MiCA · Article 65 · passport in practice

MiCA CASP Passport in Practice 2026 — Operational Use Realities

MiCA CASP passport went operational late 2024. By mid-2026, substantive cross-border passport activity is established across the EU but operational realities differ from the clean Article 65 framework. Host-state NCAs have substantive expectations. Notification mechanics matter. And the passport works substantively differently for different service types. Here's what 18 months of operational experience reveals.

MiCA CASP passport in practice is the operational reality of cross-border service provision by MiCA-authorised CASPs since late 2024 — how Article 65 notification mechanics actually work in practice, the substantive engagement host-state NCAs maintain with passporting operators, real cross-border servicing patterns across the EU, and the operational considerations that differ from the regulatory framework's clean theoretical structure.

Quick facts

ParameterValue
Legal basisMiCA Regulation (EU) 2023/1114 Article 65
Passport mechanicHome-state NCA notifies host-state NCA(s); host-state NCAs cannot impose additional authorisation requirements
Notification timingHome-state NCA notifies within 10 working days of receiving complete operator notification; host-state can begin within 15 working days of notification
Operational status (mid-2026)Substantive cross-border passport activity established across EU; substantive home-state vs host-state coordination patterns developed
Host-state powers retainedConsumer-protection enforcement, host-state language requirements (typically marketing), local-investor protection measures, AML cooperation
Common passport servicing patternsCross-border online services without local presence; cross-border services with local marketing partnerships; cross-border services with local advisory partnerships
Related provisionsArticle 63 (initial authorisation), Article 64 (withdrawal), Article 95 (supervisory cooperation)

What 18 months of passport experience reveals

MiCA CASP passport went operational with MiCA application date 30 December 2024. By mid-2026, substantive cross-border passport activity has been established across the EU. The framework substantively works — operators authorised in one member state successfully service customers across the EU without separate host-state authorisations.

But operational realities differ from the clean Article 65 framework. Host-state NCAs maintain substantive engagement. Notification mechanics matter operationally. And the passport works substantively differently for different service types. Operators that planned for theoretical Article 65 framework face substantive operational gaps; operators that planned for actual cross-border operational reality face substantively better outcomes.

The substantive operational pattern through 2025-2026:

Passport works as intended for cross-border online services — operators providing custody, exchange, trading-platform services from substantive single-jurisdiction operational base to customers across the EU. Framework substantively delivers regulatory simplification.

Host-state engagement persists for consumer-protection — host-state NCAs maintain substantive engagement on consumer-protection enforcement, marketing-conduct requirements, complaint-handling expectations. Substantive operator infrastructure required for major passport markets.

Language requirements substantive in some markets — host-state language requirements for consumer-facing materials substantial in France, Germany, Italy, Spain, Poland. Operators serving substantial customer base in these markets need substantive local-language infrastructure.

AML cooperation substantive across all passport markets — substantive AML cooperation with host-state FIUs, substantive AML supervisory cooperation, substantive law-enforcement cooperation across all passport markets. Standard infrastructure across the EU.

Service-type variations material — different MiCA services have substantively different passport-operational reality. Custody passport substantively cleaner than advisory passport. Trading-platform passport substantively more complex than exchange passport.

The notification mechanics — what actually happens

Article 65 notification framework on paper:

  • Operator notifies home-state NCA of intent to passport services to host-state(s)
  • Home-state NCA validates notification, transmits to host-state NCA(s) within 10 working days
  • Host-state CASP servicing can begin within 15 working days of notification

In practice through 2025-2026, the substantive mechanics:

Substantive home-state validation engagement — home-state NCA typically engages substantively with operator on notification adequacy. Standard notifications complete within 10 working days; complex notifications (multi-service, multiple host-states) can extend to 4-8 weeks.

Substantive host-state engagement post-notification — host-state NCAs typically engage substantively with passporting operator post-notification. Requests for substantive operator information beyond formal notification, substantive engagement on local customer-protection arrangements, substantive interaction on complaint-handling infrastructure.

Substantive operational preparation expected — host-state NCAs expect substantive operator preparation for local servicing — local customer-protection materials, complaint-handling infrastructure, substantive operator knowledge of local consumer-protection framework.

Substantive ongoing engagement — host-state engagement isn’t one-time. Ongoing supervisory engagement on substantive consumer-protection matters, marketing-conduct reviews, complaint-handling oversight.

The practical implication: passport notification is procedural but operators should plan substantive host-state engagement preparation 8-16 weeks before notification, not reactively after.

What works — passport patterns that operationally succeed

Operational patterns demonstrating substantive passport effectiveness through 2025-2026:

Cross-border online services without local presence — operators providing services entirely through online infrastructure without local presence in host-state. Common pattern for custody, exchange, brokerage services. Framework substantively delivers regulatory simplification — operators face home-state primary supervision, host-state consumer-protection engagement, substantively unified operations.

Cross-border services with local marketing partnerships — operators providing core services from home-state while partnering with local marketing or business-development partners in host-states. Substantial pattern for operators serving substantial customer base in multiple member states. Substantive operational complexity but framework supports the structure.

Cross-border services with local advisory partnerships — for specialised products (advisory services, portfolio management), operators frequently structure with local advisory partners providing substantive customer engagement while core services delivered from home-state CASP. Article 65 framework supports this structure.

Multi-jurisdictional operations with single CASP authorisation — substantial operators with substantive customer base across multiple member states operating under single home-state CASP authorisation rather than multiple national authorisations. Framework substantively delivers operational simplification compared to pre-MiCA national-licence patchwork.

What requires substantive operational work — passport patterns that need preparation

Operational patterns requiring substantive preparation through 2025-2026:

Substantial customer base in single host-state — operators serving substantial customer base in single host-state (Germany, France, Italy, Spain) face substantive host-state operational expectations even without separate authorisation. Local-language infrastructure, substantive local customer-protection materials, substantive complaint-handling infrastructure, substantive host-state regulatory engagement.

Advertising and marketing in host-states — substantive host-state marketing-conduct requirements. Operators with substantive marketing in host-states face substantive engagement on local conduct compliance. Some host-states (notably Spain, France) have heightened marketing-conduct requirements applying substantively to passporting operators.

Trading-platform passport — Article 76 + 82 trading-platform obligations apply substantively across passport markets. Host-state interaction on market-conduct expectations, host-state engagement on consumer-protection arrangements for trading-platform users.

Advisory and portfolio-management services — host-state suitability requirements, host-state customer-protection arrangements for advisory products substantially. Operators frequently structure with local advisory partners to manage host-state expectations.

Service-type variations in passport reality

Different MiCA services have substantively different passport-operational realities:

Custody passport — substantively cleanest passport experience. Custody services largely commodity from passport perspective. Host-state engagement focused on substantive customer-protection arrangements (segregation under Article 75, customer-asset return arrangements). Standard infrastructure across passport markets.

Exchange and execution-of-orders passport — substantively clean for online services. Host-state engagement on best-execution arrangements (Article 80), substantive customer-protection for execution services. Standard infrastructure with substantive customer-protection arrangements.

Trading-platform passport — substantively more complex. Host-state engagement on Article 76 + 82 trading-platform arrangements, substantive market-conduct expectations, substantive customer-protection arrangements for trading-platform users. Operators face substantive host-state engagement on platform-operational arrangements.

Advisory services passport — substantively most complex. Host-state suitability requirements, host-state local-customer arrangements substantial. Many operators structure with local advisory partners managing substantive customer engagement.

Portfolio-management passport — similar to advisory passport in complexity. Substantive host-state engagement on portfolio-management arrangements, substantive customer-protection requirements.

Cross-border supervisory cooperation — Article 95 in practice

Article 95 supervisory-cooperation framework supports passport operations:

Home-state primary supervision — substantive home-state NCA supervision continues regardless of passport scope. Primary supervisory relationship is home-state.

Host-state engagement coordinated through ESMA — substantive coordination through ESMA when host-state engagement requires home-state cooperation or supervisory action.

Joint supervisory actions — substantive cross-border supervisory matters can trigger joint home-state + host-state supervisory action, typically coordinated through ESMA.

Information sharing — substantive ongoing information sharing between home-state and host-state NCAs on supervisory matters affecting passporting operators.

Operator engagement — operators face substantive interaction with both home-state primary supervisor and host-state engagement authorities. Substantive substantive coordination infrastructure required for major operators.

Common operational mistakes and how to avoid them

Through 2025-2026 implementation experience, common operational mistakes include:

Inadequate host-state preparation — operators that prepare for theoretical Article 65 framework face substantive host-state engagement gaps. Substantive operational planning for major passport markets is essential.

Underestimating language requirements — host-state language requirements substantively affect major passport markets. Substantive local-language infrastructure required for substantial customer-base markets.

Inadequate consumer-protection infrastructure — substantive host-state engagement on consumer-protection arrangements. Operators with substantive consumer-protection infrastructure designed for home-state market only face substantive host-state engagement on inadequate arrangements.

Inadequate complaint-handling infrastructure — substantive complaint-handling expectations across passport markets. Substantive infrastructure required including local-language complaint procedures, substantive cross-border complaint coordination.

Underestimating AML cooperation requirements — substantive AML cooperation requirements across passport markets. Substantive infrastructure required including substantive FIU reporting across passport markets, substantive law-enforcement cooperation arrangements.

The framework’s strategic implication

For operators planning EU strategy under MiCA, CASP passport framework has substantive strategic implications:

Home-state selection matters substantively — different home-state NCAs have different supervisory cultures, processing capacities, and operational engagement styles. Home-state selection affects substantive ongoing operational experience for the entire passport network.

Passport scope planning — substantive operational planning required for major passport markets. Not all passport markets equal in substantive operational requirements.

Local-language infrastructure investment — substantive infrastructure investment for major passport markets pays substantive operational dividends through substantive host-state engagement.

Cross-border operational coordination — substantive operational infrastructure managing home-state + multiple host-state supervisory engagements. Operational overhead is real but framework substantively delivers compared to pre-MiCA national-licence patchwork.

Long-term strategic flexibility — passport framework supports substantive strategic flexibility — operators can adjust passport scope, add or remove host-state servicing, restructure operational arrangements without changing home-state authorisation foundation.

For operators using or planning CASP passport, the framework substantively works — but operational reality requires substantive engagement with host-state expectations beyond the clean theoretical Article 65 framework.

Pitfalls and nuances

1 Assuming passport eliminates host-state NCA engagement

MiCA Article 65 prevents host-state authorisation requirements but doesn't eliminate host-state regulatory engagement. Host-state NCAs maintain substantive supervisory engagement on consumer protection, marketing conduct, complaint handling, AML cooperation. Passporting operators that ignore host-state expectations face substantive enforcement engagement even without authorisation requirements.

2 Underestimating host-state language requirements

Many host-state NCAs require substantive local-language compliance for consumer-facing materials — marketing communications, customer agreements, customer-protection disclosures, complaint procedures. Operators relying solely on English-language materials face substantive host-state engagement. Plan local-language infrastructure for substantial passport markets.

3 Treating notification as purely procedural

Passport notification is procedural but operators that submit notifications without substantive operational planning face host-state engagement on inadequate preparation. Substantive host-state NCAs request substantive operator information beyond formal notification — business plans, local customer-protection arrangements, complaint-handling infrastructure. Plan substantive notification engagement.

4 Missing substantive AML host-state expectations

AML cooperation with host-state authorities is substantive. Operators serving substantial host-state customer base face substantive AML reporting expectations to host-state FIU, substantive cooperation with host-state AML supervisory authorities, and substantive interaction with host-state law-enforcement on AML-related matters. Plan substantive AML infrastructure for major passport markets.

Frequently asked questions

How does MiCA CASP passport notification work in practice?

Home-state NCA notifies host-state NCAs within 10 working days of receiving complete operator notification. Host-state CASP servicing can begin within 15 working days of notification. Process is procedural — no host-state approval required.

Can host-state NCAs impose additional requirements on passporting CASPs?

Not for authorisation matters — host-state cannot require separate authorisation. But host-state retains consumer-protection enforcement, language requirements for local marketing, local-investor protection measures, and substantive AML cooperation.

Has the CASP passport worked operationally?

Yes, with operational refinement through 2025-2026. Substantive cross-border passport activity established across the EU. Initial implementation friction (host-state expectations clarification, notification mechanics) substantially resolved through ESMA coordination.

What are common passport servicing patterns?

Cross-border online services without local presence (most common), cross-border services with local marketing partnerships (substantive for major operators), cross-border services with local advisory partnerships (specialised products), and full local operational presence (largest operators).

Do passporting CASPs need host-state customer-protection compliance?

Yes for substantive consumer-protection requirements. Host-state retains enforcement of consumer-protection rules including marketing-conduct requirements, complaint-handling expectations, and substantive customer-protection standards. Compliance with host-state expectations is mandatory.

Get matched

Working through a crypto-licensing decision?

Get an editorial shortlist of firms matched to your business — customer market, model, jurisdiction, and stage. Free, and not influenced by sponsorship.

Get a firm shortlist →

Sources cited

  1. Regulation (EU) 2023/1114 (MiCA) — Article 65 — regulation
  2. ESMA Technical Standards on CASP passport notification — regulator
  3. ESMA Q&A on MiCA passport operational considerations — regulator