of 12.5% of annual turnover for issuers of significant ARTs and 10% for issuers of significant EMTs. The paper also references a cap of two times the profits generated by the violation, a design intended to prevent companies from treating enforcement risk as a cost of doing business.

EBA’s consultation paper (June 26) lays out the framework in more detail, including the procedural steps the authority would use when calculating penalties.

MiCA licensing deadline turns the calendar into a compliance cliff

The fine methodology arrives at a moment when the industry is already facing a hard operational deadline. By July 1, crypto companies must have obtained formal licenses from national regulators to legally offer services across the EU and to market stablecoins within the 27-nation bloc. The deadline ends the transitional period that allowed some operators to continue functioning under less stringent local rules.

The EBA’s penalty methodology is therefore more than a theoretical enforcement blueprint. Companies that fail to secure regulatory authorization by July 1 could be forced to halt or narrow certain activities. The timing also raises the risk of triggering conduct that falls under the types of non-compliance the EBA’s framework is meant to penalize.

Earlier coverage from Cointelegraph also highlighted that the July 1 deadline would constrain firms unable to complete MiCA authorization processes in time. In practical terms, that means executives and compliance teams may be operating under uncertainty while regulatory paperwork catches up—right as the EBA is preparing to standardize what happens when rules are broken.

Binance’s EU restrictions underscore the operational impact

One of the clearest real-world signals comes from Binance. According to Cointelegraph, the exchange notified European Union users that it would restrict access to some services after it failed to secure MiCA authorization from a member state ahead of the July 1 deadline. The reported reason was that Binance withdrew its MiCA license application in Greece.

As users shared notices on social media, Binance indicated that it would stop onboarding new EU users and limit certain services for EU-based accounts effective July 1. The notices also stated that withdrawals would remain available after that date, aligning with regulatory expectations that customers should be able to exit their positions even when trading or onboarding restrictions apply.

The timing matters for market participants because it suggests a likely pattern: without authorization, major venues may shift from growth mode to risk containment. For users, that translates into fewer options for new entry, while for institutions and market makers it can affect liquidity planning and compliance coverage across jurisdictions.

Cointelegraph reported that Binance saw substantial daily net outflows around the announcement, citing DefiLlama data. The exchange’s subsequent outflow figures over the following two days were also reported by Cointelegraph, reflecting how quickly liquidity can move when regulatory access changes.

EU enforcement in focus as the US relies more on action-by-action

Beyond the specific penalty mechanism, the EBA consultation highlights a broader enforcement posture. By publishing a clear fining methodology just as MiCA licensing takes effect, EU authorities appear to be emphasizing predictability and deterrence—leaving less room for interpretation that enforcement might be gradual or forgiving.

This contrasts with a more enforcement-driven approach often associated with the United States, where regulatory outcomes can depend heavily on case-by-case actions. In the EU’s model, the framework aims to define the penalty logic upfront, providing firms with a clearer sense of the regulatory “cost of non-compliance” if they operate without the required authorizations or breach MiCA obligations.

The EBA also set a consultation period that runs until September 28, giving industry participants time to lobby for changes to the fine methodology. Still, the practical reality is that companies must operate compliantly well before the EBA’s final guideline is locked in—meaning the July 1 deadline will test compliance systems first, and only then will firms try to influence the methodology through formal feedback.

As the consultation deadline approaches, market participants should watch whether national regulators align quickly on implementation details and how quickly firms adapt their compliance programs ahead of and after July 1—because the EBA’s penalty framework will likely shape boardroom decisions long before any final rules are formally adopted.