Menu
Avocat des prestataires de services sur crypto-actifs (PSCA) : agrément MiCA et conformité

CASP lawyers in France: MiCA authorisation

William O'Rorke
Updated on October 23, 2026
William O’Rorke
Partner

Since 1 July 2026, no provider may offer crypto-asset services in France without an authorisation granted under the MiCA Regulation or a European passport. ORWL Avocats advises crypto-asset service providers (CASPs, known in France as prestataires de services sur crypto-actifs or PSCA) at every stage of their regulatory life: qualification of the activity, authorisation by the AMF, ongoing compliance, anti-money laundering, digital operational resilience, changes of ownership and, where needed, an orderly exit.

Who needs a CASP authorisation?

Regulation (EU) 2023/1114 on markets in crypto-assets (MiCA) governs crypto-asset services provided to clients in the European Union. Its provisions on service providers have applied since 30 December 2024. Any legal person or other undertaking providing one of these services on a professional basis must be authorised by the competent authority of its home Member State. In France, the AMF (Autorité des marchés financiers, the French financial markets regulator) examines applications and grants authorisations; the ACPR (Autorité de contrôle prudentiel et de résolution, the French Prudential Supervision and Resolution Authority) gives an opinion on the fitness and propriety of managers and shareholders, on the anti-money laundering framework and on payment services.

MiCA lists ten crypto-asset services: custody and administration of crypto-assets on behalf of clients; operation of a trading platform; exchange of crypto-assets for funds; exchange of crypto-assets for other crypto-assets; execution of orders on behalf of clients; placing of crypto-assets; reception and transmission of orders; advice on crypto-assets; portfolio management on crypto-assets; and transfer of crypto-assets on behalf of clients.

Three situations fall outside the authorisation requirement. Tokens that qualify as financial instruments come under MiFID II, not MiCA. Most non-fungible tokens (NFTs) stay outside the Regulation as long as they remain unique and not fungible. Dealing on own account (corporate treasury, intra-group transactions) is not a service provided to third parties. ORWL Avocats also advises issuers and platforms on classifying tokens under MiCA, and NFT projects on the regime that applies to collections and marketplaces.

The French transitional period ended on 1 July 2026: former digital asset service providers (PSAN, the French regime that preceded MiCA) that did not obtain a CASP authorisation had to cease their activity in France. A provider authorised in another Member State may serve French clients under a MiCA passport; ORWL Avocats also advises providers established outside the Union that wish to serve the French market.

The life cycle of a CASP: six stages, six areas of work

A provider does not deal with regulation once and for all. Authorisation opens a lasting relationship with the regulator, fed by every transaction on the capital, every new service and every incident. We act at each of the six stages of that relationship.

1

Obtaining CASP authorisation from the AMF

The application describes the provider’s activity, organisation and resources: programme of operations, business plan, own funds, policies and procedures, managers and shareholders. The AMF has twenty-five working days to check that the application is complete, then forty working days to assess it; in practice, exchanges with the regulator set the pace of the review. We prepare the application service by service (custody, exchange, reception and transmission of orders, advice) and answer the AMF’s questions.

Obtaining CASP authorisation from the AMF

2

Staying compliant once authorised

Authorisation brings ongoing obligations: published policies, terms and conditions, best execution, prevention of conflicts of interest, record-keeping of orders and transactions, internal control, safeguarding of clients’ funds and crypto-assets, insurance and own funds, contracts with partners. We set these arrangements up and keep them current.

MiCA compliance for authorised CASPs

3

Fighting money laundering and terrorist financing

A CASP is an obliged entity under AML/CFT rules: risk classification, customer due diligence, the travel rule on transfers, applicable since 30 December 2024, reports to Tracfin (the French financial intelligence unit), staff training. The European Anti-Money Laundering Regulation (AMLR) will apply from 10 July 2027.

AML/CFT compliance for CASPs in France

4

Ensuring digital operational resilience (DORA)

DORA has applied to CASPs since 17 January 2025: ICT risk governance, register of ICT third-party service providers, incident management and reporting, resilience testing.

DORA for CASPs in France

5

Changing shareholders and managers

Any acquisition or disposal of a qualifying holding (10% of the capital or voting rights, then crossing the 20%, 30% and 50% thresholds) must be notified to the AMF before the transaction. Replacing a manager follows a similar procedure. We prepare these notifications and secure the timetable of the transaction.

Shareholders and management of a CASP in France

6

Winding down in an orderly way

A provider that gives up a service or closes organises its exit: an orderly wind-down plan, which every CASP providing custody, the operation of a trading platform, exchange, execution of orders or placing must have in place from authorisation; return of funds and crypto-assets to clients; information to, and follow-up with, the AMF. The firm also advises foreign platforms that must leave the French market and get off the AMF blacklist.

Winding down a crypto-asset service provider in France

Which services, what minimum capital?

The authorisation application is built service by service: each of MiCA’s ten services has its own definition, its own obligations and its own capital class. The table lists them from the least demanding class to the most demanding. The minimum capital is that of the most demanding service applied for; it is not added up from one service to the next.

MiCA serviceWhat it coversMinimum capitalService-specific obligationsExpected deliverables
Reception and transmission of ordersReceiving a client’s buy or sell order and transmitting it to a third party for execution.€50,000Prompt and proper transmission; no remuneration from a third party for routing orders.Order transmission procedures, conflicts of interest policy
Execution of ordersConcluding purchases or sales of crypto-assets on behalf of clients, including subscriptions.€50,000Best possible result for the client; monitoring of the policy’s effectiveness.Order execution policy, execution monitoring reports
PlacingMarketing crypto-assets to purchasers on behalf of the issuer or a seller.€50,000Information to the offeror before the agreement; management of conflicts of interest specific to placing.Placing procedure, offeror information template
Transfer servicesMoving crypto-assets from one address or account to another on behalf of a client.€50,000Written agreement on the terms of the transfer; travel rule.Transfer agreement with the client, travel rule procedure
AdviceGiving a client a personalised recommendation on a transaction or on the use of a crypto-asset service.€50,000Suitability assessment; information on risks.Suitability questionnaire, suitability report, evidence of advisers’ knowledge and competence
Portfolio managementManaging, on a discretionary and client-by-client basis, a portfolio that includes crypto-assets.€50,000Suitability assessment; periodic statement.Portfolio management agreement, suitability questionnaire, periodic statements
Custody and administrationHolding or controlling crypto-assets, or the keys that give access to them, on behalf of clients.€125,000Written agreement, register of positions, segregation, liability for loss.Custody agreement, custody policy, register of positions
Exchange for fundsBuying crypto-assets from clients, or selling them to clients, against money, on the provider’s own capital.€125,000Non-discriminatory commercial policy; published firm price or pricing method.Commercial policy, pricing methodology
Exchange for other crypto-assetsExchanging crypto-assets with clients for other crypto-assets, on the provider’s own capital.€125,000Same rules as exchange for funds.Commercial policy, pricing methodology
Operation of a trading platformBringing together buying and selling interests in a multilateral system.€150,000Operating rules, admission to trading, prohibition on dealing on own account, price transparency.Operating rules, rules on admission to trading, market abuse detection arrangements

The minimum capital is a floor. The provider must at all times hold prudential safeguards at least equal to the higher of two amounts: that floor, or one quarter of its fixed overheads of the preceding year, reviewed annually. A company that has been operating for less than a year uses the fixed overheads projected for its first twelve months, as stated in its authorisation application. These safeguards take the form of Common Equity Tier 1 own funds, an insurance policy covering the territories of the Union where the services are provided, or a combination of the two. The floor says nothing about the substance expected: the AMF also assesses the provider’s human and technical resources against the services applied for.

How we work

Every engagement starts with a qualification audit: which services are provided, to whom, from where, and which regime applies. From it we draw a roadmap with a timetable and the decisions to take. We then draft the application or the procedures, handle the exchanges with the regulator and, once authorisation is granted, monitor the ongoing obligations with your teams.

Why work with ORWL Avocats?

Since 2018, ORWL Avocats has led several dozen authorisation and registration procedures before the AMF and the ACPR, first under the French PSAN regime created by the PACTE Act (loi PACTE), then under MiCA: exchanges and trading platforms, custodians, brokers and distributors, fintechs adding crypto-asset services, financial groups notifying their services. The firm then advises these providers on their compliance, their transactions on the capital and their dealings with the regulator. It is ranked by Chambers FinTech and Leaders League.

A lawyer specialising in banking and financial law as applied to crypto-asset services brings what a consultant alone cannot: a legal classification of each activity, for which the lawyer is professionally liable; legal professional privilege, which covers communications and analyses; and the ability to defend a position before the AMF and the ACPR. The team also understands how the technologies it advises on work: key custody, exchange protocols, smart contracts.

A partner leads every matter. The firm works with banks, accountants, cybersecurity advisers and insurers used to crypto matters, and takes part in industry work within ADAN, the French digital asset industry association, on whose board one of its partners sits.

ORWL Avocats’ Regulatory expertise

ORWL Avocats advises crypto-asset service providers from authorisation to cessation of activity, with recognised expertise in proceedings before the AMF and the ACPR. The firm also advises token issuers, payment institutions and Web3 projects, as part of its practice of banking and financial law applied to crypto-assets.

All our Regulatory expertise

Frequently asked questions on the CASP regime

A provider authorised in another Member State can, after notifying its home authority under the passport procedure. A provider established outside the Union cannot, unless the client enters into the relationship at its own exclusive initiative; any solicitation of the French market, such as advertising, a French-language website aimed at France or a distribution network, defeats that exception. ORWL Avocats advises providers in both situations, whether they enter the French market under a MiCA passport or from a third country.

A service provided to third parties and listed in the Regulation: custody, trading platform, exchange for funds or for other crypto-assets, execution of orders, placing, reception and transmission of orders, advice, portfolio management and transfer. The service must relate to a crypto-asset within the meaning of MiCA and be provided on a professional basis.

Three cases allow it: the service is not on MiCA’s list (general financial information, for instance, is not advice); the asset is not a crypto-asset within the meaning of the Regulation (a financial instrument, most NFTs); or the transaction is carried out on own account rather than for third parties. Each case must be shown from the facts; a written classification protects the provider in the event of an inspection.

In France, providing crypto-asset services in breach of the prohibitions in Article L. 54-10-4 of the French Monetary and Financial Code (CMF) is a criminal offence punishable by two years’ imprisonment and a €30,000 fine (CMF, Article L. 572-23). The AMF may also impose administrative sanctions: an order to cease, publication of the decision, fines and, for an authorised provider, withdrawal of authorisation. The Regulation sets the maximum fines according to the nature of the breach and whether the offender is a natural or a legal person. The AMF adds the websites concerned to its blacklist.

MiCA allows twenty-five working days to check that the application is complete, then forty working days to assess it, a period suspended while additional information is requested. The actual duration depends on the quality of the application filed and on how quickly the provider answers the regulator’s questions; a custody or execution application takes six to nine months on average between filing and decision.

A real, operational presence: effective managers established in the Union, at least one of them in France; a compliance and AML/CFT officer working from France; an information security officer, outsourced where appropriate; and operational teams in proportion to the activity. For the most demanding services, the AMF requires at least five full-time equivalents dedicated to the regulated activity. A registered address without an effective presence is not enough.

Our resources on the CASP regime

Launching, operating or selling a crypto-asset service provider? Contact us

Get in touch
Your contact details
Name of the project or company
About your project or needs
Would you like to add a document? Deck, description of your needs, useful documents – PDF only, 10 MB maximum
Select files or drag them here

    Posts

    Marchés de prédiction et Polymarket : le cadre légal
    Articles
    7 October 2026
    Prediction markets: what are the regulatory consequences for operators?
    Articles
    23 June 2026
    ORWL advises Paymium on obtaining its CASP authorisation from the AMF
    Services autour des cartes à collectionner (TCG)  quels enjeux juridiques pour les projets
    Articles
    15 June 2026
    Trading card game (TCG) services: what are the legal risks for your project?