Crypto-funded debit card in European Union
A card program where customer fiat balances are funded from crypto holdings, typically through an off-ramp at point of sale or top-up.
Crypto debit card is conditionally permitted in European Union with a local entity, subject to AML obligations and high licensing burden.
Verdict Details
- Permitted
- conditional
- Local entity required
- Yes
- Licensing burden
- High
- Last updated
- 2026-07-13
AML Obligations
- CASPs (including those facilitating crypto-to-fiat conversion) must conduct full KYC/CDD on all cardholders under AMLD6 (AML/CFT harmonisation) and the Transfer of Funds Regulation (recast) — EUR 0 threshold, so no de minimis exemption; every transfer must carry originator and beneficiary information.
- Travel Rule applies to all crypto transfers supporting the card (ToFR recast — EUR 0 threshold), covering both the off-ramp leg and any crypto movement into the card wallet.
- Ongoing transaction monitoring and suspicious transaction reporting (STR) to the home NCA's FIU, as required under AMLD6 and national AML laws.
- Obligation to screen cardholders and transactions against EU sanctions lists and politically exposed persons (PEPs) registers.
- CASPs must appoint an AML compliance officer, maintain AML/CFT policies and risk assessments, and register with the home NCA (or a central AML register) in their member state.
Key Restrictions
- Operator must hold both a MiCA CASP authorization (for the crypto↔fiat exchange/custody function) AND an e-money institution (EMI) or payment institution (PI) license (or partner with a licensed EMI/PI) for issuing the fiat-denominated card product; pure CASP authorization alone does not cover e-money issuance.
- Crypto-to-fiat conversion at point of sale or top-up is a regulated exchange activity (CASP Class 3 — exchange between crypto and fiat currency) under MiCA, requiring CASP authorization with minimum capital of EUR 125,000 and EU-wide passporting via home NCA notification (20 business days).
- If the card uses an e-money token (EMT) or is backed by an asset-referenced token (ART), the stablecoin issuer must be an EU-authorized credit institution or e-money institution (for EMTs) or an approved ART issuer; algorithmic stablecoins are effectively banned (MiCA Art. 43).
- BIN sponsorship / partner-bank arrangement required — the card program must be issued under a licensed payment/e-money institution's BIN; standalone CASPs cannot directly issue payment cards under the current framework.
- Geofencing of US persons may be required if the card program has US exposure; no explicit EU geofencing requirement, but DAC8 tax reporting (effective 2026) requires identification of EU-resident cardholders for automatic tax information exchange.
Key Risks
- Dual-licensing friction: Many operators underestimate the need for both a CASP license (MiCA) and an EMI/PI license (PSD2) — gaps in licensing coverage have led to enforcement warnings (e.g., AFM warnings to firms failing to complete MiCA applications by Feb 2026).
- Supervisory fragmentation: 8 of 27 NCAs had not finalised MiCA enforcement guidelines by Q1 2026 (ESRB), creating uncertainty for CASPs with cross-border card programmes across multiple member states.
- Transitional provisions vary by member state (Germany until June 2026; France ended March 2025), creating a patchwork of deadlines that non-EU firms or early entrants can easily miss.
- First MiCA enforcement actions occurring (AMF cease-and-desist, Jan 2026) — precedent being set; non-compliant operators face escalating enforcement, including injunctions and penalties.
- Tax treatment of crypto debit card transactions (capital gains event at point of sale) varies by member state; DAC8 (effective 2026) adds automatic reporting obligations, increasing tax compliance complexity for cardholders and operators.
Evidence
This verdict synthesizes the following facts. Each fact links to its primary source(s).
MiCA Regulation (EU 2023/1114) (2023) — Comprehensive CASP authorization, token issuance, white paper requirements — fully effective Dec 30, 2024
Transfer of Funds Regulation (recast) (2023) — Travel Rule — EUR 0 threshold (no de minimis)
AMLD6 (2024) — AML/CFT harmonization across EU
VASP: CASP authorization under MiCA via home NCA. 9 service classes: custody (EUR 50K), trading platform (EUR 150K), exchange (EUR 125K), order execution (EUR 50K), placing (EUR 50K), reception/transmission (EUR 50K), advice (EUR 50K), portfolio mgmt (EUR 50K), transfer services (EUR 50K). Prudential: higher of fixed minimum or 1/4 prior year fixed overhead.
EXCHANGE: CASP authorization with EU-wide passporting (notify home NCA, 20 business days). Transition: up to 18 months for existing operators (July 2026 deadline). France chose 6 months, Germany 12 months.
CUSTODY: CASP Class 1 — EUR 50,000 minimum capital. Asset segregation mandatory. Client assets held on trust.
National Competent Authorities — CASP authorization in home member state (AMF, BaFin, CNMV, CBI, etc.)
Issuer Licensing: Only EU-authorized credit institutions or e-money institutions (for EMTs) or approved ART issuers (EU-incorporated) can issue stablecoins. Requires publishing a white paper approved by national competent authorities (NCAs), plus ongoing disclosures and governance meeting European Banking Authority (EBA) standards. Crypto-asset service providers (CASPs) must verify issuer compliance via due diligence.
Redemption Rights: Holders of EMTs have guaranteed redemption at par value without fees. ARTs have similar stabilization mechanisms but stricter reserve rules.
Algorithmic Stablecoins: Effectively banned; MiCA (Article 43) requires all ARTs to maintain reserve assets, prohibiting purely algorithmic or non-collateralized stablecoins from being offered or traded in the EU.
Reserve Requirements: Issuers must maintain 100% backing with high-quality, liquid assets (e.g., same currency as the token for EMTs), held in segregated accounts with reputable custodians. Reserves must match outstanding tokens 1:1, with no interest paid to holders and compliance with existing e-money rules. Limits apply to non-euro stablecoins for payments to protect monetary sovereignty.
Evidence fact eu.tax not found (may have been renamed).
In January 2026, the French Autorité des Marchés Financiers (AMF) became the first NCA to publicly announce a formal enforcement action under MiCA, issuing a cease-and-desist order against an unregistered non-EU CASP (CryptoFlow Ltd., registered in the Cayman Islands) for soliciting French residents without authorization; the AMF noted this action as a "test case" for MiCA enforcement coordination across NCAs AMF MiCA Enforcement Action January 2026
A March 2026 analysis by the European Systemic Risk Board (ESRB) identified that 8 of the 27 EU NCAs had not yet finalized their MiCA enforcement guidelines by Q1 2026, creating "supervisory fragmentation risks" for CASPs operating across multiple member states; the ESRB warned that this could lead to inconsistent application of authorization requirements and investor protections by the April 2026 enforcement date ESRB Analysis of MiCA Supervisory Fragmentation
The European Commission's March 2026 enforcement update confirmed that the Netherlands Authority for the Financial Markets (AFM) had issued formal warnings to 14 crypto-asset firms for failing to submit complete authorization applications by the February 28, 2026 deadline; the AFM warned that firms without approved authorization by April 1, 2026, would face immediate suspension orders European Commission MiCA Enforcement Update March 2026
Verdict Attribution
- Source:
- AI-Generated · Unreviewed
- AI synthesized:
- 2026-07-13 (deepseek-chat)
- Last updated:
- 2026-07-13
- Confidence:
- medium
This verdict was produced by an AI model from the underlying facts. Confirm with counsel before relying on it for material decisions.
Conditional — A crypto-funded debit card can operate in the EU, but requires a dual-licensing structure (MiCA CASP authorization for crypto↔fiat exchange/custody, plus an e-money or payment institution license or partnership for the card itself), compliance with the Travel Rule at EUR 0 threshold (ToFR recast), full KYC/CDD under AMLD6, and a BIN-sponsor arrangement with a licensed payment institution.
Questions this verdict aims to answer
- What e-money / payment-institution license is required?
- How is the crypto-to-fiat conversion regulated?
- What KYC and AML obligations apply to cardholders?
- What partner-bank or BIN-sponsor arrangements are required?