MiCA Transition Fuels Rise in Crypto Scams as Fraudsters Pose as EU Regulators

User migration creates a new attack surface

The shift required under MiCA has produced a large pool of users searching for compliant platforms, and regulators say that transition has become a target for bad actors. Retail investors leaving unlicensed exchanges may be especially exposed as they look for legitimate venues to hold or transfer their assets.

According to the source report, fraudsters have been copying the look and language of genuine migration notices to persuade users to move funds to fake platforms. The scams are tied not to MiCA itself, but to the disruption caused when noncompliant operators lose access to EU customers.

Scammers borrow the names of trusted authorities

Some of the schemes rely on impersonating regulators rather than exchanges. France’s Autorité des Marchés Financiers has been used as a cover in cases where scammers sought upfront payments while claiming they could recover stolen funds.

The European Securities and Markets Authority has also confirmed that its name and logo have been misused, including on forged documents. These tactics appear designed to lend false legitimacy to transfer requests or recovery offers that would otherwise raise immediate suspicion.

Warnings extend beyond the EU

The broader pattern is not limited to the bloc. The UK’s Financial Conduct Authority has reported thousands of impersonation cases and associated losses, alongside a growing tactic in which scammers use screen-sharing software to set up fake crypto accounts in victims’ names.

That warning underscores how social engineering is evolving around compliance changes and platform searches. In practice, criminals may combine a believable regulatory story with direct technical access to a victim’s device or accounts.

What regulators say to check before moving assets

Regulators stress that they do not contact users through private messages or instruct them to transfer funds. They have urged people to treat any unsolicited request to move assets with caution and to verify a platform through official registers before taking action.

Authorities also note that MiCA protections apply only when a service is provided through an EU-authorized legal entity. That means users should confirm the specific licensed entity behind a service, rather than relying only on a familiar parent brand or platform name.

The next confirmed step for affected customers is straightforward but important: verify the legal entity and authorization status of any platform before transferring assets, especially during the ongoing migration away from unlicensed providers.