Crypto for Advisors: Europe's crypto rules, U.S. Preview

You’re reading Crypto for Advisors, CoinDesk’s weekly newsletter that unpacks digital assets for financial advisors. Subscribe here to get it every Thursday.

In today’s newsletter, Maria Golenkov explains how the EU’s MiCA framework is the blueprint for future U.S crypto regulation. Learn why your governance and controls need to align now to avoid scrambling later.

Then, in “Ask an Expert,” Felix Xu answers questions around why operational risk is the primary investment risk in digital assets, explaining the specific internal controls advisors must demand.

MiCA’s final deadline just hit in Europe. U.S. advisors should be taking notes.

Right now, America's crypto regulatory landscape is fragmented across multiple agencies. The Securities and Exchange Commission (SEC) regulates one thing, the (CFTC) another, FinCEN handles its piece, and then you have state-level requirements on top. No master playbook. No unified vision. The European Union, meanwhile, finished writing theirs in 2023, implemented it through 2024 and has been enforcing it since. The Markets in Crypto-Assets Regulation, or MiCA, is now the standard everyone in Europe has to meet. And as of July 1, 2026, the grace period is over. The transitional window that let firms keep operating under old national rules expired with no extensions. Serve EU clients now and you need full authorization, or you wind down.

This matters because Europe always moves first on financial regulation, and America follows. It's happening now, and most advisors aren't paying attention yet.

So what does MiCA require? If you offer crypto services like custody, advisory or exchange, you need a license and a regulator watching what you do. Client assets get segregated, independently audited and monitored in real time. Capital and transparency requirements apply. Companies explain risks to clients in plain language, not legalese.

I raise this because what happens without those controls is ugly. Galois Capital lost 50% of assets on FTX, which wasn't even a qualified custodian. Binance faced SEC and CFTC enforcement in 2023 for improper asset segregation and inadequate risk disclosures. It managed billions. It still didn't have proper governance. This wasn't incompetence; this was what happened when the rules were unclear, so companies gambled on legality.

For years, the US operated in enforcement mode. Coinbase launched staking and got sued. Binance took deposits and got sued. Nobody knew if they were inventing a service or breaking a law. The agencies weren't being malicious; they just didn't have a framework. That shifted in September 2025, when the SEC and CFTC issued a joint statement clarifying that registered exchanges could facilitate trading of certain spot crypto products. Then in March 2026 they went further, publishing joint guidance on which crypto assets are securities and which aren't, and how stablecoins fit in.

The pattern is hard to miss. The U.S. is running roughly a year behind the EU, and its guidance isn't binding rulemaking yet. The enforceable version is still coming, and it will look a lot like MiCA.

If you manage digital assets for clients, governance frameworks aren't something you build, hand off to compliance and forget about. They're your fiduciary baseline. Fidelity surveyed institutional investors and found 58% are already allocating to digital assets, yet custody security and regulatory clarity remain their biggest concerns. Your clients are entering this space. Your job is proving you have controls in place, not a checklist you downloaded.

Start by auditing what you're doing now. Do you have documented governance? Has anyone independently verified your controls? Are you managing cyber risk or just hoping nothing breaks? Then get specific about what you offer. Custody is different from advisory. If you're holding assets, you need segregated accounts and real-time monitoring. If you're giving advice, you need suitability documentation and conflict-of-interest disclosures.