You tokenize an asset in five steps: qualify the asset, choose the legal wrapper, pick the jurisdiction and its registrar, document the issuance, and issue on the register. The order matters. Teams that start with the token usually redo the legal work later. Teams that start with the wrapper rarely do.
This guide walks through the five steps for any asset class, with the EU as the regulatory frame and Spain as the worked example. Deep dives per asset are linked where they exist.
Step 1: Qualify the asset, or rather, the rights
You almost never tokenize the asset itself. You tokenize a claim on it: equity in the company that owns the building, a bond backed by its rents, a unit in the fund that holds the portfolio, a note linked to royalty income. The first decision is which rights the token will carry, because those rights decide the legal regime.
If the rights match a category in Annex I of MiFID II, such as shares, bonds or fund units, the token is a financial instrument and securities law applies in full. MiCA does not: it expressly excludes crypto-assets that qualify as financial instruments (Directive 2014/65/EU, Annex I; Regulation (EU) 2023/1114, art. 2.4).
Supervisors apply this test on substance, not on the name printed on the whitepaper. ESMA’s guidelines on the qualification of crypto-assets set out the criteria (ESMA75-453128700-1323, guidelines of 19 March 2025).
Step 2: Choose the wrapper
The wrapper is the legal instrument the token represents. Match it to the asset and to what your investors expect.
| Asset | Typical wrapper | Where to read more |
|---|---|---|
| Real estate | Equity or bonds of the vehicle that owns the property | Tokenized real estate |
| Funds and portfolios | Fund units or shares on a DLT register | Fund tokenization |
| Private debt | Bonds or notes issued by the borrower or a vehicle | Covered in the issuance guide below |
| Intellectual property and royalties | Revenue-linked notes or equity in the rights-holding vehicle | IP tokenization |
The wrapper decision fixes most of what follows: the investor documentation, the registration figure, the intermediaries you need. Change it late and everything downstream changes with it.
Step 3: Pick the jurisdiction and the registrar
When securities live on DLT instead of a central depository, each EU Member State designates who keeps the legally valid register. That designation is the practical reason jurisdiction matters more than blockchain choice.
- Spain. The register belongs to an ERIR, the registration entity created by art. 8 of Law 6/2023 and developed in Royal Decree 814/2023, under CNMV supervision. The first ERIR, URSUS-3 Capital, A.V., was authorised in November 2024 (Ley 6/2023; RD 814/2023).
- Germany. The Electronic Securities Act (eWpG, 2021) allows electronic and crypto securities registers run under BaFin supervision.
- France. A DLT-registration regime for unlisted securities, known as the DEEP framework, has operated since the PACTE-era reforms, under AMF supervision.
- Luxembourg. Successive blockchain laws since 2019 recognise DLT issuance and registration of securities, under CSSF supervision.
One EU-level advantage softens the choice: a prospectus approved in one Member State can be passported across the whole EU (Regulation (EU) 2017/1129, arts. 24-25). You pick one home supervisor, not twenty-seven.
Step 4: Document the issuance
Documentation splits into three blocks. First, the offer documents: a prospectus if you go to the public above the thresholds, or a documented exemption below them. Since 5 June 2026, offers under 12 million euros over 12 months can be exempt, with a Member State option to set 5 million (Regulation (EU) 2017/1129, as amended by Regulation (EU) 2024/2809).
Second, the instrument terms: the shareholder agreement, bond terms or fund rules, drafted so the on-chain representation and the legal text say the same thing. Third, the operational contracts: registrar mandate, technology provider, paying agent where needed, and the KYC and onboarding flow for investors.
Step 5: Issue and operate
Issuance itself is the short step: the registrar records the securities, tokens are minted against that record, and whitelisted investors receive their positions. The longer commitment is operation. Corporate actions, transfers, register updates and investor communications run for the life of the instrument, and your registrar and technology contracts must cover all of it.
For the Spanish route step by step, with roles and realistic timelines, see how to issue a security token in Spain.
Honest limits before you start
- There is a cost floor. Legal work, the registrar and ongoing operation do not scale down to very small raises. Below a certain ticket, the structure costs more than it returns.
- Tokenization does not create buyers. Distribution remains your problem. A tokenized instrument nobody subscribes is a well-documented failure.
- There is no MiCA shortcut. If the token is a financial instrument, no crypto-side licence or whitepaper replaces securities law (Regulation (EU) 2023/1114, art. 2.4).
A useful self-test before engaging advisers: can you state, in one sentence each, the rights the token carries, the wrapper, the Member State, and who your registrar will be? If any of the four is blank, that is the step to resolve first. HokenFi is the technology platform for this circuit, not a CNMV-authorised entity: regulated roles are covered with partner entities.
Ready to turn an asset into an issuance plan? Run the 2-minute issuance assessment or request a proposal.
This content is educational. It is not legal, tax or investment advice. Always check the current version of each rule on BOE and EUR-Lex.
