Virtual asset service provider, meet ESMA: three months to unwind unauthorised stablecoins

What ESMA told every virtual asset service provider on 8 October#

The fox reads the verb before the noun. On 8 October 2026 the European Securities and Markets Authority published an opinion on services linked to unauthorised stablecoins, and its operative verb is should. Authorised crypto-asset service providers should cease providing services related to non-MiCA-compliant stablecoins to clients in the European Union, and any remaining exposure should be dealt with no later than three months after the publication of the opinion.

A crypto asset service provider is the MiCA name for what the Financial Action Task Force calls a virtual asset service provider: an exchange, a custodian, a broker or a wallet operator. The opinion covers the wind-down in some detail. The release lists the liquidation, conversion, withdrawal, transfer or safekeeping of such assets as the activities that may continue while a position is exited.

Two cautions keep the reading honest. The release uses the language of supervisory expectation, which is not the language of a new statute, so a virtual asset service provider should not describe it to customers as a ban. And the opinion's own full text was not located for this piece, so the details below rest on ESMA's public release and on coverage that quotes it, such as Cointelegraph's report of the three-month deadline.

Who counts as unauthorised, and why the date is the second one#

Unauthorised here means a stablecoin whose issuer lacks the authorisation MiCA requires, which matters to every virtual asset service provider that lists it. The text of Article 48 is blunt: a person shall not make an offer to the public or seek the admission to trading of an e-money token unless that person is the authorised issuer, with limited exceptions. Article 53 adds that no marketing communications shall be disseminated prior to the publication of the crypto-asset white paper.

The October opinion is not the first time ESMA has drawn this line. In January 2025 ESMA and the European Commission published guidance on non-compliant asset-referenced and e-money tokens, which pointed to action no later than the end of Q1 2025. The October opinion is the second run at the same wall, with a longer fuse.

A word on the harder edge of the argument. The European Central Bank and the systemic-risk board have argued that these schemes should not be admissible under MiCAR for third-country multi-issuance, while the Commission, in Reed Smith's reading, does not seem willing to prohibit them. The legal position of multi-issuance is contested, which is a reason for a firm to state its position in writing, not to guess.

What it does to crypto marketing in the EU#

Start with the rule that already governs the words. MiCA's Article 66 says a virtual asset service provider, in its MiCA guise, shall provide their clients with information that is fair, clear and not misleading, and that this includes marketing communications, which shall be identified as such. An authorised firm that stops servicing a token cannot keep an advert alive that invites an EU client to use it.

Now the inference, which is folkfox's own reading and not a quotation from any regulator. Affiliate, partner and influencer content that points EU readers at a service for a non-compliant stablecoin is likely to age fast. The destination page will change, the service will be withdrawn, and the content will keep promising it. That is a brand risk and a regulatory one at once, and it grows quietly in the undergrowth of old landing pages.

Social summaries of the opinion have already raced ahead of the release, which is how a rumour gets a head start on a regulator. Several name particular tokens as the obvious casualties. The ESMA release as read for this piece does not name individual tokens, so any article that does should say that the naming is the writer's inference, and give the reader the test: is the issuer authorised, and is the service provider authorised to serve it?

Two contrasts, and one correction#

Two nearby stories look like they belong here, and one does not. The first is South Korea. CoinDesk reported on 13 October that South Korea is blocking access to 27 unregistered crypto exchanges' websites, including KuCoin, BitMart, and MEXC. I could find no Korean regulator primary for the 2026 action, and an older 27-exchange notice from 2021 exists, so treat the new report as single-sourced until a primary appears.

The contrast is still instructive about channels. An earlier action, in April 2025, removed 14 crypto exchange apps from Apple's App Store and 17 from Google Play. A regulator does not have to block a website to cut a funnel. Removing an app listing does the same job.

The correction concerns the Financial Stability Board. Some summaries describe a new set of stablecoin recommendations on 12 October. The FSB's page is a Chair's letter, and its accompanying note summarises ongoing work at the FSB. The standard that stands is the 2023 high-level recommendations, applied by individual authorities within their remits. Do not cite a new FSB rulebook that has not been published.

Five jobs for a crypto asset service provider before January#

None of this needs a campaign. It needs an inventory and a calendar, owned by someone at the virtual asset service provider who can say no to a partner. The method matches how folkfox approaches Web3 marketing and FinTech marketing: list what you have said, decide what is still true, and retire the rest in an order you can defend. For the rulebook that surrounds it, see the MiCA review's marketing rules and the SEC's crypto promotion FAQs.

Three months is shorter than it sounds in a marketing calendar, because the content that has to change is the content nobody remembers publishing. This is patient prowl work: follow the scent of each stale link through the hedgerow of old pages, and track the trail back to the den where the template lives. Every virtual asset service provider will need it done by January. Start with the pages that were cheapest to make, and finish with the ones that took a launch.

Frequently asked questions#