Spain's crypto grace period ended on 1 July 2026. Since that date, a Spain MiCA crypto license has been the main way for a firm to serve customers in the country.
Before the cutoff, many providers kept working under an older registration with the Bank of Spain. That safety net is gone.
How crypto exchanges operate in Spain depends on their regulatory compliance, licensing status, and requirements for platforms servicing local users.
MiCA stands for Markets in Crypto-Assets, formally Regulation (EU) 2023/1114.
It entered into force in June 2023 and applied in full from 30 December 2024, as the CNMV's official MiCA page explains.
A Spain MiCA crypto license is the authorization that lets a crypto-asset service provider (CASP) work under those rules.
A CASP is any exchange, custodian, or broker that handles crypto for clients. Without a Spain MiCA crypto license, such a firm cannot lawfully serve Spanish users.
The CNMV, Spain's securities regulator, authorizes and supervises these providers.
The Bank of Spain has a narrower job. It oversees issuers of asset-referenced tokens and e-money tokens, the two stablecoin-style categories in the regulation.
MiCA let member states give existing providers a grace period of up to 18 months. Under Article 143(3), firms already working legally before 30 December 2024 could continue until 1 July 2026, or until a MiCA application was granted or refused. The ESMA MiCA overview sets out that rule.
Spain used the full window. The CNMV described two groups of eligible firms. One group was entities on the Bank of Spain register for virtual currency exchange and wallet custody as of 30 December 2024.
The other was firms offering only services such as advice or portfolio management, provided they were genuinely active.
Three shifts landed together:
The Bank of Spain closed its old register. The data stays online as a historical record only, according to the Bank of Spain closure note.
Authorization became the entry ticket. Only providers authorized by the CNMV or by another EU regulator can serve clients in Spain. For most firms, that means holding a Spain MiCA crypto license.
Grace-period claims ended. A pending application no longer lets a firm keep working on the old basis.
The closure note also shows why the old register was never a quality stamp. Entry depended on anti-money-laundering procedures and honest, professional management. Financial supervision, governance, technology security, and market conduct sat outside it. The bank states that registration never meant approval of a provider's activity.
A Spain MiCA crypto license holder faces a heavier rulebook. The CNMV's summary lists duties on governance, safeguarding client assets, complaints handling, conflicts of interest, and an orderly wind-down plan.
Three routes lead to a Spain MiCA crypto license or its equivalent, depending on the type of firm.
| Route | Who it suits | Legal basis |
| Full authorization | New crypto firms and former registered providers | MiCA Article 63 |
| Notification | Banks, investment firms, e-money institutions, and similar | MiCA Article 60 |
| Passport | Firms already authorized in another EU country | Notify the CNMV of intent to serve Spain. |
The Article 60 group also covers central securities depositories, market operators, fund managers, and credit institutions.
Analyst view: the table shows that this is not one single door. A bank can notify. A start-up must apply. A foreign-based exchange can pass in, but only through its authorized EU entity.
For a side-by-side look at how another member state handled the same rules, see Spain and Poland’s licensing rules in the earlier explainer.
A short routine helps before trusting any provider's claim:
Search the CNMV crypto provider register for the company.
Check the ESMA firm-check tool and the interim MiCA register, which lists authorized providers and non-compliant entities. ESMA updates the register weekly, and its latest version was dated 5 November 2026.
Confirm the exact legal entity. MiCA protections apply only to the authorized EU company, not to other firms in the same group.
Read the CNMV's list of warned, unauthorized entities.
A Spain MiCA crypto license shows that a firm passed regulator review. It does not predict solvency.
The CNMV’s warnings are blunt. Prices can swing hard, and investors can lose everything they put in. Scams and technical failures add to the danger. There is also no compensation scheme, so clients have no safety net if a provider collapses.
Stablecoin rules run on their own timeline. The MiCA stablecoin deadline guide covers EU USDT holders.
This article does not quote a headcount of authorized Spanish firms. The number moves with each register update, so the official registers remain the place to check.
The 1 July 2026 cutoff turned the Spain MiCA crypto license from a future requirement into a working rule. Old Bank of Spain registrations no longer allow trading. Only authorized or passported providers may serve clients.
What remains uncertain is how many firms now hold a Spain MiCA crypto license and how strictly supervision will work. Readers should check the CNMV and ESMA registers, confirm the legal entity, and read the official risk warnings before using any platform.
Disclaimer:
This article is for information only and is not financial, legal, or investment advice. Crypto assets are volatile and can lose all value. Readers should do their own research and consult a licensed professional before making decisions.