Reverse Solicitation Under Mica in Poland 2026: What Non‑eu Crypto Firms Can and Can’t Do

Who this is for: compliance and legal teams at non‑EU exchanges, wallets and token platforms assessing whether they can lawfully provide services to Polish users without a CASP licence under MiCA’s 2026 rules.

Reverse solicitation mica poland is the phrase that now sits at the centre of every serious market‑entry conversation for crypto‑asset service providers watching the European Union from outside its borders. As the Markets in Crypto‑Assets Regulation moves from paper to full application in 2026, non‑EU platforms that once relied on informal cross‑border flows face a sharper question: can they lawfully serve a Polish customer who approached them, and where exactly does spontaneous demand end and unlawful marketing begin? This article maps the legal concept of reverse solicitation onto MiCA’s scope, examines how the Polish Financial Supervision Authority is expected to approach cross‑border activity, and sets out a practical, risk‑based playbook for firms that want to avoid an authorisation trap.

The stakes are concrete: the transitional window has largely closed, supervisory attention is intensifying, and ambiguous facts create real exposure.

For firms weighing structured entry alongside these questions, the broader FinTech, Poland practice area context is a useful companion to this analysis.

Executive summary and key takeaways

The core message for non‑EU CASPs is that reverse solicitation is a narrow exception, not a business model. Regulators across the EU treat it as a defence to be proven on facts, not a licence to operate. The following action items summarise what firms can and cannot do, the evidence they must retain, the highest‑risk marketing behaviours, and the immediate mitigations to consider.

• What you can do. Execute a specific service at the genuine, unprompted request of a Polish client who approached you first, provided you did not solicit that contact and do not use the relationship to market further services.
• What you cannot do. Run targeted advertising, Polish‑language campaigns, influencer promotions or affiliate funnels aimed at Poland and then characterise the resulting sign‑ups as reverse solicitation. Solicited demand is not spontaneous demand.
• Evidence you need. Contemporaneous records of the user journey, how the client found you, what they requested, and proof that no outreach preceded the contact. Post‑hoc checkboxes carry limited weight on their own.
• Highest‑risk marketing. Geotargeted paid ads to Polish IP addresses, Polish‑language content and landing pages, PR aimed at Polish media, and on‑platform promotions directed at Polish users.
• Immediate mitigations. Audit all marketing touchpoints for Polish exposure, implement geoblocking and language controls, document onboarding, and escalate borderline cases to counsel before onboarding.

This is general guidance, consult counsel for your specific facts.

Quick primer: MiCA, scope and 2026 context

The Markets in Crypto‑Assets Regulation, Regulation (EU) 2023/1114 (MiCA), is a directly applicable EU regulation that creates a harmonised authorisation and conduct framework for crypto‑asset service providers (CASPs) across all Member States, including Poland. Because it is a regulation rather than a directive, its core obligations apply uniformly without the need for national transposition, which is what makes reverse solicitation mica poland a question of EU‑level interpretation applied through Polish supervision. The rules on crypto‑asset services (CASPs) have applied since 30 December 2024. The European Commission’s MiCA policy materials explain the objectives: investor protection, market integrity, financial stability and a level playing field for regulated providers.

What MiCA changes for CASPs

MiCA requires firms providing crypto‑asset services within the EU to be authorised as CASPs and to comply with governance, prudential, custody, conduct and disclosure requirements. Once authorised in one Member State, a CASP can passport its services across the EU. The regulation is designed to close the gap that previously allowed unregulated or offshore providers to reach EU users with minimal oversight. For a non‑EU firm, the practical consequence is stark: providing a crypto‑asset service to persons established in the EU generally triggers the authorisation requirement unless a genuine, narrow exception applies. Reverse solicitation is that exception, and it is the reason reverse solicitation mica poland has become a defining compliance topic.

Transitional arrangements and enforcement timing

MiCA contains transitional provisions permitting entities that were already providing crypto‑asset services under applicable national law before the regulation applied to continue for a limited period while seeking authorisation. Member States were given discretion to set the length of this window, subject to the maximum permitted under MiCA. The practical effect for 2026 is that any grace afforded to unauthorised or transitioning providers is running out, and supervisory focus is shifting from onboarding the compliant to identifying the non‑compliant.

Firms should verify the exact transitional timetable applicable in Poland against the primary MiCA text and Poland’s national implementing legislation (the Polish Act on the crypto‑asset market implementing MiCA) before relying on any grace period, and should confirm the position directly with counsel or the supervisor, as the details are subject to change.

What is “reverse solicitation” and how do the MiCA reverse solicitation rules apply?

Reverse solicitation, sometimes called “passive freedom to provide services” or the “own exclusive initiative” exception, is a long‑standing concept in EU financial services law. It rests on a simple principle: where a client established in the EU approaches a third‑country firm entirely on their own initiative to request a specific service, that service can, in principle, be provided without the third‑country firm needing to be authorised in the EU. The concept is familiar from MiFID II/MiFIR practice, and MiCA contains a comparable provision addressing services provided at a client’s own exclusive initiative, which is how the mica reverse solicitation rules are read.

Reverse solicitation, definition and legal test

The test is fact‑specific and demanding. The initiative must genuinely originate with the client, the service provided must be limited to what the client actually requested, and the firm must not have solicited that contact through any form of promotion, advertising or targeting directed at the client or the market in which they are established. Crucially, the exception does not entitle the firm to market additional or new categories of service to that client on the back of the initial contact. In MiFIR practice, ESMA has consistently emphasised that the exception is to be understood narrowly and cannot be used to circumvent authorisation requirements. Firms should monitor ESMA’s MiCA materials for interpretative statements as supervisory practice develops.

Differences between inbound solicitation and unsolicited user contact

The distinction that matters is between a user who arrives unprompted and a user who arrives because the firm cultivated demand. If a Polish resident independently researches providers, finds a platform, and contacts it to open an account and trade, that may be unsolicited contact. If the same resident clicks a paid advertisement served to Polish IP addresses, follows a Polish‑language influencer’s referral link, or lands on a page optimised for Polish search terms, the contact is no longer plausibly spontaneous, it was engineered. This is the heart of the reverse solicitation mica poland analysis. Regulators look behind the moment of contact to the entire chain of touchpoints that led the client there.

A single geotargeted campaign can contaminate the reverse solicitation defence for every user acquired through it, which is why the concept must be assessed at the level of the acquisition channel, not merely the individual account.

Permitted activities: what a non‑EU CASP in Poland can do with Polish clients

Within the narrow boundaries of genuine reverse solicitation, some interactions with Polish clients may be permissible without a CASP licence. The word “may” is deliberate: permissibility depends on the facts and on the firm’s ability to prove those facts. The following examples illustrate activity that is more likely to fall within the exception, but none of them is a safe harbour on its own.

Examples of likely permissible interactions

• Executing a specific transaction on unprompted request. A Polish natural person who located the platform independently asks to buy or sell a specific crypto‑asset, and the firm executes that request without upselling further services.
• Providing account access to a returning, self‑directed client. Continuing to service a client who approached the firm on their own initiative and who transacts without being prompted by campaigns targeting Poland.
• Publishing genuinely non‑targeted informational content. Neutral educational material available globally, not tailored to Poland, not in Polish for a Polish audience, and not distributed through channels aimed at Polish users.
• Responding to a specific unsolicited enquiry. Answering a factual question a prospective client raises about a service they have independently identified, without extending the exchange into promotion of other products.

Even here, the safest posture for any non‑eu casp poland scenario is to treat these interactions as exceptions to be documented and reviewed, not as the foundation of a Polish client book.

Minimum proof and recordkeeping to rely on reverse solicitation

Because reverse solicitation is a defence, the burden of demonstrating it falls on the firm. At a minimum, a firm seeking to rely on it should retain: the source and referral path of the client’s first contact; timestamps establishing that contact preceded any communication from the firm; the specific service requested; and evidence that no campaign, advertisement or intermediary directed at Poland contributed to the acquisition. Records should be contemporaneous, tamper‑evident and retained for a period consistent with limitation and supervisory expectations. Where a firm cannot produce this evidence, it should assume the exception is unavailable. Reliable recordkeeping is the difference between a defensible position and a concession that the firm was, in substance, serving Polish clients without a licence.

Prohibited or high‑risk behaviours: what crosses the line into solicitation and breaches crypto marketing rules in Poland

The most common way firms lose the reverse solicitation defence is through their own marketing. Any activity designed to attract, convert or retain Polish users is, by definition, solicitation, and solicitation defeats the exception. Understanding crypto marketing rules poland in the MiCA context is therefore inseparable from understanding reverse solicitation. The behaviours below carry the highest risk of triggering an authorisation requirement.

Digital marketing red flags: targeted ads, social and influencers

• Geotargeted paid advertising. Ads served specifically to Polish IP addresses, Polish geographies, or audiences identified by Polish location signals are a clear indicator of solicitation directed at the Polish market.
• Polish‑language content and landing pages. Marketing copy, sign‑up flows or promotional pages in Polish strongly suggest the firm is targeting Polish consumers, regardless of where servers are located.
• Influencer and affiliate promotion. Paid or incentivised Polish‑language influencers, referral links and affiliate networks that funnel Polish users to the platform convert “spontaneous” demand into cultivated demand.
• Search and social targeting. Bidding on Polish search terms, running social campaigns with Poland in the audience settings, or optimising for Polish keywords all evidence intent to reach the Polish market.
• On‑platform promotions aimed at Poland. Bonuses, competitions or loyalty offers presented to Polish users, or communications encouraging them to use additional services, exceed the narrow limits of any unsolicited request.

Each of these behaviours, individually, can be enough to characterise a firm as marketing into Poland. In combination, they make a reverse solicitation defence effectively untenable, which is why the reverse solicitation mica poland assessment must begin with a candid audit of every marketing channel.

Offline and intermediary channels: affiliates, brokers and OTC liaison

Non‑EU firms sometimes assume that risk lives only online. It does not. Offline and intermediary channels can equally constitute solicitation into Poland, and they are often harder to detect internally, which makes them more dangerous.

• Affiliates and introducers. If an affiliate, agent or introducer actively markets the platform to Polish clients, the firm cannot disclaim that activity simply because it was outsourced. Regulators look to substance, and solicitation by an intermediary acting for the firm is solicitation by the firm.
• Broker and dealer liaison. Arrangements where local brokers or dealers route Polish order flow to the platform, or where the firm maintains relationship managers focused on Polish clients, indicate an active market presence.
• Over‑the‑counter and high‑value liaison. Direct OTC outreach to Polish counterparties, roadshows, or targeted institutional business development in Poland are forms of solicitation that fall well outside the exception.
• PR and media targeting. Press activity aimed at Polish media, sponsorships of Polish events, and public commentary tailored to the Polish market all support an inference of solicitation.

Firms serving cross-border crypto services poland must therefore map not only their own marketing but the activities of every commercial partner whose efforts result in Polish sign‑ups. A robust position requires contractual controls, monitoring and the ability to demonstrate that intermediaries were not soliciting on the firm’s behalf.

Evidence and compliance controls to prove reverse solicitation

If a firm intends to interact with Polish users at all, it must build controls that both limit exposure and generate the evidence needed to defend any reliance on reverse solicitation. These controls fall into two broad categories: technical and operational. Together they form the backbone of a credible mica compliance poland posture.

Technical controls: geoblocking and language toggles

Technical measures signal intent and reduce inadvertent solicitation. A firm that does not want to serve Poland should generally implement geoblocking that restricts access from Polish IP addresses to promotional and onboarding content, and avoid offering Polish‑language interfaces or currency defaults that imply targeting. Where access is permitted only in response to genuine unsolicited requests, the design of the user journey should record how the user arrived, capture the absence of any preceding marketing contact, and log the specific service requested. Geolocation checks, referral‑source capture and time‑stamped access logs are essential. Technical controls are not decisive on their own, but their absence is often treated as evidence that a firm made no effort to avoid the Polish market.

Operational controls: agent scripts, self‑declaration and record retention

Operational controls translate policy into daily practice. Firms should equip staff and any agents with scripts that prohibit soliciting Polish clients and that require escalation of borderline enquiries. Self‑declaration by the client, confirming they approached the firm on their own initiative, has evidentiary value but must be treated as one element of a wider record, not a substitute for genuine facts. Onboarding questionnaires should capture how the client found the firm. Records, including declarations, referral data, communications and access logs, should be retained on a defined schedule aligned with limitation periods and supervisory expectations. Firms should also maintain a grievance and complaints channel, because complaints are a frequent trigger for supervisory attention.

These operational controls are the practical evidence base without which a reverse solicitation defence rarely survives scrutiny.

KNF enforcement posture and EU bodies: reverse solicitation mica poland in practice

Supervision of CASPs in Poland falls to the Polish Financial Supervision Authority (KNF) (Komisja Nadzoru Finansowego), which oversees financial markets and enforces conduct and authorisation requirements. For non‑EU firms, the practical reality of reverse solicitation mica poland is that the KNF is expected to scrutinise whether cross‑border activity reflects genuine spontaneous demand or disguised marketing. National policy context for crypto sits alongside the work of the Ministry of Finance, which shapes the broader environment in which supervision operates.

Likely triggers for supervisory attention

Supervisory attention is commonly triggered by consumer complaints, visible advertising or promotional activity reaching Polish users, and anti‑money‑laundering red flags surfacing through the financial system. A Polish‑language advertisement, a consumer grievance about a non‑authorised platform, or suspicious transaction reporting can each prompt enquiry. Once an enquiry begins, the firm’s ability to produce contemporaneous evidence of genuine reverse solicitation becomes decisive. Firms that cannot demonstrate the origin of client contact should expect the supervisor to treat the activity as unauthorised provision of services.

Cross‑border cooperation and information exchange

MiCA is designed to operate as a coordinated EU framework, and the European Securities and Markets Authority (ESMA) plays a central role in fostering supervisory convergence and information exchange between national authorities. The likely practical effect is that conduct detected in one Member State, for example, advertising served across borders, can be shared and acted upon in others. For a non‑EU CASP, this means a marketing campaign that reaches multiple EU markets cannot be compartmentalised: activity affecting Poland may come to the KNF’s attention through cross‑border cooperation as much as through domestic complaints. Firms should assume that supervisory information does not stop at national borders.

Practical compliance playbook and checklist for non‑EU CASPs

The following step‑by‑step checklist helps a non‑EU firm minimise Polish exposure while preserving any legitimate reliance on reverse solicitation. It is a starting framework, not a substitute for tailored legal advice on the firm’s specific facts.

1. Stop list. Immediately halt any geotargeted advertising, Polish‑language marketing, influencer and affiliate activity, or PR directed at Poland.
2. Audit acquisition channels. Map every route by which Polish users currently reach the platform, including intermediaries, and identify which are solicitation.
3. Implement technical controls. Deploy geoblocking, remove Polish‑language onboarding funnels, and capture referral source and access logs.
4. Rebuild the user journey. Design onboarding to record how each client arrived and to capture a genuine self‑declaration of unsolicited contact.
5. Fix recordkeeping. Establish contemporaneous, tamper‑evident logs with a defined retention schedule.
6. Control intermediaries. Impose contractual prohibitions on soliciting Polish clients and monitor partner activity.
7. Align AML. Ensure due diligence reflects a risk‑based approach consistent with EU anti‑money‑laundering rules and global standards.
8. Escalate borderline cases. Route ambiguous enquiries to legal before onboarding, and consider whether the strategic answer is to limit Polish exposure entirely, or instead to pursue authorisation.

Sample legal language and user‑journey controls

The example wording below illustrates the kind of language firms adopt to support a defensible position. It is illustrative only and must be adapted with counsel, it is not legal advice.

• Website disclaimer (illustrative). “This platform does not target or solicit residents of Poland. Services are provided only in response to a client’s own exclusive initiative. By proceeding, you confirm that you contacted us without any prior solicitation, advertisement or promotion directed at you.”
• Onboarding self‑certification (illustrative). “I confirm that I approached [Firm] on my own initiative, that I was not directed here by any advertisement, campaign, influencer or intermediary targeting Poland, and that I am requesting a specific service I identified independently.”
• Inbound enquiry response (illustrative). “Thank you for contacting us. We can provide information about the specific service you have requested. Please note we do not market our services to residents of Poland and cannot promote additional products to you.”

Language of this kind supports, but does not create, a reverse solicitation position. Its value depends entirely on being matched by genuine facts and by the technical and operational controls described above.

Conclusion and next steps

Reverse solicitation mica poland is best understood as a narrow, fact‑dependent exception that rewards firms with disciplined controls and punishes those who treat it as a marketing loophole. As MiCA’s transitional window closes and the KNF sharpens its focus on cross‑border activity, non‑EU CASPs should audit every acquisition channel, implement geoblocking and recordkeeping, control intermediaries, and escalate borderline cases before onboarding. For many firms, the more durable answer will be to pursue authorisation rather than to depend indefinitely on an exception that regulators read narrowly. Firms weighing their Polish exposure should seek jurisdiction‑specific counsel and act before enforcement, not after.

Sources

1. EUR‑Lex, Regulation (EU) 2023/1114 (MiCA)
2. European Commission, Markets in Crypto‑Assets (MiCA)
3. ESMA, MiCA related materials and supervisory communications
4. Polish Financial Supervision Authority (KNF)
5. FATF, Guidance for a Risk‑based Approach to Virtual Assets and VASPs
6. Republic of Poland, Ministry of Finance