First MiCA Penalty: Bitpanda Fined €70,000 in Austria
Austrian regulator FMA imposed the first legally binding MiCAR penalty for crypto rule breaches.
1First MiCA Penalty
Austria's Financial Market Authority (FMA) fined Bitpanda GmbH €70,000 for violations of the Markets in Crypto-Assets Regulation (MiCAR). The April 9, 2025 decision marks the first legally binding penalty published under MiCAR. The penalty addressed delayed submission of a crypto-asset white paper and marketing communication breaches. It did not involve custody of customer assets or withdrawal access issues. FMA clarified this case initiates MiCAR's enforcement phase.
2White Paper Deadline Missed
Bitpanda failed to submit the required white paper to FMA at least 20 working days before publication, violating MiCAR Article 8. Marketing communications were distributed before publishing the white paper. The materials lacked mandatory disclaimers about EU authority non-review and sole issuer responsibility. Contact information (phone/email) was also missing. FMA didn't disclose which specific crypto-asset was involved or exact publication dates of non-compliant materials.
3Regulator's Clarification
FMA issued a separate statement explaining this case represents MiCAR's transition from licensing to full enforcement cycle. It cautioned against overinterpreting the 'first penalty' label, noting publication doesn't confer special status. Previous fines against MiCAR-licensed exchanges (like Malta's €1.1M OKX penalty for 2023 AML breaches) weren't technically MiCAR cases as they predated licenses. Bitpanda's penalty directly applies MiCAR provisions to post-authorization conduct.
4Bitpanda's Regulatory Status
FMA authorized Bitpanda GmbH as a crypto-asset service provider on April 9, 2025, covering custody, exchange, order execution and transfers. The company also holds a separate MiCAR authorization from Germany's BaFin since January 2025, which it positioned as an EU passport. FMA's authorization portal still lists Bitpanda as approved. No license suspension or restrictions were mentioned in the penalty notice, which closed via expedited procedures under Austrian law.
5Company Response
In a June 23 corporate post, Bitpanda acknowledged strict enforcement protects market integrity and stated its full compliance. The penalty coincided with the July 1 end of EU transitional periods, extending MiCAR's unified regime to previously nationally-regulated providers. FMA confirmed no customer losses were alleged. The fine specifically targeted procedural breaches rather than fundamental operational failures, leaving Bitpanda's service offerings unaffected.
6MiCAR's Enforcement Significance
The Markets in Crypto-Assets Regulation (MiCAR), partially effective since July 2024 and fully implemented in 2025, establishes a unified EU framework for crypto markets. It introduces licensing, transparency and consumer protection rules for crypto-asset service providers. Bitpanda's penalty sets an important precedent demonstrating MiCAR's enforceability. The case emphasizes operational compliance with technical requirements beyond initial licensing.
7Industry Implications
This first published MiCAR penalty serves as a warning to crypto firms operating in the EU. It highlights critical compliance areas like white paper timelines and marketing communication rules. The decision signals regulators' growing enforcement capacity. Crypto businesses will need tighter operational controls, particularly for documentation and disclosures. Increased administrative penalties may accelerate industry consolidation as compliance costs rise for smaller players.
8Comparative Context
While modest at €70,000, Bitpanda's penalty carries symbolic weight as MiCAR's enforcement debut. Contrast with Malta's €1.1M OKX fine (under AML rules) shows different regulatory priorities. MiCAR focuses on investor protection through disclosure rules rather than financial crimes. The case establishes that procedural lapses, even without customer harm, will draw penalties. Future enforcement may target more substantive violations as regulators gain MiCAR experience.