Short answer
There is no single EU “crypto disclosure”. Regulation (EU) 2023/1114 on markets in crypto-assets (MiCA) applies different rules to the token and to each service around it.
An ordinary crypto-asset offer generally needs a notified and published white paper, compliant marketing and an accountable legal-person offeror, although targeted and small offers may be exempt. An asset-referenced token (ART) normally needs an EU-established authorised issuer, an approved white paper, a segregated reserve, redemption rights, own funds, conflicts controls and robust governance. An e-money token (EMT)—a token referencing one official currency—may be issued only by a credit institution or electronic money institution and must be issued and redeemed at par.
Trading, exchange and custody are separate crypto-asset services requiring the correct crypto-asset service provider (CASP) authorisation or permitted notification route, plus prudential, management, conduct and operational controls. Custody adds segregation, return procedures and loss liability. Staking is not a listed MiCA service, but custodial staking-as-a-service requires custody authorisation. A financial instrument remains under securities law, not MiCA.
Start by classifying both the token and the activity
A business should map the token and every service separately. A public token sale does not authorise an exchange or custodian; CASP authorisation does not authorise an ART or EMT issue.
First ask whether the token is a financial instrument or another asset excluded from MiCA. ESMA's require a case-by-case, technology-neutral assessment.
For assets inside MiCA, the principal categories are:
- an EMT, which purports to maintain stable value by referencing one official currency;
- an ART, which purports to maintain stable value by referencing another value or right, or a combination of them; and
- another crypto-asset, including many utility tokens.
Calling every stablecoin an EMT is therefore unsafe. The reference mechanism determines the title of MiCA that applies.
In Hedqvist (C-264/14), the Court of Justice held that exchanging traditional currency for bitcoin was VAT-exempt because bitcoin functioned as a contractual means of payment in that setting, while not being legal tender. That pre-MiCA ruling does not classify a token under MiCA, authorise a crypto service or determine its disclosures. A classification under one EU regime cannot simply be imported into another.
Ordinary token offers: white paper, marketing and management responsibility
For a public offer of a crypto-asset other than an ART or EMT, Article 4 generally requires a legal person to draw up, notify and publish a white paper, publish compliant marketing communications and comply with the offeror conduct rules. The white paper covers the offeror and issuer, project, offer, token, attached rights, technology, risks and environmental impacts of the consensus mechanism.
All of the information listed in paragraph 1 shall be fair, clear and not misleading. The crypto-asset white paper shall not contain material omissions and shall be presented in a concise and comprehensible form. —
The management body must confirm compliance, accuracy and completeness. The first page identifies responsibility and states that no Member State authority approved the paper. Marketing must be identifiable, fair, clear, non-misleading and consistent. Material changes require an update; deficient information can create liability.
Exemptions include offers to fewer than 150 persons per Member State, EU consideration not exceeding EUR 1 million over 12 months, and specified qualified-investor offers. Separate exclusions cover certain free distributions, validation rewards, existing utility services and limited networks. Admission to trading can disapply exemptions, and “free” excludes taking personal data or another benefit.
Retail purchasers buying directly from an offeror or placing CASP generally receive a 14-day withdrawal right, subject to MiCA's conditions and trading-related exceptions.
Stablecoins: ART and EMT rules are structurally different
An ART issuer must generally be an EU undertaking authorised under MiCA, unless a credit institution uses Article 17's notification route. It needs an approved white paper, segregated reserve, eligible custodians, liquidity management, permanent redemption rights, own funds, conflicts and complaints controls, continuity, audit, and recovery and redemption plans. Circulation and reserve composition must be disclosed at least monthly; reserve audit reports and significant events must be published.
The governance standard is not merely documentary:
Issuers of asset-referenced tokens shall have robust governance arrangements, including a clear organisational structure with well-defined, transparent and consistent lines of responsibility, effective processes to identify, manage, monitor and report the risks to which they are or might be exposed, and adequate internal control mechanisms, including sound administrative and accounting procedures. —
Additional liquidity, own-funds and supervisory requirements apply when EBA classifies an ART as significant.
An EMT uses a different gate:
A person shall not make an offer to the public or seek the admission to trading of an e-money token, within the Union, unless that person is the issuer of such e-money token and: (a) is authorised as a credit institution or as an electronic money institution; and (b) has notified a crypto-asset white paper to the competent authority and has published that crypto-asset white paper in accordance with Article 51. —
EMTs are deemed electronic money. They must be issued at par on receipt of funds and redeemed at any time and at par, generally without a fee. Neither issuers nor CASPs may grant interest related to EMT holdings. The EMT white paper covers the issuer, token, offer, rights, technology, risks and environmental impacts, and must explain redemption. Significant EMTs attract additional EBA supervision and ART-like reserve, liquidity and recovery requirements.
Exchanges and trading platforms need service-specific controls
A provider needs CASP authorisation or, for specified regulated financial entities and equivalent services, Article 60's notification route. A new CASP needs an EU registered office, EU effective management and an EU-resident director. Its application identifies every service and documents governance, controls, prudential safeguards, ICT security, segregation, complaints, conflicts, outsourcing and wind-down. Managers and qualifying holders face suitability tests.
All CASPs must act honestly, fairly and professionally in clients' best interests. Client and marketing information must be fair, clear and not misleading, with prominent risk warnings and pricing policies. Conflicts must be identified, prevented or managed and disclosed.
A trading platform needs transparent operating rules, admission and due-diligence procedures, objective access criteria, order and transaction transparency, settlement arrangements and market-abuse controls. An exchange dealing on own account needs a non-discriminatory commercial policy and pre-trade price or pricing-method disclosure. Execution, advice, portfolio management and transfers have further rules; one permission does not cover all services.
Custody requires segregation, return procedures and accountable loss allocation
A custody agreement must cover the service, policy, authentication, security, fees and applicable law. The custodian must keep position registers, issue statements, facilitate attached rights and maintain return procedures.
Crypto-asset service providers providing custody and administration of crypto-assets on behalf of clients shall segregate holdings of crypto-assets on behalf of their clients from their own holdings and ensure that the means of access to crypto-assets of their clients is clearly identified as such. —
Client assets must be legally and operationally separated so the custodian's creditors have no recourse, subject to applicable law. Attributable loss creates liability capped at the asset's market value when lost. Sub-custody must use an authorised CASP and be disclosed.
Staking: no standalone licence, but custody rules usually control the service
Direct proprietary staking by a holder is not a separately licensed MiCA activity. The position changes when an intermediary holds a client's tokens or keys and stakes them for consideration. In a European Commission answer published through ESMA's Q&A system, staking-as-a-service is treated as ancillary to custody and therefore requires custody authorisation.
The provision of staking services therefore requires that the crypto asset staking service provider is authorised under MiCA to provide custody and administration of crypto-assets on behalf of clients, as set out in Article 75 MiCA. —
That Q&A is non-binding guidance, not a CJEU judgment. It points to a custody agreement, segregation, return ability, loss liability and consent where staking affects access. ESMA's later says a CASP may not stake client assets solely for its own account, even with consent. Shared-benefit staking may be agreed, but costs and access restrictions should be clear.
A liquid-staking token needs its own MiCA or financial-instrument analysis. Exchange, transfer or execution features require corresponding permissions; pooling or management can engage other regimes.
A practical governance file
Before launch, document:
- the token classification and every service in the operating model;
- the responsible issuer, offeror and service provider for each step;
- the required authorisation, regulatory notification or offer exemption;
- the white paper, marketing, risk, fee and environmental disclosures;
- management approvals, fit-and-proper evidence and conflicts controls;
- reserve, prudential, custody, segregation, ICT and outsourcing arrangements;
- redemption, withdrawal, complaints, incident, recovery and wind-down processes; and
- any Member State transitional or national-law issue.
MiCA generally applied from 30 December 2024; its ART and EMT titles applied from 30 June 2024. The maximum CASP grandfathering period ended on 1 July 2026, although Member States could shorten it. A provider operating now should therefore verify its actual authorisation status rather than rely on the former transition.
Conclusion
EU crypto governance begins with a legal map, not a generic white paper. Ordinary offers, ARTs, EMTs, trading, exchange, custody and staking each trigger different decision-makers, disclosures and controls. The most consequential design choices are the stable-value reference, who holds clients' keys, who promises redemption or yield, and which services are performed professionally.
Sources
This article provides general legal information, not advice for a specific matter. Laws, facts and procedural deadlines may change the result. Follow the linked primary sources and obtain local advice before acting.