Europe’s Financial Watchdog Probes Malta Over Fast-Track MiCA Authorizations
The European Securities and Markets Authority (ESMA) recently conducted a peer review of Malta’s application of the Markets in Crypto Assets (MiCA) regime. The review focused on Malta’s expedited authorization of an unnamed crypto asset service provider (CASP). ESMA’s Peer Review Committee (PRC) found that “material issues remained unresolved or pending remediation” at the time of authorization.
This raises concerns about the thoroughness of Malta’s authorization process. The PRC questioned the timing of the authorization, suggesting that key deficiencies should have been addressed before approval. ESMA’s report indicates the authorization process lacked sufficient time for proper assessment of compliance with the MiCA framework.
The review highlights the need for a more comprehensive approach, including a thorough consideration of the CASP entity’s supervisory history. While the entity’s history was considered, the report states it wasn’t adequately assessed. This includes unresolved material issues, pending remediation of previous enforcement cases, and ongoing investigations.
Furthermore, ESMA identified inadequacies in the assessment of key aspects of the CASP entity’s business plan. Areas of concern included growth strategies, client onboarding processes, potential conflicts of interest, and governance arrangements. The review also flagged risks related to Information and Communications Technology (ICT) infrastructure, custody arrangements, booking models, Web3 service usage, and Anti-Money Laundering/Combating the Financing of Terrorism (AML/CFT) controls.
Despite these shortcomings in the authorization process, ESMA found that Malta largely met expectations in other areas, such as supervisory settings and resources. The Malta Financial Services Authority (MFSA) welcomed the ESMA findings, recognizing the value of the PRC’s insights in improving supervision within the crypto asset sector. The review underscores the importance of a rigorous and comprehensive authorization process for crypto firms, emphasizing the need to address all material issues before granting licenses. The case raises questions about the potential implications of expedited licensing and the balance between innovation and robust regulatory oversight.

