Austria's FMA Fines Bitpanda €70,000 in First Published MiCA Sanction
Key Takeaways
- •The FMA fined Bitpanda GmbH €70,000 and said the ruling is final and publicly disclosed as its first final MiCA penalty case.
- •The regulator found that Bitpanda did not notify the whitepaper at least 20 working days before publication and promoted the offer before the whitepaper was released.
- •The marketing communication was found to be missing the required disclaimer that the whitepaper had not been approved by a competent authority, as well as a telephone number and email address.
- •The FMA said the notice does not identify the crypto asset or campaign involved and does not allege custody issues, security incidents, or client asset losses.
- •Bitpanda received MiCA authorisation in April 2025, but the case shows that authorisation does not exempt a firm from whitepaper and marketing disclosure rules.
Austria's Financial Market Authority (FMA) has imposed a €70,000 fine on Bitpanda GmbH, marking the first final MiCA penalty ruling the regulator has made public. The decision was published on August 14, and the FMA confirmed that the ruling is final.
The sanction is an early enforcement test for the EU's Markets in Crypto-Assets Regulation, the bloc-wide rulebook that has applied to crypto firms since December 30, 2024 and replaced a patchwork of national regimes with common requirements for authorisation, whitepaper disclosure, and marketing.
What Bitpanda Was Fined For
The €70,000 sanction concerns a crypto-asset whitepaper and the marketing communications published around it. The FMA's findings focus on the timing of that information and the details contained in the promotion.
The regulator first found that Bitpanda did not submit the whitepaper at least 20 working days before its publication. It further determined that the company distributed marketing material before publishing that whitepaper.
The FMA also found that the marketing communication omitted:
- the required statement that the whitepaper had not been reviewed or approved by a competent authority and that the provider was solely responsible for it; and
- a telephone number and email address.
Both duties — advance notification of the whitepaper and the approval disclaimer — are written directly into MiCA's offering-disclosure rules, so the findings rest on requirements that apply to crypto-asset offers across the EU rather than Austria-specific conditions.
The issue, therefore, was not simply whether a whitepaper existed. It was whether investors received the document before the promotion, and whether that promotion clearly identified the provider's responsibility and the lack of regulatory approval.
The FMA's public notice does not identify the crypto-asset, offer, or campaign involved. It also does not allege a custody breach, a security incident, or any loss of client assets.
Why the Case Matters Beyond the Fine
Bitpanda GmbH received MiCA authorisation from the FMA in April 2025 for custody, exchange, order execution, and transfer services. Under MiCA, day-to-day supervision of crypto-asset service providers (CASPs) rests with the national competent authority that authorised them, and an authorisation obtained in one Member State can be passported across the EU.
The penalty underlines that authorisation and compliance are distinct. A MiCA licence permits a firm to provide defined crypto services, but it does not exempt the firm from the rules governing a specific whitepaper or marketing campaign.
At €70,000, the sanction also sits well below the maximum fines MiCA defines for legal persons — up to €5 million or 5% of total annual turnover for the most serious infringements.
The FMA itself stressed that being the first published case does not make Bitpanda or the breaches uniquely significant. The ruling establishes a public enforcement example rather than a ranking of the industry's worst violations.
MiCA Has Reached Enforcement
In its statement, the FMA said:
“MiCAR is no longer only a licensing and supervisory issue; it has also reached enforcement.”
That statement reflects the broader significance of the ruling: MiCA is now producing public, final sanctions for failures in how crypto offers are documented and promoted. What remains to be seen is whether other national competent authorities follow the FMA in publishing MiCA sanction notices, and whether the breaches they cite mirror the whitepaper-timing and marketing-disclosure failures at issue here.
Three Checks for Crypto Investors
When a platform promotes a crypto offer, investors can make three simple checks before acting:
- Find the relevant whitepaper before relying on the promotion.
- Check whether the marketing identifies the responsible entity and provides contact details.
- Look for the statement that the whitepaper has not been approved by the regulator.
Promotional material is designed to attract attention; the whitepaper is where investors can examine the information the provider is legally required to disclose.
This article is for informational purposes only and does not constitute legal, financial, or investment advice.
