From Wallet to Financial Platform: What MetaMask’s Expansion Means for CASP, EMI, and Derivatives Licensing

MetaMask’s tenth anniversary, marked on July 13, 2026, is as much a licensing story as a product one. 

Consensys used the milestone to announce that MetaMask, the self-custodial wallet used by more than 100 million people across roughly 190 countries since its 2016 launch by Kumavis and Dan Finlay, is moving from a single-purpose wallet toward what the company calls its “Open Money” platform.

That means:

• Stablecoin savings;
• A Money Account combining payments and yield;
• Perpetual futures trading;
• Prediction markets; and
• An Agent Wallet built for AI-driven transactions.

Gal Eldar, newly appointed Chief Product Officer, previously led the teams behind MetaMask’s fiat on-ramps, Swaps, Bridges, and Card, and will now oversee the platform’s push into what amounts to consumer banking on public blockchains.

I Need CASP License Guidance

The Regulatory Impact of New Product Lines

For anyone who licenses crypto businesses, the branding isn’t the interesting part. What matters is what each product line does to MetaMask’s regulatory footprint.

Stablecoin Regulation and Licensing Complexity

A non-custodial wallet that lets users hold their own keys sits in a fairly narrow regulatory lane in most jurisdictions. It doesn’t take custody and it doesn’t execute trades on a user’s behalf, so in many frameworks it doesn’t trigger licensing at all. Add stablecoin yield, and the picture splits into at least two separate questions rather than one.

MetaMask’s own stablecoin, mUSD, is actually issued by Bridge, a Stripe-owned issuer, not by MetaMask or Consensys, and that distinction matters: under MiCA, only a credit institution or an electronic money institution can issue a euro- or dollar-pegged e-money token, with MiCA’s Title III then layering on further requirements around reserves, redemption rights, and disclosure.

MetaMask’s own exposure sits on the other side of that line, in custody, conversion, and transfer, which generally requires Crypto-Asset Service Provider authorization under MiCA’s Title V. 

There’s a further wrinkle specific to e-money tokens: the European Banking Authority said in a June 2025 opinion that custody and transfer services involving e-money tokens should also be treated as payment services under the EU’s existing payment services directive, meaning firms offering those services need a payment institution license too, or a partnership with a firm that already holds one, on top of their MiCA authorization.

Pure exchange of one crypto-asset for another, or crypto for fiat, stays outside that overlap and remains CASP-only. Stablecoin supply has more than doubled since 2023 and now sits above $300 billion. That’s largely why regulators have tightened the rules on who can offer stablecoin-linked products:

• MiCA’s e-money and asset-referenced token provisions took effect on June 30, 2024;
• The full CASP authorization regime followed on December 30, 2024;
• The EU-wide transitional grandfathering period runs out on July 1, 2026.

Derivatives and Prediction Markets

Perpetual futures and prediction markets raise a different set of questions. Perps are derivatives, and derivatives trading carries its own licensing regime in most serious jurisdictions (MiFID II in the EU, CFTC oversight in the US for commodity-linked contracts). Prediction markets sit in an even messier spot. 

Depending on how a platform structures settlement and who is on the other side of a trade, regulators have treated them as derivatives, as securities, or as gambling products subject to licensing under a completely different regulatory body than the one that oversees crypto custody. A platform offering all three under one roof is running three separate licensing conversations at once, in every market where it operates.

Then there’s the Agent Wallet. Handing transaction authority to an AI agent doesn’t remove the need for KYC and AML controls on the underlying account, it just moves the question of who the regulated counterparty actually is. Financial services regulators have been fairly clear that automating a transaction doesn’t automate away the compliance obligation attached to it. 

Firms building agent-driven financial products will need to work out how AML frameworks built around a human initiating a transaction apply when the initiator is code instead.

Jurisdictional Challenges

Jurisdiction adds another layer. A wallet with reach in 190 countries can’t pick one regulatory regime and apply it globally. 

Each new regulated feature has to be checked against local licensing triggers on a country-by-country basis, and the answer will differ for stablecoin earn in Germany, prediction markets in the same country, or either product in Singapore or the UAE. That’s a materially different compliance exercise than the one a pure self-custody wallet has historically faced.

Security Track Record and Market Positioning

Large consumer platforms have historically had more runway than smaller ones to build compliance infrastructure before enforcement catches up, and Consensys has spent the ten years since MetaMask’s 2016 launch building a security track record that regulators tend to view favorably when it comes up for review: the company says it blocked more than 6.5 million malicious website visits and stopped nearly 150,000 malicious transactions in 2025 alone, saving users an estimated $500 million. 

But the shift from wallet to platform is exactly the kind of transition that turns a company from an interesting edge case into a firm that needs a licensing map spanning multiple jurisdictions and product lines at once, rather than a single opinion covering one activity.

Lessons for Crypto and FinTech Founders

For crypto and FinTech founders watching from the outside, MetaMask’s expansion is a useful real-time case study in how quickly “we’re not a financial institution” stops being a defensible position once a product starts doing financial institution things. 

Firms adding a savings feature, a card, or a derivatives product to an existing wallet or exchange should treat each addition as its own licensing question, not an extension of whatever authorization already covers the core product. 

The regulatory perimeter follows the activity, not the brand name attached to it.

Speak to LegalBison FinTech Specialists

Reference:

https://www.eba.europa.eu/sites/default/files/2025-06/e2958c99-a1b0-4b07-9d31-bcba0a28dbe7/Opinion%20on%20the%20interplay%20between%20PSD2%20and%20MiCA.pdf