RWA Tokenization

The legal classification of that token determines everything:

• Security token. If the token represents an investment contract (profit expectation from the efforts of others), it is a security token. This triggers full securities regulation in most jurisdictions. Real estate tokens, bond tokens, and fund interest tokens almost always fall here.
• Utility token. If the token provides access to a service or product, it may be classified as a utility token. Most real-world asset tokens do not qualify.
• E-money token (EMT). If the token purports to maintain a stable value against a single fiat currency, it is an e-money token under MiCA. This applies to stablecoins, not typical RWA tokens.
• Asset-referenced token (ART). If the token references multiple assets or currencies for value stability, it is an ART under MiCA. We cover the distinctions between EMT vs. ART in MiCA in this coverage.

For most RWA tokenization projects, the starting point is securities law. The token is a security. Build the compliance framework from there.

The SEC is the primary regulator for tokenized real-world assets in the US. On January 28, 2026, three SEC divisions (Corporation Finance, Trading and Markets, and Investment Management) issued guidance on how federal securities laws apply to tokenized securities, clarifying that the technology format does not change a security’s legal status.

Key SEC frameworks for RWA tokenization:

• Regulation D (Rule 506). Private placement exemption. Allows issuance of security tokens to accredited investors without SEC registration. The most common route for US-focused RWA projects.
• Regulation S. Offshore exemption. Allows issuance to non-US persons outside the US. Used for international RWA offerings.
• Regulation A+. Mini-IPO exemption. Tier 2 allows public offering of up to USD 75 million with reduced disclosure requirements.
• Regulation CF. Crowdfunding exemption. Allows retail investment up to USD 5 million.

The CFTC classifies Bitcoin and Ethereum as commodities. Tokenized commodities (gold, oil, agricultural products) may fall under CFTC jurisdiction if they are traded on futures or derivatives markets.

The EU has two parallel frameworks for tokenized assets:

MiCA (Markets in Crypto-Assets Regulation, Regulation 2023/1114). Fully applicable since December 2024. MiCA covers crypto-assets that are NOT financial instruments under MiFID II. Critically, MiCA explicitly excludes tokenized securities and tokenized deposits. If your RWA token is a security, MiCA does not apply. The securities framework (MiFID II, Prospectus Regulation, CSDR) governs instead.

In May 2026, the European Commission launched a public consultation on MiCA review (through August 31, 2026). One of MiCA’s architects, Peter Kerstens, stated the EU should prioritize tokenization over DeFi regulation.

DLT Pilot Regime (Regulation 2022/858). A regulatory sandbox for trading and settlement of tokenized financial instruments (shares, bonds, UCITS) using distributed ledger technology. In force since March 23, 2023. On June 25, 2025, ESMA recommended amendments to make the regime permanent and more flexible. On December 4, 2025, the European Commission proposed a major upgrade (DLT Pilot 2.0), raising the issuance threshold from EUR 6 billion to EUR 100 billion and expanding eligible instruments to all MiFID II securities.

Key changes in the proposed DLT Pilot 2.0:

• CASPs (MiCA-authorized entities) can now qualify to operate DLT trading and settlement systems
• Simplified authorization for platforms under EUR 10 billion
• Stablecoins (EMTs) can be used for settlement
• Pan-European Market Operator (PEMO) status proposed

The DLT Pilot 2.0 proposal is expected to go through EU trialogues in late 2026 and first half of 2027, with final agreement by end of 2027.

The FCA regulates security tokens under existing financial services legislation. Tokenized real-world assets that qualify as specified investments fall under the Financial Services and Markets Act 2000.

The FCA has been relatively progressive, with a regulatory sandbox that has tested tokenized assets. Financial promotions rules apply to any marketing of security tokens to UK persons.

The Monetary Authority of Singapore (MAS) regulates tokenized assets under multiple frameworks. Security tokens fall under the Securities and Futures Act.

Digital payment tokens are regulated under the Payment Services Act. The MAS has been active in tokenization pilots, including Project Guardian (collaboration with JP Morgan, DBS, and SBI Digital Asset Holdings).

The Virtual Assets Regulatory Authority (VARA) in Dubai regulates virtual assets, including tokenized assets, under the Virtual Assets and Related Activities Regulation.

VARA provides a licensing framework for virtual asset service providers operating in or from Dubai.

The Securities and Futures Commission (SFC) in Hong Kong regulates security tokens under the Securities and Futures Ordinance. Tokenized securities that constitute “securities” under the Ordinance require SFC authorization or exemption.

We cover most of the general how-tos when it comes to tokenizing assets in this publication.

The right jurisdiction depends on your asset class, target investors, and business model. We evaluate:

• Securities law complexity and clarity
• Regulatory sandbox availability (EU DLT Pilot, UK FCA sandbox)
• Tax treatment of tokenized assets
• AML/CFT requirements
• Banking and custody infrastructure
• Investor protection framework

We set up the corporate structure for your RWA tokenization project, including:

• Operating company in the chosen jurisdiction
• SPV (Special Purpose Vehicle) for asset holding
• Fund vehicle if required (for fund-based tokenization)
• Registered office and substance requirements

Depending on the jurisdiction and business model, you may need:

• MiCA CASP authorization (if providing crypto-asset services in the EU), see our MiCA license page
• MiFID II investment firm authorization (if operating a DLT trading facility under the EU DLT Pilot)
• SEC broker-dealer or investment adviser registration (US)
• FCA authorization (UK)
• MAS license (Singapore)
• VARA license (Dubai)

We handle the full licensing process: application preparation, documentation, regulator liaison, and ongoing compliance setup.

All tokenization platforms must comply with anti-money laundering and counter-terrorism financing regulations. We establish:

• AML/CFT compliance policy tailored to your tokenization model
• KYC/KYT procedures for token holders
• Transaction monitoring systems
• Suspicious activity reporting
• Staff training and compliance officer appointment

We work with your technical team to ensure the token structure matches the legal classification:

• Smart contract terms aligned with legal offering documents
• Transfer restrictions encoded on-chain (accredited investor checks, jurisdiction limits)
• Dividend and distribution mechanisms
• Governance rights
• Secondary market compliance