Google will open cryptocurrency exchange, software wallet and hardware wallet advertising to Iceland, Liechtenstein and Norway from August 2026, extending the licensing architecture already governing the 27 European Union member states to the three remaining European Economic Area countries.

The change was posted to the company's Advertising Policies Help Center change log on July 22, 2026, according to Google's policy documentation. It amends the Cryptocurrencies and related products policies to permit promotion of exchanges and wallets in the three EEA states that sit outside the EU but inside the single market, closing the last territorial gap in a framework that has been assembled market by market since September 2024.

Three conditions govern eligibility, and all three must be satisfied simultaneously. Advertisers must be licensed as a Crypto-Asset Service Provider, abbreviated as CASP, under the Markets in Crypto-Assets regulation, granted by a relevant national competent authority. They must comply with all other local legal requirements, which Google's documentation specifies as including any national-level restrictions or requirements beyond MiCA itself. And they must be certified by Google.

What the policy actually changes

The update is territorial rather than structural. Nothing in the licensing test differs from what already applies across the EU: the same CASP authorisation, the same layered local-compliance obligation, the same separate Google certification step. What changes is the map.

Iceland, Liechtenstein and Norway are the three EEA European Free Trade Association states. They participate in the EU internal market through the EEA Agreement without being EU members, which means EU regulations reach them through a separate incorporation process rather than automatically on the date of EU application. MiCA, formally Regulation (EU) 2023/1114, followed that route. Liechtenstein moved first among the three, implementing the regulation through national legislation, and by December 2024 exchanges headquartered there were filing pre-applications for MiCA licences with the country's Financial Market Authority.

That sequencing explains the timing gap. Google's EU-wide crypto policy overhaul, published on March 24, 2025, took effect on April 23, 2025, and named 27 member states. The EEA EFTA trio was absent from that list, not because the platform excluded them by choice but because the underlying regulatory instrument had not yet completed its passage into their national legal orders on a schedule matching the EU's. The August 2026 update reflects the closing of that lag.

For advertisers, the practical consequence is a single supranational reference point covering roughly 450 million people across 30 countries. A CASP authorisation issued by any one national competent authority within the EEA carries passporting rights across the bloc, which means a firm licensed in Vaduz or Reykjavik can in principle serve the entire area without seeking 30 separate approvals. Google's advertising eligibility test now maps onto that same perimeter.

The seven-day warning mechanism

Google's documentation states that violations of this policy "will not lead to immediate account suspension without prior warning," and that a warning will be issued at least seven days before any suspension of an account.

That sentence is not new. It has appeared verbatim across the company's crypto policy rollouts in other jurisdictions, and it distinguishes cryptocurrency from the categories Google treats as egregious. Advertisers who submit false information during verification face suspension upon detection and without prior warning, a materially harsher posture that Google added to its Circumventing Systems policy in November 2025. Prediction markets sit on the same severe track. The graduated approach also governs alcohol advertising, where the platform issues warnings at least seven days before suspension to give advertisers a remediation window.

The distinction matters operationally. A crypto advertiser in Oslo who begins running exchange ads in August without completing certification will see individual ads disapproved rather than an account terminated overnight, and will receive at least a week's notice before escalation. That window is narrow but real. It does not, however, extend to advertisers who misrepresent their licensing status during the certification process itself, which falls under the separate and unforgiving verification rules.

Where exchanges and wallets sit in Google's tier structure

Google's cryptocurrency policy sorts advertising into three tiers, and the August update touches only one of them.

Allowed content covers businesses that do not buy, hold or exchange cryptocurrencies. Merchants accepting crypto as payment, mining hardware sellers and blockchain educational publishers fall here, provided the educational material stops short of investment advice, financial calculators or technical trend analysis. Blockchain games involving non-fungible tokens qualify when in-game NFT items are consumed or enhance gameplay rather than functioning as tradable instruments.

Prohibited content remains barred in every jurisdiction. Initial coin offerings, decentralised finance trading protocols, cryptocurrency loans, initial DEX offerings, token liquidity pools, unhosted software wallets and unregulated decentralised applications sit in this tier. So do aggregator sites comparing cryptocurrency issuers, platforms offering trading signals, games permitting NFT wagering for real-world value and social casino games rewarding NFTs.

Restricted content is where the EEA expansion lands. Exchanges, software wallets, coin trusts and hardware wallets designed to hold private keys can be advertised only after an advertiser applies for and receives approval for the specific category and location. Hardware wallets carry a narrower test: the device must be designed solely to hold private keys for cryptocurrencies, NFTs or similar assets, without offering supplementary buying, selling, exchanging or trading services. Hardware wallet advertisers are exempt from the licensed-provider requirement that binds exchanges and software wallets, though certification remains mandatory across the category.

Approval within the restricted tier depends on three simultaneous conditions. Services and ads must comply with local laws and industry standards. The targeted location must appear on Google's approved list, with the advertiser's application for that location approved. And the advertiser must hold a licence recognised in that jurisdiction, unless the product is a hardware wallet. Google's documentation is explicit that non-approved markets cannot host crypto exchange or wallet advertising at all.

A pattern assembled market by market

The EEA trio joins a list built incrementally over almost two years, and the assembly logic has been consistent throughout.

Google brought certified Swiss exchanges and wallets into its ecosystem from September 20, 2024, requiring licensing from the Swiss Financial Market Supervisory Authority. Three months later, on December 20, 2024, the company announced that UK exchanges would gain clearance from January 15, 2025, contingent on Financial Conduct Authority registration. Argentina arrived in September 2025, when Google tied eligibility to the Registry of Virtual Asset Service Providers administered by the Comisión Nacional de Valores.

In every case Google anchors advertising eligibility to a named regulator and layers its own certification on top. FINMA in Switzerland, the FCA in the United Kingdom, the CNV in Argentina, and CASP authorisation under MiCA across the EEA. The two-step verification recurs regardless of how the underlying financial supervisors differ in structure or mandate.

The EU-wide track has moved in the opposite direction to this expansion over the past year. Three member states, Finland, France and Germany, had historically allowed Google to accept country-specific licences instead of MiCA authorisation, and the company built separate transition windows for each into its April 2025 overhaul. Finland's window closed on June 30, 2025. Germany's closed on December 30, 2025. France received the longest runway, and on July 1, 2026, Google stopped accepting Digital Asset Service Provider registration from the Autorité des marchés financiers as grounds for crypto exchange and wallet advertising, closing the final national carve-out.

Those deadlines were not set by Google. Article 143(3) of the MiCA regulation permits individual member states to define transitional periods for firms already operating under earlier national regimes, and the platform's enforcement calendar tracked the legislative one directly. The result is that within roughly three weeks, Google has both eliminated the last national alternative to MiCA inside the EU and extended the MiCA requirement to the three EEA countries outside it. Harmonisation arrived from both directions at once.

Germany's advertisers face a separate procedural shift running alongside. From June 2026, Google stopped accepting German crypto certification applications through the Advertising Policies Help Center interface, requiring submission directly through the advertiser's Google Ads account. Existing certifications are unaffected.

Verification pressure across categories

The crypto policy does not operate in isolation. It sits inside a widening apparatus of licence-checking that has expanded sharply across European markets.

Google introduced verification requirements for financial services advertisers in Ireland, New Zealand, South Korea and Thailand from November 7, 2024, operating through a two-step process in which an external compliance partner assesses licensing status before the advertiser applies to Google. That programme has since grown considerably. On June 23, 2026, Google expanded mandatory financial services advertiser verification to 24 additional EU and EEA countries, bringing the total under the programme to 42, with most facing an enforcement start date of July 23, 2026. Advertisers who miss the 30-day verification window see financial services ads restricted while non-financial campaigns continue running.

Enforcement architecture has tightened in parallel. Google restricted appeals for policy decisions more than six months old from July 21, 2026, a change that narrows the remediation path for advertisers who discover an old disapproval late. Passkeys became required for sensitive account actions from July 15, 2026. Terms of Service changes took effect on July 1, 2026, adding contractual basis for passing regulatory costs to advertisers. Limited ad serving reached Google Search from June 2026 under phased enforcement running through 2028, targeting advertisers whose identity or business operations remain unverified.

Two distinct compliance obligations now converge on the same firms. A crypto exchange advertising in Norway from August must hold CASP authorisation and Google crypto certification under the cryptocurrency policy, while also satisfying financial services verification if its ads fall within that category's scope. The programmes run on separate tracks with separate application flows, separate enforcement calendars and separate consequences for failure.

Why this matters for the advertising industry

Market size is the immediate consideration. Iceland, Liechtenstein and Norway have a combined population under six million, a fraction of the EEA total, and none is a large advertising market by European standards. Read narrowly, the August update is a minor territorial adjustment.

Read structurally, it is the completion of a perimeter. Advertisers running pan-European crypto campaigns have until now managed a compliance map with three holes in it, where the regulatory framework governing 27 countries did not extend to three neighbours inside the same single market. From August, media planning against the EEA becomes a single-standard exercise for this category, rather than an EU standard plus three exclusions plus, until three weeks ago, three national carve-outs inside the EU itself.

The dependency running underneath deserves attention. Google's crypto advertising calendar has been derived from legislative timetables it does not control, in France through Article 143(3) transitional periods and in the EEA EFTA states through the pace of national incorporation of EU regulation. Platform policy in this category functions as a downstream reflection of financial regulation rather than an independent commercial judgment. That relationship implies further movement as remaining MiCA-related transitional arrangements across other jurisdictions reach their scheduled endpoints.

A licensing bottleneck also sits between the policy and its practical effect. CASP authorisation is granted by national competent authorities, not by Google, and application processing times vary by regulator. An exchange without existing authorisation cannot simply opt into the August opening. The passporting mechanism cuts the other way too: a firm already holding CASP status in an EU member state may find the three new markets available with no additional licensing step, since the authorisation travels across the EEA. Which firms benefit from the August change depends less on the announcement than on where each already stands with its supervisor.

Timeline

Summary

Who: Google, through its Advertising Policies Help Center, addressing cryptocurrency exchange, software wallet and hardware wallet advertisers targeting Iceland, Liechtenstein and Norway, together with the national competent authorities in those countries responsible for granting Crypto-Asset Service Provider authorisation under MiCA.

What: The company will update its Cryptocurrencies and related products policies to permit promotion of exchanges and wallets in the three countries, subject to three cumulative conditions: CASP licensing under the Markets in Crypto-Assets regulation from a relevant national competent authority, compliance with all other local legal requirements including national-level restrictions beyond MiCA, and certification by Google. Violations trigger a warning at least seven days before any account suspension rather than immediate termination.

When: The change log entry was posted on July 22, 2026, with the policy update scheduled to take effect in August 2026.

Where: Iceland, Liechtenstein and Norway, the three European Economic Area countries outside the European Union, completing coverage of the 30-country EEA following the EU-wide MiCA requirement that took effect on April 23, 2025.

Why: MiCA reaches the EEA EFTA states through national incorporation rather than automatic application, producing a lag between the EU-wide policy and its extension to the three remaining single-market countries. The update aligns Google's advertising eligibility perimeter with the regulatory perimeter of CASP authorisation, which carries passporting rights across the EEA, and arrives three weeks after the company closed the last national licensing carve-out inside the EU itself.