Until 2024, "finfluencer" was a consumer-protection problem dressed up as a content category. Posts disclosed nothing, promoted everything, and the worst that happened was a fine from a national advertising authority weeks after the rug was already pulled. Under the EU's Markets in Crypto-Assets Regulation (MiCA), that era is over.
MiCA does not contain a chapter called "Influencers." It does something much more effective: it defines what a marketing communication is, sets binding rules for its form and content, and makes anyone who disseminates it — including paid social posts by third parties — co-responsible. ESMA has confirmed in its 2024 statements that finfluencers fall squarely inside that perimeter.
Here is what crypto influencers operating in the EU can no longer do as of 2026, what the penalties look like, and where the liability lands.
The Legal Basis: It Was Never Just "Advertising"
MiCA Article 3(1)(27) defines a marketing communication as any disclosure of information, other than a crypto-asset white paper, that is intended to promote the offer to the public or the admission to trading of a crypto-asset. That definition is medium-agnostic. A TikTok video, a YouTube short, an X thread, a Telegram pin, or a paid Instagram story all qualify the moment they promote a specific token, a CASP, or an asset-referenced or e-money token.
The substantive rules sit in three articles — Art. 7 (crypto-asset offers under Title II), Art. 27 (asset-referenced tokens, Title III), and Art. 53 (e-money tokens, Title IV). The common requirements are blunt:
- The communication must be clearly identifiable as such
- The information must be fair, clear, and not misleading
- It must be consistent with the white paper, where one exists
- It must include a statement that the white paper has been published and a URL to it
- It must be notified to the relevant National Competent Authority on request
None of these are aspirational. They are operative obligations, and the regulation puts the responsibility on the issuer or offeror, the CASP if a CASP is involved, and — through general EU consumer protection principles read together with MiCA — on the person actually publishing the post.
What Influencers Can No Longer Do
The following list is not exhaustive, but it covers the behaviours that an EU compliance officer or NCA will treat as in-scope breaches starting now.
1. Promote a token without disclosing the post is marketing
Stealth marketing — the "I just discovered this gem" format — collides with Art. 7's requirement that the communication be clearly identifiable as such. A buried #ad hashtag at the end of a 40-tag caption does not meet the standard. Position, contrast, and language must make the commercial nature unambiguous.
2. Promote a token whose offer has no published white paper
If the project never published a MiCA-compliant white paper, the offer itself is non-compliant and a marketing communication tied to it is automatically defective. The influencer is promoting a regulatory breach, not a token. ESMA has made clear that ignorance of whether a white paper exists is not a defence when the person is acting in a commercial capacity.
3. Make claims inconsistent with the white paper
"Guaranteed 10x," "backed by the ECB," "regulated under MiCA" when the project is not, "100% reserve-backed" for a token whose white paper says otherwise — all of these are independently sanctionable. The white paper sets the ceiling for what can be claimed; the marketing communication cannot exceed it.
4. Promote an ART or EMT without the mandatory warnings
Stablecoins (asset-referenced and e-money tokens) carry their own disclosure regime under Art. 27 and Art. 53. Promoting USDT, USDC, EURC, or any other ART/EMT without the required statements on redemption rights, reserve composition, and issuer authorisation is a separate violation from generic Art. 7 breaches.
5. Promote an unauthorised CASP to EU residents
Promoting an exchange, broker, or custodian that does not hold a MiCA authorisation or a valid passport for the targeted jurisdiction makes the influencer a vector for unlawful service provision. National authorities — the AMF in France, BaFin in Germany, and CONSOB in Italy have all signalled this — treat the promoter as part of the offering chain.
6. Use forward-looking returns or past-performance claims without statutory warnings
The marketing communications guidelines that ESMA finalised in 2024 explicitly carry over the financial-promotions logic: any reference to past or expected performance triggers risk warnings, balance requirements, and disclosure of methodology. "This 100x'd in three weeks" is no longer a hook — it is evidence.
7. Promote tokens not admitted to trading in the targeted jurisdiction
MiCA operates on a notification-and-passport model. If a token has not been notified for offer in the country whose users the post is targeting (and language, hashtags, and follower geography are all evidence of targeting), the marketing communication is unauthorised in that jurisdiction.
8. Run paid promotion of privacy coins or delisted assets
Tokens delisted from EU CASPs — whether for privacy-coin reasons, governance failures, or regulatory non-compliance — cannot lawfully be the subject of a promotion targeting EU residents. The fact that a token is still tradable on a non-EU venue does not change the analysis.
The Reframing That Catches Most People Off Guard
The most common mistake is treating MiCA as a rulebook for issuers. It is not. It is a rulebook for the entire offering chain, and ESMA has made the point publicly: the person publishing the marketing communication is part of that chain. "I'm just an influencer, the brand is responsible" is not a defence in EU financial regulation, and never has been.
Who Is Actually Liable
Liability under MiCA is layered, not exclusive:
- The offeror or issuer — primary responsibility for the white paper and for any marketing communication disseminated with their consent
- The CASP — if a CASP commissioned or distributed the communication, it bears CASP-level obligations under Art. 66 (act honestly, fairly, professionally)
- The publisher of the post — under general EU consumer protection law read with the MiCA marketing rules, the person publishing the communication is jointly responsible for compliance with the form and content requirements
In practice this means the influencer can be sanctioned even if the issuer is sanctioned in parallel — and even if the issuer is outside the EU and unreachable, which is the usual case in rug-pull scenarios. National authorities can pursue the resident publisher when the foreign issuer cannot be reached.
Early Signals From the NCAs
2025 was the warning shot. France's AMF blacklisted dozens of unauthorised crypto platforms whose distribution depended on French-language influencers. Italy's CONSOB issued public alerts naming specific promotional schemes. BaFin in Germany has signalled it will treat paid posts targeting German users the same way it treats unauthorised investment advertising. Spain's CNMV already requires high-follower-count influencers to notify the regulator before promoting crypto-assets — a rule that pre-dates MiCA and now stacks on top of it.
The maximum administrative fines under Art. 111 are EUR 5,000,000 or 3% of annual turnover for legal persons, and EUR 700,000 for natural persons, for breaches of the offer and marketing-communication provisions. Higher caps apply to ART/EMT violations. These are statutory maxima; in early enforcement they will not be hypothetical.
What This Means in Practice
If you are a creator, the practical bar is now: you do not promote a crypto-asset to EU residents unless you can answer three questions in writing.
- Is there a notified MiCA white paper for this token, and does my content stay consistent with it?
- If a CASP is involved (exchange, broker, custodian), is it authorised in the jurisdiction I am targeting?
- Is the marketing nature of the post unmistakable in the first frame, the first second, and the first line of text?
If you are a CASP or an issuer, the practical bar is: you cannot rely on the influencer being savvy. You vet the people you pay, you supply them with the white-paper-consistent language, you keep a record of what was published, and you notify the NCA on request. The compliance team owns the influencer roster the same way it owns the partner roster.
Bottom Line
- MiCA marketing rules apply to any disclosure intended to promote a crypto-asset — format and platform do not matter
- The publisher of the post is part of the offering chain and can be sanctioned directly
- Maximum administrative fines reach EUR 5M (legal persons) and EUR 700K (natural persons) per Art. 111
- Stealth marketing, performance claims, and promotion of unauthorised CASPs are the highest-risk behaviours
- National authorities have begun enforcement; the early caselaw will not be lenient
For the full regulatory context, see our MiCA Compliance Guide and CASP Licensing Roadmap. For the marketing-communications side of an issuer's programme, the Governance & Risk article covers the board-level controls.
Vet token offerings before they hit your platform
Screen wallets, monitor entities, and generate compliance reports with 1B+ labeled addresses and 305+ data sources.
See Compliance Solutions