Binance Never Really Left Europe

Binance Never Really Left Europe

In mid-June, two people familiar with the matter told Reuters that Greece's securities regulator was preparing to reject Binance's application for an EU crypto license. Six days before the July 1 deadline the exchange pulled the bid, told European customers it would restrict most services, and the story basically wrote itself: the world's largest crypto exchange had been refused entry under Europe's new rulebook, and millions of users would migrate to licensed rivals.

That was the narrative. The theme underneath is messier, and it surfaced this week in work by Sandmark, a research firm, which ran fresh registration tests in five EU countries and published its findings. Seven weeks after the cutoff, the tests found, Binance is still opening and verifying new customer accounts that did not exist before July 1 — with no warning about licensing anywhere in the onboarding flow.

Step back for a moment into what the deadline actually was. MiCA, the EU's Markets in Crypto-Assets Regulation, went from transitional to binding on July 1. From that date a crypto firm needs authorization from at least one member state, and that authorization then passport across the whole bloc. ESMA, the EU's markets regulator, had already told unauthorized providers to stop onboarding new customers immediately and to wind down by the deadline. Binance was not on ESMA's register of authorized firms. Officially, it stopped. The interesting question is which entities were actually serving the customers who still got through.

Follow the Rails, Not the Rhetoric

Sandmark's testers signed up as ordinary retail applicants from Spain, France, Germany, Austria and Belgium. One account, opened on August 19 with a European ID and address, was fully verified and funded with crypto. Another Belgian registration was live in about ten minutes. The tell is the corporate structure underneath: those customers contracted with Binance Poland, a Polish-registered virtual asset service provider; payments ran through BPay Global, Binance's Bahrain affiliate, and settlement happened at a bank in Tbilisi, Georgia. At the time, Poland had no authorized providers on ESMA's register at all. The EU has a locked front door, and a back corridor that runs east through Poland, Bahrain and Georgia — a corridor no single supervisor obviously patrols.

This is where the story stops being about one exchange and becomes a test of how the rule is written. MiCA governs the provision of crypto services, not the mere accessibility of a website. So there is a running seam between "a person in the EU can register and fund an account" and "a licensed entity in the EU is providing that person a service." Binance is leaning on exactly that seam. It says availability varies by jurisdiction, transitional rules and individual circumstances, that its services align with relevant legal frameworks, and that it is actively progressing an application through another member state. The uncomfortable part: after July 1 there is no transitional rule left to invoke — ESMA closed that door — and the company has been "actively progressing" for two months without appearing on any register.

The Gate Worked. The Perimeter Didn't.

Stand far enough back and the contradiction sharpens. The legend of the past two months was that MiCA was a merciless gatekeeper, and the register numbers do show how few firms made it through: by August 20 ESMA listed 330 authorized providers, up from 281 in early August, while 1,062 of the roughly 1,343 firms that had operated before the transition still had no approval. About four out of five firms remain outside the perimeter. But the register is a certification list, not a patrol. Nothing in it scans the ground for operators who simply didn't apply.

The enforcement record so far is the giveaway. The first confirmed penalty under MiCA was imposed by Austria's markets authority on August 14: a €70,000 fine on Bitpanda for failing to publish a crypto whitepaper in time and for marketing disclaimers. Paperwork. No authority has yet sanctioned a firm for operating without authorization, and Binance does not even appear on ESMA's separate register of firms flagged as providing services without authorization — a list of 167 names, many placed there by Italy's Consob.

What makes that sharper than a routine compliance lapse is what MiCA's gate is actually screening for. Authorization under the rulebook is an integrity test as much as a technical one: management and major shareholders must pass a "good repute" standard. That is very likely where Binance's Greek bid collapsed, under the weight of the firm's US settlement history and the standing of its management. Every layer of MiCA's consumer-protection logic depends on that front gate doing its job. The gate seems to have worked. The perimeter behind it did not. The entire theory only holds if a firm, once refused, cannot slip in through a side entrance and keep signing up customers.

Now the part I keep turning over, because it is the strongest case Binance has, and it is not frivolous. Co-CEO Richard Teng argues MiCA is backfiring: he says 70% of the funds affected EU users pulled out went to self-custody wallets, with only 30% moving to licensed venues. If that is right, the regime's intended outcome — herding European customers toward supervised platforms — did not happen; users chose private keys over MiCA-approved exchanges. There is real force to the point. If the biggest venue is forced out and its customers head for unhosted wallets, the oversight the rule was supposed to deliver shrinks. But those are Binance's own numbers, from its own exit, and they double neatly as a defense of its own book. The company's framing — that MiCA should be judged by who it licenses, not who it excludes — reads differently after this week's tests. It is not only who MiCA excluded. It is who MiCA failed to notice never really left the room.

What I'm Watching

ESMA has told reporters it received questions about Binance's post-deadline onboarding but needs time to respond. That is the real next event: whether the watchdog treats the pattern as the breach its own guidance says it is, or lets the side door stand. I am also watching Poland, whose corporate register hosts the contracting entity, and whether anyone claims jurisdiction over a chain that signs up a customer in Brussels and settles them in Tbilisi. And I am watching the distribution layer: Google restricted Binance's Android app in parts of the EU in late July, and platform-level pressure may move faster than any supervisor. If Binance's alternative application actually lands — a passport that would make new EU onboarding legal going forward — this seven-week window becomes a footnote. The question is whether anyone chooses to make it a precedent first.

Sandmark's tests are evidence of a pattern, not an official finding, and no national regulator has ruled on this; corporate routing often has legal justifications that hold up. But the burden does not sit with a research firm. ESMA's own guidance said unauthorized providers must stop onboarding new EU customers and that serving them after the transition breaches EU law. Regulators now have to decide whether the pattern they have been shown crosses that line. MiCA's licensing test was always going to be the easy part. The enforcement test was the real exam, and so far it has been grading marketing brochures while the world's largest exchange quietly keeps a seat at the table.