Poland Mica Passporting in 2026: What Non‑eu Casps Must Know (managing the July 1 Risk, Routes to Market & Contingency Steps)

Last updated: 27 July 2026

MiCA passporting Poland has become one of the most pressing compliance questions facing non‑EU crypto-asset service providers (CASPs) since the Regulation (EU) 2023/1114 transition deadline of 1 July 2026 passed. Although MiCA’s Article 65 mechanism allows a CASP authorised in one EU Member State to provide services cross‑border into every other Member State by notification, Poland’s failure to designate a competent authority for crypto-asset supervision, confirmed in the KNF’s official statement, has created acute practical uncertainty for firms seeking to enter or remain in the Polish market.

This guide provides a scenario‑based playbook for in‑house counsel, founders, compliance leads and international advisers evaluating whether to passport into Poland, apply for a local Polish CASP licence, partner with an EU‑licensed entity, or trigger contingency wind‑down procedures.

Executive Summary: TL;DR Decision Guide

Before examining the detailed mechanics, here are the three facts every non‑EU firm needs to absorb immediately:

• MiCA passporting is EU law, and it applies to Poland. Under Article 65 of Regulation (EU) 2023/1114, a CASP authorised in any EU Member State may provide its authorised services cross‑border into all other Member States, including Poland, by notifying its home national competent authority (NCA). This is a directly applicable EU regulation; no Polish implementing act is required for the passport right itself to exist.
• Poland has not designated a MiCA competent authority for CASP supervision. The Polish Financial Supervision Authority (KNF) has publicly stated that, absent national implementing legislation, it lacks the mandate and operational capacity to supervise incoming CASPs or process passporting notifications as a host NCA. The only exception relates to e‑money token (EMT) supervision, which falls under existing banking mandates.
• Practical market access into Poland carries elevated MiCA implementation risk. Even though the passport right exists at EU level, the absence of a Polish host NCA creates operational friction: local banking partners may refuse onboarding without host NCA confirmation, consumer‑protection obligations may lack a local enforcement counterpart, and regulatory clarity on marketing rules remains incomplete.

Recommended immediate action: Non‑EU firms targeting Poland should secure CASP authorisation in an EU Member State with an operational NCA, complete the Article 65 notification for cross‑border services, and simultaneously prepare a contingency plan for servicing Polish clients should the KNF issue formal restrictions. Seeking qualified legal advice from FinTech specialists with cross‑border MiCA experience is essential before committing resources.

How MiCA Passporting Works for Poland: Article 65 Legal Mechanics & Notification Steps

CASP passporting under MiCA is designed to function like the existing EU financial‑services passport: a single authorisation from one Member State provides a gateway to all 27 markets. Article 65 of Regulation (EU) 2023/1114 establishes that a CASP authorised in its home Member State may provide crypto‑asset services cross‑border, or through a branch, in any other Member State, provided it follows a prescribed notification procedure. This is a core principle of non‑EU market access under MiCA for firms that first establish an EU presence.

What Article 65 Requires (Step by Step)

The passporting process under Article 65 MiCA involves a structured notification chain between the CASP, the home NCA, and the host NCA. The following six steps capture the practical workflow:

1. Obtain home‑state CASP authorisation. The firm must first be authorised under Title V of MiCA by the NCA of the Member State in which it is established (or, for non‑EU firms, the Member State where it has incorporated an EU subsidiary).
2. Prepare the passport notification package. The CASP submits a notification to its home NCA specifying: the host Member State(s) it intends to service, the crypto‑asset services it will provide cross‑border, and whether services will be offered directly or through a branch.
3. Home NCA review and transmission. The home NCA assesses the notification and, unless it has concerns about the CASP’s administrative structure or financial condition, transmits the notification to the host NCA and to ESMA.
4. Host NCA receives notification. The host NCA, in Poland’s case, the KNF, receives the file. Under MiCA, the host NCA does not grant or refuse the passport; it is informed for supervisory cooperation purposes.
5. ESMA register update. ESMA updates its public register to reflect that the CASP is authorised to operate in the host Member State.
6. CASP commences cross‑border services. Once the notification has been processed, the CASP may begin offering its authorised services to clients in the host state.

Documents & Evidence to Prepare (AML, Governance, Capital)

Although the notification itself is procedurally straightforward, firms should prepare the following evidentiary package to satisfy home NCA expectations and pre‑empt host NCA queries:

• Programme of operations. A description of the services to be offered cross‑border, the target client base, and the marketing channels to be used in Poland.
• AML/CFT compliance documentation. Evidence of the firm’s anti‑money-laundering and counter‑terrorist-financing programme, including risk‑based assessment, KYC policies, transaction monitoring systems and suspicious transaction reporting procedures.
• Governance and organisational structure. Board composition, fitness and propriety assessments, outsourcing arrangements, and internal controls relevant to the cross‑border operation.
• Prudential requirements. Proof that own‑funds requirements under MiCA are met and maintained on an ongoing basis.
• Consumer protection measures. Complaints‑handling procedures, information disclosures, and safeguarding arrangements for client assets.

Typical Timelines & Regulator Touchpoints

Industry observers expect the total end‑to‑end process to take between two and twelve weeks, depending on home NCA responsiveness and the complexity of the CASP’s service offering.

Polish Regulator Position and the KNF Statement: Immediate Legal Implications

The KNF statement on Poland’s MiCA implementation status is the single most important local document for any firm considering passporting into Poland. It sets the practical boundaries of what is achievable on the ground, regardless of what EU law permits in theory.

What KNF Said: Summary

The KNF’s published position confirms that Poland has not enacted the national legislation required to designate the KNF (or any other body) as the competent authority for supervising crypto‑asset service providers under MiCA. The statement makes clear that until such legislation enters into force, the KNF lacks the legal mandate, procedural framework and operational resources to carry out MiCA supervisory functions in relation to CASPs. The sole exception is supervision of e‑money token (EMT) issuers, which falls under the KNF’s existing mandate as the authority responsible for supervising electronic money institutions under Poland’s implementation of the E‑Money Directive.

In practical terms, the KNF statement Poland position means the regulator cannot currently: accept or process CASP authorisation applications from Polish entities; function as a host NCA for passporting notifications from CASPs authorised in other Member States; or exercise the supervisory and enforcement powers that MiCA assigns to host NCAs in relation to consumer protection, market abuse, and marketing communications.

What It Means for Passported Services: Risk Matrix

Political Developments: Presidential Veto Context

Reports indicate that Poland’s national MiCA implementing legislation has faced political obstacles, including a reported presidential veto. While the precise legislative status continues to evolve, the practical consequence is clear: the regulatory gap persists. Non‑EU firms should not build their market‑access strategy on the assumption that Poland’s implementing law will take effect on a specific date. Instead, contingency planning for both a near‑term resolution and an extended delay should be treated as a core compliance obligation.

Practical Routes to Market for Non‑EU Firms: Comparison & Recommended Paths

Given the MiCA implementation risk in Poland, non‑EU firms have four realistic routes to serve Polish clients. Each carries distinct trade‑offs in speed, cost, regulatory certainty and operational complexity. The following analysis is structured to help compliance leads select the approach best suited to their firm’s profile.

Route A: Passport from another EU CASP authorisation (Article 65 MiCA). This remains the fastest and most legally robust path. A non‑EU firm incorporates a subsidiary in an EU Member State with a functioning NCA, such as France (AMF), Germany (BaFin), Lithuania (Bank of Lithuania) or the Netherlands (AFM), obtains CASP authorisation there, and then passports into Poland. The passport right is directly applicable EU law and does not depend on Poland’s implementing legislation. The risks relate to the operational gap created by the KNF’s inability to act as host NCA: banking partners may want host‑NCA confirmation, and consumer‑protection enforcement remains uncertain.

Route B: Obtain a local Polish CASP licence. This route eliminates host‑NCA ambiguity entirely, but it is currently unavailable. Until Poland enacts its implementing law and the KNF begins accepting CASP applications, no domestic authorisation pathway exists. The likely timeframe once the legislation is in force is estimated at six to eighteen months for application review, capital verification, and fit‑and‑proper assessments.

Route C: Partner with an EU‑licensed entity (white‑label / agent model). For firms that cannot or do not wish to obtain their own CASP authorisation, partnering with an existing EU‑licensed CASP provides a commercially pragmatic route to market. The licensed partner holds the regulatory relationship, while the non‑EU firm provides technology, liquidity, or customer acquisition. This model can be structured within four to twelve weeks but introduces commercial dependency and complex AML/KYC liability allocation.

Route D: Serve from outside the EU (reverse solicitation). Under MiCA, a firm established outside the EU may serve EU clients only at the client’s exclusive initiative, the so‑called reverse solicitation exemption. This route carries the highest legal risk. MiCA’s provisions on reverse solicitation are narrowly defined: any marketing, promotion or active targeting of EU clients eliminates the exemption. Early indications suggest that EU supervisors will interpret this exemption restrictively.

Routes to Market: Comparison Table

Recommended Route by Business Model

• Spot exchanges (medium to large). Route A is strongly recommended. The volume of Polish retail clients justifies the cost of EU subsidiary formation and CASP authorisation. Passporting into Poland provides the clearest legal basis and the broadest scope of permitted services.
• Custody providers. Route A or Route C, depending on asset types and client base. Custody services trigger specific MiCA safeguarding requirements that demand close coordination with the home NCA.
• Brokerages and order‑routing platforms. Route C may be optimal for smaller firms, partnering with an existing licensed CASP avoids the full authorisation burden while preserving market access into Poland.
• Staking service providers. The likely practical effect of the ongoing MiCA review consultation will be to clarify staking obligations further. Until then, Route A with conservative service scoping is advisable.

Operational Readiness Checklist for Passporting into Poland

Securing the legal passport is only half the challenge. Operational readiness, banking, custody, AML programme, consumer disclosures and IT resilience, determines whether a firm can actually serve Polish clients safely and compliantly. The following checklist applies to firms pursuing CASP passporting via Route A.

Banking & Custody Practicalities

Opening a banking relationship for a passported CASP operating in Poland requires careful preparation. Commercial banks in Poland and across the EU will typically request:

• Proof of CASP authorisation, certified copy of the home NCA’s authorisation decision and ESMA register entry.
• AML/CFT programme, full documentation including customer due diligence (CDD) procedures, enhanced due diligence (EDD) thresholds, transaction monitoring rules, and suspicious activity reporting (SAR) workflows.
• Source of funds policies, detailed explanation of how fiat inflows and outflows are monitored and reconciled with crypto‑asset transactions.
• Custody arrangements, description of how client assets are safeguarded, segregated and protected against insolvency, including the identity and regulatory status of any sub‑custodian.
• Insurance or guarantee arrangements, evidence of professional indemnity insurance or equivalent coverage as required under MiCA’s prudential framework.

AML & Transaction Monitoring

Firms must ensure their AML/CFT programme meets the standards expected under both EU‑level rules (including the Transfer of Funds Regulation as applied to crypto‑asset transfers) and any local Polish AML requirements that may apply. Key items to prepare include:

• Risk‑based assessment (RBA) covering Poland‑specific risks (geographic, product, client and delivery‑channel risks).
• KYC/CDD thresholds and identity verification processes, mapped to MiCA disclosure requirements.
• Transaction monitoring rules, calibrated for Polish zloty fiat flows and crypto-to-crypto patterns.
• SAR/STR reporting channels, identifying the appropriate financial intelligence unit (FIU) for Poland and ensuring reporting can occur even absent a functioning host NCA.
• Record‑keeping and data retention, compliant with both GDPR and AML data‑retention mandates.

Consumer Protection & Complaints Handling

MiCA imposes specific consumer‑protection obligations on CASPs, including pre‑contractual disclosures, risk warnings for volatile assets, complaints‑handling procedures, and obligations to act in clients’ best interests. Firms passporting into Poland must ensure Polish‑language disclosures, a complaints procedure accessible to Polish consumers, and internal processes for handling and escalating complaints within the regulatory deadlines set out in MiCA.

Managing the July 1, 2026 Risk: Pre‑Launch and Immediate Mitigation Steps

The passage of the 1 July 2026 MiCA transition deadline has crystallised the MiCA implementation risk for firms that planned to passport into Poland. The following triage playbook addresses the immediate actions required.

• Legal triage. Confirm that the home NCA has transmitted the Article 65 notification for Poland. If the notification has been submitted but the KNF has not acknowledged receipt, document the submission and retain all correspondence. Seek written confirmation from the home NCA that the passport right is in force irrespective of host NCA acknowledgement.
• Operational pause assessment. Decide whether to onboard new Polish clients or pause onboarding until regulatory clarity improves. For firms already serving Polish clients, maintain service continuity while monitoring KNF communications.
• Customer communications. Issue a clear, concise notice to existing and prospective Polish clients explaining the firm’s regulatory status, the MiCA authorisation held, and any impact on service availability.
• Banking and payment partner coordination. Contact banking partners proactively. Provide updated regulatory documentation and request confirmation that the banking relationship will continue under the passport arrangement.
• Escalation path. Establish a direct line to: (a) the home NCA’s passport desk; (b) qualified Polish counsel familiar with CASP regulatory matters; and (c) ESMA’s MiCA coordination contacts for cross‑border supervision matters. Connect with experienced lawyers in Poland who can advise on the local regulatory landscape.

Communications Templates: Customer & Bank Notices

Customer notice (outline): “We are authorised as a crypto‑asset service provider under MiCA by [home NCA, Member State]. Under Article 65 of Regulation (EU) 2023/1114, we are entitled to provide our authorised services to clients in Poland on a cross‑border basis. We are monitoring developments in Polish national implementing legislation and will notify you of any material changes to our service availability.”

Bank notice (outline): “We wish to confirm that our CASP authorisation from [home NCA] permits cross‑border service provision into Poland under Article 65 of MiCA. Please find attached our updated authorisation certificate, ESMA register entry, and AML/CFT programme summary. We request confirmation that our account arrangements will continue under this regulatory framework.”

Contingency & Wind‑Down: What to Do if Denied, Blocked or if Poland’s Law Is Vetoed

A responsible MiCA passporting Poland strategy must include a contingency plan for scenarios where market access is blocked, restricted or rendered commercially unviable. VASP wind-down Poland procedures should be prepared in advance, not improvised under pressure.

Customer Protection & Asset Transfer Playbook

• Freeze new onboarding. Immediately stop accepting new Polish clients if a formal restriction is communicated by any competent authority.
• Notify existing clients. Issue a wind‑down notice specifying: the reason for service cessation, the timeline for withdrawal of assets, and the process for transferring crypto‑assets to an alternative CASP or self‑custody wallet.
• Safeguard and segregate client assets. Ensure all client funds and crypto‑assets are fully segregated from the firm’s own assets. Maintain custody until clients have completed withdrawals or transfers.
• Preserve records. AML/CFT transaction records, client correspondence and regulatory submissions must be retained for the period required under both MiCA and applicable national law.
• Report to competent authorities. Notify the home NCA and, if applicable, the KNF of the wind‑down. File any outstanding suspicious transaction reports with the relevant FIU.

Redomiciliation Options and Timelines

Firms whose Poland entry is blocked may consider redomiciliation, transferring the registered office or establishing a new subsidiary in a Member State with a faster‑moving regulatory environment. Lithuania, France and the Netherlands have each demonstrated operational readiness to process CASP authorisations and support passporting. Redomiciliation timelines vary but typically require three to six months for incorporation, licence application and operational setup. Asia‑based firms should factor in corporate structuring, beneficial ownership disclosure and EU substance requirements when evaluating this path.

Case Studies & Decision Tree

Scenario 1: Small Asian spot exchange seeking Poland entry. A Singapore‑headquartered exchange with 5,000 monthly active users wants to onboard Polish retail clients. The recommended path is Route C (EU partner / white‑label) in the short term, partnering with an existing EU‑licensed CASP to provide market access while simultaneously applying for its own CASP authorisation in Lithuania or France. Once authorised, the firm can transition to Route A (passport) for full operational control.

Scenario 2: Custody provider with existing EU client base. A Hong Kong‑based custody provider already serves institutional clients in Germany and France through a Luxembourg subsidiary. The firm should file an Article 65 notification for Poland through its Luxembourg home NCA, prepare the operational checklist described above, and implement a pause mechanism for Polish client onboarding that can be activated if the KNF signals restrictions. This firm is well‑positioned for Route A.

Decision tree (text summary): Start → Do you hold CASP authorisation in any EU state? → Yes: File Article 65 notification for Poland and prepare operational readiness → Monitor KNF position → If clear, launch → If restricted, activate contingency. → No: Can you obtain authorisation within 3 months? → Yes: Apply in a ready Member State, then passport → No: Pursue Route C (partner/white‑label) or evaluate redomiciliation.

Next Steps

Navigating the MiCA passporting Poland landscape requires a combination of EU regulatory expertise, Polish market knowledge and operational readiness across banking, custody and AML compliance. The regulatory environment is moving rapidly, and the gap between EU‑level rights and Polish implementation realities demands proactive, scenario‑based planning.

Global Law Experts connects businesses with qualified FinTech legal specialists experienced in cross‑border MiCA strategy, CASP authorisation and EU market access. Whether you need to evaluate passporting routes, prepare an Article 65 notification, structure a white‑label partnership, or build a contingency wind‑down plan, our network includes lawyers in Poland and across the EU who can provide tailored guidance.

For firms requiring immediate assistance with MiCA passporting Poland compliance, operational readiness, or contingency planning, we recommend scheduling a consultation with a specialist adviser through our platform.

Sources

1. Regulation (EU) 2023/1114 (MiCA), Official Text (EUR‑Lex)
2. European Commission, MiCA Delegated and Implementing Acts
3. KNF, Statement of the Polish Financial Supervision Authority
4. ESMA, European Securities and Markets Authority (MiCA Resources)
5. EBA, MiCA Interactive Single Rulebook
6. European Commission, MiCA Review Consultation Document