MiCA Rule Changes Create New Crypto Scam Risks as Fraudsters Exploit Exchange Migrations

• MiCA licensing changes are forcing thousands of crypto firms to exit the EU market.
• Scammers are exploiting exchange migrations with fake notices and impersonation schemes.
• Verify migration requests through official channels before moving any crypto assets.

The European Union’s Markets in Crypto-Assets Regulation (MiCA) has reshaped how crypto exchanges operate across the bloc. 

Under the rules, any platform serving EU customers must hold a bloc-wide license. Companies that missed the July 1 deadline are now considered illegal in the EU and must tell customers to withdraw or move their funds elsewhere.

The numbers show how sweeping the shift has been. In late July, only 323 crypto firms had secured licenses from the European Securities and Markets Authority (ESMA), the bloc’s top markets regulator. 

Data provider VASPnet has estimated that over 1,700 unlicensed companies would need to shut down their EU operations. Major platforms including Coinbase, Kraken, and OKX obtained licenses, while Binance, the world’s largest exchange, has not yet secured EU-wide approval.

Why Migrations Attract Scammers

Regulators say the transition itself has become a target-rich environment. When thousands of users are told to move assets on a deadline, confusion and urgency set in, exactly the conditions fraud relies on. 

Stéphane Pontoizeau of France’s Autorité des Marchés Financiers (AMF) has described the moment as an unusually strong opportunity for scammers, since customers are actively searching for new platforms and are more likely to act on unfamiliar instructions.

Security researchers point to the same dynamic: uncertainty around where funds should go, combined with the mechanics of a real migration, makes it hard for users to tell official communication from fraud.

How the Scams Work

ESMA has confirmed it is aware of criminals misusing its name and logo, including falsified documents, to make fraudulent schemes look official. The AMF has reported cases of scammers impersonating regulator staff or exchange representatives, directing customers to transfer assets to fake wallets or lookalike websites. 

The Dutch Authority for the Financial Markets (AFM) has issued similar warnings about third parties requesting fund transfers during the licensing transition.

This mirrors a broader trend. Blockchain analytics firm Chainalysis has reported that global losses from crypto scams and fraud reached $17 billion last year, nearly triple the figure from five years earlier, with impersonation fraud among the fastest-growing categories.

Protecting Your Assets During the Transition

Regulators are urging users to slow down rather than react to urgent-sounding notices. Before transferring funds, users should:

• Verify any migration notice directly through an exchange’s official app or website, not through links in emails or messages
• Confirm regulatory claims by checking ESMA’s or a national regulator’s published license list rather than trusting a forwarded document
• Treat unsolicited contact from “regulator staff” as a red flag, since watchdogs do not typically ask users to move funds
• Avoid rushing decisions; the AMF has deliberately avoided imposing an aggressive wind-down deadline on unlicensed firms specifically to reduce panic-driven mistakes
• Report suspected impersonation to the relevant national regulator

Ultimately, MiCA has brought clearer oversight to Europe’s crypto market, but the disruption of shifting nearly two thousand platforms out of business has created a parallel opportunity for fraud. As Pontoizeau put it, the safest response during this period is patience, taking time to choose a licensed provider carefully rather than acting on pressure to move funds immediately.

Related: MiCA’s New 321-Firm Limit: Is Your Crypto Exchange Safe in Europe?