Regulation and authorisation
Regulation: who provides your services, under which authority
CryptoIBAN is a brand. Each regulated service is provided by an authorised entity: here is who does what, which regulation applies, and how to check it yourself.
- MiCA-authorised provider
- Safeguarded e-money
- Licences stated in your contract
Who does what
One brand, regulated entities
Three distinct roles are involved in your account. The two regulated services, converting your crypto and holding your euro account, are provided by authorised entities, identified in the contract you receive before opening.
-
Brand operator
The company operating CryptoIBAN
Designs the service, handles account opening and answers your questions. Its full identity is in the legal notice and in your contract.
-
Crypto-asset services
Provider authorised under MiCA
Receives your crypto and converts it into euros, at the firm price shown before you confirm.
Name and licence number stated in your contract, before opening.
-
IBAN account and transfers
Authorised payment or e-money institution
Holds your Belgian IBAN account, safeguards your euros and executes your SEPA transfers.
Name and licence number stated in your contract, before opening.
Always check a crypto provider in the ESMA MiCA register and with the authority of its home country.
Timeline
The dates that frame your services
From crypto-assets to transfers, the texts that apply to your account, in chronological order.
-
MiCA and the TFR apply
Regulation (EU) 2023/1114 (MiCA) becomes fully applicable. On the same day, Regulation (EU) 2023/1113 (TFR) requires every crypto-asset transfer to carry information on the originator and the beneficiary.
-
Verification of Payee
It becomes mandatory in the euro area (Regulation (EU) 2024/886, art. 5c): before sending, the payee’s name is compared with the holder of the IBAN.
-
Belgian law of 11 December 2025
It makes the FSMA responsible for authorising crypto-asset service providers and supervising their conduct, and the National Bank of Belgium (NBB) for their prudential supervision.
-
DAC8: data collection begins
Crypto providers start collecting the data required by Directive (EU) 2023/2226. Tax self-certification and a tax identification number are mandatory; first exchanges between tax authorities in 2027.
-
DAC8 in Belgian law
The Belgian law transposing the directive is published in the Belgian Official Gazette.
-
End of the MiCA transitional period
A crypto-asset service provider must now be authorised (art. 59) or notified (art. 60) to serve clients in the EU; otherwise, the service is illegal.
-
ESMA opinion on non-compliant tokens
Providers must stop all services on non-MiCA-compliant ARTs and EMTs for EU clients; only a residual, temporary exit without promotion is tolerated.
-
Anti-money-laundering regulation (AMLR) Upcoming
Regulation (EU) 2024/1624 becomes applicable. Among other things, it prohibits accounts whose holder is not identified (art. 79).
Check
How to check a provider
Neither a logo nor a vague claim is enough: an authorisation can be checked, in three steps.
Start with ESMA’s interim register. Search for the name of the legal entity, not the trading name: authorisation is granted to an entity, and a brand may bring several together.
Then check with the national authority that granted the authorisation. In Belgium, the FSMA authorises crypto-asset service providers; its list of authorised Belgian CASPs was empty on 9 October 2026, so services there are provided by providers authorised in another member state, through the European passport. The NBB, for its part, authorises payment and electronic money institutions.
Finally, ask for written, precise answers. Our list of what we will never do also works as a checklist for any provider.
- Which entity provides each service, under which licence number?
- Are the fees published, all in?
- Is the firm price shown before you confirm?
- Who holds your euros, and under what status?
- How do you file a complaint?
What we will never do
- Promise returns or interest
- Ask for your recovery phrase
- Promise anonymity
- Hide a spread in the rate
The framework
What MiCA covers, and what it does not
MiCA sets demanding rules for providers. It does not do everything: knowing where it stops avoids attributing to it protections it does not offer.
What MiCA governs
Regulation (EU) 2023/1114 governs issuers of crypto-assets and crypto-asset service providers. For you, it translates into specific obligations on the provider:
- authorisation (art. 59) or notification (art. 60) to provide its services in the EU;
- identification of the entity providing each service (art. 59(5) and 70(4));
- fair, clear and not misleading communications, and published fees (art. 66);
- a pricing method, and a firm price known before your order becomes final (art. 77);
- a complaints-handling procedure (art. 71).
Stablecoins too
MiCA also governs e-money tokens and asset-referenced tokens. USDC and EURC are e-money tokens within the meaning of MiCA, issued in the EU by a Circle subsidiary authorised in France as an electronic money institution.
The regulatory discussion of stablecoins is distinct from the list of payment options currently available in your account. Consult the asset catalogue for supported networks and the applicable contractual information for the services provided.
What MiCA does not cover
- The value of your crypto-assets. They remain volatile and are not covered by deposit guarantee or investor compensation schemes; the protection offered by MiCA is limited.
- Your euro account. It falls under payment services and e-money rules (in Belgium, the law of 11 March 2018). Your euros are e-money safeguarded with the partner institution: they are not deposits.
- Unauthorised providers. MiCA protection only applies to services provided by authorised providers; a provider established outside the EU may not solicit clients there, except under strict reverse solicitation (art. 61).
- Traceability and anti-money laundering. These fall under other texts: Regulation (EU) 2023/1113 (TFR) and, from 10 July 2027, Regulation (EU) 2024/1624 (AMLR).
- Your taxes. Information exchanges (DAC8, CRS) follow their own rules, and a Belgian IBAN does not change your tax residence. We do not give tax advice.
Authorisation governs the provider, not the market: the value of a crypto-asset can fall sharply before it is converted. Read our risk warning before depositing or converting.
FAQ
Your questions on regulation
Is CryptoIBAN a bank?
No. CryptoIBAN is a brand: your conversions are carried out by a provider authorised under MiCA, and your IBAN account is held by an authorised electronic money institution. Your euros are e-money: they are not deposits and are not covered by deposit guarantee schemes.
Where can I find your partners’ names and licence numbers?
In the contract you receive before your account is opened. Then check them yourself, in the ESMA register and with the national authorities concerned.
Who supervises what in Belgium?
Under the law of 11 December 2025, the FSMA authorises crypto-asset service providers and supervises their conduct, while the NBB handles their prudential supervision. The NBB also authorises payment and electronic money institutions.
Does MiCA protect my crypto against a price fall?
No. MiCA governs providers, not prices: your crypto-assets remain volatile until they are converted. That is why the firm price is shown before you confirm: you know exactly how many euros you receive.
An IBAN in your name, with identified partners
Open your account online. Before it is activated, you receive the contract identifying each of our regulated partners and its licence number.
- €0 to open
- No commitment
- Opened online