Ripple Wins a Full MiCA Licence in Luxembourg, Passportable EEA-Wide

Luxembourg's financial regulator upgraded Ripple's preliminary crypto-asset service provider licence to a full authorisation under the European Union's Markets in Crypto-Assets regulation on Monday, five days after the bloc's transitional arrangements expired. The Commission de Surveillance du Secteur Financier granted the conversion, and the resulting permission is passportable across all 30 countries of the European Economic Area. Ripple said its EU entity can now offer regulated crypto services throughout that territory without a separate application in each member state. It is one of the first full authorisations granted to a major US-headquartered firm since the deadline passed, according to CoinDesk, which reported the upgrade alongside Ripple's own announcement.

The Authorisation: A Preliminary Permission Made Full

A crypto-asset service provider, or CASP, is MiCA's category for firms that trade, custody, exchange or arrange crypto assets on behalf of clients, as distinct from the separate regime the regulation applies to token issuers. Firms in that category need an authorisation from a national competent authority in one EEA state, and the CSSF is Luxembourg's. What changed on Monday was the status of a permission Ripple already held: the preliminary licence became a fully compliant one, which is the version that carries the regulation's full set of rights. Neither the company's announcement nor the reporting of it set out what conditions had attached to the preliminary stage or what the CSSF required to lift them.

Passporting: One National Authorisation, Thirty Countries

Passporting is the mechanism that makes a single national licence worth more than the country that issued it. Under it, a firm authorised by one EEA regulator may serve clients in every other EEA state on the strength of that one authorisation, notifying host regulators rather than applying to them, and remaining supervised principally by the authority that granted the licence. The alternative, and the arrangement that prevailed before MiCA, is a country-by-country patchwork in which a firm negotiates with each national regime separately and holds as many permissions as it has markets. That is the practical value of what Ripple received: 30 markets on one file, supervised from Luxembourg.

The Backdrop: A Deadline That Sorted Firms Into Two Groups

The timing is the story's second half. National grandfathering arrangements, which had let firms keep operating under their old domestic registrations while MiCA phased in, ended on 1 July 2026. In a public statement issued on 23 June, the European Securities and Markets Authority set out what that meant: from that date, a firm without a full CASP authorisation may not onboard new EU clients, open new accounts or market in the bloc, and must run an orderly wind-down. The close of the transitional regime left every service provider in one of two positions, authorised or winding down, with no third option.

Not every large firm ended up on the same side of that line. Binance withdrew its MiCA application to Greece's Hellenic Capital Market Commission and told EU users it would stop providing services, suspending some of them and halting new EU registrations from 1 July. A firm leaving the bloc rather than completing an application and a firm converting a preliminary licence into a passportable one, five days apart, are the two outcomes the deadline was designed to produce.

What Follows: A Licence Granted, a Business Not Yet Described

What Ripple does with the authorisation is the open question. The company said the permission lets its EU entity offer regulated crypto services across the EEA, but did not detail which services it intends to launch first, in which markets, or on what timetable. Nor is it clear how many other applications sit in national queues behind this one, or how quickly regulators outside Luxembourg will work through them now that the transitional cushion is gone. For firms still waiting, the CSSF decision is mainly evidence that the post-deadline pipeline is moving.