Section 7 of 9
Section 1 said a regulation needs no national transposition — true, and yet the same text feels different in Valletta, Vienna and Vilnius. By the end of this section you can name the three honest reasons why, read the map’s layers against their dated primaries, and study two real supervisors’ styles side by side.
In one screen · section 7 of 9
One text, thirty supervisors. Transitional windows, fees, forms and even the financial-instrument boundary itself vary by state — the same token can sort differently across borders.
Three reasons, each legitimate. First, the Regulation itself handed member states choices — above all the transitional window, where each state picked how long its pre-MiCA firms could keep operating, from no window at all to the full eighteen months. Second, the machinery is national: fees, forms, portals, staging and supervisory culture belong to each authority, as Malta’s four stages showed in Section 5.
Third — the deepest one — even the regime’s biggest boundary moves at the edges. The financial-instrument gate from Section 2 rests on MiFID, and MiFID was transposed differently across member states: in ESMAThe European Securities and Markets Authority — the EU-level supervisor that drafts most of MiCA's detailed rules and keeps its registers. It drafts; the Commission adopts.’s own words, there is no commonly adopted application of the definition of ‘financial instrument’ in the EU. The same token, honestly analysed, can sort differently on the two sides of a border — which is exactly why the qualification guidelinesA supervisory authority's published position on how rules should be applied. EU guidelines bind authorities on a comply-or-explain basis — they are not themselves the law. exist, and why your sort memo names the jurisdiction it was written for.
Check yourself
Alderhaven's token sorted as 'not a financial instrument' in one member state. Counsel proposes reusing the memo unchanged for a second state. What is the risk?
Three layers, each from a dated primary: the transitional windows the states chose, the authorisation counts, and the non-compliant register — read under the one rule that keeps registers honest: a register evidences what it records, never what it omits.
EEA EFTA — on ESMA’s list, off the EU map frame
Malta
Malta shows what a high-volume authoriser asks of the people who will run a firm; Austria shows what an enforcement-first supervisor does with the disclosure rules. Every statement is traced to a named, dated, published output of the authority itself. Last verified 2026-08-27.
What a high-volume authoriser actually asks of the people who will run a CASPCrypto-asset service provider — a firm authorised under MiCA to provide one or more of the ten listed crypto-asset services in the EU. One home-state authorisation covers the whole Union. — the questionnaire, the competence checking, and a pre-application track with real gates in it.
Transitional window: 18 months. Malta took the full 18-month window (ESMAThe European Securities and Markets Authority — the EU-level supervisor that drafts most of MiCA's detailed rules and keeps its registers. It drafts; the Commission adopts. grandfatheringA transitional permission to keep operating under old national rules while a new regime phases in. Under MiCA it ran at most to 1 July 2026, and many states chose shorter. list, 19 May 2026 version). The conference-deck figure happens to agree here — but the list is the citation, not the slide.
Journey phase 5. Pre-submission engagement
The pre-application stage is not voluntary. Prospective applicants are required to submit a Statement of Intent; what is discretionary is the meeting — the Authority 'at its sole discretion' may request further information or attendance at a preliminary meeting, requested within 10 working days of receiving the Intention.
MFSA Authorisation Process Service Charter, v1.1 · 2024-09-19 · verified 2026-08-27
Journey phase 5. Pre-submission engagement
The Statement of Intent is a high-level presentation — and it already reaches the sensitive material:
MFSA Authorisation Process Service Charter, v1.1 · 2024-09-19 · verified 2026-08-27
Journey phase 5. Pre-submission engagement
Two gates sit before any review. The application fee is non-refundable and payable on submission. And where the MFSA considers a proposal outside its risk appetite or 'not yet mature enough', it guides the prospective applicant at the Intention Stage — before any fee is paid, without a refusable decision. After a no-objection, the application must follow within 40 working days or the Intention may be treated as withdrawn.
MFSA Authorisation Process Service Charter, v1.1 · 2024-09-19 · verified 2026-08-27
Journey phase 3. Entity, capital and people
Every proposed director and key function holder is assessed through the Personal Questionnaire against four criteria: competence, reputation, conflicts of interest and independence of mind, and time commitment. The entity assesses first — 'the Entity has the primary responsibility to carry out its own due diligence assessment' — and proportionality 'cannot lead to the lowering of the suitability standards applied by the MFSA'.
MFSA Guidelines to the Personal Questionnaire (updated version) · 2024-03-12 · verified 2026-08-27
Journey phase 3. Entity, capital and people
Competence is checked through three mechanisms:
MFSA Guidelines to the Personal Questionnaire (updated version) · 2024-03-12 · verified 2026-08-27
Journey phase 2. Choosing the home authority
Which route an applicant took depended on what it held on 30 December 2024. Category A — already licensed under Malta's earlier Virtual Financial Assets (VFAVirtual Financial Asset — the category of Malta's pre-MiCA national framework. VFA licences fed the MiCA transition: grandfathering and a simplified application for firms already licensed.) framework — could use the grandfathering window and a simplified application anchored in a board resolution, the fee and the 2024 MiCA thematic exercise. Category B — mid-application, not yet licensed — ran the full MiCA process from the Statement of Intent up.
MFSA Circular on the Authorisation Process for MiCA Applicants · 2024-12-10 · verified 2026-08-27
Journey phase 4. Building the file
The pack changed under applicants mid-flight: from 17 June 2025 all CASP applicants, Category A and B alike, had to add two further annexes — AX05, the Digital Operational Resilience Assessment, and AX50, the ICT Third-Party Provider Assessment. That is the EU's Digital Operational Resilience Act (DORA) arriving inside the MiCA application six months after the process opened.
MFSA Follow-Up Circular on the Authorisation Process for MiCA Applicants · 2025-06-17 · verified 2026-08-27
Journey phase 4. Building the file
Malta's MiCA Rulebook (v3.00) is thin by design because it points outward — it adopts Union instruments by name as the MFSA's own decision rules, including the joint EBAThe European Banking Authority — ESMA's banking-side sibling, responsible for MiCA's stablecoin rulebook. It drafts; the Commission adopts./ESMA suitability guidelinesA supervisory authority's published position on how rules should be applied. EU guidelines bind authorities on a comply-or-explain basis — they are not themselves the law.. The national layer is mostly procedure; the substance is the Union standard.
MFSA Markets in Crypto-Assets Rulebook, v3.00 · 2026-03-10 · verified 2026-08-27
So what — treat Malta's Intention Stage as the application: the sensitive material is on the table before any fee is paid, and the people file is won or lost in the questionnaire.
What an enforcement-first supervisor does with the white-paper and marketing rules — and what a mechanised application intake looks like. Its first published MiCAR penal decision is the worked enforcement record.
Transitional window: 12 months. Austria shortened the window to 12 months (ESMAThe European Securities and Markets Authority — the EU-level supervisor that drafts most of MiCA's detailed rules and keeps its registers. It drafts; the Commission adopts. list, 19 May 2026 version). The FMA had said so in its own words in August 2024: existing registered providers could continue until the end of 2025 at the latest ('bis längstens Ende 2025'). The population was small: twelve providers registered under § 32a of Austria's anti-money-laundering act (FM-GwGThe Swiss Anti-Money Laundering Act of 1997 (SR 955.0). Says who must do money-laundering checks and who supervises them. Often written AMLA in English.) as at August 2024.
Austria's Finanzmarktaufsicht (fma.gv.at) is not the Liechtenstein FMA. Liechtenstein is a separate EEA jurisdiction with its own authority — and its own rows in the CASP register.
Journey phase 7. Substantive assessment
Marking full application on 30 December 2024, the FMA announced a particular focus on CASPCrypto-asset service provider — a firm authorised under MiCA to provide one or more of the ten listed crypto-asset services in the EU. One home-state authorisation covers the whole Union. authorisation procedures from 2025: sufficient own fundsThe firm's own capital — the money that absorbs losses before anyone else's. MiCA sets floors and can require more., robust risk management, adequate internal control systems and transparent information on business models. It added that fit-and-proper requirements for owners, managing directors and other key function holders would receive increased attention, consistently implemented.
FMA press release, 'MiCAR-Regime voll anwendbar' · 2024-12-30 · verified 2026-08-27
Journey phase 4. Building the file
The same release flagged DORA applying in parallel from 17 January 2025, with the FMA expecting gapless monitoring of IT systems, regular stress tests and clear contingency plans. The supervisor announced the MiCA file and the ICT expectations together; an applicant that treats the ICT limb as an afterthought is out of step with the FMA's own framing.
FMA press release, 'MiCAR-Regime voll anwendbar' · 2024-12-30 · verified 2026-08-27
Journey phase 4. Building the file
The Austrian application is mechanised on the face of the form:
FMA Application Form for authorisation as a CASP (Art 62 MiCAR), EN, as retrieved 26 Aug 2026 · undated (retrieved 2026-08-26) · verified 2026-08-27
Journey phase 3. Entity, capital and people
Point VII of the form places the suitability burden on the applicant: it must supply the results of its own assessment of each management-body member and of the body's collective suitability, including the assessment report. The Union standard is the same as Malta's; the division of labour is not — the FMA receives the applicant's completed assessment, where the MFSA also assesses the person directly through the Personal Questionnaire.
FMA Application Form for authorisation as a CASP (Art 62 MiCAR), EN, as retrieved 26 Aug 2026 · undated (retrieved 2026-08-26) · verified 2026-08-27
Journey phase 4. Building the file
The form's own cover cites 'Implementing RegulationA European Commission act setting uniform procedures or forms for applying EU law. No scrutiny period, so it can reach the Official Journal within days of adoption. (EU) 2025/305' for the standard forms — but 2025/305 is the Delegated RegulationA European Commission act filling in detail a regulation empowered it to add. Parliament and Council get a scrutiny period before it can enter into force. (information content) and the forms instrument is Implementing Regulation (EU) 2025/306; 31 March 2025 is the OJ date of both, not either act's own date. Recorded as the state of the document retrieved on 26 August 2026. Two adjacent numbers, one delegated and one implementing: the distinction is genuinely easy to slip on — check it every time.
FMA Application Form checked against the held OJ texts of CDR (EU) 2025/305 and CIR (EU) 2025/306 · undated (retrieved 2026-08-26) · verified 2026-08-26
Journey phase 8. Register, passport, supervision
Authorisation extinguishes the old registration: on granting a CASP authorisation, the FMA declares the firm's § 32a FM-GwG virtual-currency registration extinguished ('als erloschen') under § 23 of the MiCA-Verordnung-Vollzugsgesetz (MiCA-VVG, BGBl. I Nr. 111/2024) read with Article 143(3) MiCA. The national implementing act is the hinge between the two regimes.
FMA notice of authorisation of Bitpanda GmbH (Bescheid of 9 April 2025, published 10 April 2025) · 2025-04-10 · verified 2026-08-27
The worked enforcement record
Every statement above is attributed to the FMA's own published notices of 14 August 2026 and 10 April 2025, and goes no further than their text. The record is used because it is closed, dated and final — one published case establishes what happened in that case, not a supervisory pattern.
FMA, Bekanntmachung (sanction) and 'Erste Veröffentlichung eines MiCAR-Straferkenntnisses', both 14 August 2026; FMA notice of authorisation, 10 April 2025 · verified 2026-08-27
So what — read Austria as the discipline check: a mechanised intake that a sloppy file fails on format alone, and a supervisor whose first published fine was for marketing mechanics, not exotic misconduct.
Check yourself
Viktor asks: 'if the regime is harmonised, why does our choice of home member state matter at all?' Give him the honest three-part answer.
So what— So what — before any cross-border step, write the three-line divergence check for the target state: its transitional window, its authority’s process, and any known national reading of the instrument boundary. The map above gives you the first line and the panels show why the other two are worth a day of anyone’s time.
As at — instrument lifecycle stages verified 2026-08-26 to 2026-08-27, per instrument (each citation above shows its own date); register figures are from the dated snapshots of 24 August 2026. Map layers carry their own dated primaries; supervisory-practice statements are individually dated and were last verified 2026-08-27.