MiCA (Regulation (EU) 2023/1114) has applied in the EU since 30 December 2024 and was incorporated into the EEA Agreement with effect from 24 June 2025, extending it to Iceland, Liechtenstein and Norway. National competent authorities authorise and supervise crypto-asset service providers; the transitional period for existing providers ended on 1 July 2026.
| Status | varies |
| Risk Score | 40/100 (Moderate Risk) |
| Region | supranational |
| Currency | EUR |
| Capital Gains (Personal) | Varies by EEA state: direct taxation of crypto gains is a national competence |
| VAT on Crypto | No |
Crypto taxation is national, so capital gains rates vary by state. Exchanges of crypto for fiat currency are VAT-exempt under the CJEU Hedqvist ruling (C-264/14).
| Required | Yes |
| Regulator | ESMA + national competent authorities (NCAs) |
| Framework | Markets in Crypto-Assets Regulation (MiCA) |
| Ease | medium |
Licensing under MiCA is mandatory for crypto service providers operating in the EEA, with a harmonized approach across member states.
Enforcement focused on unlicensed operators and consumer protection
| KYC Required | Yes |
| Travel Rule | Yes |
| FATF Member | No |
| FATF Status | compliant |
| Suspicious-Activity Reporting | Yes |
Status: regulated
DeFi activities fall under MiCA regulations and are subject to the same licensing and compliance requirements as other crypto services.
Status: regulated
Stablecoins are regulated under MiCA with specific provisions for asset-backed tokens to ensure consumer protection and financial stability.
Status: no_rules
No specific NFT regulation
| Legal | Yes |
| Electricity Cost | $0.15/kWh |
| Renewable Energy | 20% |
| Infrastructure | excellent |
Mining is legal across the EEA with relatively high electricity costs and moderate renewable energy usage. Infrastructure is robust with strong data center and internet facilities.
| Stability | stable |
| Sanctions | No |
| Corruption Index | 67/100 |
| Banking Access | open |
| Sanctions Program Active | Yes |
Risk Factors
The EEA is politically stable with strong institutions and open banking access for crypto businesses. It faces moderate risks from geopolitical tensions and economic inflation.
MiCA (Regulation (EU) 2023/1114) has applied in the EU since 30 December 2024 and was incorporated into the EEA Agreement with effect from 24 June 2025, extending it to Iceland, Liechtenstein and Norway. National competent authorities authorise and supervise crypto-asset service providers; the transitional period for existing providers ended on 1 July 2026.
European Economic Area is classified by FATF as: compliant.
Yes, licensing is required for VASPs.
KYC is mandatory for crypto businesses.
Soken combines Web3 security engineering and crypto-legal counsel: two specialised tracks, one team. Pick the side that matches your need.
VASP licensing, jurisdiction analysis, AML/KYC, legal opinions, company registration and banking access.
Explore Legal Services → IT & SecuritySmart-contract audits, penetration testing, Web3 development, AI/LLM security audits.
Explore IT Services →Last reviewed: 2026-09-26 · Data source: Soken Crypto Legal Map
← Back to Crypto Map