The European Union will confine direct supervision by the European Securities and Markets Authority (ESMA) to its largest crypto-asset service providers, narrowing the scope of a rule originally designed to give the EU-level regulator hands-on authority over cross-border crypto businesses.

The decision, reported by Finance Magnates, reflects a compromise over how to allocate supervisory responsibility under the Markets in Crypto-Assets Regulation (MiCA), the EU's comprehensive crypto framework. Under the revised approach, only crypto firms whose scale makes them effectively impossible for a single national competent authority to oversee — the so-called "too big to supervise at home" category — will fall under ESMA's direct remit. All other licensed crypto-asset service providers (CASPs) will answer to the national regulators in their home member states.

What does the change mean for supervision?

The carve-out resolves a long-running tension between ESMA and national authorities over who polices the biggest players in European crypto. ESMA had argued that large, cross-border platforms operating through passporting rights across multiple member states create supervisory risks that no single national regulator can manage. Smaller member states, wary of ceding authority and licensing revenue, pushed back against a broad transfer of powers to Paris-based ESMA.

The outcome keeps day-to-day supervision of the vast majority of Europe's CASPs at the national level. VASP-style authorization under MiCA still runs through home-country regulators, which retain power to license, inspect and sanction firms operating within their borders.

For the largest crypto firms, direct ESMA oversight brings a different operational reality:

• A single EU-level supervisor rather than a patchwork of national examiners
• Harmonized reporting and supervisory expectations across member states
• Heightened scrutiny proportional to their systemic footprint in the EU market
• Less scope for regulatory arbitrage between member states with lighter-touch regimes

Who counts as "too big to supervise at home"?

The qualifying threshold is the crux of the rule. Firms whose client base, transaction volumes or cross-border reach exceed what a national regulator can effectively monitor will be tapped into ESMA's direct supervisory category. Companies below that bar stay with their home regulator, preserving the decentralized supervisory architecture that member states defended during the negotiations.

The practical consequence is a two-tier system. Crypto giants operating at pan-European scale will face a single, better-resourced supervisor with a mandate to monitor systemic risk. Mid-sized and small CASPs will continue under national supervision, where enforcement capacity varies significantly between member states.

What happens next?

The move lands as MiCA implementation matures across the bloc, with stablecoin rules already in force and CASP provisions phasing in through 2025. Firms now assessing where they sit on the supervisory spectrum will need to watch for the technical criteria ESMA and the European Commission finalize to determine which companies cross the direct-supervision threshold — and whether the largest platforms recalibrate their European structures in response.