ESMA crypto warning list: firms flagged for operating without a MiCA license
As of 30 October 2026, 188 entities are flagged in the official ESMA register as providing crypto-asset services in the EU without the required MiCA (CASP) authorisation. The warnings come from national regulators and are published by ESMA as the NCASP register: the closest thing the EU has to an official crypto warning list. Search it below by name or website domain.
Which crypto firms are on the ESMA warning list?
Every entry below comes from the official ESMA register of non-compliant entities (NCASP), newest decisions first. Search by company name or paste a website address.
Showing 188 of 188 entries
ESMA crypto warning list compiled from the national regulators' NCASP register and verified by CASP Tracker on 30 October 2026.
CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB 
Czech National Bank CONSOB CONSOB CONSOB CONSOB CONSOB 
FSMA CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB 
AFM CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB CONSOB 
NBS No match in the warning list. Important: absence from this list is NOT proof of a license, because only a few regulators report to it. The only positive proof is an entry in the MiCA license list.
Entities are listed exactly as reported by national regulators. Many entries are lookalike or clone domains that imitate well-known brands, so always compare the exact domain you use, not just the name.
What is the ESMA crypto warning list (NCASP register)?
It is the public register of non-compliant entities under MiCA: companies and websites that a national regulator has flagged for providing crypto-asset services in the EU without the MiCA (CASP) authorisation the law requires. ESMA publishes it alongside the MiCA license register and updates it weekly. It currently holds 188 entries.
The official name is the register of “non-compliant entities providing crypto-asset services” (NCASP), part of ESMA's interim MiCA register. This page re-presents that data in a searchable form; you can cross-check every entry in the official ESMA source.
Is this a complete EU blacklist of illegal crypto firms?
No. Entries are reported by national regulators, and so far only 5 of them have filed any (179 of the 188 current entries come from Italy's CONSOB, the rest from FSMA, AFM, Czech National Bank and NBS). A firm operating without a license in another EU country may simply not be listed yet.
That is why absence from this list proves nothing. The only positive proof of MiCA compliance is an entry in the official register of licensed providers: check the MiCA license list first, and treat this warning list as an extra red-flag check.
Two details of this list that generic articles miss, both surfaced by our own matching work: we match brands by exact domain, not by name, because the list contains look-alike scam domains that imitate real exchanges, and a loose name match would wrongly flag the genuine brand; and the register is an interim CSV file that ESMA plans to move into its own IT systems during 2026, so any site that does not re-verify the source regularly will silently go stale.
Is my crypto exchange on the warning list?
Search the list above. An exchange can be in one of three states, and each means something different:
✓ MiCA licensed
The company is in the official register of authorised providers (CASPs). It may legally serve clients across the EU/EEA.
Example: Kraken
✕ Not licensed, not flagged
The company has no MiCA authorisation, but no EU regulator has issued a warning against it (yet). After 1 July 2026 it may not legally serve most EU clients.
Example: Binance
⚠ Flagged on the warning list
A national regulator states the company provides crypto services in the EU without the required MiCA authorisation. The strongest warning signal of the three.
Example: MEXC
What should I do if my exchange is on this list?
- Verify the entry at the source: open the regulator's warning (the “Official warning” link where available) and compare the exact domain you use, character by character, with the flagged one. Many entries are clone sites imitating real brands.
- Stop depositing and withdraw your funds if you still can. A firm operating without the required authorisation gives you none of MiCA's protections: no custody rules, no complaint procedure, no supervision.
- Move to a licensed provider: pick one from the MiCA license list or compare the largest crypto exchanges with a MiCA license.
- If you suspect fraud, report it to your national financial regulator and the police. Background reading: what MiCA is and how the license works.
FAQ about the ESMA crypto warning list
Is this the official ESMA warning list?
The data is official, the page is not run by ESMA. Every entry comes from ESMA's interim MiCA register of non-compliant entities (NCASP), which we re-publish in a searchable form and verify against the source file. Last verified on 30 October 2026.
Is MEXC on the ESMA warning list?
Yes. The Dutch regulator AFM flagged MEXC on 16 September 2025 for providing crypto-asset services in the Netherlands without the required MiCAR license. MEXC is the best-known exchange on the list.
Does an entry on the warning list mean the company is a scam?
Not automatically. Legally it means one thing: a national regulator says the entity provides crypto services in the EU without the required MiCA authorisation. In practice many flagged domains are clone or fraud sites, so treat any entry as a strong signal to stay away.
Is the ESMA warning list complete?
No. Only a few national regulators actively report entries today (179 of the 188 current entries come from Italy's CONSOB). A firm that is missing here can still be operating without a license. The only positive proof is an entry in the MiCA license list.
Why are most entries on the list Italian?
Because Italy's CONSOB is by far the most active regulator reporting to the ESMA register, not because the problem is Italian. Other regulators publish warnings on their own national websites, and those do not always reach the ESMA register.
How often is the ESMA warning list updated?
ESMA publishes register updates weekly. We check the source file regularly and show the verification date on this page; the current data was verified on 30 October 2026.
Check the other side of the register
All 389 crypto providers licensed under MiCA, searchable by name or website domain.
Open the MiCA license list