Direct answer
A business may need MiCA CASP authorization when it professionally provides a regulated crypto-asset service in the EU. The answer depends on the actual service, customer location, asset and transaction flow, entity role and any applicable transition or reverse-solicitation facts; a website disclaimer alone does not decide the perimeter.
Activities that require early analysis
Operating a trading platform, exchanging crypto-assets for funds or other crypto-assets, executing or receiving orders, providing custody, placing crypto-assets, transferring assets and giving certain advice or portfolio management are among the activities that require careful mapping under MiCA.
Product language is not decisive. A product called a wallet may include custody; a software platform may also execute or route orders. The legal analysis follows functions and control, not the marketing label.
EU customer access is more than incorporation
An offshore company can still create EU regulatory exposure through active marketing, onboarding, contractual arrangements or service delivery. Conversely, not every globally accessible website automatically creates the same conclusion.
Teams should document where customers are located, who solicits them, which entity contracts, where key decisions occur and whether any transition provisions are relevant.
What to map before asking for advice
Prepare a one-page service map showing each customer action, asset movement, counterparty and entity. Add the countries targeted, custody model, fiat touchpoints, token roles and any outsourcing.
This gives counsel a factual basis to distinguish authorization questions from company formation, AML, payments, securities, consumer and data-protection issues that may require separate work.
Frequently asked questions
Does every crypto website accessible in Europe need a licence?
Not automatically. Targeting, service activity and the full factual model matter.
Does a non-custodial wallet fall outside MiCA?
Not by label alone. Control, functions and additional services require analysis.
Can reverse solicitation be used as a marketing strategy?
It should not be treated as a broad marketing exemption; facts and communications matter.
Is an EU company enough to operate?
No. Incorporation and regulatory authorization are different matters.
Who makes the final perimeter assessment?
A qualified professional should assess the facts and current law.