I keep coming back to a simple question that traders in Europe have been asking since summer: if an exchange never received a bloc-wide crypto license, how is it still answering support tickets, taking deposits, or letting some users finish identity checks? The short version is messy. The longer version is the story of a narrow legal door that regulators now want to slam, or at least measure with a ruler.
That door is called reverse solicitation. It is not a marketing slogan. It is a tightly written exception inside the Markets in Crypto-Assets rulebook. And right now it sits at the center of a quiet but serious test of whether a global exchange can keep serving European customers without a MiCA license.
Why This License Fight Matters More Than A Press Release
MiCA was supposed to end the old patchwork. Before the full regime kicked in, many firms lived on national registrations. One country, one set of forms, one local supervisor. After the transition window closed at the end of June, the logic flipped. If you want to offer covered crypto services across participating markets, you generally need authorization as a crypto-asset service provider. Get it in one member state and, in principle, you can passport that approval elsewhere.
That is the clean theory. Practice looked different. One large exchange entered July without that approval after a licensing path through Greece fell apart in June. Yet parts of the European business did not vanish overnight. Some accounts stayed reachable. Some new registrations still went through in certain countries weeks later. Deposits were not uniformly frozen. Withdrawals, in other places, became the only real option.
I have found that regulation rarely fails in a single headline. It fails in the gap between a deadline and the way a platform actually behaves on a Tuesday night when a user in Lisbon or Lyon tries to log in. That gap is what supervisors are now inspecting.
The Deadline Was Real, Even If The Off-Ramp Was Not
Companies covered by the transition period needed authorization by the end of June if they wanted to keep providing regulated services after that date. No poetry there. Calendar math. An approval obtained in one member state can generally travel. An application that is withdrawn cannot.
The Greek route was meant to be that passport. It did not land. The filing was pulled late in June, with a promise to try another jurisdiction later. That left a practical problem. Customers already on the platform. Assets already sitting in wallets. Product pages that still loaded. And a legal argument that some of those relationships might survive under an exemption that exists for overseas firms approached by Europeans on their own initiative.
Access was not uniform. In some markets, users had already received wind-down instructions. In others, accounts were limited mainly to withdrawals. In France, services such as spot and margin trading were cut after the July 1 cutoff, while assets were described as remaining accessible during the restriction period. That mix is exactly why this story refuses to stay simple.
What Reverse Solicitation Actually Allows
Under Article 61 of the regulation, an overseas company may serve an EU customer when that customer starts the relationship entirely on their own. No push. No campaign. No “we happened to appear in your feed.” The customer walks in. The firm answers.
That sounds generous until you read the conditions. A firm cannot lean on the exemption if it, or anyone acting for it, has solicited prospective customers inside the Union through advertising, promotions, or other communications. A clause in the terms of service that says “you approached us independently” does not rewrite history. Supervisors look at how the relationship began, not how the contract later describes it.
The reverse solicitation exemption should be understood as very narrowly framed. It should be regarded as the exception and not be used to circumvent MiCA requirements.
– European supervisory guidance as reported to market media
That line is the whole policy in one breath. Exception, not business model. If you build a European growth engine on the claim that every new user just happened to find you, expect someone with a badge to ask for screenshots, ad logs, referral trails, and the exact moment a local phone number or localized landing page appeared.
How Supervisors Decide Whether A User Really Walked In Alone
This is where the story gets less legal and more forensic. Authorities are not required to accept a narrative. They look for targeting. Websites. Online marketing. Social posts. Local telephone numbers. Country-coded domains. Promotions that smell like they were written for a specific market. Influencer arrangements. Even customer-support scripts that invite a “quick onboarding.”
In my experience, the most underestimated evidence is ordinary product design. Geo-aware banners. Pre-filled country lists. Language that assumes a European tax ID. A help article titled for a single member state. None of those items is automatically fatal. Together they can look like solicitation wearing a hoodie.
- Did the firm advertise crypto services to people located in the Union?
- Did affiliates or partners do that advertising on its behalf?
- Was the first contact initiated by the customer with no prior push?
- Do contracts claim independence that the onboarding trail does not support?
- Are there signs of an ongoing commercial presence aimed at EU residents?
If the answers tilt toward targeting, the exemption starts to look thin. If the answers show a truly passive reception of unsolicited requests, the exemption can still exist. Narrow, yes. Imaginary, no.
What Changed After July, On The Ground
Tests later in the summer suggested that new users in several European countries could still register and complete identity verification more than seven weeks after the cutoff. Cryptocurrency deposits remained available on some active accounts. At the same time, the firm was not listed on the official register of authorized crypto-asset service providers.
That combination is the spark. An unauthorized firm and a still-usable product is the exact picture MiCA was written to prevent, unless a valid exception applies. Some existing users were told their assets would stay reachable while restrictions rolled out. That is a customer-care sentence. It is also a compliance sentence, because keeping an account “reachable” can still count as providing a service.
Routing also mattered. Reports described some EU-related trading flowing through an entity in Abu Dhabi, while independently approaching customers could be onboarded under the firm’s reading of the exemption. Supervisors had already asked for confirmation that activities requiring authorization were being wound down. The latest requests for information go further. They ask whether the relationships that remained, or were newly accepted, actually meet the legal test.
The Firm’s Public Position, Without The Spin
The exchange says it is actively working toward becoming MiCA-authorized. It also says it complies with applicable requirements in the places where it operates. Those two sentences can both be true and still leave a hole. Working toward a license is not the same as holding one. Complying “where it operates” depends on how you define the operating map after a deadline.
I do not read that stance as a confession or as a victory lap. I read it as a holding pattern. Licensing is still the destination. Reverse solicitation is the temporary road. Temporary roads attract inspectors, especially when the destination keeps moving from one member state to another.
Perhaps the most interesting aspect is the honesty gap that every large platform faces. Global brands do not grow by sitting quietly in a desert until a stranger knocks. They grow by being visible. Visibility and reverse solicitation are uncomfortable roommates.
Why Greece Became A Cautionary Tale
The original plan was straightforward. Secure authorization in Greece, then use passporting to cover the rest of the participating market. That process ran into trouble in June. The application was withdrawn before the transition period expired. The firm said it would look for another EU jurisdiction and disclose the next route when ready.
Questions lingered into September after reports of high-level political attention around the Greek file. Whether those reports overstated the drama is almost beside the point for customers. What matters is the outcome. No approval. No neat passport. A search for a new home regulator. And a period in which some European activity continued under an exemption that supervisors now describe as exceptional.
Greek officials had, according to later market coverage, signaled an intent to approve before the process changed course. The withdrawal landed on June 24. By then the clock was unforgiving. You cannot passport a license you do not hold. You cannot treat a future application as a present right.
Passporting Was The Prize. The Exemption Is The Consolation.
Passporting is the feature that made MiCA attractive to serious operators. One license, many markets, one supervisory conversation that other authorities can rely on. Reverse solicitation is the opposite energy. It is case by case. Customer by customer. Fact by fact. It does not scale like a passport. It is not supposed to.
| Path | What it allows | What it demands |
| MiCA CASP authorization | Regulated services with passporting across participating states | Full authorization, local substance, ongoing supervision |
| National wind-down | Limited residual access, often withdrawals first | Clear exit plan and customer communication |
| Reverse solicitation | Service to a customer who initiated contact alone | No targeting, no promotional push, narrow facts |
| Third-country entity routing | Possible continuity for some flows | Proof that EU rules are not being sidestepped |
Look at that table for more than a second and the strategy problem appears. Authorization is expensive and slow, but it is designed for volume. The exemption is cheap in the short run and fragile in the long run. Firms that confuse the two usually meet enforcement later rather than never.
ESMA’s Tone Has Shifted From Guidance To Inspection
European market authorities spent the first phase of MiCA explaining the rulebook. The next phase looks more like testing whether firms absorbed it. Reverse solicitation sits on the supervision priority list looking ahead, alongside outsourcing, operational resilience, liquidity, and whether crypto companies keep enough real activity inside the Union.
That last item is easy to miss and hard to fake. A brass plate and a shared mailbox do not equal an EU operation. Supervisors want common risk indicators and reporting standards that national authorities can actually use. Findings from that work are expected to feed the Commission’s review of the regulation, due by mid-2027.
Guidelines already told national authorities to watch third-country firms for signs of targeting. The new step is direct information requests. If the answers disappoint, fines are on the table. I would not treat that as theater. After a high-profile deadline, a visible platform is a natural first file.
What “Serving Customers” Means When Features Get Cut
People talk about an exchange as if it were one switch. On or off. Real platforms are a bundle. Spot trading. Margin. Derivatives. Fiat ramps. Earn products. Copy tools. Support chat. Deposit addresses. Tax exports. Each of those can be a regulated activity on its own facts.
So a firm can restrict trading in France and still be “serving” a customer if it holds assets, processes withdrawals, or keeps an account in a usable state. It can stop ads and still be soliciting if yesterday’s campaign is still converting. It can route an order through a non-EU affiliate and still face questions if the customer relationship was built in Europe.
This is why wind-down letters matter. They are not only courtesy. They create a paper trail of what the firm believes it is still allowed to do. Vague language helps nobody. Precise language can still be challenged if the product does not match the letter.
Customers Are Not Bystanders In This Fight
If you hold assets on a platform that missed the authorization cut, your risk is not theoretical. It is operational. Can you withdraw? How fast? To which networks? Are new deposits wise? Will identity reviews freeze an account that was “open” last month? Will a local regulator tell the firm to stop onboarding people who look like you?
- Check whether your account can still place new trades or only move funds out.
- Confirm withdrawal routes before you need them in a hurry.
- Save statements and identity documents now, not after a lock.
- Treat new deposits as a separate decision from holding existing balances.
- Watch official product notices, not social rumors, for country-specific cuts.
None of that is legal advice. It is housekeeping. Housekeeping is how you avoid becoming the person who discovers a restriction on a Friday evening when support queues are long and markets are moving.
The Business Incentive Nobody Wants To Say Out Loud
Europe is not a side quest for a global exchange. It is a dense retail market with deep liquidity habits and a regulatory brand that other regions watch. Walking away entirely is costly. Staying without a license is risky. The exemption looks, from a distance, like a bridge.
Bridges collapse when too many trucks use them. If every unauthorized firm treats reverse solicitation as a growth channel, the exemption becomes a joke. Supervisors know that. Firms know that supervisors know that. So the current information requests are less about one press cycle and more about setting a precedent before 2027 supervision gets louder.
I’ve found that markets forgive delayed licenses more readily than they forgive sloppy wind-downs. A delayed license is a process. A sloppy wind-down looks like contempt for the calendar.
Substance Inside The Union Will Decide The Next Chapter
MiCA is not only a permission slip. It is a substance test. Who sits in the EU entity? Who can be called at 9 a.m. local time when an outage hits? Where is the complaint handling? Where is the safeguarding arrangement? If the answers all point offshore, authorization gets harder and the exemption looks even less like a plan.
Outsourcing will get similar heat. You can buy technology. You cannot outsource accountability into a fog. Operational resilience sits on the same list because a licensed firm that cannot keep systems up is still a consumer problem. Liquidity sits there because a platform that cannot honor withdrawals during stress makes the license look decorative.
Put those themes together and the message is blunt. Europe wants crypto firms that live in Europe, at least enough to be supervised like other financial actors. A brand with a global app and a thin local shell will keep hearing the same questions.
Could Enforcement Arrive Before A New License Does?
Yes. That is the uncomfortable timeline. Authorization in a new member state takes months even when the file is clean. Information requests can produce findings faster. If national authorities decide the exemption was stretched, they can act without waiting for the next application to mature.
Fines are one tool. Directions to stop onboarding are another. Public warnings are a third. None of those outcomes is guaranteed. All of them are plausible enough that treating the exemption as a quiet loophole would be sloppy management.
The firm can still complete a proper authorization. Nothing in the current scrutiny makes that legally impossible. It does make the next application more political, more documented, and more likely to be read against the summer of 2026 rather than in isolation.
A Practical Reading Of “Can They Keep Serving EU Customers?”
Can they keep serving some customers without a MiCA license? In a narrow sense, yes, if those customers truly initiated contact and the firm did not solicit the relationship. Can they keep running a broad, growing, advertised European franchise on that basis? That is the part supervisors are trying to shut down.
Think of it as two different businesses wearing the same logo. Business A is a passive recipient of unsolicited approaches. Business B is a full-service European exchange. MiCA was written for Business B. Reverse solicitation was written, grudgingly, for leftovers of Business A.
When those two businesses share the same app, the same brand colors, and the same growth team, the leftover story gets harder to tell. That is the regulatory test now underway.
What A Cleaner Path Would Look Like
If I were writing the internal memo, it would not be clever. It would be boring. Pick a member state with capacity. Staff a real local entity. Freeze EU-facing campaigns. Document every remaining customer relationship. Separate unsolicited inbound requests from any flow that touched marketing. Finish the wind-down where authorization is absent. Then apply once, with a file that does not require a novelist to explain the summer.
Boring memos survive reviews. Creative interpretations of Article 61 do not age well. The rulebook already told firms the exemption is an exception. Repeating that sentence in a hearing will not sound original.
A simple compliance sequence: 1. Map every EU-facing service line 2. Tag each line as authorized, winding down, or exemption-only 3. Kill targeting that undermines the exemption 4. Keep withdrawal rails boringly reliable 5. File for authorization where the substance actually sits
That sequence will not trend. It will, however, look like adulthood. Markets eventually reward adulthood more than they reward a clever reading of a footnote.
The Wider Signal For Every Unlicensed Brand
This file is not only about one company. It is a message to every third-country platform that still answers European emails. The age of “we are global, so the app is global” is closing inside the Union. Location of the customer matters. Location of the marketing matters. Location of the entity matters.
Smaller firms should not take comfort from being less famous. Famous firms get the first letters. Smaller firms get the template those letters create. By the time common risk indicators exist, the questions will be standardized. Standardized questions are harder to charm your way through.
On the other side, licensed competitors have an obvious talking point. They paid for the passport. They staffed the office. They can say so without blinking. That commercial pressure may do as much work as any fine.
So Where Does This Leave The Original Question?
Binance can keep serving some EU customers without a MiCA license only inside a thin legal lane. That lane requires unsolicited customers, no targeting, and a story that survives document requests. Outside that lane, the honest answer is no. Not as a continuing European business. Not as a growth plan. Not as a substitute for authorization.
The firm says the licensing process remains active. That still looks like the only durable exit. Until a name appears on the official register, every open European account lives with a question mark. Some users will ignore that mark. Some will withdraw. Supervisors will keep asking how the mark got there in the first place.
I started with a simple question because users deserve a simple frame. The rule is not mysterious. Authorization is the default. Reverse solicitation is the exception. Exceptions that start to look like strategy attract enforcement. That is not drama. That is how financial law usually works when the grace period ends and the register stays empty.
If the next chapter is a proper license in another member state, this summer becomes a messy footnote. If the next chapter is a fine and a harder wind-down, it becomes a case study other exchanges will teach their lawyers. Either way, the calendar already moved. The exemption did not grow wider. It got a spotlight. Spotlights are unkind to narrow doors.
