MiCA in the Nordics: 2026 Guide

The purpose of the MiCA Regulation (2023/1114) is to create a harmonised framework for crypto-assets and their providers. This includes aspects such as transparency, disclosure, authorisation and supervision of transactions for issuing and trading crypto-assets. 

MiCA established a system under which each crypto-asset service provider (CASP) must apply for a CASP license granted by their national competent authority. Overall, the license signals that a company has met the regulatory standards set by the EU. Once a CASP has acquired this, it can offer its services throughout the Union.  As a result, MiCA effectively creates a system of EU crypto licensing. 

The Regulation was adopted on 31 May 2023 and entered into force on 29 June 2023. It became fully applicable on 30 December 2024. However, it allows transitional periods, often referred to as grandfathering periods, which enable CASPs to continue operating under old national rules during that period. However, if a company is not granted a licence before the deadline, it will need to stop its operations temporarily. Thus, it will need MiCA authorisation before continuing to provide crypto-asset services. 

Although MiCA provides a harmonised framework, it still leaves some decision-making for Member States. They can, for example, choose the national supervisory authority and the length of the transitional period. 

This article will analyse the MiCA application in Denmark, Norway, and Iceland. Ultimately, this article serves as a valuable resource for CASPs, financial institutions, researchers, and anyone interested in crypto-assets and their regulation within the EU.

Denmark:

Denmark remains on the standard MiCA transition timeline, with the transitional period running from 30 December 2024 until 30 June 2026. After that date, crypto companies must hold a MiCA licence in order to continue operating.

The Danish Financial Supervisory Authority (Finanstilsynet) serves as the competent authority responsible for CASP authorisation and supervision.

One of the more notable aspects of Denmark's approach is its position on decentralised finance. In line with MiCA, Danish regulators take a cautious view of projects claiming to be decentralised. If any party retains meaningful control through governance rights, administrative privileges, smart contract modification rights, access controls, or similar mechanisms, the project is unlikely to qualify as genuinely decentralised and will generally require MiCA authorisation.

As a result, businesses cannot rely on DeFi exemptions unless they can demonstrate a truly decentralised structure.

Denmark has already begun issuing licences under the new regime. At the time of writing, four companies have received CASP authorisation: Penning, Lunar Block, GC Exchange, and Northstake ApS. The first licence was granted to Lunar Block in September 2025, while the most recent authorisation was issued to Northstake ApS in April 2026.

The country is therefore moving steadily from transition to active supervision as the June 2026 deadline approaches.

Norway:

Norway occupies a unique position within the European regulatory landscape.

Although it is not a member of the European Union, Norway participates in the European Economic Area (EEA). As a result, MiCA does not apply automatically and must instead be incorporated into Norwegian law.

The country implemented MiCA through the Kryptoeiendelsloven on 1 July 2025. Later that year, the Financial Supervisory Authority of Norway (FSAN) adopted the delegated and implementing acts necessary to make the framework fully operational.

Norway initially required CASPs to obtain authorisation by 30 December 2025. However, regulators later extended the deadline to 30 June 2026 after concluding that the authorisation process had proven more complex and resource-intensive than expected. The extension was intended to provide additional time for both applicants and supervisors to complete ongoing licensing reviews.

Today, Norway's framework is largely aligned with MiCA despite the country remaining outside the EU. Existing crypto businesses can continue operating during the extended transition period, but firms that wish to remain in the market will need to secure authorisation before the deadline expires.

Iceland:

Iceland remains outside the MiCA framework, although that may not be the case indefinitely.

As an EEA member rather than an EU Member State, Iceland is not automatically subject to MiCA. However, the regulation is widely expected to be incorporated into the EEA Agreement in the future, bringing Iceland into closer alignment with the broader European crypto regulatory framework.

For now, cryptocurrency activities are primarily governed through general tax and financial laws rather than a dedicated crypto licensing regime.

Iceland classifies cryptocurrencies as digital assets rather than legal tender. Income derived from mining, trading, staking, and other crypto activities is taxable under existing tax rules. Trading profits are generally subject to capital gains taxation, while losses may be offset against gains from similar transactions during the same tax year.

Taxpayers are required to report crypto income and transactions in annual tax filings, including transaction values and relevant supporting information. The country broadly follows international tax standards and is not expected to diverge significantly from OECD reporting frameworks.

One notable feature of Iceland's current approach is regulatory stability. Unlike many European jurisdictions that are actively adapting to MiCA, Iceland's framework has remained largely unchanged. The main development to watch is the eventual incorporation of MiCA into the EEA Agreement, although no formal timeline has been announced.

‍

Conclusion

The Nordic region demonstrates that MiCA implementation extends beyond the European Union itself.

Denmark is approaching the end of its transition period and has already begun issuing licences. Norway has incorporated MiCA into national law and aligned its framework with European standards, while providing firms additional time to complete the authorisation process. Iceland remains outside the regime but is expected to move closer to MiCA through future EEA integration.

For crypto businesses, the broader trend is clear. Regulatory expectations are increasing, supervisory frameworks are becoming more sophisticated, and licensing is rapidly becoming a prerequisite for market access across Europe. While each Nordic jurisdiction is following its own path, all are moving towards greater regulatory certainty and stronger oversight of crypto-asset activities.

‍