MiCA and unhosted wallet rules (2026)
If you self-custody in the EU in 2026, MiCA is the licensing framework for the exchanges you use. The Transfer of Funds Regulation is why those exchanges ask you to prove you own your wallet.
Two EU laws, two jobs
| Law | Job |
|---|---|
| MiCA — Regulation (EU) 2023/1114 | Authorises and supervises crypto-asset service providers (CASPs), stablecoin issuers and public offerings of crypto-assets. |
| TFR — Regulation (EU) 2023/1113 | Requires information to accompany transfers of funds and certain crypto-assets (the Travel Rule), including rules for transfers involving self-hosted addresses. |
What 2026 looks like for users
- EU CASPs you withdraw from or deposit to are expected to be MiCA-authorised (or in a transitional regime permitted by their member state).
- Those CASPs collect originator/beneficiary data on crypto transfers under the TFR.
- For self-hosted wallet transfers over €1,000, the CASP must verify that you own or control the address — typically via signature or micro-transfer, per EBA guidelines.
- Product names differ: Signature Test, Satoshi Test, WalletConnect, screenshot, self-declaration. See per-exchange guides.
Practical checklist
- Whitelist or verify your self-custody address before you need a time-sensitive withdrawal.
- Prefer message signing when offered — no on-chain fee.
- On Bitcoin, reuse a verified address or understand the privacy trade-off of sharing an xPub.
- Keep a local proof record (address, message, signature, time) with the KeyProof verifier.
- Read the deeper Travel Rule explainer: Travel Rule self-hosted wallet verification.
FAQ
Did MiCA outlaw unhosted wallets?
No. MiCA regulates crypto-asset service providers and crypto-asset offerings. Rules on information that must accompany transfers — including transfers involving self-hosted wallets — sit primarily in Regulation (EU) 2023/1113 (the Transfer of Funds Regulation), which applies together with MiCA authorisation.
When did the EU Travel Rule apply to crypto?
Regulation (EU) 2023/1113 applies from 30 December 2024. EBA Travel Rule Guidelines (EBA/GL/2024/11) also apply from that date. By 2026, EU users should expect CASPs to collect Travel Rule data and, above €1,000 to or from a self-hosted address, to verify customer control of that address.
What should I do before withdrawing to self-custody in the EU?
Add the address in the exchange address book early, complete any signature or Satoshi test before you need the funds, and keep the exact address you verified. Use an exchange-specific guide so you follow that CASP's documented method.
Sources
- MiCA — Regulation (EU) 2023/1114
- Regulation (EU) 2023/1113
- EBA Travel Rule Guidelines (EBA/GL/2024/11)
- Finanssivalvonta notice on EBA/GL/2024/11 applicability from 30 Dec 2024
Not legal advice. Member-state supervisors may publish additional guidance.