Curriculum·G403 The Regulatory Map·about 32 min

MiCA and the cross-border reality

By the end of this lesson you can

  • Explain how BitMEX's offshore registration failed to remove US jurisdiction over its US customers
  • State that jurisdiction commonly follows the customer, not the company's flag of registration
  • Describe what MiCA harmonized across the EU and EEA and what it reaches
  • Map an activity against every jurisdiction whose persons it serves, not only where it is incorporated

Graduate · enrolled learners

This lesson opens with BitMEX, 2020 to 2021.

What happened
BitMEX was a large cryptocurrency derivatives exchange operated through entities registered in the Seychelles, and it treated that offshore registration as if it placed the business outside US regulation while it served US customers. In October 2020 the US CFTC charged BitMEX and its founders with operating an unregistered derivatives platform and failing to maintain anti-money-laundering and know-your-customer programs, and the Department of Justice charged the founders with violating the Bank Secrecy Act. In August 2021 the BitMEX entities settled with the CFTC and FinCEN for 100 million dollars, and the founders later pleaded guilty to the Bank Secrecy Act charge. The exchange's defense, in effect that being registered offshore meant US rules did not apply, failed completely: because it served US persons, US law reached it regardless of where its entities were incorporated. Registering in the Seychelles did not move the customers, and jurisdiction followed the customers.
The decision point
A company chooses where it incorporates, but it does not thereby choose which laws apply to it, because jurisdiction commonly follows the customer rather than the company's flag: serve a country's persons and you are generally within that country's regulatory reach whatever your registration says. BitMEX is the clean demonstration, an offshore exchange that served US customers and paid 100 million dollars for treating its Seychelles registration as an exit, its founders pleading guilty to a US law. The same principle runs the other way into Europe, where MiCA created one harmonized regime across the EU and EEA that a firm serving EU persons must meet regardless of where it sits. So the decision an institution makes is to map its activity against every jurisdiction whose persons it actually serves, not only the one where it is incorporated, because the flag of registration is a choice the firm controls and the reach of a jurisdiction over its own people is not.
Recorded loss
$100,000,000

What you will be able to answer

  • Why did BitMEX's offshore registration fail?
  • What does jurisdiction commonly follow?
  • What did MiCA create?
  • What decision does the cross-border reality force?

Orientation and Year One are open: anyone can read them without an account. From Year Two onward the lessons are for enrolled learners, because progress through the later years only means anything if it is tracked against a record.

It is free. We do not sell the list and there is nothing to buy at the end of it.

Sources and review

Confidence high·Volatility medium·Reviewed 2026-09-16·Owner unassigned

Contested

The 100 million dollar figure is the combined CFTC and FinCEN civil settlement; the founders' separate criminal resolutions carried their own fines and sentences. The precise extraterritorial reach of any given rule is fact-specific, but the customer-follows-jurisdiction principle the case illustrates is well established.

MiCA's provisions phased in through 2024, and its detailed technical standards continue to develop; the lesson states its harmonizing purpose and reach, not its full current detail, which should be read against the regulation's text.