Tokenization in the European Union
The EU's most misunderstood rule is also its most important: if your token is a security, MiCA is not your law. Security tokens are MiFID II financial instruments governed by the same Prospectus Regulation as any share or bond – with generous exemption thresholds and one passport for 27 markets.
The short version
A tokenized security in the EU is a MiFID II financial instrument – MiCA (and its CASP licensing) applies only to crypto-assets that are not securities. A private issuer typically raises under a Prospectus Regulation exemption: offers below the €12M baseline (member states may set €5M), offers to qualified investors only, fewer than 150 retail persons per member state, or €100K minimum tickets. One approved prospectus passports across the whole EU; regulated DLT venues exist under the DLT Pilot Regime; and the ECSP crowdfunding regime offers a €5M pan-EU route through licensed platforms.
MiCA vs eWpG vs MiFID II: which regime applies to a tokenized security?
MiFID II, with the Prospectus Regulation for the offer. A token representing equity, debt or fund interests is a financial instrument, and MiCA covers only crypto-assets that are not financial instruments, so a pure security-token issuance needs no CASP license. National laws such as Germany's eWpG sit underneath: they change how the security is recorded, not the EU-level offer rules. ESMA's 2025 guidelines draw the boundary, and rights and obligations decide it, not technology.
How does EU passporting work for tokenized securities?
A prospectus approved in one home member state passports the offer across all member states, with no per-country re-approval, and MiFID II investment firms passport their services the same way. The ECSP crowdfunding regime passports raises of up to €5M per 12 months through a licensed platform. Exempt offers below the prospectus threshold do not passport: they are counted and governed per member state.
What are the EU prospectus thresholds and exemptions?
A public offer of securities needs a prospectus unless an exemption applies. The main exemptions: offers under €12M over 12 months (the EU baseline; member states may set €5M), offers to qualified investors only, fewer than 150 non-qualified persons per member state, or a minimum of €100,000 per investor. Thresholds are set nationally and some states require a lighter document below them, so check the target market's current figure.
Who can use the DLT Pilot Regime?
Market infrastructure operators rather than issuers. Since 2023 the regime has licensed DLT trading and settlement infrastructure, with four authorized operators so far: CSD Prague, 21X, 360X and Axiology. An issuer uses it by having its tokenized security admitted to one of those venues. ESMA has recommended making the regime permanent; the Commission's decision is pending.
The framework
Legal status
Settled. MiFID II explicitly includes financial instruments 'issued, recorded, transferred and stored using distributed ledger technology'; ESMA's 2025 guidelines define the MiCA/MiFID boundary. Rights and obligations decide, not technology.
MiCA's actual role
MiCA (fully applicable since Dec 2024; transitional CASP periods ended July 1, 2026) governs non-security crypto-assets and their service providers. A pure security-token issuance does not need a CASP license – it needs securities-law compliance.
Prospectus duty
A public offer of securities requires a prospectus unless exempt. The Listing Act's amendments (fully applicable June 5, 2026) modernized the formats (EU Follow-on / EU Growth documents).
Trading venues
The DLT Pilot Regime (since 2023) licenses DLT trading and settlement infrastructure – four authorized operators so far (CSD Prague, 21X, 360X, Axiology). ESMA has recommended making the regime permanent; the Commission decision is pending.
Crowdfunding alternative
The ECSP Regulation gives a pan-EU route for raises up to €5M per 12 months through licensed crowdfunding platforms – including in tokenized form.
Passporting
One home-state prospectus approval passports the offer across all member states; MiFID II investment firms passport their services the same way.
AML
The new EU AML Regulation (AMLR) is in force with full application July 2027; crypto-asset service providers are obliged entities, and standard CDD applies to investor onboarding.
National flavors
Germany's eWpG allows DLT-native electronic securities registers; France and Luxembourg have their own DLT securities laws. These change mechanics, not the EU-level offer rules.
The exemption menu
| Below the threshold | Offers under €12M over 12 months (EU baseline; member states may set €5M) need no prospectus – national rules may still require a lighter document. |
| Qualified investors only | Offers addressed solely to qualified investors are prospectus-exempt – the EU's professional-money route. |
| Under 150 persons | Fewer than 150 non-qualified persons per member state – the private-placement route. |
| €100K tickets | Minimum €100,000 per investor (or per-unit denomination) exempts the offer. |
| ECSP crowdfunding | Up to €5M via a licensed EU crowdfunding platform, passportable across the union. |
For foreign issuers
- Non-EU issuers face the same Prospectus Regulation and the same exemptions when offering into the EU – the exemptions are the practical route.
- A prospectus approved in one member state passports everywhere; there is no per-country re-approval.
- ESMA is still consulting on reverse-solicitation boundaries – do not build a distribution plan on investors 'coming to you'.
Still in flux (July 10, 2026)
- DLT Pilot Regime permanence: ESMA recommended making it permanent; the Commission's decision is pending.
- AMLA (the new EU AML authority) guidelines on risk assessment were due July 10, 2026 – implementation details still landing.
- Member-state prospectus thresholds (€5M vs €12M) are set nationally – always check the target market's current figure.
Questions this raises
Answered plainly.
Can a Wyoming entity issue a security token to EU retail investors?
Yes – being a Wyoming entity does not block it, but offering to EU retail triggers EU securities law for that leg, not US law. A tokenized security is a MiFID II financial instrument in the EU, so a public offer to EU retail generally needs an approved prospectus unless an exemption applies (small-offer thresholds, qualified-investors-only, or fewer than 150 retail persons per member state). Selling only to qualified or professional investors avoids the retail prospectus burden; reaching genuine retail across borders means a prospectus or the crowdfunding route via a licensed platform. On the US side, Reg S keeps the offshore offering outside US registration. So: Wyoming for the issuer, EU rules for the EU investors, and the token's transfer layer enforcing who may hold under which regime. Not legal advice; confirm with counsel.
Does MiCA apply to my security token?
No – and this is the most common misconception in the EU market. MiCA governs crypto-assets that are not financial instruments. A token representing equity, debt, or fund interests is a MiFID II financial instrument governed by securities law: the Prospectus Regulation, MiFID II conduct rules, and market-abuse rules.
When do I need a prospectus in the EU?
When you make a public offer and no exemption applies. The workhorse exemptions: staying under the €12M baseline threshold (some states set €5M), offering only to qualified investors, keeping retail participation under 150 persons per member state, or setting €100K minimum tickets.
Can I raise across all EU countries at once?
Yes – that is the EU's structural advantage. An approved prospectus passports across all member states, and the ECSP crowdfunding regime passports €5M raises through licensed platforms. Below-threshold exempt offers, however, are counted and governed per member state.
Where do tokenized securities trade in the EU?
On DLT market infrastructures licensed under the DLT Pilot Regime – four operators are authorized so far, including 21X and 360X in Germany – and on conventional venues as the Listing Act modernization beds in. ESMA has recommended making the pilot permanent. More jurisdictions: 🇺🇸 United States · 🇬🇧 United Kingdom · 🇦🇪 United Arab Emirates · 🇨🇭 Switzerland · 🇩🇪 Germany · 🇱🇮 Liechtenstein · 🇸🇬 Singapore · 🇭🇰 Hong Kong · 🇻🇬 British Virgin Islands · 🇰🇾 Cayman Islands · 🇱🇺 Luxembourg · compare the US exemptions · how tokenization works
