Bitpanda and Austria's first published MiCAR sanction
A negligible financial cost, but a more delicate issue ahead of a potential listing
On 14 August 2026, the Finanzmarktaufsicht, Austria’s financial market supervisory authority, announced that it had imposed a €70,000 fine on Bitpanda for several infringements of the European regulation on markets in crypto-assets. This is the first final sanctioning decision adopted under MiCAR to have been published by the FMA, an important distinction because the authority does not claim that it is the first sanction ever imposed in Austria. The proceedings were concluded through an expedited procedure and the decision is now final. Although the amount is negligible in relation to the company’s financial size, the matter takes on greater significance because it comes at a time when, according to reports circulated in early 2026, Bitpanda is considering a listing in Frankfurt at an indicative valuation of between €4 billion and €5 billion. Rather than affecting its financial position, therefore, the sanction could influence the narrative of regulatory strength that the company presents to investors and institutional partners.
MiCAR and the new supervisory framework
MiCAR has introduced a comprehensive framework in the European Union governing the issuance, public offering and admission to trading of crypto-assets, as well as the provision of related services. The regulation entered into force on 29 June 2023, but its application took place in two stages: from 30 June 2024 for asset-referenced tokens and electronic money tokens, governed respectively by Titles III and IV, and from 30 December 2024 for the remainder of the regulation, including Title II on crypto-assets other than those belonging to these two categories. Article 143 establishes that Articles 4 to 15 do not apply to offers concluded before 30 December 2024. This does not, however, amount to a general grace period extending beyond that date, but rather to a safeguard limited to transactions that had already been completed, accompanied by specific rules for crypto-assets admitted to trading before the regulation became fully applicable. Subsequent offers, unless expressly exempted, are instead subject to the requirements concerning white papers, marketing communications and their publication. The decision against Bitpanda therefore illustrates the transition from establishing the new authorisation framework to the detailed assessment of individual conduct.
The FMA’s three findings
In its announcement, the FMA identifies three infringements, all falling under Title II of MiCAR. The first concerns the notification of the white paper, which Bitpanda allegedly failed to submit to the competent authority at least 20 working days before its publication, as required by Article 8(1) and Article 8(5). The second concerns a marketing communication disseminated before the publication of the corresponding white paper, contrary to Article 7(2). The third finding relates to the content of a marketing communication, which lacked both the warning that the white paper had not been reviewed or approved by any competent authority and that the offeror was solely responsible for its content, and a telephone number and email address through which the offeror could be contacted. These elements are required respectively by Article 7(1)(e) and Article 7(1)(d). The authority did not specify which crypto-asset was involved, nor did it identify the white paper or marketing communication that gave rise to the proceedings, making it impossible to reconstruct the case with certainty on the basis of the published decision alone.
An expedited procedure and a final decision
The proceedings were concluded through the mechanism provided for under Section 22(2b) of the Austrian Financial Market Authority Act. The provision allows a party to waive its right to appeal in advance when, at the time of the waiver, it already knows the operative content of the expected decision. In these circumstances, the authority may omit the reasoning underlying the decision, and any subsequent appeal becomes inadmissible. It is therefore correct to describe the decision as final and the proceedings as expedited, whereas the choice of procedure alone does not support the conclusion that the company admitted the infringements on their merits or that the authority considered them less serious. For legal entities and this category of infringements, Austrian law provides for fines of up to €5 million or 3% of total annual turnover. The €70,000 fine imposed on Bitpanda therefore falls well below the applicable maximum thresholds. This comparison, however, only makes it possible to assess the size of the sanction; it does not independently establish that the infringements were merely formal or immaterial, a conclusion that the FMA does not express in its announcement.
Bitpanda’s position
Bitpanda stated that, for the launch of the token concerned, it had prepared a complete white paper compliant with MiCAR requirements, submitted it to the FMA and coordinated the process with the authority. According to the company, the findings related exclusively to the timing and certain formal requirements concerning the publication of the white paper and an accompanying information document. Bitpanda also stated that it had addressed the issues after they were brought to its attention and had opted for a rapid, consensual conclusion to the proceedings. This account clarifies the company’s interpretation but does not fill the information gaps in the FMA’s announcement, which does not identify the token, the relevant documents or the dates of the conduct in question. Since the detailed reasoning underlying the decision has not been published, it is therefore impossible to compare the company’s reconstruction in full with that of the authority.
A negligible financial cost and a reputational risk
Measured against the size of Bitpanda GmbH, the sanction has virtually no financial impact. The company’s financial statements report net profit of €61.75 million for 2024, up from €13.65 million in 2023, and total assets of approximately €1.026 billion. The €70,000 fine therefore corresponds to slightly more than 0.1% of its 2024 net profit. The latest figures disclosed by the group also confirm that the amount is not financially material: for 2025, Bitpanda reported adjusted revenue of €371 million, adjusted EBITDA of €13 million and 7.4 million registered users. Its reputational profile is more delicate. In January 2025, Bitpanda announced that it had obtained a MiCAR authorisation from Germany’s BaFin, while in April of the same year the FMA authorised Bitpanda GmbH as a crypto-asset service provider. The company has built a significant part of its positioning on the breadth of its regulatory framework and its ability to operate within the new European regime. According to reports circulated in early 2026, Goldman Sachs, Citigroup and Deutsche Bank were involved in preparations for a potential Frankfurt listing, with an indicative valuation of between €4 billion and €5 billion. The publication of the decision is therefore more sensitive than its amount might suggest, although it is not currently possible to measure any concrete effect on a transaction that has not been formally announced.
The signal for the European market
The FMA accompanied the publication of the sanction with a separate statement clarifying that MiCAR is no longer solely a matter of authorisation and ongoing supervision, but has also entered the phase in which its rules are being applied in practice. The authority emphasised that innovation and consistent regulatory enforcement are not contradictory and that the publication of sanctions serves the need for transparency towards market participants and investors. At the same time, it clarified that the fact that this was the first case to be made public does not confer any special status on either Bitpanda or the infringements concerned. The message should therefore not be interpreted as the announcement of a European zero-tolerance policy, a conclusion that would go beyond the FMA’s statements, but rather as confirmation that the transparency and investor-protection obligations established by MiCAR are now part of routine supervisory and enforcement activity. For authorised operators, the case also serves as a reminder that obtaining a licence does not complete the compliance process: the proper management of white papers and marketing communications remains an ongoing obligation, separate from the requirements governing market access.
Conclusions
From a financial perspective, the sanction imposed on Bitpanda is negligible, as €70,000 has no effect on the financial position of a company that generated more than €61 million in net profit in 2024 and is reportedly considering a multibillion-euro listing. The significance of the case is primarily regulatory and reputational: Austria’s first published final sanctioning decision under MiCAR demonstrates that the new European framework has become part of routine supervisory activity and that requirements concerning the timing, publication and content of information documents are also subject to scrutiny. For Bitpanda, which has made regulatory compliance one of its distinguishing features, the timing of the case alongside preparations for a potential listing makes it more difficult to dismiss as an ordinary cost, even though there is currently no evidence that it has affected the project. The most significant precedent, therefore, does not concern the size of the fine, but the beginning of a phase in which national authorities are making the practical consequences of MiCAR infringements visible.
