Europe's Suitability Push Could Split Crypto Liquidity Across 27 Markets

I've been reading EU crypto drafts for six years now, and the pattern never changes. Brussels writes a rule for one product, then quietly stretches it across three more because the first version didn't cover everything. Coinbase's EU policy chief just flagged the next stretch, and it's a big one.

The argument is simple. Apply suitability tests beyond crypto lending and borrowing, and you don't get safer markets. You get smaller ones, plus a bunch of users hopping to platforms that never bothered to ask them a single question.

Here's what matters: this isn't a complaint about compliance costs. It's a complaint about where the compliance lands.

The Suitability Test Problem

Let me break this down, because the mechanics get skipped in most coverage.

Under MiCA, the EU's crypto rulebook, firms that give investment advice or manage portfolios run a suitability assessment. That's the deep one. You collect income, risk tolerance, objectives, time horizon, then you formally justify why a specific product fits a specific person. Separately, there's an appropriateness test, which is lighter. Do you understand what a derivative is, yes or no, sign here.

Lending and borrowing sit naturally inside that framework. You're putting collateral at risk, there's a liquidation price, and if you don't understand margin calls you'll find out the hard way at 3am. Fine. Nobody sensible argues with that.

Now extend the same logic to DeFi. Suddenly the question isn't just what happens inside the protocol. It's what happens on the website that points at the protocol. If a front-end gets classified as the entity providing the service, then the front-end has to onboard you like a brokerage account. Name, address, income bracket, investment experience, a risk-tolerance questionnaire, a written justification, and a record of the whole thing retained for five years.

That's a very different product.

The numbers tell the story on friction. Industry onboarding data has consistently shown that each additional mandatory step in a signup flow cuts completion by roughly 10% to 25%. Stack four or five assessment screens on top of identity verification and you're looking at losing well over half your funnel. For a venue where the median ticket is a few hundred dollars, the unit economics don't survive that. You can't spend 15 minutes of compliance labour on a user who trades $800 a year.

So what happens? The big platforms absorb it, because they can. The mid-tier ones either geofence Europe or route EU users through a lighter interface. And the users who actually want access go looking for a front-end hosted somewhere that doesn't care.

Why Liquidity Fragments

Pull the camera back and the structural issue shows up.

Europe has 27 markets and one passport. That's the whole appeal of MiCA. A firm authorised in Ireland can serve Poland, Portugal, and Finland without 27 separate licences. The entire thesis depends on one rulebook producing one liquid pool.

Suitability tests work against that logic. They're inherently national in how they get supervised, and they're subjective in how they get applied. A regulator in one capital can demand a 12-question assessment while another accepts six. Same rulebook, different enforcement, and suddenly the passport isn't worth what firms paid for it.

From a risk perspective, that's the real danger. Fragment a market and you don't reduce risk, you relocate it. Liquidity thins out across venues, spreads widen, and the marginal user ends up on an offshore platform with no recourse, no complaints process, and no EU supervisor watching the order book. That's not consumer protection. That's consumer protection theatre.

And the timing is brutal. The EU is finalising this while the US has spent the last 18 months actively courting digital asset firms with a lighter touch. Every extra compliance layer in Frankfurt is a recruiting pitch for Dubai, Singapore, or whichever US state is feeling generous that quarter. Capital has legs. It's been demonstrated repeatedly since 2023.

Who wins if this goes through as drafted? Offshore venues. Non-custodial aggregators with no EU entity. Protocols that never built a user interface at all, because there's nothing to attach the obligation to. Who loses? The regulated EU entrant that spent two years and seven figures on licensing, and the retail user in Lisbon who now gets worse pricing on a smaller pool.

Can you regulate a protocol, or only the website that points at it? That's the question nobody in Brussels has answered cleanly, and the entire DeFi chapter hinges on it.

What I'd Actually Watch

Forget the headline debate about whether DeFi should be in scope. It's in scope. That ship sailed.

The fight is over the word "front-end." Watch the delegated acts and the technical standards that follow. If the final text ties obligations to custody, control, or the ability to block a transaction, the industry can live with it. If it ties obligations to merely publishing an interface, you've just regulated open-source code by proxy, and the compliance burden will land on exactly the firms that tried hardest to do it properly.

My honest read: the EU will land somewhere in the middle, with a vague "effective control" test that gets litigated for three years. In the meantime, expect a quiet migration. Smaller EU-facing front-ends will geofence. Mid-size ones will partner with a licensed entity and pass the cost to users. And the volume will follow the path of least friction, which has never once been the path through a suitability questionnaire.

So here's the concrete takeaway if you trade in Europe. Assume your platform of choice looks different in 18 months. Ask now whether it holds a MiCA authorisation, whether it's an EU entity or a front-end pointing at one, and what happens to your access if the rules tighten. Three questions. Most people won't ask them until the geofence shows up.

That's the part the street is missing. Everyone's pricing this as a compliance cost. It's actually a market structure story, and Europe is about to find out how expensive fragmentation gets.