The Lithuanian VASP Clean-Out: utPay, CoinsPaid, and the MiCA “Guillotine” Hits High-Risk Crypto Rails
Ongoing surveillance of the Lithuanian VASP registry and associated high-risk payment infrastructure indicates that the so-called “MiCA Guillotine” has removed yet another layer of entities previously central to offshore gambling and iGaming transaction flows. Multiple providers that once functioned as core crypto-fiat rails have either ceased visible operations, shifted jurisdictions, or re-emerged in legally ambiguous formats.
What we are observing now is an early phase of a broader systemic regulatory purge across the Baltic region. This phase is marked by what we classify as a “Shadow Rail Contagion”—a pattern in which exposed processors disappear, fragment, or migrate as the January 1, 2026 MiCA enforcement deadline takes effect.
Below is a structured assessment of additional high-risk VASPs and payment processors currently under pressure or recently forced to “pivot” their operating models.
The “Shadow Rail” Contagion
Affected VASPs and Regulatory Migrants
1. Match2Pay (Match2Pay UAB)
Status: High Risk | Ongoing Review
Analysis:
Match2Pay UAB has long been positioned as a major card-to-crypto on-ramp for gambling operators in Lithuania. While the company previously emphasized its Lithuanian registration, current registry checks indicate that it was not included among the approximately 30 firms that successfully obtained a MiCA CASP license before the deadline. In parallel, several of its payment and API access points are currently displaying “Technical Maintenance” notices, a common signal preceding service withdrawal or restructuring.
2. Ari10 (Ari10 UAB)
Status: Jurisdictional Relocation
Analysis:
Ari10 remains a notable crypto-fiat exchange operator across Poland and the Baltic markets. Following increased supervisory pressure from the Bank of Lithuania, the company has gradually shifted operational focus toward its Polish VASP registration. At present, Poland functions as a temporary regulatory buffer, as its MiCA enforcement timeline trails Lithuania’s rapid “cliff-edge” implementation.
3. CryptoProcessing (Dream Finance UAB)
Status: Operationally Suspended in Lithuania
Analysis:
CryptoProcessing, the B2B arm of the Dream Finance / CoinsPaid group, has effectively shut down its Lithuanian infrastructure. Merchants formerly dependent on this rail are being redirected toward affiliated entities in Estonia (OÜ structures) or Canada. However, these substitute entities lack the legal capacity to passport services into the EU without an approved MiCA CASP license, placing both merchants and counterparties in a compliance danger zone.
4. Paymero and SegoPay
Status: Deregistered | “Ghost Gateway” Phase
Analysis:
Historically, Paymero and SegoPay operated as anonymized front-end gateways for elevated-risk transaction traffic. Traffic telemetry from December 2025 shows a sharp collapse in activity across their Lithuanian-based endpoints. Evidence suggests a transition toward self-hosted or “sovereign” payment frameworks, including PayRam-type architectures or BTCPay Server deployments, designed to bypass MiCA custodial obligations.
Comparative Insight: The “Polish Shelter” Migration Model
Data collected during Q4 2025 shows a significant regulatory migration from Vilnius to Warsaw. More than 22 Lithuanian-registered VASPs relocated their nominal compliance base to Poland within a single quarter.
Compliance Warning
This migration represents short-term regulatory arbitrage rather than a sustainable solution. Poland’s current AML-only registration regime is expected to be superseded by harmonized MiCA enforcement by mid-2026 as ESMA advances coordination efforts. For banks and PSPs, onboarding traffic from Polish-registered VASPs recently expelled from Lithuania constitutes a material AML and compliance red flag.
Operational Red Flags for Banks and Regulators
As suspended or displaced entities attempt to preserve transaction flows, several recurring warning signs are emerging:
-
“Technical Services Only” Claims
Entities asserting that they no longer provide crypto services, while continuing to enable gambling-related deposits under the guise of payment software or infrastructure support. -
Descriptor Obfuscation
Replacement of identifiable company descriptors (e.g., “utPay”) with vague labels such as “Online Service” or “Digital Topup” on bank statements to conceal links to suspended VASPs. -
Non-EU Processing Layers
Routing EU player deposits through Canadian or UAE-based entities, in direct conflict with MiCA restrictions on reverse solicitation and third-country pass-through structures.
Call for Information
We are actively seeking intelligence related to Match2Pay UAB and other Lithuanian entities that continue operating under “consultancy,” “software,” or similar contractual frameworks following the loss of VASP registration.
Operators, PSPs, or integrators who have been offered replacement rails following the shutdown of utPay or CoinsPaid are encouraged to submit technical integration details and settlement account information via the Scam-Or Project whistleblower section. All submissions are handled with strict confidentiality.
