The European Banking Authority on Friday detailed a proposed penalty framework capable of stripping significant crypto token issuers of up to 12.5% of their annual revenue for non-compliance, a signal that the EU's landmark crypto laws are moving from text on paper to a live enforcement regime. The EBA's framework sets out, for the first time in concrete terms, the financial exposure that issuers face under the bloc's new rules. For the largest token projects operating in Europe, the revenue-based ceiling means regulatory risk is now a calculable line item.
What the Proposed Framework Actually Says
The EBA's proposal targets issuers classified as "significant" — a designation that carries heavier supervisory obligations under the EU's crypto legislation. The 12.5% revenue cap is a ceiling on fines, not a floor, meaning the penalty is calibrated to the scale of a firm's business rather than set as a fixed monetary amount. That structure is important: it ties enforcement consequences directly to commercial size, giving regulators proportional reach whether the issuer is a mid-market project or a large-scale operation.
The framework was published on Friday, and remains in a proposed state. That distinction matters because the final penalty parameters could shift before they take binding effect.
Landmark Laws Move From Passage to Enforcement
The headline's phrase — "landmark laws bite" — captures the shift happening across the EU crypto landscape. Regulatory frameworks that took years to negotiate are now entering the phase where supervisory bodies translate legislative intent into enforceable practice. The EBA's work here is part of that transition: defining what non-compliance costs, not just what it means.
For token issuers operating across EU member states, the significance-designation trigger and the revenue-based penalty scale are the two variables that will shape compliance strategy going forward. Whether a project is caught by the "significant" threshold determines both which supervisor has authority over it and what the maximum financial consequence of a breach looks like.
What the Source Does Not Tell Us
The EBA summary does not specify which landmark legislation the framework implements by name, nor does it detail the criteria used to classify an issuer as significant. It provides no information on whether the framework applies to stablecoin issuers differently from other token categories, what the appeal process looks like, or when the proposal moves toward finalization. Those gaps are material for issuers trying to model their exposure. Until the EBA publishes fuller guidance or a final rule, the 12.5% ceiling is the sharpest data point available — and for now, it is the number the market will price off.