MiCA in Poland is no longer a future regulatory topic. It is an operational deadline, and in some respects it has already passed.
For crypto exchanges, custodians, brokers, fintechs and Web3 startups, the end of the MiCA transition period marks a structural shift: from a fragmented, registration-based market to a licence-first financial services environment. For the roughly six million adult Poles who currently hold crypto assets — approximately 18% of the adult population — it means that buying through any legitimate regulated channel becomes an inherently KYC-based act.
The headline is straightforward: anonymous crypto buying on regulated platforms is disappearing. The reality is more layered. MiCA does not ban peer-to-peer crypto transfers, nor does it prohibit self-hosted wallets. But once a user touches a regulated exchange, custodian, broker or on-ramp, the era of no-KYC crypto access is effectively over — regardless of what Poland’s parliament does or does not pass before July 1, 2026.
This article covers the regulatory architecture in full, Poland’s extraordinary legislative situation, the impact on companies and individual users, and what businesses need to build to remain compliant. If you’d like to know more about the 2026 in wider DLT market we invite you to read State of the DLT 2026 report by Espeo Software.
What Is MiCA?
Regulation (EU) 2023/1114 — the Markets in Crypto-Assets Regulation — is the EU’s first comprehensive rulebook for crypto-assets not already covered by existing financial services law. It entered into force on June 29, 2023 and has applied in phases: ART and EMT rules from June 30, 2024, and the full Crypto-Asset Service Provider (CASP) regime from December 30, 2024.
MiCA covers three broad areas:
Crypto-asset issuers — public offers, admission to trading, white papers and disclosure. Token launches become formal disclosure exercises under a defined legal framework.
Stable-value tokens — asset-referenced tokens (ARTs) and e-money tokens (EMTs). Stablecoin-like products face more intensive requirements, including reserve audits and redemption rights.
Crypto-asset service providers (CASPs) — exchanges, brokers, custodians, trading platforms, transfer services. These businesses need authorisation and ongoing supervision. A CASP under Article 3(1)(15) is any legal person providing one or more of ten enumerated services: custody and administration, operating a trading platform, exchange, execution of orders, placement, reception and transmission of orders, advice, portfolio management, transfer services, and crypto-asset accounts.
MiCA is not only a licensing law. It also mandates governance, customer protection, complaints handling, conflicts of interest management, prudential safeguards, market-conduct rules and multi-year record-keeping. For software and product teams, that means compliance cannot be bolted on at the end of development.
What MiCA Does Not Cover
MiCA explicitly excludes: fully decentralised finance protocols with no identifiable issuer or service provider; genuinely unique and non-fungible NFTs (fractionalized or fungible NFT collections are in scope); self-custody by individuals; and pure peer-to-peer transfers without a CASP intermediary. Financial instruments under MiFID II remain under MiFID II.
The Key Dates Every Business Needs to Know
| Date | Milestone | Business impact |
|---|---|---|
| 29 June 2023 | MiCA entered into force | EU crypto rulebook became law |
| 30 June 2024 | ART and EMT rules applied | Stablecoin-style projects entered the first MiCA phase |
| 30 December 2024 | Full CASP regime applied | Service providers entered the authorisation era |
| 30 December 2024 | EU Travel Rule (zero-threshold) took effect | All crypto transfers between CASPs became traceable |
| 1 January 2026 | DAC8 data collection began | Exchanges started collecting tax-residency data on all users |
| 1 July 2026 | Grandfathering period ends | Unauthorised CASPs serving EU clients must stop |
| 10 July 2027 | AMLR Article 79 applies fully | Explicit ban on anonymous accounts and privacy coins |
| 30 September 2027 | First DAC8 cross-EU exchange | Tax data on Polish users automatically flows to KAS |
The transition period under Article 143(3) of MiCA is not a safe harbour for every crypto business. It applies only to providers already operating under applicable national law before the relevant cut-off and ends immediately upon receiving or being refused authorisation. ESMA confirmed on April 17, 2026 (statement ref. ESMA75-113276571-1679) that operating without a CASP licence after July 1, 2026 breaches Union law “irrespective of whether MiCA has been implemented in a Member State or not.”
The End of Crypto Anonymity: Four Regulatory Layers
What makes the anonymity question complex is that no single regulation ends pseudonymous crypto access. Instead, four EU legal instruments work together to make anonymous regulated trading structurally impossible.
Layer 1 — MiCA: Authorisation and Conduct
MiCA Articles 66–73 require authorised CASPs to implement fit-and-proper governance, segregate client assets, maintain transparent complaints procedures and document records for at least five years. Combined with AML/CFT duties under Directive (EU) 2015/849 (superseded by AMLR from July 10, 2027), every customer of a regulated crypto-asset business must be identified, verified and continuously monitored.
Layer 2 — The Travel Rule: Every Transfer Is Traceable
The recast Transfer of Funds Regulation (EU) 2023/1113 took effect on December 30, 2024. Unlike its fiat predecessor — which set a €1,000 threshold — the crypto Travel Rule carries no minimum amount. Every transfer between two CASPs must carry:
- Originator full name
- Account number or unique transaction identifier
- Address, date of birth and national identity number (or LEI for legal entities)
- Beneficiary full name and account number
The EBA Travel Rule Guidelines (EBA/GL/2024/11), published July 4, 2024, operationalise these obligations in detail.
For transfers above €1,000 between a CASP and a self-hosted (unhosted) wallet, the CASP must verify ownership or control of the wallet — typically via cryptographic signature or a “Satoshi test” micro-transaction. Below €1,000, ordinary due diligence applies. Pure wallet-to-wallet P2P transfers remain outside scope.
Layer 3 — AMLR Article 79: The Explicit Ban on Anonymity
Regulation (EU) 2024/1624, adopted May 31, 2024, enters full application on July 10, 2027. Article 79 explicitly prohibits CASPs (as well as credit institutions and payment institutions) from maintaining “anonymous crypto-asset accounts as well as any account otherwise allowing for the anonymisation of the customer account holder or the anonymisation or increased obfuscation of transactions, including through anonymity-enhancing coins.”
This is not an inference from general AML law — it is a specific statutory prohibition. Kraken and Binance pre-emptively delisted Monero (XMR) for European customers in 2024 in anticipation of this rule.
Layer 4 — DAC8: Automatic Tax Reporting
Council Directive (EU) 2023/2226 — the eighth amendment to the EU Administrative Cooperation Directive — is now operational. All Reporting Crypto-Asset Service Providers (RCASPs) must collect from every customer: full name, address, jurisdiction(s) of tax residence, taxpayer identification numbers and date of birth. They must then report annually to national tax authorities:
- All exchange transactions (crypto-to-fiat and crypto-to-crypto)
- Transfers in and out
- EUR-equivalent amounts and crypto-asset types
- Wallet addresses used
- Year-end balances
The account-blocking mechanism. If a user fails to provide a valid tax-residency self-certification within 60 days of two reminders, the RCASP must block the account from all reportable transactions — purchases, sales and withdrawals.
Poland published its DAC8 implementing law in the Official Gazette on March 17, 2026 (Act No. 347). The first reports to the Polish KAS (Krajowa Administracja Skarbowa) are due by June 30, 2027. First cross-EU automatic exchange between member-state tax authorities follows by September 30, 2027.
DAC8 is the EU implementation of the OECD’s Crypto-Asset Reporting Framework (CARF). As of December 4, 2025, exactly 76 jurisdictions had committed to CARF, with 48 — including the full EU, UK, Japan, Canada and Brazil — committed to the 2026 reporting period. A second wave covering Singapore, Hong Kong, the UAE, Switzerland and the United States joins by 2028. There is no longer a meaningful crypto tax haven in the developed world.
Poland’s Extraordinary Political Situation
Poland’s domestic situation is unlike any other EU member state. It is the only country in the bloc that has not enacted MiCA-implementing legislation — a distinction that has cost Polish crypto companies significantly and created a structural asymmetry that favours foreign-licensed competitors.
Background: The Pre-MiCA VASP Register
Before MiCA, Polish virtual-currency businesses operated under a light-touch VASP registration maintained by the Director of the Tax Administration Chamber in Katowice. Registration cost PLN 616 (approximately €150) and was typically granted within two weeks. As of January 13, 2026, 1,298 entities were on the register — one of the largest pre-MiCA virtual-asset populations in Europe.
The Legislative Timeline
June 26, 2025 — The Tusk government tables the Crypto-Asset Market Act (Bill 1424) in the Sejm. The bill designates the KNF as competent authority, imposes fines up to PLN 10 million and criminal penalties up to two years for unauthorised activity, and grants the KNF powers to blacklist and block crypto domains.
September 26, 2025 — The Sejm passes Bill 1424, 230–196.
December 1, 2025 — First presidential veto. President Karol Nawrocki rejects the act, citing “a real threat to the freedoms of Poles and the stability of the state.” His objections focus on the KNF’s ability to block websites without judicial oversight and on disproportionate compliance costs for small firms: “Overregulation is a surefire way to push companies abroad instead of creating the conditions for them to earn and pay taxes in Poland,” the President’s office stated.
December 8, 2025 — Parliament fails to override by 18 votes, falling short of the three-fifths majority required under Article 121(3) of the Polish Constitution. Poland becomes the only EU member state without a MiCA implementing law.
December 19, 2025 — The Sejm passes a near-identical second bill (241–183) and forwards it to the Senate. Government spokesman Adam Szłapka acknowledged publicly that “not even a comma” had been changed relative to the vetoed text.
February 10, 2026 — The KNF issues a public warning that Poland has no designated competent authority under MiCA, meaning it cannot accept CASP authorisation applications.
February 12, 2026 — Second presidential veto. Nawrocki rejects Bill 2064, describing it as “almost identical” to the first. A second Sejm override attempt on April 18, 2026 fails 243 to 263.
April 17, 2026 — ESMA publishes its statement (ESMA75-113276571-1679) removing any ambiguity: the July 1, 2026 deadline applies to all EU operators regardless of national implementation status.
May 15, 2026 — The Sejm passes a third consolidated version (print 2363, at the 57th sitting) by 241–200.
May 21, 2026 — The Senate adopts the bill without amendments and transmits it to the President on May 22, 2026.
As of June 3, 2026 — The bill awaits Nawrocki’s signature. The constitutional deadline under Article 122 expires on or around June 12, 2026. A third veto is a meaningful possibility; the Presidential Chancellery has tabled its own counter-draft.
The third version notably raises maximum prison sentences for unauthorised CASP activity from five to eight years and maximum fines from PLN 5 million to PLN 20 million, while extending the KNF’s trading-suspension power from 12 to 24 months — changes that critics argue are punitive rather than responsive to the President’s original objections.
The Zondacrypto Crisis — Catalyst and Complication
The political urgency behind the third legislative attempt is inseparable from Poland’s most prominent crypto fraud case. On-chain analysis published in April 2026 revealed that Zondacrypto’s hot-wallet Bitcoin reserves had fallen by 99.7% — from approximately 55.7 BTC in August 2024 to 0.18 BTC in March 2026. The Polish Prosecutor’s Office opened a fraud investigation on April 17, 2026. Estimated losses stand at at least PLN 350 million (approximately USD 97 million), with more than 1,500 victim complaints filed.
CEO Przemysław Kral, who travelled to Israel (where he holds citizenship), claimed the missing assets were in an inaccessible cold wallet controlled by founder Sylwester Suszek — who has been missing since 2022. PM Donald Tusk publicly disclosed that Kral had made significant payments to organisations linked to right-wing political figures, further intensifying the political charge of the legislation.
There is an important structural footnote: Zondacrypto operated under an Estonian licence, through BB Trade Estonia OÜ. Polish regulators had no direct supervisory authority. Even a Polish MiCA law fully in force before the collapse would not have given the KNF jurisdiction to prevent it. The case is therefore as much an argument about cross-border enforcement architecture under MiCA as it is a domestic Polish regulatory failure.
Impact on Companies
The Regulatory Asymmetry Problem
The most commercially significant consequence of Poland’s legislative deadlock is not the absence of Polish law — it is the structural advantage it hands to foreign-licensed competitors.
Coinbase secured its MiCA licence from Luxembourg’s CSSF on June 20, 2025. Vice President Daniel Seifert described the authorisation as enabling Coinbase to “offer a full suite of crypto products and services to 450 million people across all 27 European Union member states.” Kraken followed five days later, on June 25, 2025, obtaining its licence from the Central Bank of Ireland. Kraken co-CEO Arjun Sethi described his firm as “the first major global crypto platform to receive authorization from the CBI.” Bitpanda went live in March 2026; B2C2 and Bitstamp followed via Luxembourg.
These firms can passport freely into Poland today, serving Polish users under EU law, while Polish companies have no domestic path to CASP authorisation. Kanga Exchange’s co-CEO told Cointelegraph: “Foreign entities that obtain a MiCA license in their home countries will be able to provide services in Poland, while Polish companies currently have no formal path to begin the licensing process domestically. This results in regulatory asymmetry.”
Robert Wojciechowski, president of the Polish Chamber of Commerce for Blockchain and New Technologies, is even more direct: “Since we founded the chamber, about 70–80 percent of companies have sailed abroad. Now my colleagues say they are talking to the Czech Republic to move their business there.”
Scale of the Impact
Approximately 1,298 entities were on Poland’s VASP register as of January 2026. Of those, the substantial majority have already begun or completed jurisdictional relocation — most commonly to Lithuania, Estonia, the Czech Republic, Latvia or Malta.
The economics are significant. CASP capital requirements run from €50,000 (Class 1: advisory, order reception/transmission) to €150,000 (Class 3: operating a trading platform). Total project costs for a MiCA application — including legal fees, governance build-out, and compliance infrastructure — typically fall in the €50,000–€150,000 range, depending on service scope. This is a multiple of the PLN 616 VASP registration fee that Polish crypto companies paid under the legacy regime.
ESMA has explicitly warned that last-minute authorisation applications will receive heightened scrutiny and has required firms without a clear path to authorisation to develop orderly wind-down plans now.
Zonda Crypto (formerly BitBay), the largest Polish-rooted exchange, has operated through an Estonian licence for years and planned to passport back into Poland — though the April 2026 fraud case has now overshadowed those plans.
If the Bill Is Vetoed Again
If Nawrocki vetoes a third time, Poland’s domestic CASP route is effectively closed for the foreseeable future. The KNF cannot issue CASP licences without statutory authority, and no mechanism exists for EU-level override of domestic legislative failure. Foreign-licensed CASPs continue to operate in Poland; Polish firms must relocate or cease serving EU clients on July 1, 2026.
EU-Wide CASP Authorisation — Where Things Stand
ESMA’s Interim MiCA Register shows the scale of the transition challenge across the bloc. In early December 2025 it listed approximately 102–103 authorised CASPs. By May 22, 2026 that number had reached 204 CASPs across 23 member states, with 51 authorised in 2026 alone. Germany’s BaFin led with 27 CASPs as of December 2025; the Netherlands, Malta, Luxembourg, France and Ireland have been active issuers.
By contrast, more than 1,200 entities held national VASP-style registrations across the EU before MiCA. The conversion rate is well under 20%.
Impact on Individual Users in Poland
For the estimated six million Polish crypto holders, the practical changes are significant and building:
Mandatory KYC on every regulated exchange. No more pseudonymous trading on European venues. This is not new — Polish AML law already required KYC of registered VASPs — but the enforceability, supervisory oversight and technology investment behind it are materially stronger under MiCA.
Tax-residency self-certification becomes mandatory under DAC8. Failure to provide it within 60 days of two reminders triggers an account block.
Automatic tax reporting to the KAS begins for data collected from January 1, 2026, with first filings due June 30, 2027 and cross-EU exchange by September 30, 2027. The KAS will receive: transaction dates and amounts, EUR-equivalent values, crypto-asset types, wallet addresses used and year-end balances. This data will be cross-referenced against PIT-38 self-assessments.
Privacy coins become unavailable on regulated EU venues from July 10, 2027 under AMLR Article 79. Monero, Zcash and Dash are already delisted by major exchanges.
Unhosted wallet interactions above €1,000 trigger wallet-ownership verification by the CASP.
What Remains Outside Scope
Self-custody hardware wallets (Ledger, Trezor) and other non-custodial arrangements remain legal and outside DAC8’s direct scope for genuine peer-to-peer activity. Wallet-to-wallet transfers between individuals without a CASP intermediary also remain outside the Travel Rule perimeter. DeFi protocols with no identifiable operator sit in a regulatory grey zone — the OECD has flagged DeFi for future CARF guidance, but no EU instrument currently reaches it.
Privacy-enhancing tools such as CoinJoin and Wasabi Wallet remain legal to use, but any subsequent interaction with a CASP will be subject to enhanced due diligence and may trigger refusal under EBA Travel Rule Guidelines.
Practical User Checklist Before July 1, 2026
- Verify your exchange’s current status on the ESMA Interim MiCA Register.
- Download and archive your complete transaction history for tax purposes.
- Prepare your TIN (Numer Identyfikacji Podatkowej) — your exchange will request a tax-residency self-certification.
- Reconcile historical positions before DAC8 reporting reaches the KAS in 2027.
- Transfer assets to a licensed provider if your current exchange is not authorised.
What Companies in Poland Need to Build
MiCA Readiness Is a Product Challenge, Not Just a Legal One
A compliant stack in 2026 integrates across legal, product, data engineering and security:
| Compliance domain | What it requires |
|---|---|
| Customer onboarding | Identity verification, KYB for business clients, beneficial-owner checks |
| Ongoing monitoring | Sanctions, PEP and adverse-media screening; blockchain analytics; wallet-risk assessment |
| Transfer compliance | Travel Rule data exchange (EBA/GL/2024/11); self-hosted wallet verification |
| Reporting | Suspicious-activity escalation, DAC8 tax reporting, MiCA regulatory returns |
| Governance | Board-level ownership, outsourcing controls, complaints handling, incident management |
| Data | Record retention (minimum five years), GDPR controls, audit logs, deletion workflows |
The companies that succeed will be those that turn compliance into infrastructure — systems that generate compliance evidence automatically as users move through the product.
MiCA vs AML: Where KYC Actually Comes From
A common misunderstanding is that “MiCA requires KYC.” The more accurate framing is:
MiCA creates the authorisation and supervision framework. AML law, the Travel Rule and DAC8 create the identity and transaction-transparency burden. In practice the two are inseparable: a CASP cannot maintain authorisation without a credible AML/KYC and monitoring programme.
Build vs Buy: How to Think About Compliance Tooling
| Component | Build in-house | Buy / integrate | Recommendation |
|---|---|---|---|
| Core product UX | Yes | Sometimes | Build where it differentiates |
| Identity verification | Rarely | Usually | Use a specialist provider |
| Sanctions/PEP screening | Rarely | Usually | Integrate mature vendors |
| Blockchain analytics | Rarely | Usually | Use proven monitoring tools |
| Travel Rule messaging | Rarely | Usually | Use a network/provider |
| Audit logs and evidence layer | Often | Supported | Build around your own data model |
| Regulatory reporting pipeline | Sometimes | Often | Hybrid approach |
The key is orchestration. Most companies will not build every compliance component from scratch, but they must own the system design, data flows, risk model and evidence layer.
Privacy as a Competitive Differentiator
The end of anonymous buying does not mean the end of privacy. A well-designed compliance architecture should include data minimisation, role-based access controls, encryption at rest and in transit, clear retention schedules, automated deletion workflows, and customer-facing transparency notices.
Trust will be a differentiator in the regulated crypto market. The winning user experience will not be “upload your passport five times.” It will be a fast, consent-based verification flow that generates the compliance evidence the team needs.
Strategic Recommendations
For Polish CASPs and VASPs (Immediate Action Required)
If you have not filed a complete CASP application by May 31, 2026, the realistic path is acquisition of a licensed EU entity or jurisdictional relocation. Processing times in most member states are 9–15 months. Zero new Polish CASP licences will be issued before July 1, 2026 regardless of what happens with the presidential veto.
Practical options in order of feasibility:
- Acquire an existing licensed entity in Lithuania, Czech Republic, Malta or Luxembourg.
- Apply for CASP authorisation in one of those jurisdictions and prepare to passport into Poland.
- Implement orderly wind-down for EU-facing services and re-launch from an authorised entity.
For Foreign CASPs Serving Polish Users
Confirm passporting notification to the KNF is complete before July 1, 2026. The KNF retains supervisory powers over passported activity even without a domestic licensing regime.
The Polish market is unusually contestable in the near term: domestic competitors are constrained, the customer base is large (~6 million adult holders), and Chainalysis documented 51% year-over-year growth in on-chain transaction volume received in Poland over the 2024–2025 window.
For Investors and Decision-Makers in Polish Crypto Firms
Treat July 1, 2026 as a hard pivot, not a regulatory aspiration. ESMA’s April 17, 2026 statement makes the position unambiguous. Internal decision threshold: if no complete CASP application has been filed by May 31, 2026, prioritise acquisition over build.
For Polish Retail Users
Verify your exchange’s MiCA status immediately. Check the ESMA Interim MiCA Register. Back up your complete transaction history. Respond to tax-residency self-certification requests promptly — ignoring them triggers account blocking from late 2026 under DAC8.
Before vs After the Transition Period
| Topic | Before July 1, 2026 | After July 1, 2026 |
|---|---|---|
| Market access for Polish firms | Transitional treatment under national VASP law | CASP authorisation is the only lawful basis |
| User onboarding | AML-based KYC already required | Full KYC/KYB becomes the regulated standard |
| EU expansion | Fragmented national approaches | MiCA passporting enables consistent EU-wide scaling |
| Anonymous buying | Increasingly unavailable in practice | Not possible through any licensed platform |
| Tax reporting | Self-reported by user on PIT-38 | Automatic exchange from CASPs to KAS (DAC8) |
| Privacy coins | Widely delisted, grey-area legal status | Explicitly prohibited (AMLR Art. 79, from July 2027) |
| Compliance cost | Often treated as legal overhead | Core product and infrastructure cost |
| Risk for unlicensed firms | Transitional uncertainty | Service interruption, enforcement, client migration |
Frequently Asked Questions
Is anonymous crypto buying illegal in Poland? Anonymous buying is not a single legal category. Direct peer-to-peer transfers without a CASP are a different legal situation from buying through a regulated exchange. However, anonymous buying through any licensed platform is becoming practically unavailable: CASPs must operate with AML, KYC, Travel Rule and DAC8 reporting obligations.
Does MiCA itself require KYC? MiCA creates the authorisation and supervision framework for CASPs. The KYC obligation primarily flows from AML law (currently Directive 2015/849, replaced by AMLR from July 2027), the Travel Rule (Regulation (EU) 2023/1113) and DAC8 (Directive (EU) 2023/2226). In practice, a MiCA-authorised CASP cannot maintain its licence without a robust customer due diligence and monitoring programme.
What is a CASP? A Crypto-Asset Service Provider is any legal person providing one or more of the ten regulated services enumerated in MiCA Article 3(1)(15): custody, operating a trading platform, exchange, order execution, placement, order reception/transmission, advice, portfolio management, transfer services and crypto-asset accounts.
Can a Polish crypto company operate without a MiCA licence after July 1, 2026? No, if it provides crypto-asset services to EU clients. ESMA confirmed on April 17, 2026 that this is a breach of Union law regardless of domestic implementation status. Legacy VASP registration is not a substitute for CASP authorisation.
Are self-hosted wallets banned? No. Self-hosted wallets are not banned. Transfers above €1,000 between a self-hosted wallet and a regulated CASP trigger wallet-ownership verification. Pure peer-to-peer transfers between individuals without a CASP remain outside MiCA scope.
Will MiCA help compliant Polish companies expand in the EU? Yes. A CASP licence from any EU member state allows full EU passporting. This is the most significant commercial benefit of MiCA for compliant firms — it replaces 27 fragmented national regulatory processes with a single authorisation mechanism.
Conclusion: MiCA Makes Compliance Part of the Product
MiCA in Poland is not simply another regulatory update. It is a structural change in how crypto companies operate, scale and build user trust.
For users, the most visible consequence is the decline of anonymous buying on regulated platforms — driven not by one law but by the cumulative force of MiCA, the Travel Rule, AMLR Article 79 and DAC8. For companies, the deeper change is architectural: identity verification, risk monitoring, Travel Rule messaging, DAC8 reporting, custody segregation and privacy controls must become part of the core platform, not afterthoughts.
Poland’s political situation remains genuinely unresolved as of early June 2026. The third legislative attempt is awaiting presidential signature with a constitutional deadline around June 12. But the EU-level framework is not. The July 1, 2026 transition cliff will arrive regardless of what President Nawrocki decides. And foreign-licensed CASPs are already here.
Companies that treat MiCA as a paperwork problem will lose EU market access on July 1, 2026. Companies that treat it as a product and infrastructure challenge will be positioned to compete in the next phase of the European crypto market — one where compliance is not a barrier to entry but a competitive moat.
Sources and Further Reading
Primary EU Legislation
- Regulation (EU) 2023/1114 — Markets in Crypto-Assets Regulation (MiCA) — EUR-Lex
- Regulation (EU) 2023/1113 — Transfer of Funds Regulation (Travel Rule) — EUR-Lex
- Regulation (EU) 2024/1624 — Anti-Money Laundering Regulation (AMLR) — EUR-Lex
- Council Directive (EU) 2023/2226 — DAC8 — EUR-Lex
Regulatory Guidance
- ESMA Interim MiCA Register — esma.europa.eu
- ESMA Statement of April 17, 2026 (ESMA75-113276571-1679) on July 1, 2026 deadline
- EBA Travel Rule Guidelines EBA/GL/2024/11 — eba.europa.eu
- ESMA Peer Review: MFSA MiCA CASP Authorisation (ref. ESMA42-2004696504-8164, July 10, 2025)
- DAC8 — European Commission Taxation and Customs Union — europa.eu
Poland-Specific Sources
- Polish Official Gazette, Act No. 347 (March 17, 2026) — DAC8/CARF implementing law
- KNF Public Warning on CASP Supervisory Gap (February 10, 2026)
- Kancelaria Skarbiec: The Crypto-Asset Market Act: MiCA Regime in Poland
- CMS Expert Guide to Crypto Regulation in Poland — cms.law
- Dudkowiak & Putyra: MiCA Licence or Market Exit? New ESMA Guidelines for CASPs
- Gofaizen & Sherle: CASP licence in Poland under MiCA
Industry and News Sources
- CoinTelegraph: Poland stalls on crypto law, forcing local companies to move abroad
- CoinTelegraph: Poland advances strict crypto bill, sparking public backlash
- The Block: Poland becomes EU’s lone MiCA holdout
- CoinDesk: Poland’s parliament revives controversial crypto bill
- Disruption Banking: Zondacrypto’s Shocking Collapse
- Balkan Insight: Dead Man’s Key — The Crypto Scandal Putting Poland’s President on the Spot
- CNBC: Coinbase secures EU crypto licence in Luxembourg
- Business Wire: Kraken Secures MiCA License from Central Bank of Ireland
- CAML: Will Poland’s President Veto Crypto Law for 3rd Time?
- Compliance Corylated: As MiCA turns one, member states take divergent approaches
- Chainalysis: Crypto Adoption in Europe: The World’s Largest Crypto Market
- Bloomberg Tax: Poland Gazettes Law Amending AEOI Provisions on DAC8
- AdamSmith.lt: Implementation of MiCA in Poland — why it has still not been achieved
- Phemex: Poland’s President Vetoed MiCA Twice
- CCN: MiCA Compliance Watchlist: Full List of Approved CASPs and Stablecoin Issuers
- Crypto.news: MiCA is live — Where crypto founders are incorporating in 2026


