EBA Clarifies PSD2-MiCA Rules as NAL Transition Ends in 2026

Alejandro Martínez · 2026-02-26

If you're a payments professional in the U.S. watching European regulations, you've probably been tracking the tricky overlap between PSD2 and MiCA. It's a classic case of new rules bumping into old ones. Well, the European Banking Authority (EBA) just dropped a major opinion on February 12, 2026, and it's all about what happens when the temporary peace ends. The core issue? Crypto-asset service providers (CASPs) handling electronic money tokens (EMTs). Under MiCA, these are crypto-assets. But under the older PSD2, transferring them for clients can look a lot like a regulated payment service. The EBA had issued a No Action Letter back in June 2025 to ease the friction. That gave everyone a nine-month breather, but it's set to expire on March 2, 2026. This new opinion is the roadmap for what comes next. ### The Backstory: The 2025 No Action Letter Let's rewind for a second. In June 2025, there was a ton of uncertainty. Did a CASP need separate authorizations under both MiCA *and* PSD2? The EBA could have taken a hard line, demanding dual licenses overnight. Instead, they chose a more practical path. They advised national competent authorities (NCAs) to do a few key things: - Only treat a specific subset of EMT services as requiring PSD2 authorization. - Allow a transition period until March 2, 2026, before enforcing PSD2 rules. - Streamline the process by using info already submitted for MiCA compliance. - Go easy on enforcing some PSD2 requirements, like specific safeguarding rules, right after authorization. It was a smart move. It prevented a regulatory traffic jam and let businesses adapt without a sudden, costly stop. But everyone knew the clock was ticking.  ### Where PSD2 and MiCA Collide Here's the legal knot. MiCA, the new framework for crypto, doesn't replace the existing payment services law (PSD2). Think of it like adding a new wing to a house without changing the foundation. An EMT is defined as a crypto-asset pegged to a single fiat currency. Simple enough. But under PSD2, executing a payment transaction is a regulated service. So when a CASP moves EMTs from one user's wallet to another's, that activity can fall under PSD2's "payment service #3." The EBA's latest opinion makes two critical clarifications. First, it doesn't matter if the crypto wallet is technically a "payment account" or not. Second, PSD2 doesn't give a free pass for so-called "first-party" transfers. > "Even transfers between accounts held by the same user at the same provider can be regulated payment transactions," the EBA notes, referencing their earlier guidance. So, if a CASP is holding your EMTs and then sends them to you as part of a payout, that transfer itself might need PSD2 authorization. It's a nuanced point that has big implications for how crypto services are structured. ### What This Means for U.S. Professionals You might be thinking, "This is European regulation, why should I care?" Well, if your firm operates across the Atlantic or deals with European partners, this clarity is huge. The end of the transition period means CASPs have a firm deadline. By March 2, 2026, they need to be clear on whether their services require that dual authorization. The EBA is pushing for consistent supervision across the EU. For U.S.-based compliance teams, that means one clearer set of expectations to plan for, rather than 27 different interpretations. The opinion grounds itself in the EBA's mandate to harmonize practices, which in theory should make life a bit more predictable. The bottom line? The regulatory sandbox is closing. The EBA's February 2026 opinion is the final notice. It confirms that the world of crypto-assets and traditional payment services is officially merging in the EU's rulebook. For anyone in the payments space, understanding this interplay isn't just academic—it's essential for planning the next two years.