CASP register: crypto exchanges authorised in Spain under MiCA

Since 1 July 2026, only firms authorised under MiCA — by the CNMV, Spain's securities regulator, or by another competent authority listed in ESMA's interim register — may provide crypto-asset services in Spain. This list comes from the ESMA interim register and it is read again every day.

As of October 31, 2026 there are 209 firms authorised to operate in Spain under MiCA —129 of them are authorised to exchange crypto-assets for funds—, according to the ESMA register, last updated on October 29, 2026.

What if a platform is not on the list?

Not appearing does not always mean fraud: a firm may have an application in progress, may have withdrawn it, or may have decided not to operate in the European Union at all. What it does mean is that it cannot legally provide you with a service in Spain, and that if something goes wrong you do not have behind you the protections MiCA gives to the clients of an authorised firm.

A well known international name is not the same thing as an authorised one, and several large platforms are missing from this table for exactly that reason. The table on this page is the answer, not the reputation of the brand: if the entity is not in it today, it is not authorised to serve you here today.

What each service means

An authorisation is not a blank cheque: every firm has a specific set of services approved under article 3 of MiCA. A platform may be authorised to hold your crypto-assets in custody and not to exchange them for funds. Service c alone does not establish which currencies or trading pairs a firm offers.

• a) Custody and administration of crypto-assets
• b) Operation of a trading platform
• c) Exchange of crypto-assets for funds
• d) Exchange of crypto-assets for other crypto-assets
• e) Execution of orders on behalf of clients
• f) Placing of crypto-assets
• g) Reception and transmission of orders
• h) Advice on crypto-assets
• i) Portfolio management on crypto-assets
• j) Transfer services for crypto-assets

The 209 authorised firms

In alphabetical order. This is not a ranking: that a firm is authorised says it may operate legally, not that it is the best option, nor a cheap one, nor the right one for you. Fees, service and solvency do not come out of this register and have to be looked at separately.

Some of these firms issue a token of their own

This is the most expensive confusion on the list. An exchange's token is not a deposit with it, nor a share in the company: it is a separate asset that rises and falls with the business of whoever issued it. What a MiCA authorisation supervises is the service that firm provides to you — holding your crypto-assets, exchanging them for funds — not what the token it has issued is worth. If the firm runs into trouble, the token has nothing to hold on to: the risk sits concentrated in a single name, and that is precisely the one the authorisation does not cover.

• KuCoin Shares (KCS), the token issued by KuCoin EU.
• OKB (OKB), the token issued by OKX.
• WhiteBIT Token (WBT), the token issued by WhiteBIT EU.

How to check it yourself

You do not have to take our word for it. Search for the legal entity — not the brand — in the ESMA interim register or the CNMV list of providers. Two things throw people off:

• The brand and the entity are not called the same thing. Bit2Me is Bitcoinforme S.L.; Kraken is Payward. Searching for the brand can return nothing at all even when the firm is perfectly well authorised. The Authorised entity column above is the name you should be searching for.
• One brand can have several entities, and they do not all cover Spain. Each one carries its own authorisation, its own supervisor and its own scope, so finding the brand is not the same as finding the entity that may serve you here.
• A firm does not have to be registered with the CNMV. This is passporting: a firm authorised in one EU country may serve customers in Spain under the freedom to provide services. Looking only at the Spanish register leaves most of this list out.

The authority in the table is not an administrative detail: it is who supervises that platform and who has to act if something goes wrong. If your provider was authorised in another member state, its supervisor is the one in that country — the CNMV is not the one who fines it, and the first published MiCA penalty came from a supervisor outside Spain.

How to cite this data

The register itself belongs to ESMA. What we add to it — filtering who serves Spain, translating the article 3 services, tracking monthly changes — can be reused, with attribution, under Creative Commons Attribution 4.0 (CC BY 4.0).

Download the full list as CSV (209 firms). The file is in Spanish — column headers and Sí/No values — because it is the same dataset as the Spanish page, not a translated copy of it.

Ready-to-copy citation: "Source: ESMA register of crypto-asset service providers; compiled by Jukipto (https://jukipto.com/exchanges-autorizados-espana), accessed on October 31, 2026."

This list says who may operate here, not which one suits you. Fees, the coins each one lists and what it costs to withdraw your money are not in the register, and none of them follow from being authorised.

Choosing an authorised platform is the first step. The second one comes when you sell: work out what Spanish income tax asks for with the FIFO method the tax office requires, and check whether form 721 applies to what you hold abroad. If you are still deciding what to buy, the full catalogue carries the price in euros, and the guides explain the rules that apply here.

This page is information, not financial advice. Investing in crypto-assets can mean losing all of your capital. See our legal notice and how we work.