Europe's Crypto Power Play: Why the Fight Over ESMA Supervision Goes Way Deeper Than Malta

The real crypto battle in Europe isn't about regulation anymore—it's about who controls it. The European Commission is pushing to hand direct supervision of major crypto asset service providers (CASPs) to the Paris-based European Securities and Markets Authority (ESMA), stripping authority from national regulators. France, Austria, and Italy back the move. Malta doesn't. And this clash reveals fundamental fractures in how Europe plans to govern digital assets.

The Centralization Push Gains Momentum

On the surface, this looks like a small state protecting its turf. Bloomberg reported it that way. But that narrative misses the real stakes. In a joint September 2025 position paper, France, Austria, and Italy pushed for what they called "a stronger European framework," citing major inconsistencies in how member states authorize firms and enable regulatory shopping. They're not wrong—the Markets in Crypto Assets Regulation (MiCA) lets companies get licensed in one country and passport services across the entire EU. That creates obvious arbitrage opportunities.

ESMA already coordinates supervisory convergence work, including peer reviews of national authorities. A recent review of one of Malta's CASP authorizations—widely reported to be OKX—found Malta met expectations on supervisory standards but flagged that the firm's authorization "should have been more thorough." For centralization advocates, this is exactly the problem they want to solve.

An ESMA spokesperson told us that shifting to a single supervisor for major cross-border operators would deliver "more efficient and harmonized supervision," strengthen investor protection, and kill forum shopping. The logic is straightforward: fragmented oversight creates gaps.

Malta's Structural Concerns Cut Deeper

Here's where it gets interesting. Malta isn't making a nationalist argument—it's making a structural one. Ian Gauci, a partner at Maltese law firm GTG and architect of Malta's original crypto rulebook, told us the dispute "goes to the structure itself and how it will behave wherever it is applied in the Union." The MFSA's position centers on "regulatory timing and effectiveness," not jurisdictional self-interest.

The concern isn't theoretical. MiCA is still rolling out, and its impact hasn't been fully assessed. Centralizing supervision too early could lock in the wrong approach. Meanwhile, splitting oversight across ESMA, national authorities, the Anti-Money Laundering Authority (AMLA), and the Digital Operational Resilience Act (DORA) creates fragmentation when integrated risk assessment is essential.

OKX's European CEO, Erald Ghoos, pushes back harder. He argues the exchange has operated under Malta's high-standard regime since 2021 and its MiCA authorization reflects a multi-year relationship, not an expedited process. More pointedly: there's no evidence the current model is failing. Centralization, he contends, looks less like solving a problem and more like a political decision.

A Better Path Forward

Gauci accepts inconsistencies exist but argues for targeted solutions. Make peer reviews bite. Set firm timelines. Impose consequences for persistent failure. Save structural overhauls for genuinely systemic, cross-border firms with clearly identified risks. Don't apply blunt force centralization as a blanket fix for uneven supervision.

The deeper concern is accountability. Large crypto firms operate as integrated systems. Split that supervision, and you lose unity during a crisis. Fragmented oversight is fragmented accountability—exactly what investors don't want.