{"id":5017,"date":"2026-07-08T14:44:14","date_gmt":"2026-07-08T14:44:14","guid":{"rendered":"https:\/\/capitaliststoday.com\/index.php\/2026\/07\/08\/eu-securities-regulator-esma-launches-crypto-custody-review\/"},"modified":"2026-07-08T14:44:14","modified_gmt":"2026-07-08T14:44:14","slug":"eu-securities-regulator-esma-launches-crypto-custody-review","status":"publish","type":"post","link":"https:\/\/capitaliststoday.com\/index.php\/2026\/07\/08\/eu-securities-regulator-esma-launches-crypto-custody-review\/","title":{"rendered":"EU Securities Regulator ESMA Launches Crypto Custody Review\u2026"},"content":{"rendered":"<\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal\" data-sourcepos=\"3:1-3:288;91-378\">The European Securities and Markets Authority (ESMA) has opened a coordinated review of how crypto-asset service providers (CASP) safeguard client holdings, placing custody operations under direct scrutiny as the EU&#8217;s Markets in Crypto-Assets (MiCA) regulation shifts from transition into active supervision.<\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal\" data-sourcepos=\"5:1-5:539;380-918\">ESMA <a href=\"https:\/\/www.esma.europa.eu\/press-news\/esma-news\/esma-launches-common-supervisory-action-casps-digital-operational-resilience\">announced<\/a> on 8 July that it is launching a Common Supervisory Action with national regulators to test the digital operational resilience of authorised crypto-asset service providers, with custody services as the specific focus. The exercise measures how mature firms&#8217; resilience frameworks are across the technical and governance layers that keep client assets secure, and it runs from the second half of 2026 through the first half of 2027 before a consolidated report reaches ESMA&#8217;s Board of Supervisors in the second half of 2027.<\/p>\n<h2 class=\"text-text-100 mt-3 -mb-1 text-[1.125rem] font-bold\" data-sourcepos=\"7:1-7:38;920-957\">What ESMA&#8217;s Custody Review Targets<\/h2>\n<p class=\"font-claude-response-body break-words whitespace-normal\" data-sourcepos=\"9:1-9:484;959-1442\">The Common Supervisory Action zeroes in on risks inherent to distributed ledger technology, covering governance arrangements, key and storage management, transaction controls, incident detection and response, smart contract risks, and dependencies on third-party providers. Each sits at the core of how a custodian holds and moves crypto assets on behalf of clients, and ESMA wants a read on whether firms newly inside the regulated perimeter have built controls that match the risk.<\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal\" data-sourcepos=\"11:1-11:583;1444-2026\">ESMA framed the initiative as a response to its risk-based supervisory priorities, which identify both digital operational resilience and crypto-asset service providers as key areas of risk. The regulator said it developed the action to enhance supervisory convergence in a fast-evolving market, a concern that has sharpened as the <a class=\"underline underline underline-offset-2 decoration-1 decoration-current\/40 hover:decoration-current focus:decoration-current\" href=\"https:\/\/financefeeds.com\/esma-adds-37-crypto-firms-to-mica-register-after-transition-ends\/\">MiCA register expanded to 280 authorised providers<\/a> and pulled a widening set of custodians, exchanges, and token issuers under a single oversight structure.<\/p>\n<h2 class=\"text-text-100 mt-3 -mb-1 text-[1.125rem] font-bold\" data-sourcepos=\"13:1-13:44;2028-2071\">How National Regulators Run the Exercise<\/h2>\n<p class=\"font-claude-response-body break-words whitespace-normal\" data-sourcepos=\"15:1-15:560;2073-2632\">National competent authorities will carry out the review on a risk-based sample of authorised providers rather than the full population, concentrating supervisory attention where the resilience gap could prove most damaging. That design keeps enforcement in the hands of member-state supervisors while feeding a common set of findings back to the EU level, mirroring the split-responsibility model that has defined <a class=\"underline underline underline-offset-2 decoration-1 decoration-current\/40 hover:decoration-current focus:decoration-current\" href=\"https:\/\/financefeeds.com\/esma-tells-unauthorized-crypto-firms-to-wind-down-as-mica-deadline-hits\/\">MiCA&#8217;s enforcement rollout<\/a> across the bloc.<\/p>\n<p class=\"font-claude-response-body break-words whitespace-normal\" data-sourcepos=\"17:1-17:887;2634-3520\">The action lands amid accelerating MiCA enforcement. <a class=\"underline underline underline-offset-2 decoration-1 decoration-current\/40 hover:decoration-current focus:decoration-current\" href=\"https:\/\/financefeeds.com\/ripple-secures-full-mica-license-europe\/\">Ripple secured full CASP authorisation from Luxembourg&#8217;s CSSF<\/a>on 6 July, clearing it to serve the 30-country European Economic Area, while ESMA&#8217;s interim register climbed to 280 providers after the transitional period ended, up from 243, with Standard Chartered, FalconX, and Sygnum Europe among the newly listed firms and Cyprus leading the latest wave at six approvals. Spain&#8217;s CNMV <a class=\"underline underline underline-offset-2 decoration-1 decoration-current\/40 hover:decoration-current focus:decoration-current\" href=\"https:\/\/financefeeds.com\/spain-rules-out-mica-extensions-for-unlicensed-crypto-firms\/\">ruled out extensions for unlicensed platforms<\/a>, with chair Carlos San Basilio stating there would be no exceptions to the deadline. The custody review gives ESMA its first structured read on resilience controls since firms began moving off national registrations onto the shared EU register.<\/p>\n<p><\/p>\n","protected":false},"excerpt":{"rendered":"<p>The European Securities and Markets Authority (ESMA) has opened a coordinated review of how crypto-asset&hellip;<\/p>\n","protected":false},"author":1,"featured_media":5018,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[],"class_list":["post-5017","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-business"],"_links":{"self":[{"href":"https:\/\/capitaliststoday.com\/index.php\/wp-json\/wp\/v2\/posts\/5017","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/capitaliststoday.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/capitaliststoday.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/capitaliststoday.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/capitaliststoday.com\/index.php\/wp-json\/wp\/v2\/comments?post=5017"}],"version-history":[{"count":0,"href":"https:\/\/capitaliststoday.com\/index.php\/wp-json\/wp\/v2\/posts\/5017\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/capitaliststoday.com\/index.php\/wp-json\/wp\/v2\/media\/5018"}],"wp:attachment":[{"href":"https:\/\/capitaliststoday.com\/index.php\/wp-json\/wp\/v2\/media?parent=5017"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/capitaliststoday.com\/index.php\/wp-json\/wp\/v2\/categories?post=5017"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/capitaliststoday.com\/index.php\/wp-json\/wp\/v2\/tags?post=5017"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}