KYB under MiCA: a CASP compliance guide for corporate onboarding (2026)
MiCA — Regulation (EU) 2023/1114 — is the EU-wide licensing and conduct framework for crypto-asset issuers and crypto-asset service providers (CASPs) such as exchanges, custodians, brokers, and portfolio managers. The CASP authorisation regime has applied since 30 December 2024. Firms operating under prior national registrations could continue during a transitional (grandfathering) period, but that window ends no later than 1 July 2026 — several member states set an earlier cut-off. After the deadline, serving EU clients without MiCA authorisation is a breach; for legal persons, penalties can reach EUR 5 million or 3% of total annual turnover, whichever is higher.
The five KYB/AML checks — and where Prometiam fits
For every corporate client or counterparty, five checks recur, and Prometiam covers the registry-and-sanctions leg of each:
- Confirm the business is real — legal existence, status, and registered details across every registry the API covers (Ireland, Poland, Finland, Sweden, Belgium, Croatia, Denmark, Estonia, Slovakia, Switzerland, Latvia, Cyprus, Romania, Lithuania, Canada, Australia, Japan, Israel, Singapore, Colombia, Taiwan, Brazil and the United States are company-level).
- Know who is behind it — directors and officers for Spain, France, the UK, and Norway, plus UK PSC beneficial-ownership links; ES, FR, IE, and PL have no full UBO feed.
- Screen for sanctions exposure (beta) — one fuzzy-matched call across EU, UN, OFAC, UK, French gels, and the US Consolidated Screening List / export-control lists (6 sources).
- Monitor after onboarding via /monitor (Spain, Ireland, Poland, Finland, Sweden, Belgium, Croatia, Denmark, Estonia, Slovakia, Switzerland, Latvia, Cyprus, Romania, Lithuania, Canada, Australia, Japan, Israel, Singapore, Colombia, Taiwan, Brazil and the United States).
- Keep an auditable record — every response carries its source registry and a stable record id.
Where it does not fit
Prometiam is business-side (KYB) only. It does not provide Travel Rule messaging, wallet or blockchain analytics, individual-consumer identity verification, adverse-media, or MiCA authorisation itself, and its PEP screening is beta and Spain-only (no relatives or close associates) — pair it with dedicated vendors for those legs.
Read more · Start your 14-day free trial