Crypto-assets: how to verify that a provider is authorized (MiCA and AMF whitelists)

July 1, 2026, marked the end of the transition period for the French regime: the European MiCA regime now applies. Only authorized crypto-asset service providers (PSCAs) can offer crypto services in France. To verify a provider, consult the AMF's whitelists (PSCA category) and check that the platform's website address matches the one listed. A company that announces it has submitted an application is not necessarily authorized. According to the AMF, investments in crypto-assets remain inherently very risky: the invested capital can be lost in whole or in part.

This page is dated 17/10/2026. The lists are subject to change: at that time, the most recent authorization displayed in the PSCA list was dated 15/10/2026. We do not mention any service provider names.

This page deals with the verification of a service provider. It does not cover the text of the MiCA regulation, the ESMA register in detail, the possible compensation of customers in the event of a service provider's failure, the legal difference between the former PSAN status and that of PSCA, nor the taxation of capital gains, which are the subject of other pages.

What changed on July 1, 2026

According to the AMF (page dated 27/07/2026), the transition period of the French regime ended on July 1, 2026. Since then, only authorized PSCAs can provide crypto services in France.

An unauthorized service provider must communicate with its clients to inform them about the fate of their crypto-assets. The holder has three options, which the AMF outlines with an invitation to compare fees and processing times:

1. transfer their cryptocurrencies to the platform of their choice authorized as a PSCA; ;
2. transfer them to a self-hosted wallet; ;
3. convert them into euros.

As of the review date, the transition period ended 108 days ago.

Checking a service provider in five steps

The whitelist includes service providers authorized by the AMF or by an authority of another European Union member state to serve France. The AMF recommends prioritizing companies listed on this list. It can be filtered by category (all, miscellaneous goods, PSCA, PSFP) and downloaded in CSV or PDF format.

What these checks don't reveal

Submitting an application is not an authorization

Some companies claim to have submitted an application for authorization. However, the AMF (French Financial Markets Authority) maintains that submitting an application does not guarantee approval. Being listed on the whitelist is the starting point, along with having the correct website address. The AMF clarifies on its "Checks" page that simply verifying a company's presence in official registers is not always sufficient: hence the need to check the company name and website address, and consult the blacklists.

The European passport: what it changes for you

A platform authorized like PSCA in one Member State can offer its services in other European Union countries. The AMF draws two conclusions for the client from this:

• Customer service may be available in a language other than French; ;
• In the event of a dispute, the AMF Ombudsman may not be competent to help you.

PSCAs are subject to authorization and supervision, enhanced organizational, governance and cybersecurity requirements, and must inform their clients about their services, fees and risks.

Another important point to remember: anyone holding a digital asset account on a foreign platform must declare it. According to the French government's public service website, the fine is €750 per undeclared account, and €1,500 per account if its value exceeds €50,000 at any point during the year in question. A surcharge of €80 (%) applies to tax reassessments related to failure to declare. The form is the same as for accounts opened, used, or closed abroad. This topic is covered on our page dedicated to foreign accounts and contracts.

The pitfalls identified by the AMF

• Impersonating authorized companies, with sites whose addresses are very close to those of the whitelists (the AMF cites the example of one extra letter in the name or internet address of the site).
• Solicitations from unauthorized companies which encourage users to transfer their cryptocurrencies to their sites.
• Private keys Do not share them with anyone, you risk losing your cryptocurrencies.
• A fake contact from the AMF. The AMF does not proactively contact savers by telephone or private messaging, does not collect fees from individuals, and does not freeze accounts. It also does not contact individuals to help recover lost funds.
• Warning signs (AMF blacklist page): an unknown interlocutor, very high promised returns, a decision requested urgently, a transfer to a foreign bank account.

In the event of fraud, the AMF (French Financial Markets Authority) states that the only recourse is to file a complaint with the judicial authorities, and that the chances of recovering your money are very slim. If you have any doubts, they advise contacting AMF Epargne Info Service (French Financial Markets Authority Savings Information Service).

Numerical example (fictitious profile)

Situation. Nadia, 47, lives in Lyon. She holds cryptocurrencies on a platform that informs her in October 2026 that it is not authorized in France. She checks the AMF whitelist, PSCA category, and selects two platforms authorized in another European Union member state, verifying their company name and website address. She opens an account on each. Assumptions based on her profile: at a certain point in the year, account A is worth €62,000 and account B €18,000; these two platforms are considered "foreign" platforms according to the French government's public service information sheet, which does not define this term.

Issue. In this scenario, these two accounts are digital asset accounts on foreign platforms. What happens if Nadia doesn't declare them?

Strategy. Apply the penalty scale from the public service information sheet to each account: €1,500 if the value exceeds €50,000 at any point during the year, €750 otherwise. Nadia declares her two accounts with her income tax return.

Result. Account A (€62,000): €1,500. Account B (€18,000): €750. Total fines avoided by the declaration: €2,250. The 80 % surcharge on any potential tax reassessments would be added; it is not quantified here, as there are no tax reassessments in the profile.

Fictitious profile. Account values are hypothetical. The calculation does not predict your situation.

What changes depending on your situation

• The location where the platform is established. A service provider authorized in another Member State can offer its services in France. The government website refers to "foreign platforms" without defining them: the classification of your account, and therefore the reporting obligation, should be examined on our page dedicated to accounts and contracts abroad.
• The value of the account. The amount of the fine depends on the threshold of €50,000.
• The risk of loss. Crypto-asset investments remain inherently very risky: the invested capital can be lost in whole or in part.
• Your exit option (other PSCA, self-hosted wallet, conversion to euros): it has fees and delays to compare.
• The status of your current platform : if it is not authorized, it must inform you of the fate of your cryptos.
• Your tax situation : taxation of transfers is not addressed on this page.

These points are examined on a case-by-case basis. No results are promised.