The European Securities and Markets Authority (ESMA) has published its 2027 work programme, signalling a decisive turn from drafting rules to active supervision of the crypto ecosystem created by the Markets in Crypto-Assets Regulation (MiCA). The plan arrives as the EU-wide transitional period, which allowed legacy operators to continue without full authorisation, concluded on July 1, 2026. With the deadline passed, ESMA is now tasked with ensuring that every crypto-asset service provider (CASP) operating in the bloc meets the standards set out by MiCA.
From rulemaking to supervision – a strategic shift
During a hearing before the European Parliament’s Committee on Economic and Monetary Affairs, ESMA Chair Verena Ross explained that the regulator’s focus “from rulemaking towards supervision and convergence.” She added, “We want innovation to flourish within a framework that provides clarity for firms, safeguards for investors and confidence in the markets.” This articulation frames the 2027 agenda as a coordinated effort to align national supervisors, reduce regulatory fragmentation, and build a trustworthy environment for digital-asset activities across the EU.
Key pillars of the 2027 supervision plan
ESMA’s priorities centre on five concrete themes: operational resilienceoutsourcing risk managementliquidity monitoringreverse solicitation and asset classification. By harmonising periodic reporting from CASPs to national authorities, the regulator aims to generate a set of common risk indicators and a shared supervisory dashboard. These tools will enable supervisors to detect weaknesses early, compare metrics across borders and act in a unified manner when systemic threats emerge.
In addition to risk-indicator standardisation, ESMA will promote clearer definitions of what constitutes a “significant” stablecoin under MiCA, tighten rules on reverse-solicited transactions, and require firms to retain a minimum level of on-shore operational capacity. The overarching goal is to guarantee that crypto firms maintain sufficient activities inside the European Economic Area, thereby limiting over-reliance on offshore service providers.
MIDAS: a centralized market-watch platform
The regulator also detailed the rollout schedule for MIDAS its centralised crypto-market surveillance system. The first phase is slated to be fully operational in 2027 giving supervisors real-time visibility on trading patterns, order-book anomalies and potential market abuse. A second phase, announced earlier this year, will introduce advanced analytical features and broaden the data set available to supervisors. Subject to board approval, this expansion is expected in the fourth quarter of 2027.
Beyond monitoring, MIDAS will feed supervisory experience into the upcoming European Commission MiCA review scheduled for June 2027. ESMA expects its on-the-ground insights to shape any legislative amendments that may follow, ensuring that future rules remain proportionate, technology-aware and capable of protecting investors without stifling innovation.
Preparing for the MiCA review and future legislation
As the MiCA review approaches, ESMA will consolidate the lessons learned from its 2027 coordination activities and feed them into the Commission’s consultation process. The regulator plans to offer concrete recommendations on how to fine-tune the framework, especially regarding the balance between supervisory convergence and national flexibility. By doing so, ESMA hopes to influence any post-review legislative proposal, keeping the EU at the forefront of coherent crypto regulation.
By shifting from rulemaking to an integrated supervisory model, strengthening coordination among national supervisors, and deploying the MIDAS platform, ESMA is positioning the single market to foster responsible innovation, protect investors and sustain confidence in digital-asset markets.
