Reverse Solicitation Under MiCA: When Non-EU Crypto Firms Can Serve EU Clients

The question every non-EU exchange asks

A crypto exchange licensed in Dubai, Singapore, or the British Virgin Islands has EU users. The compliance team asks: do we need a MiCA authorisation, or can we keep serving these users without one?

The answer the founders hope for is reverse solicitation — the principle that if the client came to you, you are not “providing services in the EU” in the regulated sense. MiCA codifies a version of this in the reverse-solicitation exemption. But the way the Regulation and ESMA’s guidelines build it, reverse solicitation is the narrow exception, not the workaround. A non-EU firm planning its EU strategy around the reverse-solicitation exemption is usually planning around the wrong thing.

What reverse solicitation actually permits

MiCA’s reverse-solicitation exemption allows a third-country firm — one with no MiCA authorisation and no EU establishment — to provide a crypto-asset service to a client established or located in the EU, where that service is provided at the client’s own exclusive initiative.

The phrasing matters word by word:

• Own — the impulse must come from the client, not from the firm or an intermediary acting for the firm.
• Exclusive — the initiative must be solely the client’s. A client nudged by the firm’s advertising has not acted on exclusive initiative.
• Initiative — the client must actually start the relationship. Responding to a firm’s outreach is not initiative.

If those conditions hold, the third-country firm can provide the requested service without triggering the MiCA authorisation requirement.

What the exemption does NOT permit

ESMA’s guidelines and the reverse-solicitation exemption draw three hard lines:

What the firm wants to do	Allowed under the reverse-solicitation exemption?
Serve a client who genuinely approached the firm unprompted	Yes — within the narrow exemption
Advertise, market, or promote to EU clients, then serve those who “respond”	No — soliciting defeats the exemption
Use a client’s initial request to cross-sell new crypto-assets or services	No — explicitly barred by the reverse-solicitation exemption
Rely on a website disclaimer to convert solicited clients into “client-initiated” ones	No — disclaimers cannot override facts

The cross-selling line is the one firms most often miss. A client who opened an account to buy a specific crypto-asset has invited that service and nothing more. Marketing staking, derivatives, or a new token to that client is a fresh solicitation — and evidence to a supervisor that the firm runs a solicitation model rather than relying on occasional genuine reverse solicitation.

How ESMA frames the exemption

ESMA issued its guidelines under the mandate in the reverse-solicitation exemption, which tasks the authority with specifying the situations in which a third-country firm is deemed to solicit EU clients, and with supervisory practices to detect and prevent circumvention.

The consistent message across ESMA’s consultation, final report, and guidelines:

1. The exemption is narrow. It is to be construed narrowly and regarded as the exception. A reading that turns it into a general EU market-access route is wrong.

2. Facts beat paperwork. Whether a relationship was genuinely client-initiated is assessed on the facts. Contractual arrangements and disclaimers stating “client-initiated” cannot supersede contrary facts.

3. Soliciting is broad. Soliciting is not limited to a direct sales call. EU-targeted advertising, EU-language marketing, EU-geo-targeted paid media, sponsorship of EU events, and EU-focused affiliate arrangements can all amount to soliciting EU clients.

4. Supervisors should look for circumvention. ESMA directs national competent authorities to detect and prevent circumvention — which means a firm relying on the reverse-solicitation exemption should expect that its EU-facing conduct can be examined, not taken on trust.

When the exemption genuinely applies — and when it stops

Reverse solicitation works for what it was designed for: occasional, genuinely unsolicited contact. A professional investor in Germany who reads about a non-EU firm in international press and approaches it directly is a real reverse-solicitation case.

It stops working when the EU relationship grows. The exemption covers the discrete service the client requested. An expanding, ongoing EU client relationship — repeated services, a growing book of EU users, a material share of revenue from EU clients — drifts out of “own exclusive initiative” territory. A firm in that position is, in substance, providing services in the EU, and the honest answer is a MiCA authorisation or an EU establishment.

What a non-EU firm should actually do

Three practical positions for a third-country crypto firm with EU users:

1. Genuinely occasional EU contact — rely on the reverse-solicitation exemption, but keep contemporaneous records of how each EU relationship started, run no EU-targeted marketing, and never cross-sell. This is sustainable only at small scale.

2. A material and growing EU book — plan a MiCA CASP authorisation in an EU member state, or an EU establishment that is itself authorised. The reverse solicitation exemption is not a substitute for authorisation at scale.

3. Uncertain which applies — get a counsel assessment of the firm’s actual EU-facing conduct. The diagnostic question is not “do we have a disclaimer” but “would a supervisor, looking at our advertising, affiliates, and client records, conclude we solicited.”

Working with counsel on a reverse-solicitation assessment

The useful counsel diagnostic: ask whether the firm can describe, for the specific business, what conduct would and would not amount to soliciting EU clients under ESMA’s guidelines — and whether the firm’s current marketing and affiliate arrangements stay on the right side of that line. Counsel that answers only “you have a disclaimer, you’re fine” has not read the ESMA guidelines. The firms in our index with relevant cross-border experience are listed below.