The European Union is advancing efforts to integrate its financial markets, with cross-border crypto-asset service providers included in the broader regulatory discussion. On October 9, 2026, the Council of the European Union announced that it had agreed on key elements of the Market Integration and Supervision Package (MISP). The initiative aims to reduce regulatory fragmentation across member states and strengthen EU-level supervision of certain financial market participants with significant cross-border activities.
Under the Council's negotiating position, direct supervision by the European Securities and Markets Authority (ESMA) could apply to the most significant cross-border crypto-asset service providers. This would represent a potential change from an approach that relies primarily on national competent authorities. However, the Council's position is part of an ongoing legislative process and must be followed by further negotiations with the European Parliament. It should not be treated as a new requirement already in force.
For crypto exchanges, custody providers and other authorised businesses operating across several EU countries, the proposal is an important development to monitor. Changes to the supervisory structure could affect regulatory engagement, group-wide compliance management, risk reporting and governance arrangements.
Why Is the EU Considering Stronger Direct ESMA Supervision?
The EU financial services market spans multiple member states. Although the Markets in Crypto-Assets Regulation (MiCA) provides a common framework for crypto-asset issuance and services, supervision still involves national authorities. For firms with substantial cross-border operations, different supervisory practices can increase coordination costs and complicate regulatory reporting.
One of MISP's objectives is to improve market integration and reduce fragmentation. The Council's position focuses direct EU-level supervision on the most significant cross-border participants while retaining cooperation between European and national authorities. The approach seeks to improve consistency without losing the expertise and operational knowledge available at the national level.
The proposal does not mean that every crypto-asset service provider will immediately move under direct ESMA supervision. The Council has indicated that the initial scope should focus on the most significant cross-border providers, subject to relevant criteria. The final thresholds, implementation arrangements and legal text remain dependent on the legislative process.
Which Compliance Areas Should Cross-Border Platforms Review?
Even before any formal transfer of supervisory responsibilities, cross-border firms can review their group-wide compliance arrangements. They should map the activities, customer distribution, authorisation status and responsibilities of each legal entity, ensuring that senior management has an accurate view of operations across jurisdictions.
Companies should also assess whether risk reports and regulatory records remain consistent across the group. Transaction monitoring, customer due diligence, custody, complaints handling and incident reporting may involve multiple entities and technology systems. Differences in data definitions, risk classifications or escalation standards can make it difficult to provide a complete and consistent picture to regulators.
Clear governance and escalation procedures are equally important. Firms should define who consolidates cross-border risk information, who approves significant incident reports and which events require notification to relevant national authorities. Although the final supervisory structure remains subject to negotiations, better records and stronger internal coordination can improve compliance readiness under the current framework as well.
How Can KYT Support a Consistent Cross-Border Risk Framework?
Know Your Transaction (KYT) tools can provide blockchain-based risk information for cross-border crypto businesses. By analysing fund flows, address relationships, transaction paths and exposure to high-risk entities, compliance teams can identify related risks across business units and retain traceable evidence to support investigations and reporting.
For platforms operating in several EU countries, consistent risk classification and alert handling are particularly valuable. Firms can establish group-wide risk indicators, define escalation thresholds and ensure that investigation records are shared securely under appropriate access controls. Transactions involving multiple blockchains, custodial wallets or external service providers may also require sufficient context to explain how a risk assessment was reached.
KYT does not replace legally required customer due diligence, nor can it independently determine whether a customer or transaction is unlawful. Businesses must combine blockchain intelligence with applicable legal requirements, customer information, business context and human review.
The EU's proposal to strengthen direct supervision of significant cross-border crypto firms reflects a broader effort to improve consistency across its financial markets. For now, businesses should monitor the MISP negotiations and strengthen group governance, data quality and risk monitoring. The Council's negotiating position should not be mistaken for a supervisory change that has already taken effect.