$330 Million [~1.19 Billion / ~€280 Million] Reasons Why MiCA Enforcement Cannot Wait
The reports coming out of Poland in recent weeks are not a crypto story. This is a consumer protection story.Hundreds of thousands of users cannot get their money out. A Bitcoin wallet worth approximately $330 million [~1.19 Billion / ~€280 million], which the exchange's own CEO pointed to on camera last week as proof of solvency, sits untouched because nobody at the company holds the private key; and the founder who does has been missing since March 2022. Poland's Prime Minister has told parliament that the exchange funded politicians who voted against crypto regulation, and alleged ties to Russia. Criminal investigators are involved. Poland's consumer protection authority, UOKiK, has been receiving and processing complaints from affected users and has an open investigation against the exchange.
Whatever those investigations conclude, the damage to real people is already happening. Savings that people trusted an exchange to look after are out of reach. That is the starting point for this conversation.
But it is not the only conversation to have.
A predictable outcome
MiCA was written precisely because rogue crypto platforms have demonstrated that voluntary standards are not enough. Segregated customer assets. Proof of reserves with independent verification. Operational resilience requirements. Fit-and-proper tests for the people running the business. None of these are abstract. Each one addresses a specific failure mode that has played out somewhere in this industry.
The exchange at the centre of this crisis has been operating under a legacy Estonian VASP licence that expires on 1 July 2026. It does not hold a MiCA-compliant CASP authorisation and an active criminal investigation is not a strong foundation for a licensing application.
MiCA would not have made this impossible. Regulation cannot eliminate every failure. But it makes concealment substantially harder and intervention substantially earlier.
Compliance is not a badge
There is a view in parts of this industry that regulatory licensing is a marketing exercise, something you do so you can put a logo on your website. We do not hold that view. Obtaining our MiCA authorisation from our regulator meant structural work: governance frameworks, customer asset protection, operational resilience, and the legal architecture to make those things real rather than cosmetic.
Some in the industry took the opposite approach, treating early MiCA compliance as something for slower, less ambitious companies. That attitude has consequences, and right now those consequences are landing on ordinary people in Poland who had nothing to do with the decisions made in an Estonian boardroom.
The enforcement question
This is not a grey area. There is a quantified, ongoing example of consumer harm inside the EU, caused by an operator whose authorisation does not meet MiCA standards and is about to expire entirely.
Transitional provisions run out on 1 July. Any exchange still operating in the EU without a valid CASP licence after that date should not be operating at all and should actively managing the migration of existing clients to regulated platforms. Policymakers and supervisors who want to demonstrate that MiCA has the teeth to deliver consumer protections have a concrete opportunity in front of them right now. Regulators must enforce the law to protect consumers by removing unregulated apps from the app-stores at a minimum. Letting it pass would send a significant signal of its own.
For Polish users right now
If you are a Polish crypto holder trying to access your funds, formal routes are available. Complaints to Finantsinspektsioon (the Estonian regulator), Poland's UOKiK, Police and the National Prosecutor's Office are all active and relevant. European consumer protection law applies regardless of where the exchange is registered. File! Document everything. The window before any potential wind-down makes enforcement materially harder is shorter than most people realise.
Longer term: before trusting any exchange with your funds, make sure it publishes Proof of Reserves (a cryptographic demonstration that all customer and corporate digital assets are fully backed), look it up on the ESMA register of authorised CASPs. If it is not on there, EU regulatory protections do not apply to you.
OKX is on it.
Erald Ghoos is CEO of OKX Europe. OKX holds a MiCA CASP authorisation issued by the Malta Financial Services Authority.
(EUR equivalent calculated at the ECB reference rate of €1 = $1.1782, 16 April 2026)
Digital Assets subject to volatility and not insured. Not financial/investment advice. Not all products and services offered in all regions. Exclusions and T&Cs apply.
© 2026 OKX. This article may be reproduced or distributed in its entirety, or excerpts of 100 words or less of this article may be used, provided such use is non-commercial. Any reproduction or distribution of the entire article must also prominently state: “This article is © 2026 OKX and is used with permission.” Permitted excerpts must cite to the name of the article and include attribution, for example “Article Name, [author name if applicable], © 2026 OKX.” Some content may be generated or assisted by artificial intelligence (AI) tools. No derivative works or other uses of this article are permitted.
