MiCA non-compliance penalties under Article 111 set a €700 000 floor for natural persons and at least €5 000 000 for legal persons, with turnover ceilings reaching up to 12,5% of total annual turnover for the most serious infringements, with the European Banking Authority (EBA) and the European Securities and Markets Authority (ESMA) supervising significant issuers and authorised CASPs respectively. The EBA’s Consultation Paper on a draft methodology for setting fines under MiCA confirms that significant stablecoin issuers face the steepest ceilings as the regime’s hard expiry approaches on the broader crypto landscape.
Key Takeaways
- €700,000 is the minimum maximum administrative fine for natural persons under MiCA Article 111(2)(d) maximum administrative fines of at least €700,000.
- €5,000,000 is the legal-person floor for those same infringements, scaling to 12,5% of the total annual turnover of the legal person for infringements referred to in paragraph 1, first subparagraph, points (b) and (c).
- €15,000,000 is the maximum administrative fine for legal persons for infringements of Articles 89 to 92, or 15% of the total annual turnover of the legal person.
- 12.5% of annual turnover is the EBA-proposed final fine ceiling for an issuer of an s-ART, when the higher fine amount cannot be tied to determinable profits or avoided losses.
- 10% of annual turnover is the matching cap for an issuer of an s-EMT under the EBA’s draft methodology for setting fines under MiCA.
- 2x the profits gained or losses avoided is the doubling gauge under MiCA Article 111(2)(c) maximum administrative fines of at least twice the amount of the profits gained or losses avoided, even if it exceeds the per-person caps.
- 210 firms held full MiCA authorisation by May 2026 out of more than 1,200 that previously held national crypto registrations across the EU, a sub-fifth conversion rate.
Editor’s Choice
- Natural-person maximum fine floor: €700,000 under MiCA Article 111(2)(d).
- Legal-person maximum fine floor: €5,000,000 for infringements in paragraph 1 points (a) to (d).
- Highest turnover-based cap (Title II ART rules): 15% of the total annual turnover for infringements of Articles 89 to 92.
- EBA significant-ART fine ceiling: 12.5% of annual turnover under the EBA’s draft methodology, the final amount reduced where the higher amount cannot be tied to determinable profits gained or losses avoided.
- Transitional period hard expiry: 1 July 2026, when the MiCA transitional period will officially expire across the EU on 1 July 2026.
- ESMA-wide admin fines 2024: €100,186,062, total aggregated value of administrative fines, up from €71,259,970 in 2023.
- France national-fine total 2024: €29,395,000, including €20,655,000 imposed under the MAR.
- EBA consultation deadline: 28 September 2026, with a virtual public hearing on 16 July from 14.30 CEST.
Article 111 Penalty Ladder for Legal Persons
- €700,000 natural-person fine floor (Article 111(2)(d)).
- €5,000,000 legal-person fine floor (Article 111(3)(a)).
- 3% turnover ceiling for paragraph 1 point (a) infringements.
- 5% turnover ceiling for paragraph 1 point (d) infringements.
- 12,5% turnover ceiling for paragraph 1 points (b) and (c).
Article 111 pairs a euro floor with a turnover percentage that flexes by infringement class, per EUR-Lex Regulation (EU) 2023/1114, starting at 3 % of the total annual turnover of the legal person according to the last available financial statements approved by the management body, for the infringements referred to in paragraph 1, first subparagraph, point (a) and rising for graver classes. The step-up structure scales with the gravity of the infringement, not just firm size.
| Infringement class | Minimum euro fine | Turnover ceiling |
|---|---|---|
| Paragraph 1, points (a) to (d) | 5000000 | n/a |
| Paragraph 1, point (a) | n/a | 3 |
| Paragraph 1, point (d) | n/a | 5 |
| Paragraph 1, points (b) and (c) | n/a | 12.5 |
Source: MiCA Article 111(3), Regulation (EU) 2023/1114, June 2026.
The legal-person ceiling caps at 12,5% of the total annual turnover of the legal person according to the last available financial statements approved by the management body, for the infringements referred to in paragraph 1, first subparagraph, points (b) and (c). National competent authorities (NCAs) pick the higher of the two amounts when applying the cap.
The turnover percentage is calculated on the total annual turnover of the legal person according to the last available financial statements approved by the management body, which pegs the ceiling to the firm’s most recent reported financials rather than any forward projection.
The 12.5% headline only attaches to points (b) and (c); lighter conduct sits at the 3% or 5% rung, which is the actual interpretive lift.
By the numbers: Article 111’s legal-person ceiling stacks 3%, 5% and 12,5% of total annual turnover across the three infringement classes, with the €5,000,000 floor applying when the percentage figure would land lower. NCAs select the higher of the two.
Recent Developments
- June 26, 2026: The EBA published a Consultation Paper with a draft methodology for setting fines in its role as supervisor under MiCA.
- June 24, 2026: Only around 210 firms had obtained full authorisation by May out of more than 1,200 that previously held national crypto registrations across the EU, per ESMA, per Euronews.
- April 2026: Per ESMA’s Statement on the End of Transitional Periods under MiCA, by 1 July 2026, any unauthorised CASP must have implemented its wind-down plan by the 1 July 2026 transitional-period expiry.
- July 1, 2026: After 1 July 2026, any entity providing crypto-asset services to EU clients without a MiCA licence will be in breach of EU law and must cease offering such services.
- July 2025: ESMA’s peer review of CASP authorisation in Malta found that some material issues were not fully resolved when MFSA granted the CASP authorisation.
- October 2025: Per ESMA’s Annual Sanctions Report 2025, ESMA’s annual report covered €100 186 062 in total aggregated value of administrative fines in 2024, up from €71 259 970 in 2023.
Natural-Person Fines and the Doubling Gauge
- €700,000 minimum natural-person fine floor under Article 111(2)(d).
- 2x profits gained or losses avoided where determinable, per Article 111(2)(c).
- Paragraph 3 of Article 111 sets the matching legal-person scope.
- Personal liability scope extends to members of the management body.
Officers, directors and management-body members are personally on the hook in MiCA’s design. The natural-person ceiling under Article 111(2)(d) sets maximum administrative fines of at least €700,000, and a separate paragraph attaches a profits-based mechanism that can blow past the per-person headline.
The doubling gauge is the more material lever for high-margin infringements. Where the regulator can quantify ill-gotten gains, maximum administrative fines of at least twice the amount of the profits gained or losses avoided because of the infringement, where those can be determined, even if it exceeds the maximum amounts set out in point (d) of this paragraph, as regards natural persons, or in paragraph 3 as regards legal persons.
That construction matches MAR and MiFID II precedent: the €700,000 floor grows in the cases where the misconduct paid off, so that no individual or firm can rationally pre-compute the fine as a cost of doing business.
Personal-liability scope: MiCA’s natural-person fines apply to members of the management body and to natural persons who under national law are responsible for the infringement, not only the registered legal entity itself. Officer-level exposure is a feature, not an edge case.
Title II Stablecoin and ART Rules: 15% Turnover Cap
- €1,000,000 natural-person floor for Article 88 infringements.
- €5,000,000 natural-person floor for Articles 89-92 infringements.
- €2,500,000 legal-person floor for Article 88; €15,000,000 for Articles 89-92; the penalty grid for infringements of Articles 89 to 92 runs to maximum administrative fines of at least €15 000 000 or 15% of total annual turnover for legal persons.
- 2% turnover ceiling for Article 88; 15% for Articles 89-92.
MiCA’s stablecoin rules sit in a separate enforcement pocket. Articles 89 to 92 govern asset-referenced tokens (ARTs) on the offering and admission-to-trading axis.
| Article scope | Legal-person fine floor (€) | Turnover ceiling |
|---|---|---|
| Article 88 infringements | 2500000 | 2 |
| Articles 89 to 92 infringements | 15000000 | 15 |
Source: MiCA Articles 89-92 administrative penalties annex, Regulation (EU) 2023/1114, June 2026.
The 15% turnover ceiling is the highest in the regulation. Maximum administrative fines of at least €1,000,000 for infringements of Article 88 and €5,000,000 for infringements of Articles 89 to 92 apply to natural persons.
For legal persons, the floors rise to at least €2,500,000 for infringements of Article 88 and €15,000,000 for infringements of Articles 89 to 92, or 2% for infringements of Article 88 and 15% for infringements of Articles 89 to 92 of the total annual turnover of the legal person. NCAs again select the higher of the two.
The construct mirrors the way GDPR pegs its top fines to 4% of global turnover: the percentage is the binding constraint on the largest issuers, the euro floor on the smallest.
The takeaway: Title II stablecoin and ART rules carry the steepest grid in the regulation, with the €15,000,000 legal-person floor and 15% turnover ceiling applying to Articles 89 to 92 infringements. For wider context on the rule pack itself, see the stablecoin compliance pillar.
EBA Fine Methodology for Significant Stablecoin Issuers
The EBA’s role is narrower than the NCAs but heavier where it bites. For issuers that the EBA has classified as significant, where an asset-referenced token (ART) or an e-money token (EMT) issued by an electronic money institution is classified as significant by the EBA, the EBA is responsible for supervising the issuer. The European Banking Authority (EBA) published today a Consultation Paper with a draft methodology for setting fines in its role as supervisor under MiCA.
| Issuer class | Final-fine ceiling (% of turnover) | Doubling-of-profits override |
|---|---|---|
| Significant ART (s-ART) | 12.5 | Applies above the 12.5% ceiling |
| Significant EMT (s-EMT) | 10 | Applies above the 10% ceiling |
Source: EBA Consultation Paper EBA/CP/2026/10, June 26, 2026.
The methodology runs in two steps under Article 131. Step one establishes a basic amount; step two adjusts for aggravating and mitigating factors. The ceiling kicks in last: where the EBA is able to determine that the profits gained or losses avoided, because of the infringement, are above 12.5% or 10% of the issuer’s annual turnover, for the issuer of a s-ART or of a s-EMT, respectively, the final amount of the fine is reduced where necessary to twice the amount of profits gained or losses avoided.
The consultation runs through 28 September 2026, with a virtual public hearing on 16 July from 14.30 CEST.
The 10% versus 12.5% asymmetry sits with the reserve and disclosure obligations: EMT issuers inherit the lower cap from the electronic-money rulebook, ART issuers carry the higher one.
The 210-Firm Authorisation Gap
- 210 firms authorised by May 2026 per the ESMA interim register.
- 1,200+ prior national crypto registrations across the EU.
- Sub-fifth conversion rate from registration to MiCA authorisation.
- 1 July 2026 hard expiry of the transitional period.
The penalties only bite at scale where the unauthorised universe is large, and the latest licensing snapshot puts that universe in stark relief. Out of a prior pool of more than 1,200 that previously held national crypto registrations across the EU, the ESMA interim register held only around 210 firms that had obtained full authorisation by May.
The implication is that national regulators have warned that firms operating beyond the deadline without the new licence face enforcement. ESMA’s framing in its April 2026 statement is firmer: CASPs should have orderly wind-down plans in place, ready for implementation ahead of the end of the transitional period in the respective Member State if authorisation is not obtained by that date. The gap between registrations and authorisations is where most of the year-ahead enforcement volume will originate. A sub-fifth conversion rate sizes the first enforcement wave around the 210-of-1,200 unauthorised-firm overhang, not post-licence misconduct.
For broader context on the people-process layer that MiCA assumes, see CoinLaw’s KYC compliance dataset, which tracks the identity-verification burden on the authorised CASP cohort.
ESMA Annual Sanctions Baseline
- €100,186,062 total admin fines across the ESMA remit in 2024; The total aggregated value of administrative fines reached €100 186 062 across the ESMA remit in 2024, up from €71 259 970 in 2023.
- €71,259,970 in 2023 (the prior-year baseline).
- France at €29,395,000 led aggregate fines; €29,395,000, including €20,655,000 imposed under the MAR.
- Germany at €15,982,200 followed; €15,982,200, including €14,055,000 imposed under MiFID II and MiFIR.
- Hungary at 182 measures led by sanction count; Hungary imposed the highest number of sanctions and measures in 2024 (182), followed by Greece (93) and Italy (84).
- €12,975,000 single largest 2024 fine, issued by Germany via settlement; €12,975,000 in 2024, via settlement, for a violation of MiFID II and MiFIR.
- €45,507,168 top sectoral total under MAR; the highest amounts of administrative fines for 2024 were imposed under the MAR (€45,507,168), and MiFID II and MiFIR.
That figure is the pre-MiCA reference point: the administrative-fine volume NCAs were already running across the broader securities and markets rulebook before MiCA enforcement layered in.
France led aggregate fines, with Germany following close behind. By volume, the leaderboard flips, with Hungary, Greece, and Italy in the lead on sanction count.
Sectorally, MAR and MiFID II topped the 2024 charts. MiCA enforcement adds a new vertical to that stack, with the 2024 baseline serving as the floor the MiCA volume builds on.
NCA-Level Enforcement Tools Beyond Fines
The Article 111 toolkit goes wider than monetary sanctions. The five standard NCA tools alongside fines are:
- Public statement: identifying the responsible natural or legal person and the nature of the infringement.
- Cease-and-desist order: requiring the responsible person to stop the infringing conduct and not repeat it.
- Withdrawal or suspension: of a CASP authorisation under Article 64.
- Management-position bans: preventing named officers from holding qualifying roles for fixed periods.
- Criminal-penalty referral: under the Article 111(1) second-subparagraph option, where a Member State has opted to lay down criminal penalties for the infringements covered by the regulation, with NCAs liaising with judicial or prosecuting authorities.
Public-statement disclosure attaches reputational cost the books cannot absorb. Authorisation withdrawal closes the EU passport entirely, which for a passporting CASP is a larger commercial impact than the €5,000,000 baseline fine.
ESMA Peer Review Evidence: Authorisation Rigour Is Uneven
ESMA’s peer review of CASP authorisation in Malta notes that the peer review analyses the approaches adopted by the Malta Financial Services Authority (MFSA) in the authorisation and early supervision of a CASP and provides recommendations to strengthen these processes. The review found that some material issues were not fully resolved when MFSA granted the CASP authorisation; some risk areas were not adequately assessed during the authorisation process; and the MFSA has demonstrated a good level of expertise and supervisory cooperation.
The mixed verdict matters at the enforcement layer because the peer-review framework is now a recurring tool ESMA will use to align supervisory practice across the 27 member states.
Jurisdiction arbitrage risk: ESMA’s peer-review framework is built on the premise that some NCAs will be more permissive than others at the authorisation step. A firm that secures a MiCA licence in a lighter-touch jurisdiction is not insulated from enforcement; ESMA can re-examine the authorisation and recommend remedial action by the home-state NCA. A licence is not a settlement.
For the regulatory-technology stack that authorised firms are now building to reduce the catching-and-fining surface, the RegTech sector dataset captures the spend trajectory.
How MiCA Penalties Compare to Wider EU Regulatory Fines
- €45.5 million MAR admin fines in 2024 vs €0 MiCA baseline (regime not yet in enforcement).
- 15% top turnover cap under MAR matches MiCA Title II’s ART ceiling for Articles 89 to 92.
- 10% turnover cap under MiFID II vs MiCA Article 111 general at 12.5%.
- €45,507,168 top sectoral fine total: The highest amounts of administrative fines for 2024 were imposed under the MAR (€45 507 168), and MiFID II and MiFIR.
Cross-rulebook context puts MiCA’s headline numbers in proportion: MiCA’s 12.5% turnover ceiling sits at the upper end of what other EU regimes carry.
MiCA’s drafting language tracks MAR and MiFID II, with the doubling-the-profits gauge borrowed from MAR Article 30. The closest analogue for NFTs and other crypto-asset categories carved out of MiCA’s scope is the lighter pre-MiCA national-registration regime that the 1,200-firm pool sat under.
What counts as a MiCA non-compliance infringement?
The infringement set is the list in Article 111 paragraph 1, first subparagraph, running from authorisation, governance and prudential breaches through to white-paper content, marketing communications and order-handling obligations. The classification matters because the penalty ceiling flexes with which paragraph point applies: 3% of the total annual turnover of the legal person for paragraph 1 point (a), 5% for paragraph 1 point (d), and 12,5% for paragraph 1 points (b) and (c).
The CASP licensing breach, operating without authorisation after 1 July 2026, is the one NCAs will see most often in the first wave, since the 210-of-1,200 conversion gap creates a large unauthorised-service population by default.
How does MiCA enforcement work for cross-border CASPs?
A CASP authorised in one member state can passport across the EU under MiCA’s single-market model, and that is exactly the mechanism ESMA is converging supervisory practice around. The home-state NCA carries primary supervision, but ESMA’s peer-review framework and Article 95 cooperation duties mean a host-state NCA can flag conduct concerns up to ESMA and back to the home-state NCA. The Malta peer review is the practical demonstration that the MFSA has demonstrated a good level of expertise and supervisory cooperation alongside the authorisation-rigour gaps.
For firms running cross-border, the rational planning assumption is that ESMA’s peer-review cycle will keep re-examining the authorisation step for years.
Conclusion
MiCA’s penalty grid runs from a €700,000 natural-person floor to a 12.5% turnover ceiling on the general rulebook and a 15% ceiling on the stablecoin Title, with the EBA’s draft methodology adding a doubling-the-profits override above the 12.5% and 10% ceilings for significant ART and EMT issuers. The binding constraint over the next twelve months sits at the 210-of-1,200 authorisation perimeter.
For the wider crypto exchange market share view that the authorised CASP cohort competes inside, the venue concentration data sits alongside this penalty grid. The watch items into late 2026 are the EBA’s finalised methodology after the 28 September consultation closes, the ESMA peer-review cycle’s reset of the authorisation bar, and the first Article 111 fines landing in NCA registers. The penalty grid has been on paper since 2023; the 2026-2027 window is where the case law starts.