# MiCA, DAC8, and Norway's Crypto Law: The Complete Guide to New Regulations in 2026
![Hero image]
Why 2026 is a Turning Point for Crypto in Norway
It's easy to think that crypto regulation is something that happens "out there somewhere" — in Brussels, in Washington, on pages one never reads. But from 2026, the regulations will directly, concretely, and with legal weight impact Norwegian investors and Norwegian exchanges.
The big three: MiCA, DAC8, and the Crypto-Asset Act. In addition, DORA and TFR will serve as supporting regulations. Together, these constitute the most comprehensive regulation of cryptocurrency ever introduced in Europe — and Norway is included, even though we are not an EU member.
This guide provides you with the full overview: what the rules actually say, what they mean for you as an investor, and what Norwegian crypto exchanges must do to survive.
What is MiCA — and Does it Apply to Norway?
MiCA in Plain Language
MiCA (Markets in Crypto-Assets Regulation) is the EU's regulation for the crypto market. It was adopted in June 2023 and came into force in the EU in two stages: stablecoin rules from June 30, 2024, and the rest of the regulations from December 30, 2024.
MiCA broadly regulates three things:
Norway is not an EU member, but we are an EEA member — and MiCA is a directive to be incorporated into the EEA agreement. This takes time. Therefore, Norway has a transition period until June 2026, during which Norwegian entities can operate under existing AML registration while applying for a MiCA license.
«MiCA is not just a directive — it is a complete restructuring of who is allowed to handle other people's crypto assets in Europe.»
What MiCA Means for You as a Norwegian Investor
From a consumer perspective, MiCA grants you specific rights:
- Whitepaper requirement: All crypto projects selling tokens to the public must publish a standardized information document. You should know what you are buying.
- Right of redemption for e-money tokens (EMT): Issuers of stablecoins classified as EMT are obliged to redeem them at par value.
- Segregated funds: Crypto exchanges with a MiCA license must keep customer funds separate from their own funds — providing you with better protection if the exchange goes bankrupt.
- Market manipulation rules: Insider trading and market manipulation in the crypto market will be illegal and punishable in the same way as in the stock market.
MiCA Transition Period in Norway: What Happens Until June 2026?
Norway has chosen to utilize the maximum transition period under MiCA — 18 months — which runs from the time the regulation is formally incorporated into the EEA agreement. In practice, this means that Norwegian crypto exchanges can continue to operate under their existing Financial Supervisory Authority registration (based on anti-money laundering regulations) until June 2026, provided that they:
After June 2026, there will be no leniency: Operating crypto services in Norway without a valid MiCA license (or national transitional arrangement) will be illegal.
AK Jensen — Norway's First MiCA License
In February 2026, AK Jensen (a Norwegian crypto entity) became the first Norwegian business to receive full MiCA approval from the Financial Supervisory Authority. This is historic: it marks that the Norwegian regulatory framework is indeed operational, and that the Financial Supervisory Authority is capable of processing and granting applications.
For other players — including Firi and NBX — the licensing process is underway but not yet concluded at the time of this article.
The Crypto-Asset Act: Norway's Own Implementation
To provide MiCA with a Norwegian legal basis, the Ministry of Finance has drafted what is commonly known as the Crypto-Asset Act — a Norwegian law that incorporates the provisions of the MiCA regulation into Norwegian law and grants the Financial Supervisory Authority the necessary powers.
The law covers, among other things:
- Definition of "crypto assets" and which products fall under the regulation
- Requirements for capital reserves for exchanges and issuers
- The Financial Supervisory Authority's supervisory and sanctioning powers
- Rules for market abuse specifically adapted to crypto assets
An important clarification: Bitcoin and Ether are regulated under MiCA as «other crypto-assets» — they are neither EMT (e-money token) nor ART (asset-referenced token). This means they fall under a somewhat lighter regime than stablecoins, but exchanges offering trading in them still require a full CASP license.
![Midpoint image]
DAC8: The End of Crypto Anonymity Towards the Tax Administration
What is DAC8?
DAC8 (Directive on Administrative Cooperation, 8th revision) is the EU directive that obliges crypto exchanges and crypto intermediaries to automatically report customer transactions to tax authorities. The directive came into force in the EU from January 1, 2026, and Norway is implementing it through the EEA agreement.
What is Reported — and to Whom?
Crypto exchanges like Firi and NBX will automatically report the following to the Norwegian Tax Administration for each user from 2026:
- Total sales amount per cryptocurrency during the calendar year
- Number of transactions
- Holdings at year-end
- Information about withdrawals to private wallets (to the extent known)
This is a massive expansion of what already exists: Norwegian exchanges have had a certain reporting obligation, but DAC8 standardizes and automates this across all EEA countries.
What Does DAC8 Specifically Mean for You?
You don't need to do anything other than what you already should: declare crypto gains in your tax return. But now the Tax Administration will have independent information they can cross-reference against what you report.
Have you sold crypto on Firi in 2026 and "forgotten" to declare the gain? The Tax Administration will know. DAC8 is, in practice, the end of the idea that crypto income can be hidden by using regulated European exchanges.
Important: Decentralized exchanges (DEX) and foreign exchanges outside the EEA are not directly covered by DAC8 — but FATF and OECD have parallel initiatives (CARF — Crypto-Asset Reporting Framework) aimed at closing these loopholes globally.
«DAC8 makes one thing very clear: if you use a regulated European crypto exchange, the tax authorities are your silent co-investor.»
Stablecoins under MiCA: USDT in the Danger Zone
Two Categories of Stablecoins
MiCA divides stablecoins into two categories with different requirements:
EMT — E-Money Token
A stablecoin linked to a single fiat currency (e.g., euro or dollar). Issuers of EMTs must have an e-money license and hold 100% of reserves in liquid, low-risk assets. Example of a MiCA-approved EMT: Circle's USDC (Euro variant: EURC).
ART — Asset-Referenced Token
A stablecoin linked to a basket of assets, currencies, or commodities. Stricter requirements than EMT, including higher capital reserves and stronger governance requirements.
USDT and the Problem with Tether
Tether (USDT) — the world's most used stablecoin with over 140 billion dollars in circulation — has to date not applied for MiCA approval for the EU/EEA market. This means that, as of June 30, 2024, USDT technically should not be offered by regulated exchanges in the EEA to non-professional investors.
In practice, the picture is more complicated: many exchanges have chosen to wait and see the situation, while others — like Coinbase Europe — actually removed USDT for EU users in December 2024.
For Norwegian investors, this means:
- If you buy USDT on Firi or NBX after they have obtained a MiCA license, the service may be restricted
- USDT trading on unregulated, foreign exchanges is legally uncomplicated for private individuals but creates tax traceability problems
- MiCA-approved alternatives like EURC and USDC (EUR version) will likely gain market share
DORA and TFR: The Two Supporting Pillars
DORA — Digital Operational Resilience Act
DORA came into force in the EU on January 17, 2025, and applies to financial entities, including crypto exchanges with a MiCA license. The regulation sets requirements for:
- IT risk management: Exchanges must have documented procedures for handling cyberattacks, system failures, and operational disruptions
- Third-party management: If the exchange uses cloud providers (AWS, Azure) for critical systems, these must also meet certain requirements
- Incident reporting: Serious IT incidents (hacks, major downtimes) must be reported to the Financial Supervisory Authority within strict deadlines
- Penetration testing: Regular tests of system resilience against attacks
For you as a user, DORA means that exchanges are legally obliged to take IT security seriously — and that they must prove it to the authorities.
TFR — Travel Rule for Crypto
The Transfer of Funds Regulation (TFR) is the EU's "travel rule" for crypto transactions. From December 30, 2024, this applies to all transfers between regulated crypto exchanges in the EEA:
- Sender's name, address, and wallet address
- Recipient's name and wallet address
- This information must "travel with" the transaction
The unique aspect of the crypto versions of TFR is that there is no minimum threshold — all transactions, regardless of size, are covered. This distinguishes crypto from traditional bank transfers, where the limit is 1,000 euros.
For transfers to unhosted wallets (your private MetaMask, Ledger, etc.), separate rules apply: the exchange is obliged to collect recipient information and conduct a risk assessment.
What Does This Mean for Norwegian Crypto Exchanges?
The Situation for Firi and NBX
Norway has two dominant domestic crypto exchanges aimed at private individuals: Firi and NBX (Norwegian Block Exchange). Both operated until 2025 primarily under the Financial Supervisory Authority's AML registration.
With MiCA, the rules of the game change fundamentally:
| Requirement | Previously | After MiCA |
|------|-----------|------------|
| License | AML registration | CASP license |
| Capital reserves | Not specified | Minimum 150,000 € (depending on service) |
| Whitepaper | Not required | Mandatory for all tokens |
| Stablecoin trading | Unlimited | Only MiCA-approved stablecoins |
| IT security | Internal responsibility | DORA requirements |
| Transaction reporting | Limited | Full DAC8 reporting |
Both exchanges have publicly communicated that they are working on their MiCA application. The transition period until June 2026 gives them leeway, but the requirements for documentation, capital, and governance structure are demanding — especially for smaller players.
Complete Timeline: From 2024 to 2027
2024
- June 30, 2024: MiCA stablecoin rules come into force in the EU (EMT and ART)
- December 30, 2024: Full MiCA regulation in force in the EU
- December 30, 2024: TFR (Travel Rule) in force in the EEA
2025
- January 17, 2025: DORA in force for financial entities including crypto exchanges
- Ongoing 2025: The Financial Supervisory Authority begins processing Norwegian CASP applications
2026
- January 2026: DAC8 reporting begins (applies to transactions from January 1, 2026)
- February 2026: AK Jensen receives Norway's first MiCA license
- June 2026: Norwegian transition period expires — all crypto exchange operations require a MiCA license
2027 and Beyond
- Ongoing: FATF/OECD CARF implementation globally (covers non-EEA exchanges)
- Expected 2027: First major MiCA revision based on market experiences
![Closing image]
What Should You Do as a Norwegian Crypto Investor Now?
Frequently Asked Questions
Do I need to do anything actively as an investor due to MiCA?
No, not immediately. MiCA primarily targets crypto exchanges and issuers, not private individuals buying and selling. You will notice it indirectly through changes in the products exchanges offer and the documentation they require from you.
What happens to my money if the exchange doesn't get a MiCA license?
If a Norwegian exchange loses the right to operate, it is obliged under Norwegian law to return funds to its customers. MiCA requires that customer funds be kept separate from the exchange's own funds, which makes payouts easier. Nevertheless: only use exchanges that are in the process of obtaining a license.
Will the Tax Administration automatically calculate my crypto tax?
No. DAC8 provides the Tax Administration with information about your sales and holdings, but they will not automatically calculate gains/losses — that is still your responsibility. However, the Tax Administration can detect discrepancies between what they receive and what you report.
Is it legal to use Binance or Coinbase (foreign exchanges) from Norway?
Yes, it is legal as a private individual. But exchanges outside the EEA are not subject to DAC8 or the Norwegian Financial Supervisory Authority. You will then have fewer legal rights in case of a dispute, and you must ensure correct tax settlement yourself.
What happens to USDT in practice — will it disappear?
Probably not entirely, but its availability on regulated Norwegian exchanges may become limited. Tether can apply for MiCA approval, but has not done so yet. For most Norwegian investors' use, USDC or EURC are good alternatives.
What is the difference between MiCA and the Crypto-Asset Act?
MiCA is the EU regulation — a supranational rule. The Crypto-Asset Act is Norway's national legislation that gives MiCA legal basis in Norwegian law and grants the Financial Supervisory Authority the necessary powers to enforce the regulations in Norway.
Does MiCA apply to DeFi and NFTs?
Partially. MiCA explicitly exempts decentralized protocols where there is no central provider. NFTs are generally exempt, but if they function as financial instruments, they may still fall under the regulation. The Commission is to consider DeFi regulation in a report in 2025/2026.
What is TFR in practice for me sending crypto to a friend?
If you send crypto from your wallet (hosted on an exchange) to a friend's wallet, your exchange is obliged to collect information about the recipient. In practice, this means the exchange may ask you who the recipient is before approving the transaction — especially for larger amounts or to unknown addresses.
