Austria's Financial Market Authority (FMA) has issued a €70,000 ($81,150) penalty to Bitpanda GmbH, marking the country's first publicly known sanction under the EU's Markets in Crypto-Assets framework. The case, widely discussed as the Bitpanda MiCA fine, centers on procedural and disclosure failures tied to a token-related publication and its accompanying promotional messaging.
According to the regulator, Bitpanda did not submit the required crypto-asset white paper at least 20 working days before it was made public. The FMA did not name the specific crypto-asset involved, but emphasized that the timing requirement is not optional: the pre-publication window is designed to ensure documents are filed correctly and consistently before any broader communication reaches consumers.
The FMA also found issues in marketing activity. One promotional communication was circulated before the mandatory white paper had been published. In another instance, the marketing material allegedly omitted mandated statements-most notably, that the regulator had not reviewed or approved the document and that the provider remains solely responsible for its content. The same communication was also missing standard contact details, including a telephone number and an email address, points that fall under MiCA marketing disclosure requirements.
Bitpanda, in an emailed response, pushed back on the idea that the matter reflected substantive deficiencies in the document itself. The company said the findings related "exclusively to timing and formal specifications" around publishing the whitepaper and an associated information document. It added that for the token launch in question it prepared a comprehensive document aligned with crypto white paper requirements MiCA, submitted it to the FMA, and stayed in ongoing coordination with the authority. The firm also said the white paper had been submitted early last year.
After the regulator raised concerns, Bitpanda said it remediated the issues and opted for a swift, mutually agreed close to the proceedings. The FMA concluded the matter via an expedited process under Austria's Financial Market Authority Act, and the penalty is final-an outcome that signals how quickly administrative cases can move once a breach is identified and acknowledged.
The enforcement action lands on one of Europe's best-known crypto brokers. Bitpanda finished 2025 with 7.4 million registered users-about 25% higher than the year prior-and reported €371 million in adjusted revenue. The Vienna-based group has also been pushing beyond retail brokerage, offering banks and fintechs infrastructure for trading, custody, and tokenization, a shift that increases the operational need for structured MiCA regulatory consulting for crypto companies across multiple business lines and jurisdictions.
Licensing milestones add further context. Bitpanda previously obtained a MiCA license from Germany's BaFin, enabling service provision across the European Economic Area, while Austria's FMA separately authorized Bitpanda GmbH in April 2025 for custody, exchange, order execution, and other crypto services. That combination-cross-border reach and home-market supervision-means even "formal" missteps can carry outsized reputational weight, as illustrated in ongoing commentary around the MiCA enforcement case involving Bitpanda.
More broadly, this episode underscores what MiCA implementation looks like in practice: not just high-level governance, but process discipline-calendars, templates, sign-offs, version control, and clear separation between pre-filing drafts and consumer-facing marketing. For many issuers and intermediaries, that's driving demand for MiCA compliance services that can translate legal obligations into day-to-day operational workflows.
It also highlights a market tension: as mainstream finance becomes more comfortable distributing digital-asset products, compliance expectations converge toward traditional standards. The old posture of adversarial slogans-"long bitcoin, short the bankers"-has faded as banks, brokers, and large fintechs increasingly participate, making consistent disclosures and audit-ready documentation a competitive necessity rather than a burden.
At the same time, MiCA's "cleanup" effect is producing an unintended side channel: a new wave of scams that exploit confusion around rules, registration status, and the appearance of legitimacy. Fraudsters can mimic regulatory language, invent "MiCA-approved" labels, or circulate lookalike documents-exactly why precise disclaimers, visible contact points, and disciplined publication sequencing matter for consumer protection.
For crypto businesses operating in the EU, the takeaway is straightforward: even when a white paper is comprehensive, execution details can still trigger sanctions. Getting the timeline right, ensuring marketing aligns with the filed materials, and embedding mandatory disclaimers are now baseline expectations under MiCA-especially for firms large enough to set industry norms.