How to Issue a Security Token in Spain: Step by Step

Foreign issuers planning a tokenized bond or share issue in Spain usually meet the real constraint late. The smart contract takes weeks; the legal file takes months. Since Law 6/2023, Spanish law allows shares, bonds and fund units to be represented natively on distributed ledgers with full legal effect. This guide walks a non-Spanish issuer through the sequence that actually governs the calendar: qualification, vehicle, documentation, registrar, prospectus and distribution (Law 6/2023, LMVSI).

Step 1: qualify the token before spending on anything else

If the token carries the rights of a financial instrument, a share, a bond or a fund unit, it is a security token. That single fact decides the whole regime. Security tokens fall under MiFID II and Spanish securities law, supervised by the CNMV, Spain’s markets authority (Directive 2014/65/EU, Annex I).

MiCA, the EU crypto-assets regulation, does not apply here. Its article 2.4 excludes crypto-assets that qualify as financial instruments, so a security token never enters the MiCA perimeter (Regulation (EU) 2023/1114, art. 2.4).

Borderline cases exist, and ESMA has published criteria for deciding when a crypto-asset qualifies as a financial instrument (ESMA75-453128700-1323). The action here is simple: obtain a written legal qualification before committing any development budget.

Step 2: choose the issuing vehicle

Spanish practice channels tokenized issues through a public limited company (sociedad anónima, SA) or a dedicated SPV. A Spanish private limited company (SL) cannot issue: its participations may not be represented as negotiable securities (art. 92.2, Spanish Companies Act).

A foreign issuer therefore faces a structural choice. The common route is a Spanish SPV that issues the tokenized securities and channels the proceeds to the group. Direct issuance by the foreign entity under its home corporate law, combined with Spanish-law registration, needs case-by-case legal analysis with counsel in both jurisdictions. Decide the vehicle before drafting anything; every later document names it.

Step 3: prepare the four legal deliverables

A compliant Spanish issuance rests on four documents, and all four are required:

  • Issuance document. Defines the rights attached to the token, the transfer rules, corporate events, and which text prevails if the contract and the code ever diverge (Law 6/2023, art. 7).
  • ERIR designation contract. Appoints the registrar described in step 4 (Law 6/2023, art. 8).
  • Prospectus or exemption memorandum. Depends on the offer regime chosen in step 5 (Regulation (EU) 2017/1129).
  • Marketing policy. Aligns any promotion with MiFID II conduct rules, with stricter duties whenever retail investors are targeted.

Treat these as one file with four chapters. Inconsistencies between them are the most frequent source of rework at review time.

Step 4: designate the ERIR, the registrar that makes it legal

The ERIR (entidad responsable de la inscripción y del registro) is the digital notary of the register. It inscribes the issue, keeps the legally valid record of who holds what, and answers for the integrity of the DLT annotations. Without an ERIR, the on-chain record has no effect as a securities register in Spain (Law 6/2023, art. 8; Royal Decree 814/2023).

The first ERIR was authorised by the CNMV in November 2024: URSUS-3 Capital, A.V. Capacity in this young market is limited, so ERIR onboarding sits on the critical path of every project. Open that conversation before development starts, not after. The figure is explained in detail in What is an ERIR.

Step 5: pick the offer regime

A public offer of securities requires a prospectus approved by the CNMV unless an exemption applies. The main exemptions cover offers addressed only to qualified investors, offers made to fewer than 150 persons per Member State, and offers below a size threshold (Regulation (EU) 2017/1129).

The size threshold changed recently. The Listing Act raised the exemption ceiling to 12 million euros over 12 months, with a Member State option to set it at 5 million, applicable since 5 June 2026. Spain is still adapting its national rules to this regime, so confirm the operative Spanish figure with counsel at filing time (Regulation (EU) 2024/2809).

Passporting is where Spain becomes interesting for a foreign issuer. A prospectus approved by the CNMV can be notified for use across the EU, which turns one national approval into a European distribution permission (Regulation (EU) 2017/1129, arts. 24-25).

Offer regimeFits whenDocumentationCNMV approval
Full prospectusPublic retail offer, or size above the exemption thresholdEU-format prospectusYes; passportable across the EU
Exempt offerQualified investors only, under 150 persons per state, or below the size thresholdExemption memorandumNo; MiFID II conduct rules still apply
Private placementNegotiated placements with institutional investorsPlacement documentationNo; conduct and AML duties remain

The criterion: choose the regime from your investor map, never from the documentation you would prefer to write.

Step 6: build and distribute under securities conduct rules

Development follows the legal file, never the reverse. Permissioned token standards such as ERC-3643 are widely used because they enforce transfer restrictions and verified-wallet controls at contract level. Investor onboarding runs identity and anti-money-laundering checks under Spanish AML law (Law 10/2010).

Where distribution involves investment services, placing, advice or order handling, it must run through authorised investment firms. HokenFi provides the technology platform for issuance and lifecycle management; it is not a CNMV-authorised entity, and the regulated steps of a project run through authorised partners such as the ERIR, investment firms and specialised law firms.

The real order, and the real timeline

The sequence that works is: qualification, vehicle, issuance document plus ERIR contract, offer regime, smart contract, compliance layer, then issuance and post-issuance management. Projects that start with the token and retrofit the law repeat work at every stage.

Plan in months, not weeks. ERIR onboarding and the exemption memorandum are the usual bottlenecks; contract development rarely is. A foreign issuer that opens the ERIR conversation and the qualification memo in parallel removes most of the calendar risk. Fund managers face enough specific questions to deserve their own guide: see tokenized funds in Spain, and the HokenFi English hub for the full series.

Spain gives a foreign issuer a registered, passportable route to tokenized securities; the sequencing decides whether it takes one quarter or three. Run the 2-minute issuance assessment or request a proposal.

This content is educational. It is not legal, tax or investment advice. Always check the current version of each rule on BOE and EUR-Lex.

Mockup de HokenFi en iPhone 16 Pro para gestión móvil de security tokens

Descarga la guía de cómo tokenizar un activo en 2026

Tus datos solo se usan para responder a tu solicitud; no compartimos tu información. Política de privacidad.