Spain ES

Spain's MiCA transitional period for legacy virtual-asset service providers concluded on 1 July 2026, a fact stated directly in the CNMV's own FAQ documentation covering the transitional close-out. From that date, only CNMV-authorised crypto-asset service providers, or those authorised elsewhere in the EU and passported into Spain, may lawfully provide crypto-asset services in the jurisdiction. Read through the financial-integrity lens, this is not primarily a licensing-architecture story but an on-ramp-surface story: the population of entities through which value can move into and out of the crypto-asset ecosystem in Spain has just been narrowed and consolidated under a single supervisory authority, replacing what had previously been a dual Banco de España/CNMV structure.

That consolidation matters for AML/CFT exposure because a fragmented authorisation landscape, with legacy registrants operating alongside newly authorised CASPs, tends to create exactly the kind of supervisory seams that illicit finance typologies exploit -- entities that are technically registered somewhere but not subject to the full weight of MiCA's substantive AML-adjacent obligations. With the transitional period closed, that seam should in principle narrow considerably, provided enforcement follow-through actually displaces any legacy registrant that failed to secure full CNMV authorisation. Whether any such registrant currently continues to operate outside the lawful perimeter was not established this cycle; this is an evidentiary gap rather than either a finding of continued non-compliance or a clean bill of health, and it should be read as exactly that pending further verification.

The structural significance of this development is best understood in light of the standing AMLA architecture that governs the broader EU framework within which Spain's crypto-specific consolidation sits. The EU AML Package consists of three distinct instruments: the AML Regulation, or AMLR (Regulation (EU) 2024/1624), which applies directly across the EU including in Spain without need for national transposition; the sixth AML Directive, or 6AMLD, which each member state transposes into its own national law; and the AMLA Regulation (Regulation (EU) 2024/1620), which establishes the Anti-Money Laundering Authority and begins shifting supervision of certain higher-risk obliged entities from purely national authorities toward a hybrid EU-level regime combining direct and indirect AMLA supervision. Spain's binding to AMLR's direct-application mechanism as an EU-27 EEA member is a confirmed structural fact; no Spain-specific 6AMLD transposition delta, nor any AMLA direct-supervision designation bearing on Spain's crypto-asset sector specifically, was independently retrieved this cycle. That absence should be read as an unestablished item rather than as evidence either that transposition is complete or that it remains outstanding.

Against this backdrop, Spain's MiCA-driven crypto consolidation is best read as a jurisdiction-level implementation of a framework, MiCA itself, that sits alongside rather than inside the AMLR/6AMLD/AMLA architecture, though the two frameworks share an evident policy objective of narrowing the space in which illicit finance can exploit fragmented or dual-track authorisation regimes. The practical AML/CFT question going forward is less about the legal architecture, which is now reasonably clear, and more about enforcement follow-through against any residual legacy activity.

Outlook

The item most worth tracking is whether the CNMV, now sole gatekeeper, takes any enforcement action against a legacy Banco de España registrant that failed to secure full CASP authorisation before the 1 July 2026 cliff. General industry practice is understood to require wind-down of unauthorised legacy activity following such a transitional close-out, but the distance between that general expectation and the actual practice of any specific firm operating in Spain was not assessed this cycle, leaving this as the key open question for the crypto/AML intersection going into the next reporting period. Confirmation of Spain's specific 6AMLD transposition status, and clarity on whether any AMLA supervisory designation will bear on Spain's crypto-asset sector, would further sharpen the picture of how the broader EU AML Package architecture interacts with the newly consolidated national crypto licensing gate.