← All articles
Compliance · February 27, 2026 · 9 min read

How MiCA reshaped KOL disclosure — and what we changed in 2026.

After MiCA enforcement landed in mid-2024, half our active KOL deals needed restructuring. Here's what changed, what we now require before signing a deal, and the disclosure templates we run by jurisdiction.

When MiCA's marketing communication rules became enforceable across the EU in mid-2024, every crypto agency saw the same pattern. About half of running KOL deals stopped being compliant overnight — and most projects didn't notice because nothing visibly broke. The risk just moved off the dashboard and onto the legal team's desk.

This is a working document of what we changed inside ROININJA: the new screening, the deal-structure shifts, and the disclosure templates we now use by jurisdiction. None of this is legal advice. It's what we ship in practice.

What MiCA actually requires

MiCA Title VI sets out the marketing communication obligations for crypto-asset service providers (CASPs) and, by extension, anyone promoting their services to EU residents. The headline requirements:

  1. Marketing communications must be identifiable as such. "Sponsored" is not enough. The disclosure must be clear, prominent, and accompany the promotional content itself — not buried in a bio or pinned thread.
  2. Risk warnings are mandatory for promotions of crypto-assets. Specifically, the statement that the value of crypto-assets may fluctuate and capital may be lost. Required as visible text, not a footnote.
  3. Information must be fair, clear, and not misleading. Returns claims, "guaranteed" yields, and unverifiable performance metrics are out.
  4. Targeting rules. Promotions of unauthorized CASPs to EU residents — even via offshore KOLs — fall under enforcement scope.

The last point matters most. A Singapore-based KOL promoting your unregulated exchange to a follower base 18% EU-resident is now a problem for both the KOL and the project commissioning them.

How it compares across regions

The regulatory map for KOL crypto promotion is now fragmented enough that we run different deal structures by region:

RegionDisclosure requirementEnforcement risk
US (FTC)"#ad" or "sponsored" — placement varies by platform. SEC scrutiny on securities-coded tokens.Medium · individual KOL fines, occasional SEC action
EU (MiCA)Full marketing communication disclosure + risk warning + identifiable promoter.High · CASP licensing implications, fines up to 5% of revenue
UK (FCA)Financial Promotion regime since Oct 2023. Required risk warnings + cooling-off period for new users.High · criminal liability for non-compliant promotions
APAC (varies)Singapore MAS guidelines; Japan FSA strict; HK SFC moderate. Generally lighter than EU.Low–Medium · enforcement uneven
LATAMBrazil/Mexico forming frameworks; rest largely unregulated.Low

What we changed in deal structures

Screening before signing

Every KOL now goes through a 7-point screening before we propose a deal:

  • Audience-bot analysis (HypeAuditor + manual sampling)
  • Audience geo breakdown — what % is EU-resident, US-resident, regulated-jurisdiction-resident
  • Past-deal performance review (was their last 3 deals compliant?)
  • Token holdings disclosure (do they currently hold what they're promoting?)
  • Past regulatory action against them
  • Content quality and brand-safety review
  • Willingness to use mandated disclosure templates

About 1 in 4 KOLs that pass step 1 fail step 7 — they don't want our disclosure language in their post. That's a hard reject. The remaining ones get a deal proposed.

Disclosure baked into the deliverable

Before MiCA we'd send a brief, the KOL would post, we'd verify the disclosure was present. Now the disclosure is part of the deliverable spec, with three required elements:

  1. Identification as paid promotion ("Paid partnership with [Project]" or equivalent platform-native tag)
  2. Risk warning text (specific wording by jurisdiction)
  3. Targeting flag — geo-restriction language where the KOL's audience overlaps regulated regions

If any element is missing, the KOL doesn't get paid until the post is amended. That's contractually enforced.

Holdings disclosures

EU rules and updated FTC guidance both expect KOLs to disclose if they hold the token they're promoting. We now require:

  • Hold disclosure if they currently own the asset
  • Past-hold disclosure if they exited in the last 90 days
  • Future-hold disclosure if their compensation includes tokens

This kills a lot of deals that would have been easy a year ago. It also makes the deals that do close audit-survivable.

The KOLs we now reject

About 20% of the verified-network KOLs we worked with in 2023 are no longer eligible for client deals. The most common rejection reasons:

  • Won't use required disclosure language — most common rejection, ~40% of declines
  • Audience overlap with regulated jurisdictions they can't legally market in
  • History of pump-and-dump-style content
  • Holdings conflicts they refuse to disclose
  • Past regulatory action or unresolved disputes

Practical 5-step audit framework

If you're running KOL deals in-house and want to check exposure, run this audit:

  1. List every active KOL deal — including ones you forgot about (especially long-tail micro-influencer engagements).
  2. Map their audiences to your target jurisdictions. Any deal where the audience is 5%+ resident in a regulated region you can't legally market in is a flag.
  3. Pull every post from the last 6 months and check for disclosure compliance. Screenshot before they edit.
  4. Verify holdings disclosures on the projects they've promoted.
  5. Restructure or terminate non-compliant deals before continuing them.
What this means for your spend

If you ran KOL marketing in 2023 the same way you ran it in 2021, about half your deals are now legacy-risk. Most projects discover this when a regulator asks, not when an agency tells them.

Audit before someone audits you. The cost of restructuring is small. The cost of a MiCA enforcement notice is not.

If you'd like us to run the 5-step audit on your existing KOL portfolio — free, takes about a week — we'll deliver a written compliance report with named risks and remediation steps.

Compliance audit on your KOL deals →
Free written report. We name the risks and the fixes — including which deals to terminate.
Book audit