Investors holding shares or funds exposed to European crypto businesses learned this week that an EU crypto sanctions review, rolling out across three dates in August, could generate between 1,569 and 5,409 governance and counterparty checks across the bloc’s authorised sector, according to projections by FM Intelligence.
The work stems from the EU’s 21st Russia sanctions package, adopted on 23 July 2026. Chainalysis has described it as the largest round of listings in four years, covering 218 designations in total. Among those listings: Harneys notes the package targets 14 crypto-related service platforms spread across six jurisdictions including Georgia, the UAE, Panama, and Belarus.
How FM Intelligence Built the Workload Estimates
FM Intelligence identified 289 authorised crypto-asset service providers (CASPs, meaning firms licensed to offer crypto services under EU law) across the EU27. Of those, 256 hold at least one permission covering trading, exchange, execution, or order transmission, putting 88.6% of the authorised population inside the primary screening group.
The methodology applies three assumptions to those 256 firms: five, ten, or twenty material counterparty relationships per entity. Add one ownership and governance dossier per CASP and the narrow case reaches 1,569 review actions, the base case 2,849, and the wide case 5,409. These are capacity-planning estimates, not forecasts of breaches, affected clients, or compliance costs.
A separate note on the register size: the European Securities and Markets Authority (ESMA) added 14 further CASPs to its MiCA register as of 17 July 2026, bringing the live total to 294. The FM Intelligence figure of 289 reflects an earlier snapshot, so the actual compliance workload could be marginally higher than even the wide-case figure.
What the EU Crypto Sanctions Review Means for Authorised Firms
Three dates divide the work. On 13 August, transaction restrictions take effect for A7 Nigeria, A7 Africa, and PilotFinance. On 23 August, eleven further crypto-linked services enter the transaction-ban schedule, including HTX, EXMO, Rapira, and BitPapa.
EXMO is already winding down: the exchange published a closure notice on 14 July 2026, according to VASPnet. TRM Labs notes that the UK designated EXMO Exchange Limited and Huobi Global S.A. (the entity behind HTX) on 26 May 2026, subjecting both to asset freezes and payment-processing restrictions in the first application of Regulation 17A of the Russia (Sanctions) (EU Exit) Regulations 2019 to a crypto exchange. That UK action covered 18 entities and individuals in total, including Bitpapa and Rapira.
The third date, 25 August, carries the broadest implications. On that day, ownership, control, and governing-body restrictions concerning Russian and Belarusian nationals expand across all MiCA-defined crypto-asset services. This is not a simple name-check exercise. Firms will need to pull shareholder registers, voting-right structures, residency data, and board compositions, not just run a sanctions-name file.
The Belarus angle deserves particular attention. According to Cointelegraph via TradingView, the expanded restriction is formalised in Council Decision (CFSP) 2026/1847, which amends the existing Belarus sanctions framework. The prior rule covered only custody, wallet, and account services. From 25 August it covers all MiCA categories: trading platforms, exchange, order execution, placement, transfer, investment advice, and portfolio management.
The 21st package also, for the first time, creates a legal mechanism allowing the EU to impose a full transaction ban on crypto providers in any third country found to be hosting services that help Russia circumvent sanctions. The relevant annex was empty at publication, so no jurisdiction-wide prohibition was active. That could change quickly if the EU decides to act on the intelligence it now has a formal process to use.
Geographically, the authorised CASP population is concentrated: Germany, France, the Netherlands, Malta, and Cyprus together account for 166 firms, or 57.4% of the EU27 total. That means the bulk of initial compliance requests will likely land with five home-state regulators. Passporting rules allow affected firms to continue serving clients across the bloc, but the August deadlines apply regardless of where the end client sits.
For retail investors in crypto-focused ETPs or funds with exposure to European exchanges, the immediate question is operational continuity: platforms that fail to clear their governance reviews on time face potential restrictions, not just paperwork. The 25 August ownership deadline is the date to watch.
