European financial watchdogs are warning that criminals are exploiting the shift to the bloc's new crypto regime, using the confusion to impersonate officials and licensed exchanges and drain user accounts. The alert comes as the full effect of MiCA — the EU's sweeping crypto rulebook — continues to reshape the market, with hundreds of firms already forced to close their doors this year.
How the scam works
The fraudsters aren't breaking into systems. They're posing as the people you're supposed to trust. In the reported schemes, scammers pretend to be official regulators or legitimate exchanges, then direct users to fraudulent websites designed to look like the real thing. Once a user connects a wallet or enters credentials, the assets are gone.
The warnings are aimed at retail users, but the timing is telling. This is a moment of maximum friction: old players are leaving, new ones are registering, and the average customer isn't sure who's legit anymore. That uncertainty is exactly what the scammers are feeding on.
The MiCA shakeout
MiCA was supposed to bring clarity. In practice, it's been a brutal filter. Hundreds of firms have been pushed out of the market rather than shoulder the cost of full compliance — a wave of exits that leaves a vacuum where established, licensed brands used to be.
Into that vacuum step the impostors. A fake site that mimics a departing exchange can look more credible than the real thing, especially if the real firm has already stopped responding to customers. Watchdogs are telling users to double-check URLs, verify domain names, and treat unsolicited messages with suspicion.
The broader point is uncomfortable: the transition to a regulated market is itself becoming a vector for theft. The authorities are aware, but they're playing catch-up against a scam operation that's built for speed.
What users should watch for
The official advice boils down to a few basics. Never follow links from emails or messages to log in to an exchange. Type the address yourself. Check whether the firm is actually on the regulator's list of authorized entities — and if it isn't, assume it's not safe. If a so-called official contact asks you to send assets to a verification wallet, that's the scam, not the process.
Regulators are expected to ramp up public warnings in the coming weeks as more firms exit the market. For now, the most vulnerable users are those chasing the last few withdrawals from a closing platform — exactly the people scammers are impersonating.
