2026 GuideHow to tokenize an asset in Spain, reviewed by three law firms. Download it

ESMA crypto-asset guidelines: financial instrument?

The ESMA guidelines (mandate of Art. 2.5 of MiCA) set when a token is a financial instrument. What the CNMV looks at and how to run the test.

· 7 min read

ESMA crypto-asset guidelines: financial instrument?

You have the token designed and the issuance plan on the table, but you are missing the answer that conditions everything else: is that token a financial instrument or a crypto-asset? That classification determines whether your project is governed by MiFID II under the CNMV or by MiCA. The ESMA guidelines on crypto-assets exist to draw that border, and they are the criterion that European supervisors already apply to issuances like yours.

Where the guidelines come from and what problem they solve

MiCA was born to regulate crypto-assets that did not fit the previous financial regulation. That is why it leaves out of its scope tokens that are already financial instruments: for those, securities regulation still applies (Art. 2.4 of Regulation (EU) 2023/1114).

The border between both categories was not clear, and each national supervisor could draw it its own way. MiCA itself tasked ESMA with guidelines on the conditions and criteria for qualifying a crypto-asset as a financial instrument (Art. 2.5 of Regulation (EU) 2023/1114).

ESMA published the final report, with reference ESMA75-453128700-1323, in December 2024. The final guidelines, with their translations into the official EU languages, arrived on 19 March 2025 and are applicable from 18 May 2025, sixty days after that publication (ESMA final report).

The guidelines do not create new law. They interpret the definition of financial instrument in MiFID II so that the supervisors of the 27 States apply it equally to a token. The CNMV is one of the addressee authorities, along with market participants.

Substance over form: it does not matter what you call the token

The guiding principle of the analysis is substance over form. What qualifies a token are the rights it incorporates, not the label you give it.

Calling a token a “utility” does not take it out of securities regulation if it grants profit participation. And a token with no rights against the issuer does not become a share just because its buyer expects to make money with it.

The examination is case by case and technologically neutral. The fact that the right lives on a blockchain does not change its legal nature: a bond recorded in DLT is still a bond.

The practical consequence is uncomfortable but useful. Your whitepaper, your terms and conditions and your smart contract are the documents the supervisor will read to decide, so they must tell the same story.

The three axes the supervisor examines

Without reproducing the literal text of the guidelines, the general axes of the analysis are recognizable. They are the same ones that define transferable securities in MiFID II and its Annex I.

Economic and political rights

If the token gives the right to dividends, interest, a liquidation share or voting, it resembles a share or a bond. Those rights are the core of the definition of financial instrument (Annex I of Directive 2014/65/EU).

Negotiability

A transferable security must be able to be transferred on the capital markets. A token freely transferable between wallets points in that direction. Transfer restrictions weigh in the opposite direction, although by themselves they do not settle the question.

Standardization

Securities are issued in classes: homogeneous, interchangeable units that carry the same rights. A series of fungible tokens with identical rights fits that pattern. A unique piece tied to a specific utility fits less well.

No single axis decides on its own. The supervisor weighs the set of rights and features of the specific token, and doubt is resolved by looking at substance, not the technical medium.

Hybrid cases exist and are the ones that create the most work. An access token that also shares revenue, or one with rights conditioned on project milestones, forces you to weigh which component dominates. In those cases, the documented rationale for the conclusion matters as much as the conclusion itself.

Signals in one direction and the other

The table summarizes indicative signals to help you sort out your case. It does not replace the individual analysis of the token; it tells you what conversation to expect with the supervisor.

SignalPoints to a financial instrument (MiFID II)Points to a crypto-asset (MiCA)
Economic rightsParticipation in profits, interest or liquidation shareAccess to a product or service of the issuer
Governance rightsVoting or influence over issuer decisionsNo rights over the issuing company
Buyer expectationReturn linked to the performance of the issuer or an assetUse or consumption of a specific utility
TransferabilityFreely tradable, suitable for capital marketsRestricted transfer or tied to use of the service
IssuanceStandardized class of fungible unitsHeterogeneous units or a unique piece

If your token accumulates signals from the left column, plan as a securities issuer. If it accumulates signals from the right, your likely route is MiCA, with its white paper and its own obligations.

What it means for a Spanish issuer

The CNMV applies these criteria when examining a tokenized issuance in Spain. The classification is not an opinion you can defend in a pitch: it is the gateway to one regime or the other.

If the token is a financial instrument, the issuance is governed by MiFID II, Ley 6/2023 and the Prospectus Regulation, and registration requires appointing an ERIR, the digital notary of the registry (art. 8 of the Ley 6/2023).

If it is a crypto-asset within MiCA, the path goes through the white paper and, depending on the service, through authorized providers (Regulation (EU) 2023/1114). The details of that regime are in what MiCA is.

Getting it wrong costs in both directions. Treating what is a security as a utility exposes you to an irregular issuance before the CNMV. Treating what is a crypto-asset as a security burdens you with a prospectus, ERIR and deadlines that did not apply to you. That is why classification comes before commercial design: if you are unsure between models, start with what type of token your asset needs.

From the guidelines to a practical test

The guidelines set the criteria; applying them to your specific token is the issuer's job. The reasonable path has four steps.

  1. Inventory the rights the token grants according to the whitepaper, terms and smart contract: economic, governance and information rights.
  2. Contrast those rights with the categories in Annex I of MiFID II: share, bond, unit in a collective investment undertaking, derivative.
  3. Assess negotiability and standardization: free transferability and a homogeneous class of fungible units.
  4. Document the conclusion and its rationale. That document frames the conversation with your law firm and with the supervisor.

The qualification is not a one-day formality. If after the analysis you change the token rights, the revenue sharing or the transfer rules, the result can change with them. Repeat the test for any relevant change to the design and keep each version of the analysis with its date.

The HokenFi classifier implements this same path in a guided test. You answer about the rights and transferability of your token and get an initial indication of the applicable regime, with the warnings a doubtful case deserves. It does not replace the legal opinion, but it keeps the first meeting with your advisor from starting from scratch.

The qualification of your token decides everything else: supervisor, prospectus, registration and timeline. Take the issuance diagnosis (2 min) or request a proposal. If you prefer to start by reading, download the 2026 guide.

This content is informative and educational. It does not constitute legal, tax, or investment advice. Check the current version of each regulation in the BOE and on EUR-Lex.

HokenFi is a software and infrastructure provider; it does not provide regulated services (CASP, ESI, EAF, or ERIR). This article is informative and does not constitute financial or legal advice.

Frequently asked questions

What are ESMA's guidelines on crypto-assets?

They are the ESMA75-453128700-1323 guidelines, drawn up under the mandate of Article 2.5 of MiCA. They set the conditions and criteria for classifying a crypto-asset as a financial instrument, so that all EU supervisors draw the same boundary between MiCA and MiFID II. The final report was published in December 2024 and the final guidelines on 19 March 2025.

If my token is a financial instrument, does MiCA apply to it?

No. MiCA excludes from its scope crypto-assets that are financial instruments, under Article 2.4. A token that incorporates share, bond or participation rights is governed by MiFID II and, in Spain, by Ley 6/2023: prospectus or applicable exemption, CNMV supervision and an ERIR responsible for registration.

Who applies these guidelines in Spain?

The CNMV, as the Spanish competent authority, reviews tokens using the criteria of the guidelines: economic and political rights, negotiability and standardization. The analysis is one of substance over form. What matters are the actual rights the token incorporates in its terms and in its smart contract, not the commercial label the issuer uses.

Get started

Do you have an asset to finance? Request your first offers.

Create your account, activate access and you will receive offers from law firms.