# How is real world asset tokenization regulated?
Tokenization is regulated by what the asset is and what you do with it, not by the technology: the US, EU, UK and Swiss rules compared.
---
Real world asset tokenization is regulated by what the token represents and by what each party does with it, not by the technology: a tokenized share, bond or fund unit is a security under the securities law that already existed, its issuer needs a registration, a prospectus or an exemption, and whoever sells, trades, settles or safekeeps it needs the licence that activity has always required. No major jurisdiction has a single "tokenization law". What some of them have added is a dedicated regime for the market infrastructure, or a change to private law so that a ledger entry can carry title.
This article covers the United States, the European Union, the United Kingdom and Switzerland, each read on the regulator's or the legislator's own publications. Singapore is left out, because its rules could not be read on a primary page for this article. It is general information, not legal or investment advice: the classification of a given token depends on its terms, and the party that issues or distributes it needs its own counsel in each country where it offers.
A security token is the subject of its own article on this blog. Here it is enough to say that the term covers a token carrying the rights of a security, such as a claim on profits, interest, repayment or a vote, and that this legal label triggers everything described below.
EUR 6 billionceiling on the tokenized instruments one infrastructure may admit under the European Union's DLT Pilot Regime
Up to six yearsvalidity of a specific permission granted under that regime
8 January 2029date until which the United Kingdom's Digital Securities Sandbox is due to run
Sources: Regulation (EU) 2022/858 and the European Securities and Markets Authority for the first two figures; the Bank of England for the third.
## What decides which rules apply to a tokenized asset?
Two things decide which rules apply to a tokenized asset: the legal nature of the asset the token represents, and the activity a given party performs on it. The ledger the token lives on changes neither. The staff of the Securities and Exchange Commission put the principle in one sentence in its January 2026 statement on tokenized securities: the format in which a security is issued, or the method by which holders are recorded, does not affect the application of the federal securities laws.
The same idea runs through the other three jurisdictions. The European Union's crypto-asset regulation, MiCA, states in its scope article that it does not apply to crypto-assets that qualify as financial instruments, which sends a tokenized bond back to the securities rulebook. The Financial Conduct Authority in the United Kingdom describes security tokens as tokens that amount to a specified investment under the Regulated Activities Order and says they are likely to be inside its perimeter. The Swiss supervisor, FINMA, has said since its 2018 guidelines that it looks at the economic function and purpose of a token and that it regards asset tokens as securities.
A tokenization project therefore answers four questions in each jurisdiction: what the token is in law, what the issuer must file or publish before offering it, which licence each intermediary needs, and whether a dedicated regime makes any of that easier.
## How is a tokenized security regulated in the United States?
In the United States a tokenized security is regulated as a security under the Securities Act of 1933 and the Securities Exchange Act of 1934, with no dedicated federal regime for tokenized form. The Securities and Exchange Commission's staff statement of January 2026 defines a tokenized security as a financial instrument listed in the statutory definition of a security that is formatted as, or represented by, a crypto asset, where the record of ownership is kept in whole or in part on one or more crypto networks. The statement gives staff views and says itself that it has no legal force.
The statement separates two models, and the difference matters to anyone who holds the token. In the first, the issuer itself, or its agent, issues the security in token form and keeps the master securityholder file on the network. In the second, a third party unaffiliated with the issuer tokenizes a security it holds or references. That third party may issue a token representing a security entitlement in the underlying, or it may issue its own instrument that gives synthetic exposure to it.
According to the same statement, a holder of a third-party token may face risks tied to that third party, such as its bankruptcy, that a holder of the underlying security would not face, and a synthetic instrument is not an obligation of the issuer of the referenced security.
The intermediaries are licensed by activity. The Commission's guide to broker-dealer registration recalls that a broker is any person engaged in the business of effecting transactions in securities for the account of others, that a dealer buys and sells securities for its own account as a business, and that both must register under Section 15 of the Exchange Act and join a self-regulatory organization before starting business. A platform that matches orders in tokenized securities either registers as a national securities exchange or operates as an alternative trading system, which under Regulation ATS must first be a registered broker-dealer and file Form ATS at least 20 days before it starts.
## Which US exemptions can a tokenized offering use?
A tokenized offering in the United States can use the same exemptions from registration as any other offering, because the Securities and Exchange Commission states that every offer and sale of securities must either be registered under the Securities Act or rely on an available exemption. The Commission's overview of exempt offerings gives the main ones and their conditions.
| Exemption | Amount that can be raised | Main condition stated by the Commission |
| --- | --- | --- |
| Rule 506(b) | No limit stated | General solicitation prohibited; up to 35 non-accredited purchasers in any 90-day period |
| Rule 506(c) | No limit stated | General solicitation permitted; every purchaser accredited, with reasonable steps to verify |
| Rule 504 | Up to $10 million in a 12-month period | Form D filed within 15 days after the first sale |
| Regulation Crowdfunding | Up to $5 million | Sold online through a registered broker-dealer or funding portal |
| Regulation A | Up to $75 million | The highest ceiling of the exemptions listed; conditions set in the regulation itself |
Take a worked example, with illustrative figures. A company plans a tokenized note sold to 150 investors at $80,000 each, which is $12,000,000. That amount is $7,000,000 above the Regulation Crowdfunding limit and $2,000,000 above the Rule 504 limit, so neither can carry the offering alone. It is 16% of the Regulation A ceiling, which leaves $63,000,000 of room, and Rule 506 has no stated limit, so the real choice is between a private placement under Rule 506 and a Regulation A offering.
Under Rule 506(c) the company may advertise the token publicly, but all 150 purchasers must be accredited and verified. Under Rule 506(b) it may not solicit generally. The choice then fixes the restrictions the token's transfer rules must enforce; when a tokenized security can be resold in the United States is covered in a separate article.
## How does the European Union regulate tokenized securities?
The European Union regulates a tokenized security as a financial instrument under its existing financial services legislation, and keeps it outside MiCA. Article 2 of MiCA lists the crypto-assets the regulation does not apply to, and financial instruments come first on that list. The European Securities and Markets Authority sums up the other side of the line: MiCA covers crypto-assets that are not currently regulated by existing financial services legislation.
The practical consequence is that the first job in the European Union is classification. MiCA required the European Securities and Markets Authority to issue guidelines on the conditions and criteria for the qualification of crypto-assets as financial instruments, and the authority has published them. A token that qualifies is treated as the share, bond, fund unit or derivative it is: the issuer falls under the Union's prospectus rules or one of their exemptions, and the firms that place, advise on, trade or hold it need the authorisation that investment services require.
One economic project can therefore land in two different rulebooks depending on the rights written into the token, which is why the terms are drafted before the regime is chosen, never the reverse.
## What is the EU DLT Pilot Regime and what are its limits?
The European Union's DLT Pilot Regime is a temporary framework, set by Regulation (EU) 2022/858, that lets authorised market infrastructures trade and settle tokenized financial instruments on a distributed ledger with targeted exemptions from the ordinary rules. The European Securities and Markets Authority states that it has applied since 23 March 2023 and is set to run for at least three years, with the possibility of extension by the European Commission.
The regulation creates three kinds of infrastructure: a DLT multilateral trading facility, a DLT settlement system, and a DLT trading and settlement system that combines the two functions in one operator. It defines a DLT financial instrument as a financial instrument that is issued, recorded, transferred and stored using distributed ledger technology. An operator may ask for exemptions that ordinary venues do not get: for instance, the regulation allows a competent authority to permit a DLT multilateral trading facility to admit natural and legal persons who deal on their own account, where access to a traditional venue normally runs through intermediaries. Each specific permission is valid throughout the Union for up to six years from its date of issue.
The price of that flexibility is a set of size limits, on each instrument and on each infrastructure.
Size limits under the EU DLT Pilot RegimeEUR, per instrument and per infrastructure
Source: Regulation (EU) 2022/858, Article 3, and the European Securities and Markets Authority. An exception exists for certain corporate bonds of smaller issuers; it is not shown.
A worked example shows how the two levels interact; the figures are illustrative. A DLT trading and settlement system has already admitted instruments worth EUR 5.2 billion in aggregate. An issuer brings a tokenized bond of EUR 900 million. The bond is under the EUR 1 billion issue limit, so it is eligible on its own, but it would take the infrastructure to EUR 6.1 billion, which is EUR 100 million over the EUR 6 billion ceiling that applies at the moment of admission. It cannot be admitted. A bond of EUR 750 million would take the total to EUR 5.95 billion and can be admitted, leaving EUR 50 million of headroom.
The second limit works differently. Once the aggregate market value of what the infrastructure has admitted reaches EUR 9 billion, the regulation requires the operator to activate its transition strategy and notify its competent authority. From EUR 5.95 billion, that is a rise of EUR 3.05 billion, about 51%, which can come from market prices alone. An issuer choosing a pilot infrastructure should ask the operator how close it stands to both figures.
## How does the United Kingdom regulate tokenized securities?
The United Kingdom regulates a tokenized security as a specified investment under the Financial Services and Markets Act framework, and has added a Digital Securities Sandbox for the infrastructure and a statute confirming that digital assets can be property. The Financial Conduct Authority sorts tokens into security tokens, e-money tokens and unregulated tokens, and states that any firm carrying on a regulated activity needs to be authorised by it. A firm that arranges deals in, manages, advises on or safeguards tokenized securities is carrying on the same regulated activity as with a conventional security.
For the issuer, the route to the public runs through the public offers and admissions to trading regime. The Financial Conduct Authority states that new rules came into force on 19 January 2026 under the Public Offers and Admissions to Trading Regulations 2024, that the new regime replaces the UK Prospectus Regulation, and that it includes a public offer platform regime allowing smaller and scaling companies to raise capital by offering securities outside a public market through an authorised platform operator.
The dedicated regime is the Digital Securities Sandbox, which the Bank of England and the Financial Conduct Authority operate together. The Bank of England describes it as a regulated live environment for notary, maintenance and settlement of financial securities using developing technologies, alone or combined with a trading venue, under a modified legal regime. Equities, corporate and government bonds, money market instruments, fund units and emissions allowances are in scope; derivative contracts and unbacked cryptocurrencies are excluded.
An entrant passes through gates: it tests as a sandbox entrant, goes live as a digital securities depository or an authorised trading venue operator under initial limits calibrated by asset type, then scales towards full authorisation. The sandbox is due to run until 8 January 2029, and the Treasury can extend it by legislation.
Private law has moved as well. The Property (Digital Assets etc) Act 2025, which extends to England and Wales and Northern Ireland, provides that a thing, including a thing that is digital or electronic in nature, is not prevented from being the object of personal property rights merely because it is neither a thing in possession nor a thing in action. That settles whether a holder can own a token as property at all.
## How does Switzerland regulate tokenized securities?
Switzerland regulates a tokenized security under its existing financial market laws, as amended by the DLT Act, a blanket act that adjusted several federal laws instead of creating a separate code. According to the Federal Department of Finance, Parliament passed it in September 2020. The amendments to the Code of Obligations came into force on 1 February 2021 and enabled the introduction of uncertificated securities on a blockchain. The remaining provisions came into force on 1 August 2021.
Two of those remaining provisions answer the questions tokenization raises most often. The first is a new licence category, the DLT trading facility, described by the Federal Department of Finance as a financial market infrastructure for DLT securities that can admit other companies and persons to trading in addition to financial intermediaries. The second is a change to insolvency law that explicitly regulates the segregation of crypto-based assets in the event of bankruptcy, so that a client's tokens held by a failed custodian can be separated from the estate.
Classification rests on the FINMA guidelines of February 2018, which sort tokens into payment tokens, utility tokens and asset tokens. Asset tokens represent assets such as participations in real physical underlyings, companies or earnings streams, and FINMA regards them as securities, with securities law requirements for trading them and prospectus requirements for issuing them.
## How do the four jurisdictions compare?
The four jurisdictions agree on classification and differ on what they have built around it: the United States has added guidance, the European Union and the United Kingdom time-limited regimes for infrastructure, and Switzerland a permanent change to its statutes. The table sets them side by side on the same three criteria.
| Jurisdiction | How a tokenized security is classified | What the issuer needs | Dedicated regime |
| --- | --- | --- | --- |
| United States | A security under the federal securities laws, whatever its format | Registration under the Securities Act or an exemption | None; a staff statement of January 2026 explains how existing law applies |
| European Union | A financial instrument, outside MiCA | A prospectus or an exemption under Union prospectus rules | DLT Pilot Regime for trading and settlement infrastructure, with size limits |
| United Kingdom | A specified investment, inside the regulator's perimeter | Compliance with the public offers and admissions to trading regime | Digital Securities Sandbox, due to run until 8 January 2029 |
| Switzerland | An asset token, regarded as a security | Compliance with securities and prospectus requirements | DLT Act: ledger-recorded securities and a DLT trading facility licence |
The intermediaries follow the same pattern in all four. Whoever sells or places the token needs the local licence to deal in securities; whoever runs the market needs a venue authorisation or one of the dedicated infrastructure permissions; whoever holds tokens for clients needs the status that safekeeping requires. A licence obtained in one jurisdiction does not carry into another, although a specific permission under the DLT Pilot Regime is valid throughout the Union.
## What happens when the tokenized asset is not a security?
When the tokenized asset is not a security, the rules that apply are those of the underlying asset, plus the crypto-asset rules of the jurisdiction where one exists. A token standing for a bar of gold, a bottle, a building or a carbon unit is first a question of property law: whether transferring the token transfers the thing, or only a contractual claim against whoever holds the thing.
Two mechanisms pull such tokens back into securities law. The first is packaging: if the token is in fact a share in a company or a fund that owns the asset, it is a security in every jurisdiction covered here. The second is the promise attached to it. In the United States, the Supreme Court's test for an investment contract, set out in the Howey case, looks at whether money is invested in a common enterprise with profits expected from the efforts of others; a fractional interest in a managed asset, sold on the promise of income, is assessed against that test whatever the token is called.
In the European Union, a token that is not a financial instrument and not otherwise excluded falls within MiCA, as described above. In the United Kingdom, the Financial Conduct Authority states that the cryptoasset financial promotions regime, in its remit since 8 October 2023, applies to all firms marketing qualifying cryptoassets to consumers in the country, including firms based overseas, and whatever technology is used.
## What do the international standard-setters say about tokenization?
The international standard-setters say that tokenization is still small, that its risks are familiar ones in a new form, and that existing standards should apply to it by function. The International Organization of Securities Commissions published its final report on the tokenization of financial assets in November 2025. Its conclusions are that tokenization is growing but remains nascent and that legal uncertainty and operational and cyber risks mirror existing risk categories but show up differently on a distributed ledger.
The same report notes that regulatory approaches vary: some members apply their existing frameworks, while others have issued new guidance, sandbox programmes or bespoke requirements. The organisation encourages regulators to apply its policy recommendations for crypto and decentralised finance markets to tokenized financial assets, under the principle of same activities, same risks, same regulatory outcomes.
The Financial Stability Board looked at the question from the angle of systemic risk in a report of October 2024. It found that adoption was very low but growing and that, owing to its small scale, tokenization did not then pose a material risk to financial stability. It listed the vulnerabilities to watch if the market grows: liquidity and maturity mismatch, leverage, asset price and quality, interconnectedness and operational fragilities.
## How do you map a tokenization project to its regulation?
You map a tokenization project to its regulation by answering, in order, what the token is, where it is offered, who does what around it, and only then whether a dedicated regime helps. The sequence is the same whether the asset is a bond, a fund or a building held through a company.
From asset to applicable rulesThe order in which the questions are answered
Write the rights firstSet out what the holder receives: ownership of the asset, a share in an entity that owns it, a debt claim, or exposure without any claim on the issuer. The classification follows from these rights, not from the token standard.
Classify in each country of offerTest the rights against the definition of a security or financial instrument in every jurisdiction where investors will be approached.
Choose the issuer's routeRegistration or a prospectus, or an exemption with its limits on amount, on who may buy and on advertising.
List every activity and its licencePlacing, advising, operating the market, settling, keeping the register and safekeeping each require an authorised firm.
Check the dedicated regimes and their limitsA pilot or sandbox infrastructure may allow what the ordinary rules do not, within size limits and for a limited time.
Encode the restrictions in the tokenEligibility, holding periods and transfer limits that the chosen route imposes are built into the transfer rules, and the offering document says who can lift them.
The order matters because each answer narrows the next: a sponsor that chooses the platform first may find that the token's rights make it a security the platform is not licensed to handle.
## What does regulation leave unsettled?
Regulation leaves three things unsettled for most tokenization projects: whether the ledger entry is recognised as title wherever the asset or the holder is located, what happens to instruments admitted under a temporary regime when it ends, and how the cash side of each transaction is handled. Each is a line in the offering document that a careful investor reads.
On title, the Swiss amendments to the Code of Obligations and the United Kingdom's 2025 property statute show legislators addressing the point directly, and the International Organization of Securities Commissions still lists legal uncertainty among the risks. Where the token and the legal register differ, the offering document should say which one prevails. On temporary regimes, an issuer that admits an instrument with a longer life than the pilot or the sandbox should know the operator's transition plan before, not after.
On cash, securities regulation says who may handle an investor's money and under what status, and those rules stay in force when the instrument is a token. How a tokenized security is paid for and how income reaches holders are covered in other articles on this blog; the point here is that the payment leg has its own licensed actors and its own rulebook.