Denmark based CASP4.8/5Guide · Regulation & MiCA · Updated 21 July 2026 · 3 min read
Are crypto exchanges safe? How EU regulation protects you
"Safe" means two things: is the provider regulated and accountable — and is the asset itself risk-free? MiCA improves the first considerably. It does not change the second. This guide explains the difference. It is educational, not legal or financial advice.
Don’t take our word for "regulated" — verify Penning in the Finanstilsynet register (FT-no. 10902) →
The short version
- MiCA regulates the platform risk: segregated client assets, capital requirements, supervision and a complaints channel.
- Market risk remains: prices can fall, and crypto is not covered by the Danish Guarantee Fund.
- Check how — and whether — a platform holds your crypto at all; the models differ a lot.
- Your own account security, and scepticism toward "guaranteed returns", are still half of safety.
What regulation protects — and what it does not
MiCA requires providers to keep client assets segregated, plus governance, capital, clear disclosure of risks and fees, and ongoing supervision. That reduces counterparty risk — the risk from the provider itself. What regulation does not change is the market risk of the asset:
| Regulation covers | Regulation does not cover |
|---|---|
| Client assets kept separate from the firm’s own | Price swings — losses are yours |
| Capital requirements, governance, fit-and-proper management | No Garantiformuen coverage for crypto |
| Clear disclosure of fees and risks | Bad decisions — panic selling, over-leverage, scams you approve yourself |
| A supervisor and a complaints channel | Fraud by third parties outside the platform |
Segregated treatment of client assets
A core MiCA requirement is that client assets are kept separate from the provider’s own funds — so your assets are not commingled with, or used by, the company, including in an insolvency.
Check how a provider treats assets — or whether it holds them at all. Penning holds no client crypto: assets are delivered directly to your own wallet, and client DKK/EUR sits in segregated client accounts at a regulated Danish bank.
Supervision and accountability
An authorised CASP is supervised by a national authority — in Denmark, the Danish FSA (Finanstilsynet). That means there is an authority the provider is accountable to, and a register where you can look up the authorisation.
An unregulated offshore exchange has neither that supervision nor that accountability — and since the MiCA transitional period ended on 1 July 2026, it may no longer serve clients in the EU/EEA at all.
What you can do yourself
- Verify the authorisation — Look the provider up in Finanstilsynet’s or ESMA’s register before you deposit — it takes two minutes.
- Understand the market risk — The price can fall significantly. Invest only what you can afford to lose.
- Use strong account security — A unique password and two-factor authentication — your account is only as safe as your access to it.
- Be sceptical of promises — "Guaranteed returns" and pressure to deposit quickly are classic warning signs — regulated marketing does not sound like that.
Regulation and your own precautions work together: one protects against bad providers, the other against bad decisions.
Frequently asked questions
This guide is educational and not legal or financial advice. Crypto involves risk of loss. Verify a provider’s authorisation in the Danish FSA’s or ESMA’s official register.
Safety starts with the counterparty
Trade on a MiCA-licensed Danish platform that holds no client crypto — assets are delivered directly to your own wallet.