This article covers the legal side of tokenizing real-world assets (RWA), meaning the issue of tokens that represent real estate, commodities, securities, funds or debt claims. It explains what rights a token holder actually receives, which structures issuers use, how a token is classified in the EU, the US and the UK, which securities, MiCA and anti-money laundering (AML) rules apply and which steps to take before launch.
Checked on 8 November 2026 against EU regulations, the SEC staff statement, ESMA and FCA publications and the 2025 UK Act. Rules differ by country and change, so confirm the position for your own model.
What RWA tokenization is
RWA tokenization means representing rights in a real-world asset with digital tokens recorded on a blockchain or another distributed ledger. The blockchain handles recording and transfer of the tokens. The legal rights of investors still have to be established separately under the applicable law and contracts.
Underlying assets can include real estate and land, commodities such as gold, shares and bonds, interests in investment funds, receivables such as loans and invoices, and royalties or licensing rights. For example, a company owns a commercial property worth EUR 5 million and wants to raise capital without selling the whole building. It sets up a structure in which investors buy tokens representing shares or debt instruments linked to the property and receive dividends, interest or a share of proceeds.
Tokenization of an asset and legal ownership of that asset are not the same thing. A token linked to an apartment does not by itself make its holder the owner of the apartment. The central question for any project is what rights the token really gives.
Legal structures for tokenization
There is no single universal structure. The right one depends on the asset, property law, investor rights and regulatory classification.
Direct tokenization
The token represents a direct interest in the asset. The idea is simple but hard to implement legally. Many assets require specific formalities for a transfer. Transferring real estate usually requires registration under local law, and a blockchain transaction alone may not pass title. You need to confirm that the relevant law recognises the token or ledger as a legally effective record of ownership.
SPV structure
A special purpose vehicle (SPV) acquires and legally owns the asset. It then issues shares, bonds or other instruments represented by tokens. Investors do not own the building directly. They own shares in the company that owns it. This is the most common approach, especially for real estate and commodities.
Debt tokenization
Investors provide capital and receive tokens representing bonds, notes or other debt claims. The asset may serve as collateral or generate the repayment cash flows. The documents should set out repayment obligations, interest, maturity, security, default events and enforcement. Depending on the design, the deal may qualify as a securitisation with its own rules.
Contractual rights
A token may give a contractual right to part of the revenue, for example a percentage of rental income from a property portfolio. Calling it a utility token or participation token does not take it outside securities regulation. If investors contribute capital expecting returns from the efforts of another party, the instrument may be a regulated investment product.
| What the investor gets | Main risk | |
|---|---|---|
| Direct tokenization | An interest in the asset itself, if the law recognises it | The token may not transfer title without formalities |
| SPV | Shares or other rights against the SPV | No direct right to the asset, SPV risk |
| Debt | A claim against the issuer, sometimes secured | Issuer insolvency, weak security |
| Contractual rights | A right to part of the revenue | Reclassification as a security |
Is an RWA token a security
There is no single RWA category recognised in every country. Depending on its rights, a token may be a share, a bond, a unit in a collective investment scheme, a derivative, an asset-referenced token (ART), another crypto-asset, or an ordinary contractual or property right. The classification decides which regime applies. A token representing SPV shares will almost always need analysis under securities law. A token representing a debt claim may be a bond. A token that maintains a stable value by referencing a basket of assets or rights may fall under the ART regime in MiCA. The name the issuer gives the token is not decisive.
European Union, MiCA and securities rules
In the EU the key distinction is between crypto-assets under MiCA (Regulation 2023/1114) and financial instruments under MiFID II. MiCA does not apply to crypto-assets that qualify as financial instruments. A token representing shares, bonds or other transferable securities is therefore generally outside MiCA and is analysed under securities and investment services rules.
On 19 March 2025 ESMA issued guidelines on qualifying crypto-assets as financial instruments. Under them, a token is a transferable security if it is not an instrument of payment, forms part of a class of fungible securities of one issuer with clearly defined rights, and is negotiable on the capital market. The approach is substance over form. The technological format does not change the status, and tokenised financial instruments remain financial instruments.
If the token is not a financial instrument, it may fall under MiCA. For tokens other than ARTs and e-money tokens, the issuer or offeror generally prepares and publishes a white paper and complies with notification, disclosure and marketing rules. ARTs face a stricter regime that includes issuer authorisation, reserve and governance requirements, subject to exemptions. Issuer duties and CASP duties are not the same. A token issuer does not need a CASP licence merely because the token falls under MiCA. A platform providing custody, exchange or transfer of crypto-assets may, however, need authorisation. We cover this in our article on the CASP licence under MiCA, and the process is described on the page about the CASP licence in the EU.
If the token is a security, the Prospectus Regulation (EU) 2017/1129 must be considered. A prospectus is generally required for a public offer of securities in the EU or admission to trading on a regulated market, unless an exemption applies. Typical exemptions cover offers to qualified investors only, offers to fewer than 150 persons per Member State, securities with a denomination of at least EUR 100,000 and small public offers. Under the Listing Act (Regulation (EU) 2024/2809) the threshold for small offers is EUR 12 million over 12 months, and Member States may lower it to EUR 5 million. According to the Belgian regulator FSMA, the new rule applies from 5 June 2026. An exemption does not remove other duties. National rules, marketing restrictions and intermediary requirements still apply.
The EU also has a DLT Pilot Regime under Regulation (EU) 2022/858. It lets authorised market infrastructure operators use distributed ledger technology for trading and settlement of certain tokenized instruments, namely eligible shares, bonds and units in collective investment undertakings, with size limits. It is not a general exemption from securities regulation.
United States, the Howey test and the SEC statement
In the US an RWA token may be a security under federal law. The core test comes from the Supreme Court decision in SEC v. W.J. Howey Co. (1946). An investment contract generally involves an investment of money in a common enterprise with a reasonable expectation of profit derived from the efforts of others. A token giving a share of rental income from a property managed by the issuer may, depending on the facts, be an investment contract.
On 28 January 2026 the staff of the SEC Divisions of Corporation Finance, Investment Management and Trading and Markets published a statement on tokenized securities. It distinguishes between issuer-sponsored tokenization and tokenization by third parties, including custodial and synthetic models. It confirms that recording ownership on a blockchain does not change how federal securities laws apply, and that a tokenized security may be a separate class if its rights differ. It also says it reflects staff views and has no legal force or effect.
United Kingdom, FSMA and digital asset property law
The Financial Services and Markets Act 2000 (FSMA) remains the core of UK regulation. If a token represents shares, bonds or units in a collective investment scheme, the issuer and other participants assess the rules on securities offers, investment activities, custody, arranging deals and financial promotions.
On 30 April 2026 the FCA published Policy Statement PS26/7 on fund tokenisation. It concerns managers of authorised funds and depositaries. It adds Handbook guidance on keeping a unitholder register on distributed ledger technology, introduces an optional Direct to Fund dealing model and sets out next steps on stablecoins and public networks.
Separately, the Property (Digital Assets etc) Act 2025 received Royal Assent on 2 December 2025. It confirms that something does not lose the ability to be an object of personal property rights merely because it is neither a thing in possession nor a thing in action. The Act applies in England and Wales. Recognising a token as property does not make its holder the owner of the underlying asset. A token linked to a building is not the same as being registered as owner of that building.
Asset rights, custody and investor protection
A legally sound project must establish how the assets are acquired, held, protected and made available to investors. The issuer should be able to answer several questions.
Who owns the assets
The documents name the legal owner of each asset. If an SPV owns it, investors should understand they hold rights against the SPV, not direct title.
Are assets segregated
Where a custodian holds assets, the contracts should address segregation, ownership records, insolvency treatment and access.
Can the issuer dispose of them
Selling, pledging or encumbering the assets without investor consent should be restricted.
How is value set
A reliable valuation method is needed. It may involve independent appraisal, audit, inventory reports or other verification.
What if the issuer is insolvent
Investors should know whether they have a proprietary right, secured creditor status or only an unsecured claim. A token does not protect its holder from the insolvency of the issuer or custodian.
AML and investor verification
The AML regime depends on the activities and on the classification of the tokens. An EU platform providing regulated crypto-asset services may be an obliged entity. An investment firm or fund manager distributing tokenized securities follows the rules for its regulated activity. The issuer itself is not automatically subject to the same set of obligations, and its status is assessed separately.
KYC and KYB
Investors prove identity and address. For corporate investors, check the entity, directors and beneficial owners. Our article on KYC and KYB for payment providers covers the procedures.
Source of funds
Large investments, higher-risk investors and complex ownership structures call for additional source of funds and source of wealth checks.
Sanctions
Investors, beneficial owners and counterparties are screened against applicable sanctions lists.
Monitoring
Platforms with secondary markets, custody or transfers need systems to detect suspicious transfers.
Where a token is a crypto-asset under MiCA and its transfer is handled by regulated CASPs, Regulation (EU) 2023/1113 may require originator and beneficiary information to accompany the transfer. Tokenized financial instruments outside MiCA are not automatically subject to the same regime, and intermediaries assess the securities and AML rules instead. See our article on the Travel Rule for crypto businesses.
Smart contracts, technology and disclosure
Smart contracts can automate issuance, transfers, dividend and interest payments and redemption. They must accurately reflect the rights and obligations set out in the legal documents. Several issues deserve attention.
Smart contract audits
Independent review for vulnerabilities and hidden control mechanisms.
Transfer restrictions
Whitelists, investor eligibility checks, country restrictions and lock-up periods.
Asset verification
Independent confirmation that the asset exists and is held as represented.
Oracle reliability
Procedures for importing external data such as valuations and payment events.
Keys and continuity
Secure key management and plans for failures, lost keys and emergency intervention.
The offering documents should explain the nature of the token, investor rights, underlying assets, valuation method, redemption, fees, conflicts of interest and risks. A white paper or investment memorandum must not claim that token holders own the asset when they actually hold shares, debt claims or contractual rights. Misrepresenting the legal nature of the investment creates significant liability for the issuer.
How to launch an RWA project legally
Identify the asset
Its legal nature, location, ownership status and any restrictions.
Select the ownership structure
Direct ownership, SPV shares, debt instruments, fund units or contractual rights.
Classify the token
Security, fund interest, derivative, ART or another crypto-asset in the target countries.
Determine licensing
Whether the issuer, platform, custodian, broker or trading venue needs authorisation. For the US, see our page on crypto licensing in the USA.
Prepare the documents
Prospectus or white paper, memorandum, subscription agreement, holder terms and risk disclosures.
Set up AML and KYC
Investor onboarding, beneficial owner checks, sanctions screening and monitoring.
Audit the asset and technology
Asset verification, custody review and independent smart contract assessment.
Establish governance
Responsibility for asset management, reporting, distributions, investor communication and disclosure.
A successful RWA project starts with legal structuring, not token development.The LegalBit team
Frequently asked questions
Is an RWA token always a security?
No. Classification depends on the legal and economic rights it represents. Some tokens are securities, while others fall under crypto-asset regulation or represent contractual or property-related rights.
Can I tokenize real estate without an SPV?
Potentially, but it depends on property law. A blockchain transaction does not automatically transfer registered ownership. The local requirements for transfer and registration must be met.
Does an RWA token issuer need a MiCA licence?
Not necessarily. MiCA does not apply to financial instruments, including tokenized securities. Other RWA tokens may fall under MiCA, but issuer duties differ from the authorisation requirements for CASPs.
Can RWA tokens be offered to international investors?
Potentially, but the securities, promotion, investment product and crypto-asset rules of each target country must be considered. An exemption in one country does not automatically apply elsewhere.
Can investors trade RWA tokens on a secondary market?
Yes, if the trading complies with the rules. Depending on the classification of the token and the services provided, the platform may need authorisation as an investment firm, trading venue, CASP or another regulated participant.
See also: CASP licence under MiCA; Travel Rule for Crypto Businesses; KYC and KYB for Payment Providers. Services: Legal services for crypto projects.
Primary sources10 documents
- Regulation (EU) 2023/1114 on markets in crypto-assets (MiCA)
- Directive 2014/65/EU on markets in financial instruments (MiFID II)
- Regulation (EU) 2017/1129 (Prospectus Regulation)
- Regulation (EU) 2024/2809 (Listing Act)
- Regulation (EU) 2022/858 on a pilot regime for market infrastructures based on DLT
- Regulation (EU) 2023/1113 on information accompanying transfers of funds and certain crypto-assets
- ESMA, Guidelines on the qualification of crypto-assets as financial instruments, 19 March 2025
- SEC staff, Statement on Tokenized Securities, 28 January 2026
- FCA, PS26/7 Progressing fund tokenisation, April 2026
- Property (Digital Assets etc) Act 2025
This material is general information and is not legal advice. Facts checked on 8 November 2026. Rules and deadlines change, so check the official requirements for your model and target markets before launch.
This is what we do
We help crypto and Web3 businesses with structuring token issues, licensing, securities regulation and AML and KYC procedures.
