The European Union’s full rollout of the Markets in Crypto-Assets framework on July 1 has forced a large reshuffle in the region’s crypto market. More than 1,700 unlicensed platforms were required to stop serving EU customers and steer them toward licensed providers, a shift that regulators say may have affected as many as 10 million users.
That migration has also opened a window for fraud. Officials across Europe say scammers are exploiting the confusion by copying legitimate migration messages, posing as regulators or exchanges, and pressuring users to move assets to bogus destinations.
Scammers exploit a regulatory transition
According to regulators, the post-deadline transition has become fertile ground for social engineering. Criminals are said to be treating the migration period as an opportunity to target customers who have been told their existing platform can no longer legally serve them in the EU.
The reported tactics center on impersonation. Fraudsters have been using the names, identities and logos of real institutions to make false claims that a user’s holdings are at risk or that assets must be transferred immediately. By presenting fake migration notices as urgent compliance steps, they try to push victims onto fraudulent platforms.
Warnings from the Netherlands, Austria and the U.K.
Authorities in the Netherlands and Austria have warned investors to check service providers against official registries before making any move. They also cautioned against responding to unexpected contact that requests transfers during the migration process.
In the U.K., the Financial Conduct Authority said it had seen thousands of impersonation-related incidents and fraud cases. Some of the approaches cited involved false claims that funds had already been recovered from illegally opened wallets, with scammers in some cases using screen-sharing tools to advance the deception.
Why entity-level verification matters under MiCA
Regulators have also stressed that MiCA protections are narrower than some customers may assume. Investor safeguards apply only when a service is being provided by a regulated EU entity, not simply because a broader parent brand holds a license somewhere else.
That means users moving assets during the compliance overhaul are being urged to verify the exact legal entity that has MiCA authorization. A familiar company name or a claim of affiliation is not, by itself, enough to confirm that a transfer is covered by the EU regime.
The next confirmed step for users
For now, the clearest official guidance is procedural rather than punitive: verify providers through official registers, confirm the precise licensed entity involved, and treat unsolicited migration requests with caution.
The core risk identified by authorities is confusion during a large-scale market clean-up. With millions of users potentially being redirected after the July 1 deadline, regulators are signaling that the migration itself remains an active opening for impersonation scams.
Source: www.coindesk.com