Tokenization in the European Union
The EU's most misunderstood rule is also its most important: if your token is a security, MiCA is not your law. Security tokens are MiFID II financial instruments governed by the same Prospectus Regulation as any share or bond — with generous exemption thresholds and one passport for 27 markets.
Rules as of July 10, 2026 · not legal advice
A tokenized security in the EU is a MiFID II financial instrument — MiCA (and its CASP licensing) applies only to crypto-assets that are not securities. A private issuer typically raises under a Prospectus Regulation exemption: offers below the €12M baseline (member states may set €5M), offers to qualified investors only, fewer than 150 retail persons per member state, or €100K minimum tickets. One approved prospectus passports across the whole EU; regulated DLT venues exist under the DLT Pilot Regime; and the ECSP crowdfunding regime offers a €5M pan-EU route through licensed platforms.
The framework
Legal status
Settled. MiFID II explicitly includes financial instruments 'issued, recorded, transferred and stored using distributed ledger technology'; ESMA's 2025 guidelines define the MiCA/MiFID boundary. Rights and obligations decide, not technology.
MiCA's actual role
MiCA (fully applicable since Dec 2024; transitional CASP periods ended July 1, 2026) governs non-security crypto-assets and their service providers. A pure security-token issuance does not need a CASP license — it needs securities-law compliance.
Prospectus duty
A public offer of securities requires a prospectus unless exempt. The Listing Act's amendments (fully applicable June 5, 2026) modernized the formats (EU Follow-on / EU Growth documents).
Trading venues
The DLT Pilot Regime (since 2023) licenses DLT trading and settlement infrastructure — four authorized operators so far (CSD Prague, 21X, 360X, Axiology). ESMA has recommended making the regime permanent; the Commission decision is pending.
Crowdfunding alternative
The ECSP Regulation gives a pan-EU route for raises up to €5M per 12 months through licensed crowdfunding platforms — including in tokenized form.
Passporting
One home-state prospectus approval passports the offer across all member states; MiFID II investment firms passport their services the same way.
AML
The new EU AML Regulation (AMLR) is in force with full application July 2027; crypto-asset service providers are obliged entities, and standard CDD applies to investor onboarding.
National flavors
Germany's eWpG allows DLT-native electronic securities registers; France and Luxembourg have their own DLT securities laws. These change mechanics, not the EU-level offer rules.
The exemption menu
| Below the threshold | Offers under €12M over 12 months (EU baseline; member states may set €5M) need no prospectus — national rules may still require a lighter document. |
| Qualified investors only | Offers addressed solely to qualified investors are prospectus-exempt — the EU's professional-money route. |
| Under 150 persons | Fewer than 150 non-qualified persons per member state — the private-placement route. |
| €100K tickets | Minimum €100,000 per investor (or per-unit denomination) exempts the offer. |
| ECSP crowdfunding | Up to €5M via a licensed EU crowdfunding platform, passportable across the union. |
For foreign issuers
- Non-EU issuers face the same Prospectus Regulation and the same exemptions when offering into the EU — the exemptions are the practical route.
- A prospectus approved in one member state passports everywhere; there is no per-country re-approval.
- ESMA is still consulting on reverse-solicitation boundaries — do not build a distribution plan on investors 'coming to you'.
Still in flux (July 10, 2026)
- DLT Pilot Regime permanence: ESMA recommended making it permanent; the Commission's decision is pending.
- AMLA (the new EU AML authority) guidelines on risk assessment were due July 10, 2026 — implementation details still landing.
- Member-state prospectus thresholds (€5M vs €12M) are set nationally — always check the target market's current figure.
Stobox structures EU offerings under the Prospectus Regulation exemptions — the same frameworks its own STBX security token uses (Reg D + Reg S + EU Prospectus). Intelligence builds the issuer record, Raisable prepares the exemption-appropriate offering documents, and Compass issues ERC-7943 tokens that enforce investor eligibility on-chain. Stobox is a technology provider, not an investment firm; regulated activities run through licensed partners.
Questions, answered
Does MiCA apply to my security token?
No — and this is the most common misconception in the EU market. MiCA governs crypto-assets that are not financial instruments. A token representing equity, debt, or fund interests is a MiFID II financial instrument governed by securities law: the Prospectus Regulation, MiFID II conduct rules, and market-abuse rules.
When do I need a prospectus in the EU?
When you make a public offer and no exemption applies. The workhorse exemptions: staying under the €12M baseline threshold (some states set €5M), offering only to qualified investors, keeping retail participation under 150 persons per member state, or setting €100K minimum tickets.
Can I raise across all EU countries at once?
Yes — that is the EU's structural advantage. An approved prospectus passports across all member states, and the ECSP crowdfunding regime passports €5M raises through licensed platforms. Below-threshold exempt offers, however, are counted and governed per member state.
Where do tokenized securities trade in the EU?
On DLT market infrastructures licensed under the DLT Pilot Regime — four operators are authorized so far, including 21X and 360X in Germany — and on conventional venues as the Listing Act modernization beds in. ESMA has recommended making the pilot permanent.
More jurisdictions: 🇺🇸 United States · 🇬🇧 United Kingdom · 🇦🇪 United Arab Emirates · 🇨🇭 Switzerland · 🇻🇬 British Virgin Islands · 🇰🇾 Cayman Islands · 🇱🇺 Luxembourg · compare the US exemptions · how tokenization works
Sources
- ESMA — guidelines on crypto-assets as financial instruments (2025) ↗
- Prospectus Regulation (consolidated, June 2026) ↗
- ESMA — DLT Pilot Regime report (June 2025) ↗
- ESMA — end of MiCA transitional periods (Apr 2026) ↗
- ECSP Regulation (EU) 2020/1503 ↗
- EU AML Regulation 2024/1624 ↗
General information reflecting public sources as of July 10, 2026 — regulations change, and this page is not legal, tax, or investment advice. Structure any offering with qualified counsel in the relevant jurisdiction. Stobox is a non-custodial technology provider — not a broker-dealer, adviser, or law firm; see Legal & disclosures.