European Banking Authority Urges Brussels to Bring Crypto Lending and DeFi Gateways Under MiCA Regulation

The European Banking Authority (EBA) has formally requested that the European Commission integrate crypto lending, borrowing, and decentralized finance (DeFi) intermediation into the Markets in Crypto-Assets (MiCA) regulatory framework. Published as part of the EBA’s official response to the European Commission’s targeted consultation on MiCA, the recommendations arrived just six days before the public feedback window closed on September 30. The proposal seeks to eliminate a critical regulatory loophole left open during MiCA’s initial drafting, a period heavily influenced by the high-profile collapses of major centralized crypto lenders in 2022.

If adopted, the EBA’s recommendations would fundamentally reshape how European consumers access crypto-backed loans, earning products, and automated financial protocols. By targeting intermediaries rather than the decentralized code itself, the regulatory body aims to impose strict institutional safeguards on services that currently exist in a legal grey area across at least 16 European Union member states.

Background and Context: Closing the Post-Celsius Regulatory Gap

When MiCA was originally negotiated and drafted, global cryptocurrency markets were reeling from the consecutive insolvencies of prominent lenders such as Celsius Network, Voyager Digital, and BlockFi. To fast-track the foundational framework, lawmakers deliberately excluded crypto lending and borrowing from the primary text of the regulation. Instead, Article 142 of MiCA mandated that the European Commission produce a comprehensive report assessing the risks and operational realities of DeFi and crypto credit markets.

The current targeted consultation serves as the primary data-gathering vehicle for that mandated report. Rather than unilaterally imposing new rules, the EBA has leveraged this consultation to advise the Commission on what conclusions the final report must draw.

This intervention comes at a critical juncture in the implementation of European crypto laws. The maximum transitional period for legacy providers operating under national regimes concluded on July 1, 2026, meaning all firms offering crypto-asset services to EU clients must now hold a standard MiCA license. Furthermore, a strict March 2, 2026 deadline enforced by the EBA required payment service providers handling e-money tokens (EMTs) to secure dual authorization under both the revised Payment Services Directive (PSD2) and MiCA. With these preceding regulatory gaps successfully closed, crypto lending remains one of the final major financial frontiers still operating under fragmented national laws or entirely outside formal oversight.

Proposed Regulatory Architecture: Licensing Lending Desks and Certified DeFi Gateways

The EBA’s core recommendation asks the European Commission to conduct an initial cost-benefit analysis before transforming crypto lending intermediation into a fully licensed MiCA service. Under this framework, Crypto-Asset Service Providers (CASPs) that facilitate borrowing, lending, or yield-generating earn products would become subject to rigorous compliance and supervisory mandates.

Crucially, the proposal addresses the inherent structural challenge of regulating DeFi: smart-contract-based lending pools that operate without a central issuer, corporate board, or registered office. Because MiCA currently exempts fully decentralized services from its scope, the EBA has engineered a workaround. Rather than attempting to license the underlying smart contracts, the authority proposes that licensed CASPs be legally restricted from routing EU clients to any DeFi protocols that have not undergone an external certification process.

While the EBA’s initial response does not outline the exact criteria for protocol certification, compliance experts note that any workable scheme would inevitably require audits of:

• Administrative key management and smart-contract upgradeability mechanisms.
• The integrity and decentralization of price oracles feeding data to the protocol.
• Automated liquidation engines and market depth during periods of extreme collateral devaluation.

Enhanced Retail Safeguards: Suitability Tests and Leverage Caps

To protect retail investors from complex and high-risk strategies, the EBA’s proposals introduce a suite of mandatory consumer safeguards. CASPs offering intermediated lending or DeFi access would be required to implement comprehensive user suitability and appropriateness tests prior to onboarding clients.

Furthermore, the EBA is floating strict leverage caps and mandatory enhanced disclosures. High-frequency loops—where users repeatedly deposit and borrow assets to multiply their market exposure—expose retail portfolios to rapid liquidations. When collateral values drop below preset thresholds, automated smart contracts liquidate positions instantaneously, frequently resulting in near-total losses for the borrower. The integration of artificial intelligence tools by retail investors further exacerbates this risk, as automated agents can distribute funds across multiple unfamiliar protocols with a single user prompt. Under the EBA’s plan, regulatory leverage limits would supersede internal risk frameworks set by individual exchange platforms.

Intersection with Stablecoin Reserves and Yield Bans

The EBA’s push for lending oversight aligns closely with broader regulatory debates surrounding stablecoin reserves and indirect yield generation. Just two days prior to the EBA’s announcement, the European System of Central Banks (ESCB)—comprising the European Central Bank and the national central banks of the 27 EU member states—submitted its own consultation response.

The ESCB formally requested that the Commission scrap the controversial requirement that stablecoin issuers hold at least 30% of their reserves in commercial bank deposits, or 60% for significant tokens classified under MiCA. Central bankers argued that this rule mechanically transmits cryptocurrency redemption pressure directly into the traditional banking sector, citing the March 2023 distress experienced by USD Coin (USDC) after Circle disclosed billions in deposits held at Silicon Valley Bank.

Both the ESCB and the EBA responses target the generation of yield on digital assets. While MiCA explicitly bans direct interest payments on e-money tokens and asset-referenced tokens, market participants have frequently circumvented this restriction by routing stablecoins into external lending protocols or staking programs. The ESCB has urged regulators to extend the interest ban to cover indirect returns, while the EBA’s proposed restrictions on lending involving authorized tokens aim to close the same loophole from the service provider side.

Chronology of MiCA Implementation and Evolution

• June 30, 2024: Regulatory technical standards and initial provisions for stablecoin issuers begin to apply across the European Union.
• December 30, 2024: MiCA enters into full legal application, initiating mandatory CASP licensing requirements.
• March 2, 2026: The EBA no-action deadline expires, requiring firms handling e-money tokens for payments to secure formal payment service authorizations.
• May 20, 2026: The European Commission officially opens its targeted MiCA review consultation.
• July 1, 2026: The final transitional period for legacy crypto asset service providers operating under national grandfathering clauses expires.
• September 22, 2026: The European System of Central Banks formally requests the elimination of the mandatory stablecoin bank deposit ratios.
• September 24, 2026: The European Banking Authority publishes its consultation response, calling for crypto lending and DeFi gateways to be brought under MiCA oversight.
• September 30, 2026: The European Commission’s targeted MiCA consultation period officially closes.

Fact-Based Analysis of Market Implications

The formal inclusion of crypto lending under MiCA would trigger profound structural shifts across the European digital asset landscape. Centralized exchanges and brokerages currently offering retail earn, borrow, or staking yield products would be forced to apply for separate regulatory authorizations. Onboarding pathways would lengthen significantly as platforms implement mandatory suitability evaluations, and internal risk limits would be replaced by statutory leverage ceilings.

For decentralized finance protocols, the requirement to pass external compliance reviews in order to receive EU traffic introduces a commercial compliance burden. Protocols unwilling or unable to submit to external code audits and governance checks would find themselves legally walled off from European institutional and retail gateways. However, self-custody users interacting directly with blockchains via private wallets would remain outside the direct reach of intermediaries, highlighting an ongoing enforcement challenge regarding non-compliant offshore platforms serving EU residents.

Next Steps in the Legislative Process

With the consultation window now closed, the European Commission will review submissions, publish non-confidential feedback, and draft its formal report with advisory input from the EBA and the European Securities and Markets Authority (ESMA).

Questions regarding regulatory jurisdiction remain open. While national competent authorities currently handle baseline CASP licensing, the ESCB has advocated for consolidating authorization and enforcement powers for all major providers under ESMA. This proposal builds upon prior Commission recommendations from December 2025 to grant ESMA direct supervisory authority over the largest cross-border crypto entities.

Any formal legislative amendments proposed by the Commission will subsequently require formal debate, revision, and final approval by both the European Parliament and the Council of the European Union—a legislative process that took nearly three years during the original formulation of the MiCA rulebook.