Austria’s Financial Market Authority (FMA) has imposed a €70,000 fine on Bitpanda GmbH for multiple breaches of the Markets in Crypto-Assets Regulation (MiCA). Announced on August 14, 2026, this marks the first legally binding enforcement action under the EU-wide framework, signaling that MiCA has moved beyond licensing into active supervision and sanctions.
Bitpanda, a Vienna-based digital assets platform, received its Austrian MiCA authorization as a crypto-asset service provider in April 2025.
The company already held comparable approvals from Germany’s BaFin and Malta’s regulator, positioning it as one of the earlier major platforms to secure full compliance across jurisdictions.
The latest penalty, however, underscores that authorization alone does not guarantee ongoing adherence to detailed operational rules.
According to the FMA, the violations centered on whitepaper and marketing requirements.
Specifically, Bitpanda failed to submit a crypto-asset whitepaper to the authority at least 20 working days before its publication, contravening Articles 8(1) and 8(5) of MiCA.
The platform also distributed a marketing communication prior to publishing the required whitepaper, in breach of Article 7(2).
Additionally, one marketing notice omitted mandatory elements: a statement clarifying that the communication had not been reviewed or approved by a competent authority and that the provider alone bears responsibility for its content (Article 7(1)(e)), as well as a telephone number and email address (Article 7(1)(d)).
The FMA conducted the proceedings under an accelerated process permitted by Austrian financial market supervisory law.
The resulting penalty is final and binding.
In its statement, the regulator emphasized MiCA’s core objectives: establishing a consistent legal framework for crypto-assets across the European Union, safeguarding investors, and preserving the integrity of crypto markets.
Officials stressed that the rules apply equally to all licensed entities, with no preferential treatment for early or high-profile licensees.
This enforcement action arrives as MiCA fully takes effect across the bloc, requiring crypto-asset service providers to meet stringent standards on transparency, disclosure, and investor protection.
Whitepapers serve as critical information documents detailing the nature, risks, and features of crypto-assets offered to the public or admitted to trading.
Marketing materials must align with these disclosures and include clear disclaimers to prevent misleading claims.
Failure to follow the prescribed timelines and content rules can undermine the regulation’s protective purpose.
Industry observers note that the modest size of the fine relative to Bitpanda’s scale may reflect the nature of the procedural shortcomings rather than more severe misconduct.
Nevertheless, the precedent is significant. It demonstrates that national competent authorities are prepared to act promptly on compliance gaps, even against established domestic players.
The FMA’s public announcement reinforces that MiCA is no longer solely a matter of obtaining licenses; ongoing enforcement has begun.
As other EU member states ramp up supervision, similar actions may follow.
Platforms operating under passporting arrangements will need to ensure rigorous internal controls around disclosure timelines and promotional content.
For investors, the development offers reassurance that regulators are actively monitoring licensed firms to uphold market standards.
The case highlights the transition from a fragmented national approach to a harmonized regime. While Bitpanda retains its authorizations, the penalty serves as a clear reminder that continuous compliance is essential to maintaining regulatory trust.