ESMA GUIDELINE
ESMA GUIDELINE
ESMA75-453128700-1408
Final Report
Guidelines on supervisory practices for competent authorities to prevent
and detect market abuse under the Markets in Crypto Assets Regulation
(MiCA)
0
Table of Contents
1 Executive Summary .................................................................................................... 3
2 Background and Legal Basis ....................................................................................... 4
3 Assessment................................................................................................................. 4
4 Annexes ...................................................................................................................... 6
4.1 Annex I: Advice of the Securities and Markets Stakeholder Group ....................... 6
4.2 Annex II: Feedback on the advice from the SMSG ............................................... 7
4.3 Annex III: Guidelines ............................................................................................ 8
1. Scope ........................................................................................................................ 10
2. Legislative references, abbreviations, and definitions ................................................ 11
2.1. Legislative references ........................................................................................ 11
2.2. Abbreviations ..................................................................................................... 11
2.3. Definitions .......................................................................................................... 11
3. Purpose..................................................................................................................... 13
Compliance and reporting obligations............................................................................... 14
3.1. Status of the guidelines ...................................................................................... 14
3.2. Reporting requirements ...................................................................................... 14
4. Guidelines on supervisory practices for competent authorities to prevent and detect
market abuse ................................................................................................................... 15
4.1. Proportionality in the application of the Guidelines (Guideline 1) ........................ 15
4.2. General approach to prevent and detect market abuse under MiCA (Guideline 2)
15
4.3. Integration of existing supervisory practices (Guideline 3) .................................. 16
4.4. Common supervisory culture to ensure market integrity under MiCA (Guideline 4)
16
4.6 Open dialogue with stakeholders about market integrity risks (Guideline 6) ....... 17
4.7 Initiatives to promote market integrity among market participants (Guideline 7) . 18
4.8 Monitoring and surveillance by NCAs (Guideline 8) ............................................ 19
4.9 Supervision of PPAETs’ arrangements, systems and procedures to prevent and
detect market abuse (Guideline 9) ................................................................................ 19
4.10 Reaction to a STOR (Guideline 10) .................................................................... 19
4.11 ESMA coordination (Guideline 11) ..................................................................... 20
4.12 Third-country obstacles to the effective exercise of NCAs’ supervisory functions
for the detection of cross-border market abuse (Guideline 12) ...................................... 20
List of acronyms
MiCA was published in the Official Journal of the EU on 9 June 2023 and started applying
from 30 December 2024. ESMA has been empowered to develop technical standards and
guidelines specifying certain provisions of MiCA.
To fulfil this empowerment, ESMA has drafted the guidelines on competent authorities’
supervisory practices to prevent and detect market abuse under MiCA, which are detailed
in this final report (the “Guidelines”).
Contents
The Guidelines put forward some general principles to ensure high quality and effective
supervision on market abuse in crypto assets, as well as some more specific practices for
NCAs regarding detection and prevention.
The general principles require supervisory activity to be risk based and proportionate. They
also set the objective for NCAs to build a common supervisory culture specific for crypto
assets through an open dialogue with the industry and interactions with other NCAs.
The Guidelines take into consideration the experience made under MAR to prevent and
detect market abuse, as well as the specific features of the crypto assets’ environment, such
as the more intensive use of social media, the specific technologies used, and the cross-
border nature of crypto trading.
In accordance with Article 16 of the ESMA Regulation, ESMA did not conduct an open public
consultation on the Guidelines, nor did it analyse the potential related costs and benefits, as
this would have been disproportionate in relation to the scope of these Guidelines, taking
into account that they are solely addressed to NCAs and not market participants, their limited
financial impact and the fact that the adoption of the Guidelines is required by MiCA.
However, ESMA requested the advice of the ESMA SMSG. This final report includes the
feedback on how the SMSG advice has been taken into account.
Next Steps
The Guidelines will be translated into the official languages of the EU and published on the
ESMA website.
Within two months of the publication of the translations, each NCA shall confirm whether it
complies or intends to comply with the Guidelines. In the event that an NCA does not comply
or intend to comply with the Guidelines, it will have to inform ESMA, stating its reasons.
ESMA will then publish that information on its website.
2 Background and Legal Basis
3 Assessment
6. The objective of the Guidelines is to (i) identify supervisory practices which are adequate
to prevent and detect market abuse in crypto assets and (ii) ensure a uniform approach
in supervision and detection of market abuse across Member States.
7. Taking into consideration the similarities between MAR and MiCA, the Guidelines have
been developed having in mind the best practices developed by NCAs for the prevention
and detection of market abuse for traditional financial instruments under MAR.
8. At the same time, the Guidelines take the differences between the MAR and the MiCA
legal frameworks into consideration. They also consider the specific features of the
crypto assets markets, which may be relevant in respect of detection and prevention of
market abuse, such as the more intensive use of social media, the specific technologies
used as well as the cross-border nature of crypto trading.
9. The Guidelines are informed by the principle of proportionality and are based on the
consideration that NCAs should be granted some flexibility, given the different relevance
of crypto assets trading in their respective jurisdictions and the on-going progress on
developing market surveillance for crypto assets.
10. The Guidelines put forward some general principles on how supervision for detection
and prevention of market abuse in crypto assets should be carried out as well as some
more specific practices which consider the relevance of the specific features of the crypto
assets’ environment.
11. Those general principles include the objective to build a common supervisory culture
specific for crypto assets, through an open dialogue with the industry, and frequent
interactions with other NCAs.
12. Taking into consideration the cross-border nature of crypto-asset markets, the
Guidelines include practices related to the interaction between NCAs within the EU, as
well as the handling of any obstacles that may come from interactions with third-country
jurisdictions.
13. The SMSG supported the Guidelines. Overall, ESMA considers the changes made
following the SMSG’s advice non-material.
14. ESMA’s proposals for the Guidelines referred to in Article 92(3) of MiCA is contained in
Annex III.
4 Annexes
1
See here for full the full SMSG advice: ESMA24-229244789-5235 SMSG advice on the Consultation Paper on the Markets in
Crypto Assets Regulation (MiCA) on the role and competence of the National Competent Authorities in supervising the crypto
markets
4.2 Annex II: Feedback on the advice from the SMSG
ESMA acknowledges the advice provided by the SMSG with regard to the Guidelines covered
in this final report.
The Guidelines have not materially changed following the consultation of the SMSG. However,
taking into consideration the SMSG advice, a few additions have been made to (i) Guideline 4
on the common supervisory culture to ensure market integrity under MiCA and (ii) Guideline 5
on adequacy of resources.
Guideline 4 on common supervisory culture to ensure market integrity was extended to
suggest for NCAs to explore the possibility of engaging in dialogues also with other authorities,
e.g. the authorities responsible for consumer protection or money laundering. ESMA believes
an exchange of experience or supervisory practices with other authorities may help NCAs to
get a more comprehensive view on the crypto market entities and products and information
about any other supervisory activities carried out with a different objective than market integrity.
ESMA did not include in the final version of the Guidelines the suggestion to closely coordinate
NCAs’ monitoring activities with the authorities responsible for consumer protection because
the objective of the Guidelines is the prevention and the detection of market abuse in the crypto
environment and any recommendation relating to consumer protection would be out of scope.
Moreover, the legal basis for the exchange of data with the other authorities, which would be
necessary for the purpose of coordination, may be missing in some jurisdictions.
Taking into account the SMSG’s advice, Guideline 5 on adequacy of resources has been
amended to encourage NCAs to dedicate specific resources to the oversight of crypto asset
markets. ESMA believes that this suggestion should be read in conjunction with Guideline 1
which requires to apply the Guidelines in a way that is proportionate to the relevance of the
risk present in the relevant jurisdictions.
Further to the SMSG’s advice, Guideline 5 has also been amended to stress the importance
of ongoing training of the staff dedicated to the oversight of crypto-assets markets. In this
respect, ESMA would like to recall initiatives such as the EU Supervisory Digital Finance
Academy (EU-SDFA)2 and the constant engagement of ESMA to facilitate the exchange of
good practices among NCAs, to increase a common supervisory culture.
Lastly, Guideline 9 on Supervision of PPAETs’ arrangements, systems and procedures to
prevent and detect market abuse has been amended to focus on the importance of NCAs’
ongoing engagement to ensure that PPAETs’ arrangements, systems and procedures to
prevent and detect market abuse remain appropriate, adopting a risk-based approach.
2
https://eusdfa.eui.eu/
4.3 Annex III: Guidelines
Guidelines
On supervisory practices for competent authorities to prevent and detect
market abuse under the Markets in Crypto Assets Regulation (MiCA)
Table of Contents
1 Executive Summary .................................................................................................... 3
2 Background and Legal Basis ....................................................................................... 4
3 Assessment................................................................................................................. 4
4 Annexes ...................................................................................................................... 6
4.1 Annex I: Advice of the Securities and Markets Stakeholder Group ....................... 6
4.2 Annex II: Feedback on the advice from the SMSG ............................................... 7
4.3 Annex III: Guidelines ............................................................................................ 8
1. Scope ........................................................................................................................ 10
2. Legislative references, abbreviations, and definitions ................................................ 11
2.1. Legislative references ........................................................................................ 11
2.2. Abbreviations ..................................................................................................... 11
2.3. Definitions .......................................................................................................... 11
3. Purpose..................................................................................................................... 13
Compliance and reporting obligations............................................................................... 14
3.1. Status of the guidelines ...................................................................................... 14
3.2. Reporting requirements ...................................................................................... 14
4. Guidelines on supervisory practices for competent authorities to prevent and detect
market abuse ................................................................................................................... 15
4.1. Proportionality in the application of the Guidelines (Guideline 1) ........................ 15
4.2. General approach to prevent and detect market abuse under MiCA (Guideline 2)
15
4.3. Integration of existing supervisory practices (Guideline 3) .................................. 16
4.4. Common supervisory culture to ensure market integrity under MiCA (Guideline 4)
16
4.6 Open dialogue with stakeholders about market integrity risks (Guideline 6) ....... 17
4.7 Initiatives to promote market integrity among market participants (Guideline 7) . 18
4.8 Monitoring and surveillance by NCAs (Guideline 8) ............................................ 19
4.9 Supervision of PPAETs’ arrangements, systems and procedures to prevent and
detect market abuse (Guideline 9) ................................................................................ 19
4.10 Reaction to a STOR (Guideline 10) .................................................................... 19
4.11 ESMA coordination (Guideline 11) ..................................................................... 20
4.12 Third-country obstacles to the effective exercise of NCAs’ supervisory functions
for the detection of cross-border market abuse (Guideline 12) ...................................... 20
9
1. Scope
1 Who?
2 What?
3 When?
These guidelines apply from three months from the date of their publication on ESMA’s website
in all official EU languages.
10
2. Legislative references, abbreviations, and definitions
MiCA Regulation (EU) 2023/1114 of the European Parliament and of the Council
of 31 May 2023 on markets in crypto-assets, and amending Regulations
(EU) No 1093/2010 and (EU) No 1095/2010 and Directives 2013/36/EU
and (EU) 2019/19374
2.2. Abbreviations
CASP Crypto-asset service provider
EC European Commission
EU European Union
2.3. Definitions
Social media Online social networking service as defined in Article 2, point (7) of
Regulation (EU) 2022/1925 of the European Parliament and the Council5
Web- based platforms Online platforms which collect and disseminate information and data on
crypto-assets to promote informed investment decisions, accessible on a
3
OJ L 331, 15.12.2010, p. 84.
4
OJ L 150, 9.6.2023, p. 40.
5
Regulation (EU) 2022/1925 of the European Parliament and of the Council of 14 September 2022 on contestable and fair
markets in the digital sector and amending Directives (EU) 2019/1937 and (EU) 2020/1828 (Digital Markets Act) (OJ L 265,
12.10.2022, p. 1).
11
non-discriminatory basis and free of charge, as defined in Article 1 of the
Commission Implementing Regulation (EU) 2024/28616
6
Commission Implementing Regulation (EU) 2024/2861 of 12 November 2024 laying down implementing technical standards
for the application of MICA with regard to the technical means for the appropriate public disclosure of inside information and for
delaying the public disclosure of that information (OJ L, 2024/2861, 13.11.2024).
12
3. Purpose
These guidelines are based on Article 92(3) of MiCA and Article 16 of the ESMA Regulation.
The objective of these guidelines is to ensure consistency between competent authorities’
supervisory practices to prevent and detect market abuse involving crypto assets.
More specifically, they aim to establish consistent, efficient and effective supervisory practices
among competent authorities to prevent and detect insider dealing, unlawful disclosure of
inside information and market manipulation. They also aim to ensure the common uniform and
consistent application of Title VI of MiCA (Articles 86-92).
13
Compliance and reporting obligations
Competent authorities to which these guidelines apply to should comply by incorporating them
into their national legal and/or supervisory frameworks as appropriate.
Within two months of the date of publication of the guidelines on ESMA’s website in all EU
official languages, competent authorities to which these guidelines apply must notify ESMA
whether they (i) comply, (ii) do not comply yet but intend to comply, or (iii) do not comply and
do not intend to comply with the guidelines.
In case of non-compliance, competent authorities must also notify ESMA within two months of
the date of publication of the guidelines on ESMA’s website in all EU official languages of their
reasons for not complying with the guidelines.
A template for notifications is available on ESMA’s website. Once the template has been filled
in, it should be transmitted to ESMA.
14
4. Guidelines on supervisory practices for competent
authorities to prevent and detect market abuse
7
Maximum amount of value a blockchain miner or validator can make by changing the order of transactions during the block
production
15
7. Where new risks to market integrity in crypto assets are identified, competent authorities
should supplement, seek to expand, or adjust their supervisory strategy for crypto-
assets and action as appropriate.
8. Competent authorities are encouraged to incorporate their objectives and priorities
related to prevention and detection market abuse under MiCA in their supervisory
strategy.
13. Competent authorities should play an active role in building a common EU supervisory
culture and consistent supervisory practices under MiCA.
14. To achieve this objective, competent authorities should share among them information
to facilitate a common understanding of the market integrity risks posed by crypto
assets, issuers, CASPs, and any other market participant.
15. Competent authorities should inform each other of the measures adopted to prevent
and detect market abuse pursuant to these guidelines, and exchange on the best
practices identified to ensure market integrity.
16
16. In addition, competent authorities are encouraged to share their direct experiences on
supervision in the area of market abuse concerning crypto assets and to highlight the
difficulties encountered, by presenting and discussing supervisory cases in the relevant
ESMA groups.
17. As a result of such exchanges, competent authorities may also propose that ESMA
adopt specific supervisory convergence tools to promote supervisory convergence
across the EU.
18. To get a more comprehensive view on the crypto market participants and products and
in compliance with the rules on professional secrecy, competent authorities may, on a
voluntary basis, consider entering into dialogues and exchanges of experiences with
other authorities (e.g. authorities responsible for consumer protection or prevention and
anti-money laundering authorities), when their supervisory activity appears to be
connected to the crypto assets markets.
19. To ensure the availability of sufficient resources to achieve their supervisory objectives,
competent authorities are encouraged to have dedicated staff to carry out their functions
and duties in the oversight of crypto asset markets.
20. To identify the resources and the staff needed to conduct detection and prevention of
market abuse in crypto asset markets, competent authorities are encouraged to
consider the following elements:
a) knowledge and competence of their staff with respect to the functioning of crypto-
assets and the relevant technologies used (e.g. consensus mechanisms) as well as to
the roles of participants in on-chain transactions;
b) the need for adequate tools specific to crypto assets market surveillance;
c) the need to carry out data driven market surveillance, in addition to event-based
surveillance.
21. Competent authorities are encouraged to take part in initiatives for the ongoing training
of the relevant staff.
17
23. Competent authorities should take into consideration the outcome of such exchanges
in the identification of emerging risks, new market abuse strategies, and in the
development of potential solutions, including new tools to mitigate risks to market
integrity with reference to crypto assets.
c) Q&As with informative purposes related to the prevention and detection of market
abuse.
26. Competent authorities may develop the educational initiatives described in the present
guideline autonomously or in collaboration with other competent authorities and ESMA,
as appropriate.
27. To further promote prevention of market abuse, competent authorities should also
consider opportunities of:
a) encouraging issuers, PPAETs and CASPs not falling under the PPAET category, to
adopt best practices which go beyond legal requirements. For instance, competent
authorities could suggest issuers to inform employees who have access to inside
information about what actions could constitute insider dealing or unlawful disclosure
of inside information and on the relevant consequences, or suggest operators of trading
platform to inform their users about the behaviours which may constitute market abuse
and of the relevant sanctions;
b) informing operators of trading platform for crypto assets of the need to upgrade and
update their surveillance infrastructure to newly identified or emerging market
manipulation risks; and
18
28. The information provided in the context of educational or other initiatives by competent
authorities under this guideline should not be qualified as legal advice or reduce the
responsibility of the market participants with respect to their obligations under MiCA or
any other applicable law or regulation.
29. To protect the integrity of crypto-asset markets, NCAs should conduct data driven
market monitoring and surveillance, in collaboration with other competent authorities or,
under their responsibility, by delegation to other authorities or service providers, as
appropriate.
30. Competent authorities’ market monitoring and surveillance activities should include
publicly available data, regulatory data on orders and transaction obtained from CASPs,
and to the extent possible, reconciliation of on-chain and off-chain and cross market
data.
31. Competent authorities should also consider including in their market monitoring and
surveillance activity any communications regarding crypto assets, including
communications taking place on web-based platforms, social media and blogs,
newsletters and podcasts, if they are used to disseminate information on crypto assets,
adopting a risk-based approach (considering e.g. the subjects, number of users and
accessibility).
32. In conducting on-going supervision on media, competent authorities may adopt
automated monitoring that is able to identify patterns, keywords and trends, to be
complemented by human analysis.
33. Competent authorities are expected to ensure that the PPAETs’ arrangements,
systems, and procedures to prevent and detect market abuse pursuant to Article 92(1)
of MiCA and the RTS on STOR remain appropriate on an ongoing basis.
34. Adopting a risk-based approach to supervision, the frequency and the relevance of the
competent authorities’ supervisory actions should be proportionate and adequate to the
scale, size and nature of the business activity carried out by the PPAET, for example by
making a distinction between CASPs operating a trading platform and CASPs only
receiving, transmitting or executing orders on behalf of clients.
35. Competent authorities should adopt adequate and proportionate procedures to analyse
the STORs received from PPAETs to ensure effective analysis and appropriate
supervisory action. The above procedures should:
a) clearly identify all the steps that the competent authorities should follow upon receipt
of an STOR;
19
b) for each step, indicate the responsible unit/function within the competent authorities;
and
c) provide the criteria for grading the behaviour reported through the STORs according
to parameters such as severity and recurrence.
36. The actions adopted by competent authorities pursuant to the above procedure should
be proportionate to the detected threat.
38. A competent authority should inform the other relevant competent authorities and ESMA
where, in the course of its supervisory activities, it identifies:
a) CASPs whose business model might hinder the effective exercise of competent
authorities’ supervisory functions with respect to market abuse. An example could
be where a CASP authorised to execute orders on behalf of clients sends a
significant number of transactions to trading platforms outside of the EU, as this may
prevent the use of STORs as a tool to combat market abuse. Where such CASPs
are identified, competent authorities should strive to agree on a common approach
to supervision in such cases;
b) any obstacles in its interactions with third-country competent authorities that might
hinder the effective exercise of their supervisory functions in relation to market
abuse.
39. When assessing whether there are potential obstacles to effective supervision,
competent authorities should consider all relevant information, including:
a) relevant laws, regulations or administrative provisions of a third country;
b) any difficulties involved in the enforcement of those laws, regulations or
administrative provisions;
c) the possibility of exchanging information with the third-country competent authorities
and any difficulties in obtaining information from them;
20
d) the complexity and transparency of the structure of the group to which a supervised
entity under MiCA belongs and of the persons having close links with an entity
supervised under MiCA;
e) the location or the activities performed by the entities that are members of the group
to which an entity supervised under MiCA belongs, or of the persons having close
links with an entity supervised under MiCA.
21