Menu
Envelope sealed with red wax between a red letterbox and a red panel, cream background

MiCA Article 60 notification

William O’Rorke, Founding Partner at ORWL Avocats
Updated 12 November 2026
William O’Rorke
Partner

A bank, an investment firm, an asset manager or an electronic money institution may provide crypto-asset services without CASP authorisation by notifying its competent authority at least 40 working days before starting: the ACPR or the AMF in France, its own regulator if it is authorised in another Member State. ORWL Avocats prepares this notification as a lighter application for authorisation.

Who can notify, and for which services?

Article 60 of MiCA covers six categories of entities already authorised under another EU act. Each may notify only the crypto-asset services that extend its authorised activities.

Entity already authorisedCrypto-asset services it may notifyAuthority in France
Credit institutionAll crypto-asset servicesACPR, with the AMF’s opinion
Investment firmServices equivalent to the investment services for which it is authorisedACPR, with the AMF’s opinion
Electronic money institutionCustody and transfer of the e-money tokens it issues, and only thoseACPR, with the AMF’s opinion
Portfolio management company (UCITS or AIF)Portfolio management and advice; reception and transmission of orders for AIFMs only; within the limits of its authorisationAMF
Market operatorOperation of a trading platform for crypto-assetsAMF
Central securities depositoryCustody and administration of crypto-assets on behalf of clientsAMF

Three limits come up often in practice:

  • an electronic money institution may provide custody and transfer services only for the e-money tokens it issues itself;
  • a UCITS management company may not notify the reception and transmission of orders, which MiCA reserves for alternative investment fund managers;
  • an investment firm may not notify crypto-asset transfer services, which have no equivalent among investment services, although they are systematically linked to custody.

The notification goes to the competent authority of the home Member State. A bank or an investment firm authorised in another Member State therefore notifies its own regulator; the split between the French authorities applies only to institutions authorised in France. For those, the ACPR (Autorité de contrôle prudentiel et de résolution, the French banking and insurance supervisor) receives notifications from credit institutions, investment firms and electronic money institutions, and obtains the opinion of the AMF (Autorité des marchés financiers, the French financial markets regulator); the AMF receives those of asset management companies, market operators and central securities depositories (Article L. 54-10-7 of the French Monetary and Financial Code, in French).

The firm also advises foreign groups serving the French market under a MiCA passport.

Which services can an investment firm notify?

For investment firms, MiCA sets out an equivalence table: each crypto-asset service corresponds to an investment service. The firm may notify only the services whose equivalent already appears in its authorisation. A firm authorised only for the reception and transmission of orders therefore cannot notify custody.

Crypto-asset serviceEquivalent investment serviceExpected deliverables
Custody and administration on behalf of clientsSafekeeping and administration of financial instruments (ancillary service)Custody policy, segregation procedure
Operation of a trading platformOperation of a multilateral or organised trading facility (MTF, OTF)Operating rules, market-abuse detection arrangements
Exchange for funds or other crypto-assetsDealing on own accountCommercial policy, pricing method
Execution of orders on behalf of clientsExecution of orders on behalf of clientsOrder execution policy
PlacingUnderwriting and placing, with or without a firm commitmentProgramme of operations, conflicts-of-interest policy
Reception and transmission of ordersReception and transmission of ordersProgramme of operations, conflicts-of-interest policy
Advice on crypto-assetsInvestment adviceEvidence of advisers’ competence
Portfolio management on crypto-assetsPortfolio managementEvidence of portfolio managers’ competence
Transfer services on behalf of clientsNone: outside the scope of notificationCASP authorisation application for this service

For a service with no equivalent in its authorisation, the firm first extends its investment firm authorisation, or applies for CASP authorisation for that service, as French law allows. ORWL Avocats also advises CASPs moving the other way, towards investment services, as part of its crypto-assets and MiFID II practice.

Notification, CASP authorisation or subsidiary: which route?

Notification is the most direct route when the service falls within the institution’s status. It exempts the institution from the MiCA requirements on authorisation, own funds and qualifying holdings, which its original status already covers.

Other factors point to a different route:

  • the service has no equivalent in the status: CASP authorisation for that service, or an authorised subsidiary;
  • the group wants to isolate the crypto-asset business, its risks and its resources in a separate entity: an authorised CASP subsidiary; the distribution of its services by the other group entities must then be analysed, as it may amount to the reception and transmission of orders;
  • the offer relies on a partner that is already authorised: each party’s role is classified service by service, and the distribution or outsourcing agreement reflects it.

The right to provide notified services ends with the original authorisation. An institution that loses its status also loses its crypto-asset services.

ORWL Avocats compares these routes with the institution’s management in light of its organisation, its clients and its timetable. The firm also handles applications for CASP authorisation when notification does not cover the project.

What does the notification file contain?

MiCA sets out the information to be notified, which two Commission regulations of February 2025 detail. The firm lists these texts in its MiCA tracker. The AMF and the ACPR published a common notification form on 30 January 2026. The file includes:

  • a programme of operations: services, crypto-assets concerned, where and how the services are marketed;
  • the anti-money laundering and counter-terrorist financing (AML/CFT) framework: internal control and risk assessment;
  • the business continuity plan;
  • technical documentation of the ICT systems and security arrangements, with a description in plain language;
  • the procedure for segregating clients’ crypto-assets and funds;
  • documents specific to each service: custody policy, platform operating rules and market-abuse detection, commercial policy and pricing method, order execution policy, competence of advisers and portfolio managers, terms of the transfer service.

The common form also asks about services that give access to decentralised finance: it requires an assessment, protocol by protocol, of its decentralised nature and of the absence of any regulated service.

The institution need not send again identical information that its authority already holds, provided it confirms that the information is up to date. The firm’s experience shows, however, that the notification is a lighter application for authorisation, which brings together a large number of documents and requires overall consistency. In practice, the review also takes longer than the periods set by the Regulation. The firm starts from what the institution has already provided and drafts what is missing.

What obligations apply after notification?

The notifying institution becomes a crypto-asset service provider. It applies the MiCA rules as an authorised CASP does, except for authorisation, own funds and qualifying holdings:

  • custody: agreement with each client, register of positions, segregation of assets, liability for losses;
  • AML/CFT: obligations specific to crypto-assets, including the travel rule;
  • digital operational resilience, which the institution already applies to its other activities under DORA;
  • prevention and detection of market abuse in crypto-assets;
  • conduct and communication rules towards clients, including for services distributed by partners.

The distribution model deserves particular attention. A bank that opens its services to fintechs, or entrusts part of the chain to a CASP, must classify the role of each party: a partner that transmits clients’ orders provides a crypto-asset service itself.

ORWL Avocats also advises on the MiCA compliance of CASPs, their AML/CFT framework and their DORA compliance, and on the agreements that organise distribution.

How ORWL Avocats handles a notification

The 40-working-day period runs from filing to the first service. The authority has 20 working days to confirm that the file is complete; a request for missing information suspends the period, for 20 working days at most, and the institution may not start while the notification remains incomplete. In practice, the review takes several months.

01
Analysis and choice of route
Service by service, what the authorisation covers; notification, CASP authorisation or subsidiary.
02
Notification file
Programme of operations, AML/CFT, business continuity, ICT, segregation, policies specific to each service.
03
Filing
At least 40 working days before the first service, with the competent authority.
04
Completeness check
20 working days; a request for missing information suspends the period, for 20 working days at most.
05
Start of services
Once the notification is complete; entry in the ESMA register.
40 working days in the Regulation, several months in practice
06
Ongoing compliance
Custody, AML/CFT, DORA, distribution: the CASP rules apply.

The firm drafts the documents or reviews those prepared by your teams, prepares exchanges with the ACPR and the AMF and follows up after filing.

Preparing a notification?

A partner reviews your status, the services you plan and your launch timetable.

Let’s talk about your project

Why work with ORWL Avocats?

Since 2018, ORWL Avocats has handled dozens of authorisations before the AMF and the ACPR, first under the French PSAN regime (the registration regime for digital asset service providers that applied before MiCA), then under MiCA, for platforms, custodians, brokers, fintechs adding crypto-asset services and financial groups notifying their services. The firm is ranked by Chambers FinTech and Leaders League. It takes part in industry work within ADAN (Association pour le développement des actifs numériques, the French digital asset industry association), on whose board one of its partners sits.

A lawyer specialised in banking and financial law applied to crypto-asset services brings what a consultant cannot: a legal classification of each service, backed by professional liability; professional secrecy, which protects exchanges and analyses; the drafting of partnership and distribution agreements; a position defended before the regulator on the client’s behalf.

Every matter is handled by a partner.

ORWL Avocats’ Regulatory practice

ORWL Avocats advises financial institutions and crypto-asset service providers on their regulatory steps, from notification or authorisation to ongoing compliance, as part of its practice of banking and financial law applied to crypto-assets.

Crypto-asset regulatory lawyers in France

Frequently asked questions on MiCA Article 60 notification

It is the route by which a financial entity already authorised provides crypto-asset services without applying for CASP authorisation. It notifies its competent authority, at least 40 working days before starting, a file close to an application for authorisation. It may notify only the services its status covers.

No. It notifies the competent authority of its home Member State, the one that granted its authorisation. The split between the ACPR and the AMF applies only to institutions authorised in France.

Credit institutions, investment firms, electronic money institutions, UCITS management companies and alternative investment fund managers, market operators and central securities depositories. Each may notify only certain services, set by MiCA according to its status.

Credit institutions, investment firms and electronic money institutions notify the ACPR, with the AMF’s opinion. Asset management companies, market operators and central securities depositories notify the AMF. The two authorities published a common notification form on 30 January 2026.

The notification is filed at least 40 working days before the first service. The authority has 20 working days to check that the file is complete; a request for missing information suspends the period, for 20 working days at most. The institution may not start while the notification is incomplete; in practice, the review takes several months.

No. Transfer services on behalf of clients have no equivalent among investment services, and MiCA does not include them in the list open to investment firms. For this service, the firm applies for CASP authorisation or relies on an authorised entity.

Only for the e-money tokens it issues itself. For those tokens, it may notify custody and transfer services on behalf of clients. For any other crypto-asset or any other service, it needs CASP authorisation.

Yes. The notifying institution is not subject to the MiCA rules on authorisation, own funds and qualifying holdings, which its original status already covers. It applies all the other CASP rules: custody, conduct of business, market abuse, AML/CFT.

The right to provide the notified services ends with the authorisation that made it possible. An institution that loses or gives up its original status also loses its crypto-asset services, unless it obtains CASP authorisation in the meantime.


Get in touch
Your contact details
Name of the project or company
About your project or needs
Would you like to add a document? Deck, description of your needs, useful documents – PDF only, 10 MB maximum
Select files or drag them here

    Posts

    A businessman with a suitcase stands on a red-and-white border barrier beside a checklist board, illustrating a non-EU group’s entry into the French crypto market
    Articles
    11 November 2026
    Checklist for a non-EU group entering the French crypto market
    Collage surréaliste : un grand œil orange domine des tuyaux pneumatiques reliant des bureaux à un poste central, image de la collecte des données des PSCA par MIDAS
    Articles
    7 November 2026
    How a CASP prepares for ESMA’s MIDAS reporting
    ESMA opinion non-MiCA stablecoins
    Articles
    7 November 2026
    ESMA’s opinion on services linked to non-MiCA stablecoins