What Happens to Your Crypto If Your Exchange Loses Its Licence — or Never Had One

The Notice Nobody Reads Carefully

It usually arrives as an in-app banner or an email with a bland subject line: changes to your account, an update on our services in your country. Many people skim it. Some ignore it until a feature stops working.

Since 1 July 2026, a lot of Europeans have received one. When MiCA’s transitional periods ended, every crypto-asset service provider without an EU authorisation had to start winding down its EU business — including Binance, the world’s largest exchange, which missed the deadline.

What happens to your crypto next depends on which of three situations you’re in. The differences are large, and the first 48 hours matter more than most people think.


Three Ways an Exchange Stops Serving You

  1. It never got authorised. The July 2026 cliff. The provider must wind down its EU business under ESMA’s expectations.
  2. Its authorisation is withdrawn. A licensed provider loses its licence — fully, or for a particular service — and must transfer clients out in an orderly way.
  3. It fails. Insolvency, fraud or a hack it can’t absorb. This is where the legal structure behind your account decides whether your assets are reachable.

Situation 1: Your Platform Never Got Authorised

On 23 June 2026, ESMA set out what it expects from unauthorised providers once the deadline passed. They must:

  • Stop onboarding new EU clients and stop marketing to them immediately
  • Limit services to what’s needed to exit: selling or transferring crypto-assets, reallocating assets and closing positions
  • Keep custody only for the period strictly necessary to complete an orderly exit
  • Communicate clearly, promptly and repeatedly about the wind-down timeline — including a deadline by which any residual positions will be closed automatically
  • Keep anti-money-laundering controls running throughout

ESMA was equally direct with clients: customers of unauthorised providers “do not benefit from MiCA safeguards, including protections for client assets.” Its advice is to act promptly — move to an authorised provider or a self-hosted wallet.

What that means in practice

  • You can still sell and withdraw, but new deposits, new products and some features may stop.
  • Staking, “Earn” and derivatives get wound down. Unbonding periods still apply, so start early.
  • Anything left after the deadline can be closed automatically — at whatever the market price is on that day. You don’t choose the moment.

The Binance case

Binance withdrew its Greek application on 24 June 2026 and missed the deadline. It said it was halting onboarding of new EU users and limiting certain services for existing accounts depending on country and the Binance entity serving them, while keeping withdrawals available, and pointed users to self-custody or other providers. It says it will seek authorisation in another member state.

A Crowdfund Insider report in August, citing tests by the analytics firm Sandmark, said new EU accounts could still be opened and funded afterwards. Binance said availability varies by jurisdiction, product and individual circumstances. The lesson for users is simple: a platform still letting you do everything is not evidence that it is authorised — and without authorisation, you don’t have MiCA’s protections.


Situation 2: The Licence Is Withdrawn

National regulators must withdraw a provider’s MiCA authorisation in specific cases, including when it:

  • Hasn’t used its authorisation within 12 months, or has provided no services for nine consecutive months
  • Obtained authorisation through misleading statements
  • No longer meets the conditions and fails to fix that in time
  • Lacks effective anti-money-laundering systems
  • Seriously breaches MiCA, including the rules that protect clients

A withdrawal can be limited to a single service — custody, for example — rather than the whole business. Either way, ESMA records it in the register, and the provider must have procedures to transfer clients’ crypto-assets and funds to another provider in a timely and orderly way.

Providers that offer custody, run a trading platform or exchange crypto must also keep a wind-down plan — one that, in MiCA’s words, demonstrates they can carry out an orderly wind-down “without causing undue economic harm to their clients.”


Situation 3: The Exchange Fails

This is the scenario people fear most, and it’s where MiCA’s structure matters most.

What the law requires of an authorised custodian

  • Your crypto isn’t the provider’s property. Crypto-assets held in custody must be legally segregated from the provider’s estate, so that its creditors “have no recourse” to them — including in insolvency.
  • It can’t use your crypto for itself. Providers must safeguard clients’ ownership rights and may not use client crypto for their own account. Client money has to be placed with a bank or central bank.
  • It’s liable for its failures. A custodian is liable for losses of your crypto or of your means of access to it that are attributable to the provider — capped at the market value of the asset at the time of the loss.
  • It must have return procedures. Custodians need procedures to return crypto-assets to their clients.

Why segregation matters: FTX

When FTX collapsed in November 2022, customers of the global platform became creditors in a US bankruptcy that took years to work through.

Customers of FTX EU, its Cyprus-licensed subsidiary, were in a different position. Cyprus’s regulator ordered the return of segregated client funds, and from spring 2023 FTX EU paid out balances through a dedicated withdrawal website after identity checks. Note the detail, though: positions had been closed and settled in euros when the platform shut down, so customers got cash back at that day’s prices, not their coins.

Segregation didn’t make anyone whole on market moves. It made the money reachable.

Where segregation ends: lending and “Earn”

Segregation protects assets the provider holds for you. It may not protect assets you have handed to it.

In January 2023, a US bankruptcy court ruled that about $4.2 billion in Celsius “Earn” accounts belonged to Celsius’s estate, because its terms transferred ownership of the deposited crypto to the company. Earn customers became unsecured creditors.

MiCA doesn’t regulate crypto lending at all. If your exchange’s yield product involves lending your crypto, read the terms: if ownership passes to the platform, you may be a creditor in a failure rather than an owner.


What No Rule Protects

  • No deposit guarantee. EU deposit guarantee schemes cover bank deposits up to €100,000. They don’t cover crypto-assets, and investor compensation schemes aren’t designed for them either.
  • No protection from price moves during a wind-down, or from automatic closure at a bad moment.
  • No MiCA protection at unauthorised or non-EU entities. Your rights depend on wherever that entity is based — often somewhere with weak or untested insolvency law for crypto.
  • No protection from follow-up fraud. Exchange exits trigger waves of fake “migration”, “refund” and “compensation” messages.

Your Action Plan When the Notice Arrives

1. Verify the notice inside the app

Log in by typing the address or opening the app you already have. If the wind-down is real, the notice will be in your account. Never act on a link in an email, SMS or DM. Related: MiCA Created a Scam Wave: How Fake “Licensed” Exchanges Are Targeting EU Users

2. Save your records now

Before features start disappearing, download your full transaction history (CSV), your account statements and deposit and withdrawal records, and screenshot your balances with dates. You’ll need them for tax filings and to prove where your funds came from when a new provider onboards you — ESMA expects the receiving provider to run full due-diligence checks.

These records also matter for DAC8 reporting and, for Dutch residents, your Box 3 position on 1 January. Related: The First DAC8 Reporting Year Closes in December — What EU Crypto Holders Need to Do Now A crypto tax tool can import exchange CSVs and keep the history after the account is gone. Koinly or CoinTracking

3. Choose your destination before you move anything

Decide between an authorised provider and self-custody yourself — never on the recommendation of whoever contacted you about the exit.

4. Unwind locked positions first

Unstake, close “Earn” products and settle any derivatives well before the automatic closing deadline. Unbonding can take days; don’t let the platform pick your exit price.

5. Test, then move

Send a small test amount first. Check the network, and any memo or tag the destination requires. When withdrawing to your own wallet, expect the platform to ask you to prove you control the address — under the EU’s transfer rules, that’s normal for larger amounts sent to self-hosted wallets. Verify the receiving address on your hardware wallet’s screen. Related: Address Poisoning: The Attack That Works Because You Copy and Paste

6. Keep the evidence, then close the account

Save withdrawal confirmations and transaction hashes. Check for leftover small balances. Only close the account once you have everything you need.

7. Expect the phishing

For months afterwards, expect messages about “unclaimed balances”, “refunds” or “compensation”. No legitimate process asks for your seed phrase or password, or asks you to send funds to unlock a payout. Related: Your Data Is the Attack Surface: How Breaches, KYC and Tax Records Make You a Target


A Simple Timeline

WhenWhat to do
Day 0–2Verify the notice in-app. Download every record. Choose your destination.
Week 1Unstake, close Earn and derivatives. Make test transfers, then move your assets.
Before the auto-close dateConfirm a zero balance. Save all confirmations.
After the exitClose the account. Treat every follow-up message as hostile until verified in-app.

Frequently Asked Questions

Is my crypto lost if my exchange loses its licence?
No, not automatically. A wind-down obliges the provider to let you sell or transfer your assets. The real risks are acting too late, being auto-closed at a bad price, and falling for fake “migration” messages.

Will I be compensated if an authorised exchange is hacked?
A MiCA custodian is liable for losses attributable to it, capped at the market value when the loss happened. Whether you’re actually paid depends on the firm’s resources; some exchanges also run their own protection funds, but no law guarantees them.

Can the platform close my positions without asking me?
Yes — after the deadline it has communicated. ESMA expects unauthorised providers to announce a date by which residual positions will be closed automatically.

My exchange is based outside the EU. Does any of this apply?
MiCA’s protections apply only when you’re served by an authorised EU provider. With a non-EU entity, your rights depend on that entity’s home law and your contract.

Should I just keep everything on a licensed exchange now?
A licence lowers platform risk; self-custody removes it, in exchange for personal responsibility for your keys. Many people use both: an authorised exchange for buying and selling, a hardware wallet for holding. Related: Ledger vs. Trezor 2026: Which Hardware Wallet Should You Buy?


Transparency: TrueToCrypto may earn affiliate commissions from links in articles. Recommendations are based on merit, not commission rates. This article is educational and is not legal, financial or tax advice.

Contact: info@truetocrypto.com

Sources: ESMA public statement of 23 June 2026; MiCA Articles 64, 70, 74 and 75; Reuters via The Block (24 June 2026), Cointelegraph and Crowdfund Insider (23 August 2026) on Binance; FTX EU’s March 2023 announcement on returning segregated funds; the January 2023 Celsius ruling on Earn accounts. Verified October 2026.

Sophia Caldwell
Sophia Caldwell