The regulator has issued a formal enforcement order requiring an unauthorised firm to cease crypto-asset services, which is a core enforcement action against a named entity for regulatory breach.
Mandatory inheritance: Enforcement requires Supervision as a parent tag, and the action also involves cryptocurrency service provision without authorisation.
Product
The enforcement action directly concerns unauthorised provision of crypto-asset services including trading and custody of cryptographic tokens on behalf of retail clients.
The company also provided custody services for client crypto-assets and funds, which relates to the holding and safekeeping of digital assets in a custodial capacity.
Obligation
The regulator's enforcement decision requires the firm to cease unauthorised activities and return client assets, which involves a remedial action component, though the primary driver is regulatory enforcement rather than a prescribed customer-facing remediation scheme.
The decision also mandates that the firm inform clients of the enforcement measures and arrange asset return, which involves customer communication of a material regulatory action, though this is secondary to the remediation obligation itself.
Activity
The enforcement action centres on an unauthorised firm providing retail-facing crypto-asset custody, dealing and exchange services (executing orders and holding client assets), which is the core Crypto Asset Services activity.
The firm also provided unauthorised custody of client crypto-assets and funds held in accounts opened in its own name, which relates to the safeguarding and protection of client assets against loss or misuse.
Themes
The update concerns enforcement action against an unauthorised crypto-asset service provider for operating without MiCA licensing and providing custody and trading services to retail customers, which is squarely the Crypto Regulation theme.
The requirement that the firm return client assets and the broader consumer-protection concern arising from unauthorised custody and trading of client funds reflects the Client Asset Protection theme.
Functions
The enforcement action directly targets unauthorised custody of client crypto-assets held in accounts opened in the provider's name, requiring asset return and client notification—core custody function obligations.
Financial Crime has a secondary relevance as the unauthorised provision of services without MiCA compliance represents a regulatory breach that financial crime or compliance functions would typically flag and monitor, though this is primarily an enforcement action rather than a new operational requirement.
2026-07-31 09:35:57·msolomon@vixio.com
Meta Id
3365351
Content ID
3373833
GUID
919901f304859af0ec38871d98364fd6
Pipeline Progress
🔄 Pipeline Journey
⏱
27s
total
✓
Queued09:35:30
+1s
✓
Metadata09:35:31
+0s
✓
S3 Content09:35:31
+0s
✓
Extracted09:35:31
+5s
✓
LLM Gen09:35:36
+21s
✓
Stored09:35:57
TITLE: Croatia's Financial Services Regulator Orders Fima Plus d.o.o. to Cease Unauthorised Crypto-Asset Services
BODY:
On July 29, 2026, the Croatian Financial Services Supervisory Agency (Hanfa) adopted a decision ordering Fima Plus d.o.o., a Varaždin-based company, to immediately cease the unauthorised provision of crypto-asset services.
Hanfa established that between July 1, 2025 and January 23, 2026, Fima Plus d.o.o. provided crypto-asset services through the website https://fimacrypto.com without authorisation required under Regulation (EU) 2023/1114 on markets in crypto-assets (MiCA). The company executed orders for crypto-assets on behalf of clients and provided crypto-asset custody services. Specifically, Fima Plus d.o.o. received client funds into its own bank account, transferred these funds to foreign crypto-asset trading platforms, and purchased crypto-assets on behalf of clients. The company also sold clients' crypto-assets on foreign platforms and paid proceeds directly to clients. Additionally, it held clients' crypto-assets and funds in accounts opened in its own name with foreign trading platforms, thereby providing unauthorised custody services.
Hanfa's decision requires Fima Plus d.o.o. to immediately cease all such activities and return clients' assets. The company must inform its clients of the measures imposed and provide arrangements for asset return. This enforcement action reflects Hanfa's commitment to protecting consumers and ensuring compliance with MiCA requirements. The decision underscores the importance of regulatory authorisation for entities providing crypto-asset services in Croatia, particularly as mandatory licensing requirements for crypto-asset service providers came into effect on July 1, 2026.
HANFA - Hanfa Board meeting: Fima Plus d.o.o. ordered to cease the unauthorised provision of crypto-asset services Financial market Consumers About us Core functions Registers Contact HR Financial market Consumers Home News Hanfa Board meeting: Fima Plus d.o.o. ordered to cease the unauthorised provision of crypto-asset se... 29/07/2026 Hanfa Board meeting: Fima Plus d.o.o. ordered to cease the unauthorised provision of crypto-asset services At its meeting held today, Hanfa Board adopted a decision ordering the company Fima Plus d.o.o., based in Varaždin, to immediately cease the unauthorised provision of crypto-asset services, specifically the execution of orders for crypto-assets on behalf of clients and the provision of crypto-asset custody services. Hanfa established that, during the supervised period from 1 July 2025 to 23 January 2026, Fima Plus d.o.o. provided crypto-asset services through the website https://fimacrypto.com without the authorisation required under Regulation (EU) 2023/1114 on markets in crypto-assets (MiCA). The company received funds from its clients (both natural and legal persons) into its own bank account, transferred these funds to a foreign crypto-asset trading platform and used them to purchase crypto-assets on behalf of clients. In addition, the company sold clients’ crypto-assets on a foreign crypto-asset trading platform and subsequently paid the proceeds directly to those clients. Furthermore, the company held clients’ crypto-assets and funds in accounts opened in its own name with foreign trading platforms, thereby providing crypto-asset custody services. For these reasons, Hanfa adopted a decision ordering Fima Plus d.o.o. to immediately cease all such activities and to return clients’ assets. The company is required to inform its clients of the measures imposed by Hanfa and of the arrangements for the return of their assets. More details about decisions from today's Hanfa Board meeting are available here . SHARE THE ARTICLE Other news items 24/07/2026 June 2026 Monthly Report Read more 24/07/2026 Hanfa and the Ministry of Finance present the Draft proposal for the Croatian Investment Account Act Read more 17/07/2026 Representatives of the Austrian Financial Market Authority visit Hanfa Read more 16/07/2026 Representatives of the Albanian Financial Supervisory Authority (AFSA) visit Hanfa Read more 13/07/2026 Licence applications in the area of insurance and/or reinsurance distribution now also available via the START Plus system Read more 08/07/2026 Increase in the number of ZSE issuers receiving positive audit opinions Read more 06/07/2026 A. Staničić at the 2nd Annual Meeting of Regulators: Joint regulatory action is essential for resilience to cyber threats Read more 03/07/2026 M. Verić at UMFO event on young people’s financial literacy: public awareness, knowledge and financial skills are the best protection against poor financial decisions Read more 03/07/2026 Provision of crypto-asset services from 1 July 2026: Crypto licence and registration in Hanfa registers mandatory for providers; consumers urged to exercise caution Read more 23/06/2026 May 2026 Monthly Report Read more All News COOKIES Your privacy and personal information are important to us. We use cookies and / or device identifiers for purposes such as traffic measurement or for analytical and statistical purposes. Read more about our Privacy Policy here . You can delete cookie settings. Read more in the Cookie Policy . You can change your choices at any time by returning to this website. Accept all Accept only necessary Customize NECESSARY COOKIES We need the necessary cookies in order for the site to function properly and in order to maintain security standards as much as possible by complying with all applicable regulations. STATISTICAL COOKIES This category of cookies can also be called so-called. third-party cookies. Statistical cookies also belong to the group of functional cookies that allow us to store previously entered information (such as username or language) on the web service and to improve the possibility of providing a better service by tracking analytics or visit statistics. We must inform you that when using this category of cookies, data is transferred to third countries. ‹ Go back Accept selected Reject