The FMA said the exchange filed a mandatory white paper less than 20 working days before publication and ran marketing without the disclosures MiCA requires.
Austria's Financial Market Authority fined Bitpanda €70,000 for breaching the EU's crypto asset rules, and named the exchange in the first legally binding MiCA penalty decision published anywhere in the bloc. The regulator disclosed the outcome on Monday. The fine is final, and Bitpanda's Austrian authorisation is unaffected.
Two paragraphs of MiCA make up the whole case. Article 29 requires a crypto asset service provider to submit a crypto asset white paper to its supervisor at least 20 working days before making the paper public. Bitpanda missed that window on one of its offerings. Article 27, which governs marketing communications, requires that promotional material for a crypto asset carry three specific pieces of copy: a statement that the material has not been reviewed or approved by any competent authority, a statement that the provider itself is responsible for its content, and current contact details for the provider. Bitpanda's marketing carried none of them, and it went out before the underlying white paper had been submitted at all.
Under MiCA, the supervisor is not required to approve the paper. The 20-working-day window exists to let the regulator raise objections before consumers see the document, and to build a record the FMA can later refer to. Bitpanda's failure was mechanical: publishing too early. But the mechanical failure is what the article was designed to catch, and the fine reflects that. Nothing in the FMA's decision alleges the white paper's content was misleading, or that the marketing itself contained false claims. The finding is about process.
Neither breach is exotic. The filing window and the marketing disclosures were among the first requirements to bite when MiCA's transitional provisions expired at the end of 2024. What is exotic is the venue. Bitpanda is one of the largest crypto exchanges headquartered inside the EU; the FMA is one of MiCA's most active national supervisors; and Austria is the first country in the bloc to make an enforcement outcome public in a way that creates precedent for the rest of the market.
The size of the penalty matters less than the fact that a decision now exists. €70,000 is a rounding error for a firm that raised more than €50 million in its Series A four years ago and processes billions of euros in annual volume. Regulators know that. What the FMA has done is publish a case other national supervisors can now cite when they open their own investigations, from the Autorité des Marchés Financiers in France to BaFin in Germany and the Central Bank of Ireland. Enforcement patterns in EU financial regulation tend to converge on the first cases published, because supervisors read each other's decisions before writing their own.
Bitpanda has been running MiCA-compliance messaging in its marketing for months. That the exchange still ended up on the wrong side of Article 27's disclosure requirements suggests the issue was procedural rather than deliberate. That interpretation does not soften the finding. MiCA's design does not distinguish between a firm that ignores the rules and a firm that misapplies them; both attract the same penalties.
The broader supervisory picture is harder on offshore issuers. Every licensed EU exchange delisted Tether when the transitional period ended, and DeFi vault curators are already being treated as fund managers under MiCA's scope. Bitpanda's fine sits at the milder end of a spectrum that has already produced structural withdrawals from the market. Binance pulled its Greek MiCA application in June rather than take the risk of a full authorisation review; that decision now looks even more defensible.
The €70,000 figure does the political work the FMA needed it to do. Small enough to signal that MiCA's first published enforcement is aimed at procedural failures rather than fraud; large enough to demonstrate that the rules do not sit on paper. And the case is documented publicly, with named articles cited, which is what the industry and other regulators needed to see.
Bitpanda has not appealed the decision. That, too, matters: the first firm to be fined under MiCA has now accepted the finding, and every subsequent case will be measured against the price it paid.
