Crypto custody services under the microscope: EU regulators turn their attention to compliance with digital operational resilience rules.
By Stuart Davis, Gabriel Lakeman, and Alain Traill
On 8 July 2026, the European Securities and Markets Authority (ESMA) announced the launch of a Common Supervisory Action (CSA) focusing on the digital operational resilience of cryptoasset service providers (CASPs), with a particular emphasis on custody services.
ESMA has framed the initiative as a response to its risk-based supervisory priorities, which







