What MiCA means for crypto advertisers now that the grace period is over

For eighteen months, MiCA was the regulation crypto advertisers could afford to skim: the rules were in force, but the transitional periods meant almost nobody was being held to them. That ended on 1 July 2026. The grandfathering windows have closed in every member state, ESMA has told unauthorised firms in writing to stop marketing to Europeans, and the first fines for non-compliant crypto advertising — not trading, advertising — have been published. This is what the regulation actually says about ads, what regulators have done with it so far, and what changes for anyone buying or selling crypto media into the EU.

The grace period is over, and ESMA said the quiet part out loud

MiCA applied in full from 30 December 2024, but Article 143 let existing crypto-asset service providers keep operating under national rules for up to eighteen months while they applied for authorisation. Member states chose different lengths — the Netherlands and Poland cut it to six months, Germany to twelve, France and Italy took the full eighteen — but the last window closed on 1 July 2026. ESMA’s statement of 23 June 2026 to firms still without a licence is unusually blunt for a regulator: they must “immediately stop onboarding new EU clients, refrain from opening new client relationships or accounts, and cease marketing activities and solicitation.” The same statement reminds non-EU providers that they “cannot provide MiCA services to EU clients or solicit EU clients,” and adds that this “also applies in a business-to-business context.” Read that as an advertiser: for any exchange, wallet, or trading service that is not on ESMA’s register of authorised providers, a European ad campaign is now itself the violation.

What a compliant crypto ad has to say

Article 7 governs marketing for tokens themselves — anything offered to the public or seeking a listing. The communication must be “clearly identifiable” as marketing, its information must be “fair, clear and not misleading” and consistent with the crypto-asset white paper, it must state that a white paper has been published and give the offeror’s website, telephone number, and email — and it must carry, verbatim, this sentence: “This crypto-asset marketing communication has not been reviewed or approved by any competent authority in any Member State of the European Union. The offeror of the crypto-asset is solely responsible for the content of this crypto-asset marketing communication.” Where a white paper is required, no marketing may run before it is published. Article 66 covers the service providers — exchanges, brokers, custodians — and is shorter but sharper: information “including in marketing communications, which shall be identified as such” must be fair, clear, and not misleading, and providers “shall not, deliberately or negligently, mislead a client in relation to the real or perceived advantages of any crypto-assets.” None of this is exotic; it is roughly what securities marketing has required for decades. What is new is that a banner on a crypto news site now has a statutory text it either carries or does not.

Advertising is solicitation: the reverse-solicitation trap

Non-EU platforms have long leaned on “reverse solicitation” — the idea that if a European customer comes to you unprompted, you need no local licence. MiCA keeps that exemption and then defines it so narrowly that advertising destroys it. Article 61 says a firm that “solicits clients or prospective clients in the Union, regardless of the means of communication used for the solicitation, promotion or advertising” cannot claim the customer came on their own initiative, and that this holds “notwithstanding any contractual clause or disclaimer purporting to state otherwise.” ESMA’s guidelines on the exemption spell out what counts: internet commercials, banners, pop-ups, retargeting, affiliation campaigns, press releases, “sponsorship deals,” and paid “so-called influencers.” Its annex lists geo-targeted digital ads aimed at EU users, country-code domains, EU-language sites, and sponsoring a national or European sporting competition as indicators of solicitation. For media buyers the translation is simple: a non-authorised platform running programmatic display with EU geo-targeting is not in a grey zone. It is doing the specific thing the guidelines describe.

Enforcement has started — with ads, specifically

Three cases from 2025–2026 show the regulators reading the marketing articles closely. Austria’s FMA fined Bitpanda GmbH €70,000 in a ruling published in August 2026 — its first published MiCA penalty — and among the cited breaches were Article 7(2), disseminating a marketing communication before the required white paper was published, and Article 7(1)(d) and (e), the missing contact details and the missing “not reviewed or approved” statement. A well-funded, licensed European exchange was fined for what its ads did not say. In the Netherlands, the AFM reviewed the advertising and cost disclosures of 33 licensed providers and found shortcomings in the advertising of fourteen of them, citing Article 66; it has promised supervisory letters and enforcement if the problems persist. And the AFM’s public warning against MEXC in September 2025 named the evidence of illegal solicitation directly: the exchange “actively targets Dutch consumers, including through active campaigns via MEXC’s Dutch X account and sponsorship of a Dutch Blockchain conference.” Alongside these sit France’s AMF blacklist, Italy’s CONSOB site-blocking orders — which explicitly cite the absence of a notified white paper — and ESMA’s register of non-compliant entities under Article 110. The pattern: regulators are using ad campaigns and sponsorships as the proof of the offence.

The walled gardens went MiCA-first

We wrote earlier this year that 2026 reopened the walled gardens to certified crypto advertisers. MiCA is the key that opens them, and the platforms have not moved in step. Google is furthest along: since April 2025, advertising exchanges or wallets in the EEA on Google Ads requires authorisation “as a Crypto-Asset Service Provider (CASP) under the Markets in Crypto-Assets (MiCA) regulation” plus Google’s own certification, and on 1 July 2026 it closed the last national loophole by dropping France’s DASP registration. Meta, X, and TikTok are a step behind: their crypto policies still require prior written permission or certification and still enumerate national regulators — the AMF, BaFin, the Dutch central bank — and as of our check none of the three policy pages mentions MiCA at all. In practice a MiCA-authorised firm will clear those gates, but the paperwork is per-platform and per-country, and an unauthorised one will clear none of them. Which pushes the unauthorised money toward the one place that will still take it.

What it means for niche networks and publishers

That place is the specialist crypto ad networks, and their paperwork has not caught up either. We read the advertiser terms of Coinzilla, Bitmedia, Cointraffic, A-ADS, and HypeLab: every one requires advertisers to comply with “applicable laws,” and not one mentions MiCA, a white paper, or CASP authorisation. Coinzilla’s blog says it vets campaigns against MiCA while stating that legal compliance “cannot be transferred to any network”; Bitmedia’s advises EU advertisers to state their supervising regulator on the banner. Both are right about where the liability sits: on the advertiser. But publishers are not bystanders. ESMA’s solicitation indicators include a third-country firm’s logo or backlink appearing on a site with an EU country domain, and CONSOB’s blocking powers extend to ordering the removal of advertising campaigns. A European crypto publisher running unauthorised-exchange banners at scale is, in the regulators’ own framework, part of the solicitation — a risk our 2026 network ranking now weighs, and one that makes the publisher-side quality controls we describe in the Coinzilla and Bitmedia reviews a compliance question rather than a taste question.

The bottom line

Four questions before any crypto campaign touches EU inventory. Is the advertiser on ESMA’s register — and if not, does the geo-targeting exclude every EU and EEA country, with no sponsorships, influencers, or EU-language landing pages to undo it? If a token is being promoted, has the white paper been published first, and does the creative carry the mandated statement and contact details? Are the claims fair, clear, and consistent with what the white paper says — no “safe,” no “commission-free” without the full cost picture? And does the network know any of this — because as of today, none of them will ask. Britain, for the record, runs a separate and older regime: since October 2023 a crypto promotion to UK consumers must be issued or approved by an FCA-authorised or registered firm, and breaching it is a criminal offence. Two jurisdictions, two rulebooks, one direction of travel. The era in which a crypto ad was just a banner ended on 1 July; the networks that still answer their front doors will be the ones that noticed.