ESMA moves from writing MiCA rules to checking who follows them

Verena Ross says the job has changed; ESMA's focus under MiCA has moved from rulemaking towards supervision and convergence. Four of the five things her regulator named as 2027 priorities are the sort of housekeeping that never makes a headline. The fifth is reverse solicitation, and that one is a door.

“We want innovation to flourish within a framework that provides clarity for firms, safeguards for investors and confidence in the markets.”

— Verena Ross, ESMA

Verena Ross, chair of the European Securities and Markets Authority

What ESMA will coordinate national regulators around in 2027:

• Operational resilience of crypto asset service providers.
• Outsourcing risks.
• Liquidity management.
• Reverse solicitation.
• Asset classification.

Reverse solicitation is the clause that lets a firm outside the EU serve an EU client when the client approached it first, unprompted. In practice it has been read generously by platforms that would rather not hold a European licence, and the phrase has been doing a great deal of work since MiCA landed. Putting it on a supervision list is not a rule change. It is notice that somebody intends to check whether the client really did approach first.

The same unanswered question on both continents

Asset classification, the last item, is the same unanswered question on both sides of the Atlantic. We wrote this morning that the SEC and CFTC are sorting digital assets into five categories under Project Crypto because the category decides the regulator. ESMA is doing the European version of that sorting, and neither continent has finished. A token's legal identity is still the most consequential thing about it that nobody can look up.

The machinery underneath is called MIDAS, a centralised surveillance system for spotting market abuse across the bloc. Its first phase targets an operational 2027, with a second phase pencilled in for the fourth quarter subject to board approval, adding analytical features and new data types. Alongside it ESMA wants harmonised periodic reporting from service providers, common risk indicators and supervisory dashboards, which is the unglamorous plumbing that turns 27 national views into one.

June 2027 is the hard edge

The calendar has a hard edge. The European Commission must review MiCA by June 2027, the same year MIDAS is meant to start working, which means the supervisors will be building the surveillance and defending the framework at once. We covered the first tremor of that review last week, when the ECB asked for a stablecoin rule that had already been dropped, and the week before, when ESMA gave both its supervisory slots to technology.

Rulemaking produces documents you can read on the day they appear. Supervision produces nothing visible until somebody is found to be doing something wrong, which is why this announcement will look uneventful until it does not. The date to keep is June 2027. Everything between now and then is ESMA deciding what it will be able to see.

Informational only, not investment advice. MIDAS phase two still needs board approval, and the supervision priorities describe what ESMA intends to coordinate rather than rules already in force.