European Banking Authority Urges Brussels to Bring Crypto Lending and DeFi Gateways Under MiCA Regulation

The European Banking Authority (EBA) has officially requested that the European Commission integrate crypto borrowing, lending, and decentralized finance (DeFi) gateway operations into the scope of the Markets in Crypto-Assets (MiCA) regulatory framework. Unveiled on September 24, the recommendation was submitted as part of the EBA’s formal response to the European Commission’s targeted consultation on the ongoing MiCA review, concluding just ahead of the September 30 consultation deadline.

If adopted by European lawmakers, the proposal would fundamentally reshape how centralized crypto-asset service providers (CASPs) offer yield-generating "earn" products, consumer borrowing, and access to decentralized liquidity protocols across the European Union. While MiCA successfully established a comprehensive licensing regime for crypto exchanges, wallet providers, and stablecoin issuers, the explosive growth of credit markets and the blurring lines between centralized and decentralized finance have prompted financial watchdogs to address remaining regulatory blind spots.

The EBA’s ambitious proposal calls on the Commission to conduct a preliminary cost-benefit analysis before transforming lending intermediation into a fully licensed MiCA service. Under this prospective framework, platforms that facilitate borrowing or route EU-based retail clients to automated DeFi lending pools would face stringent compliance requirements. These would include mandatory user suitability assessments, regulatory leverage caps, and enhanced risk disclosures. Furthermore, the regulatory body has floated targeted restrictions on lending operations that involve asset-referenced tokens (ARTs) and e-money tokens (EMTs) that possess official MiCA authorization.

Background Context: The Deliberate Omission of Lending in Early MiCA Drafts

The absence of crypto lending regulations within the original MiCA framework was not an oversight, but a deliberate decision made during a period of extreme market turmoil. As European legislators negotiated the final text of the regulation in 2022, the digital asset sector was rocked by the catastrophic collapses of major centralized lenders and platforms, including Celsius Network, Voyager Digital, and BlockFi.

Recognizing that consumer protection frameworks for credit and yield products required specialized risk analysis, lawmakers chose to exclude lending and borrowing from MiCA’s immediate enforcement parameters. Instead, Article 142 of the regulation mandated that the European Commission draft comprehensive reports evaluating the structural risks of crypto lending, borrowing, and DeFi activities. The European Commission’s targeted consultation, which opened in May 2026, serves as the primary data-gathering vehicle for fulfilling this statutory obligation. Rather than unilaterally imposing new rules, the EBA has effectively outlined the definitive conclusions it expects the Commission to draw in its upcoming legislative report.

The Blurring Boundaries Between Centralized and Decentralized Finance

According to the EBA’s assessment, crypto lending operations are currently active in at least 16 EU member states. The rapid evolution of financial technology—accelerated by automated trading strategies and artificial intelligence (AI) agents—has systematically eroded the practical distinction between traditional centralized finance (CeFi) and decentralized finance (DeFi).

Crypto lending protocols typically operate as autonomous sets of smart contracts deployed on public blockchains. Because these protocols lack a centralized corporate issuer, board of directors, or registered headquarters, traditional regulatory licensing models are structurally incompatible with them. Consequently, MiCA initially exempted fully decentralized services from its jurisdictional reach.

The EBA’s proposed framework ingeniously bypasses this technical hurdle by shifting regulatory enforcement from the immutable smart contracts to the centralized gateways that route retail traffic to them. Under this scheme, a licensed CASP would be legally prohibited from connecting EU clients to any protocol that has not passed an official certification review. While the underlying DeFi protocol remains decentralized and unlicenced, its accessibility to European retail capital becomes entirely dependent on compliance-approved routing.

Although the EBA’s initial response does not outline the exhaustive criteria required for protocol certification, financial legal experts note that any functional scheme would necessarily evaluate smart contract upgradeability, the reliability and decentralization of price oracles, and the resilience of automated liquidation mechanisms during periods of extreme market stress.

Retail Safeguards, Leverage Caps, and the AI Risk Factor

The EBA’s proposed safeguards are designed to protect retail investors from systemic cascading liquidations. In decentralized credit markets, when the value of a user’s collateral falls below a predefined threshold, the protocol automatically executes a liquidation to recover the borrowed funds. Retail traders frequently utilize "looping" strategies—successively borrowing and redepositing assets to artificially multiply their market exposure. In volatile market conditions, these leveraged positions can be wiped out entirely in a single sudden price movement, resulting in catastrophic collateral loss.

This systemic risk is further exacerbated by the proliferation of AI-driven trading agents. Modern retail investors can deploy automated software instructions that instantaneously distribute capital across multiple complex DeFi protocols without fully reviewing the underlying smart contract mechanics or liquidation thresholds. By introducing mandatory leverage caps, investor suitability tests, and specialized risk disclosures, the EBA aims to insulate European retail portfolios from algorithmic contagion.

Chronology of Regulatory Milestones Under MiCA

The push to regulate crypto lending occurs against a backdrop of rapidly shifting regulatory deadlines across the European Union:

• June 30, 2024: Initial compliance provisions for stablecoin issuers enter into force.
• December 30, 2024: MiCA takes full legal effect, establishing pan-European licensing for Crypto-Asset Service Providers (CASPs).
• March 2, 2026: The EBA’s no-action letter deadline regarding the overlap between the revised Payment Services Directive (PSD2) and MiCA requires firms handling e-money tokens for payment processing to acquire explicit payment authorizations.
• May 20, 2026: The European Commission formally opens its targeted MiCA review consultation.
• July 1, 2026: The maximum transitional period for legacy providers operating under national regulatory regimes officially expires, forcing all active CASPs to secure full MiCA licenses.
• September 22, 2026: The European System of Central Banks (ESCB) issues a formal recommendation urging the modification of stablecoin bank deposit reserve rules.
• September 24, 2026: The EBA publishes its consultative response, calling for crypto lending, borrowing, and DeFi access to be brought under the MiCA umbrella.
• September 30, 2026: The European Commission’s targeted MiCA review consultation officially closes.

The Central Banking Debate: Stablecoin Reserves and Yield Restrictions

The EBA’s intervention follows closely on the heels of a significant policy maneuver by the European System of Central Banks (ESCB). Just two days prior to the EBA’s announcement, the ESCB—comprising the European Central Bank and the national central banks of the 27 EU member states—formally petitioned the Commission to abolish a controversial MiCA mandate.

Current regulations require stablecoin issuers to hold a minimum of 30% of their reserve assets as commercial bank deposits, a threshold that escalates to 60% for tokens classified as "significant." The central banks argue that this rule inadvertently transmits digital asset market stress directly into the traditional banking sector. A sudden, coordinated wave of stablecoin redemptions would force issuers to abruptly withdraw billions of euros in deposits within hours, threatening commercial bank liquidity. The ESCB pointed directly to the March 2023 banking panic surrounding USD Coin (USDC), which occurred after issuer Circle disclosed that $3.3 billion of its reserves were trapped in the failed Silicon Valley Bank.

Both the ESCB and the EBA submissions target the underlying mechanics of yield generation within the digital asset economy. The central banks have strongly endorsed MiCA’s existing prohibition on direct interest payments for stablecoins, advocating that this ban be systematically extended to indirect yield generation facilitated via crypto lending, staking, and intermediated reward programs. The EBA’s parallel proposal to restrict lending involving authorized ARTs and EMTs effectively reinforces this policy goal from the service provider’s operational standpoint.

Implications for European Crypto Exchanges and Retail Users

While immediate operational changes will not occur until the European Commission synthesizes the consultation data and drafts formal legislative amendments, the future regulatory landscape for European intermediaries is becoming clear.

Cryptocurrency exchanges, brokers, and custodians offering popular "earn," staking, or borrowing products will likely be required to secure a distinct regulatory authorization. Onboarding procedures will necessitate rigorous client suitability evaluations, while maximum leverage thresholds will be strictly governed by regulatory statute rather than internal corporate risk management policies.

Furthermore, decentralized protocols seeking exposure to European capital markets will face a strategic choice: subject their smart contract code and governance frameworks to external institutional auditing, or forfeit access to the world’s largest unified regulatory trading bloc.

It is important to note that individual users interacting directly with decentralized protocols via self-custody wallets will remain outside the scope of the EBA’s proposal, which focuses exclusively on commercial intermediaries. However, financial stability watchdogs have repeatedly cautioned that self-directed users operating on non-compliant platforms continue to pose unmitigated enforcement challenges.

Path Forward: Cost-Benefit Analysis and Legislative Approval

Following the closure of the consultation period on September 30, the European Commission is tasked with reviewing all submitted industry feedback, publishing non-confidential responses, and drafting a comprehensive legislative report with the active technical collaboration of the EBA and the European Securities and Markets Authority (ESMA).

A critical institutional question remains unresolved: which regulatory body will ultimately supervise the proposed lending regime? While national competent authorities currently oversee standard CASP licensing, the ESCB has formally recommended consolidating the supervision and enforcement of all European crypto service providers directly under ESMA. This proposal aligns with previous European Commission recommendations from December 2025 aimed at centralizing the oversight of major systemic crypto entities.

Any substantive legislative amendments resulting from the Commission’s report will ultimately require formal approval from the European Parliament and the Council of the European Union. Given that the legislative negotiation and enactment of the original MiCA regulation spanned nearly three years, market participants can expect a protracted, highly scrutinized policy debate before crypto lending and DeFi gateway intermediation officially becomes part of European law.