Due receives MiCA authorization from Spain's CNMV

Key takeaways

We’re proud to announce that Due has received official Markets in Crypto-Assets (MiCA) authorization from the CNMV (Comisión Nacional del Mercado de Valores), Spain's national securities market regulator, making us one of the first non-bank CASPs to receive it. The authorization covers the exchange of crypto-assets for fiat currency and the exchange of crypto-assets for other crypto-assets.

MiCA is the EU's unified regulatory framework for crypto-asset services, fully in force since December 2024. It replaced the fragmented national VASP regimes that had governed crypto-asset service providers across EU member states with a single standard.

That standard is demanding. To receive authorization, a company must demonstrate adequate capitalization, robust governance structures, consumer protection mechanisms, and AML/CFT compliance programs. The CNMV reviews applications rigorously - the process is closer to obtaining a banking license than a standard business registration.

Authorization is not registration. The distinction matters.

Why this matters now

Once registered, this makes Due a fully authorized partner for compliant fiat to stablecoin connectivity in the EU. In practice, that means fintechs and financial institutions can exchange crypto-assets for fiat and crypto-assets for other crypto-assets through Due's infrastructure, with a provider that has been assessed and authorized by the CNMV to the same standards applied to traditional financial institutions.

This matters more as the July 2026 deadline approaches. MiCA's grandfathering period ends then, and any fintech or financial institution currently operating with a provider running under transitional arrangements will need to have sorted their regulated infrastructure by that point. Partnering with an already authorized provider now removes that uncertainty from your roadmap.

If you're operating in European Union and want to understand what building on Due's authorized infrastructure looks like for your use case, get in touch.