A token falls under MiFID II when it carries the rights of a financial instrument: a share, a bond, a fund unit or a derivative. Only when it does not can it be a crypto-asset under MiCA. Article 2(4)(a) of MiCA makes that exclusion explicit, and ESMA’s guidelines, applicable since 18 May 2025, set the test supervisors use.
The answer is not academic. It decides which disclosure document you prepare, which licence your distributor needs, whether a securities register applies and which supervisor reviews the project. This guide sets out the rule, the ESMA test, a decision table and the practical consequences of each answer.
The rule: MiCA is the residual regime
MiCA, the EU Markets in Crypto-Assets Regulation, was designed to cover what existing financial law did not. Article 2(4) lists what it does not apply to: crypto-assets that qualify as financial instruments, deposits, funds (unless they qualify as e-money tokens), securitisation positions, and insurance, pension and social security products (Regulation (EU) 2023/1114). Article 2(3) adds a second exclusion for crypto-assets that are unique and not fungible with other crypto-assets.
On the other side, MiFID II defines financial instruments as the instruments listed in Section C of its Annex I, «including such instruments issued by means of distributed ledger technology» (art. 4(1)(15), Directive 2014/65/EU). The two texts fit together in a fixed order: first ask whether the token is a financial instrument; only if it is not, ask which MiCA category it belongs to. For the background on each regime, see what MiCA is and what MiFID II is.
The ESMA test
Article 2(5) of MiCA required ESMA to issue guidelines on the conditions and criteria for qualifying crypto-assets as financial instruments by 30 December 2024. The result is the Guidelines on the conditions and criteria for the qualification of crypto-assets as financial instruments (ESMA75453128700-1323). ESMA published the final report on 17 December 2024 and the official translations on 19 March 2025; the guidelines apply 60 calendar days later, from 18 May 2025. They address national supervisors and market participants alike: issuers, offerors, crypto-asset service providers and investors.
The points that decide most cases:
- Technology is not a factor. Tokenised financial instruments remain financial instruments for all regulatory purposes (Guideline 1).
- Three cumulative criteria for transferable securities. The token is not an instrument of payment, it forms part of a class of securities, and it is negotiable on the capital market (Guideline 2). A class exists when tokens from the same issuer are interchangeable and give the same rights.
- Corporate votes count, protocol votes do not. Voting on board elections or mergers points to shares. Governance rights limited to technical matters, such as protocol upgrades or fee changes, are not equivalent to shareholder rights.
- Expectation of profit alone is not enough. A utility token bought in the hope that it will appreciate is not a security for that reason only (Guideline 7). Financial rights such as dividends, interest or a share of profits are what tip the balance.
- Fund units. A token is a unit in a collective investment undertaking when the project pools capital from investors, invests it under a defined policy and generates a pooled return for them (Guideline 4).
- NFTs. Genuinely unique tokens fall outside MiCA, but MiFID II applies if they meet the criteria of a financial instrument. Fractions of an NFT are not automatically unique (Guideline 8).
- Hybrids. If a token mixes utility and investment features, the financial instrument test comes first and that nature prevails. Supervisors look at attributes, not labels, including functions that change during the token’s life (Guideline 9).
Decision table: MiCA or MiFID II?
Work through the questions in order and stop at the first «yes».
| Question | If yes, the token is | Regime | Typical example |
|---|---|---|---|
| 1. Does it give rights equivalent to shares: profit share, votes on corporate decisions, liquidation proceeds? | A transferable security (equity) | MiFID II and national securities law | Tokenized shares of a company |
| 2. Is it a negotiable debt claim on the issuer, issued as part of a class? | A transferable security (debt) | MiFID II and national securities law | Tokenized bond or note |
| 3. Is capital pooled from investors and invested under a defined policy for a pooled return? | A unit in a collective investment undertaking | MiFID II plus UCITS or AIFMD rules | Tokenized fund unit |
| 4. Does its value derive from an underlying, with settlement by reference to it? | Possibly a derivative | MiFID II | Tokenized future or swap |
| 5. Does it aim at a stable value by referencing one official currency? | An e-money token (EMT) | MiCA, Title IV | Euro stablecoin |
| 6. Does it aim at a stable value by referencing other values, rights or a basket? | An asset-referenced token (ART) | MiCA, Title III | Stablecoin backed by a basket |
| 7. Does it only give access to goods or services, without financial rights? | Another crypto-asset («utility») | MiCA, Title II | Access token for a software platform |
| 8. Is it genuinely unique and non-fungible, or non-transferable and accepted only by the issuer? | Outside MiCA | Neither, unless it meets a financial instrument test | One-off digital artwork; closed loyalty points |
The table is a first screen. Borderline structures need a written legal opinion, and the supervisor has the last word.
What each answer means in practice
| Financial instrument (MiFID II) | Crypto-asset (MiCA) | |
|---|---|---|
| Disclosure document | Prospectus approved by a national supervisor, unless exempt: qualified investors only, fewer than 150 non-qualified investors per member state, or offers below EUR 12 million over 12 months since 5 June 2026 under the Listing Act (member states may set EUR 5 million; Spain’s adaptation is pending) | Crypto-asset white paper. For «other» crypto-assets it is notified, not approved (art. 8(3)), with an explanation of why the token is not a financial instrument, an EMT or an ART (art. 8(4)). ARTs need authorisation; EMTs can only be issued by credit institutions or e-money institutions (art. 48) |
| Who can distribute it | An investment firm or credit institution authorised under MiFID II | A crypto-asset service provider (CASP) authorised under MiCA, or a financial entity, such as a bank or investment firm, that notifies its supervisor (arts. 59 and 60) |
| Register | In Spain, securities represented on DLT are registered by an ERIR (art. 8, Law 6/2023; RD 814/2023) | No securities register |
| Trading | Trading venues, including DLT infrastructures under the Pilot Regime | Crypto-asset trading platforms operated by CASPs |
| Market abuse rules | Market Abuse Regulation | MiCA, Title VI |
| Supervisor in Spain | CNMV | CNMV for CASPs and other crypto-assets; Banco de España for issuers of ARTs and EMTs |
Misclassification is costly in both directions. Treating a security as a MiCA token means offering securities without the required prospectus or exemption and distributing them without the required licence, both sanctionable. Treating a pure utility token as a security adds cost without legal benefit. For the MiFID side, the documents are explained in what a prospectus is and the registrar in what an ERIR is (Regulation (EU) 2017/1129; Law 6/2023; RD 814/2023).
Borderline cases issuers ask about
- A «utility» token that shares revenue. The revenue share is a financial right. Expect the token to be treated as a financial instrument, whatever the white paper calls it.
- A governance token that votes on protocol fees. Under the ESMA test, technical governance rights do not equal shareholder rights. Without other financial rights, the token is likely a MiCA crypto-asset.
- Fractions of an NFT representing a building or an artwork. Fractions with identical attributes are not unique, so the MiCA exclusion for NFTs does not protect them. If they carry rights over income or value, the financial instrument analysis applies first.
- A stablecoin used to pay the coupons of a tokenized bond. Two instruments, two regimes: the bond under MiFID II, the payment token under MiCA.
- MiCA vs national DLT securities laws. Germany’s eWpG and Spain’s Law 6/2023 are not alternatives to MiCA. They govern how securities are issued and registered on a ledger, so they sit on the MiFID side. A tokenized bond registered under the eWpG, or with an ERIR in Spain, is outside MiCA.
How to document the classification
Decide the classification before the smart contract is designed, not after. Put it in a written analysis that walks through the ESMA criteria for each right the token grants, and update it if the token’s functions change. On the MiCA side the analysis is not optional: the white paper notification of an «other» crypto-asset must include the explanation required by Article 8(4), and an ART authorisation file includes a legal opinion on the same point.
For a first screen, our security token or MiCA classifier (in Spanish) sorts the common cases in one table. If the answer is «financial instrument», the next step is the issuance itself: see what a security token is and how the regulated route works.
The useful question is never «which blockchain». It is «which right does the holder get», because that answer chooses the regime, and the regime chooses the budget.
Unsure whether your token is a crypto-asset or a financial instrument? Take the 2-minute issuance assessment or request a proposal.
This content is educational. It is not legal, tax or investment advice. Check the current version of each rule on EUR-Lex and the relevant national gazettes.
HokenFi is a software and infrastructure provider; it does not provide regulated services (CASP, investment firm, financial advisor or ERIR). This article is for information only and is not financial or legal advice.
Frequently asked questions
What is the difference between MiCA and MiFID II?
MiFID II regulates financial instruments, such as shares, bonds, fund units and derivatives, including those issued on a blockchain. MiCA regulates crypto-assets that are not financial instruments: e-money tokens, asset-referenced tokens and other crypto-assets such as utility tokens. Article 2(4) of MiCA excludes financial instruments, so the MiFID II test always comes first.
Does MiCA apply to security tokens?
No. A security token is a financial instrument represented on a distributed ledger, and MiCA does not apply to crypto-assets that qualify as financial instruments (art. 2(4)(a), Regulation (EU) 2023/1114). Security tokens follow MiFID II, the Prospectus Regulation and national law. In Spain that means Law 6/2023, CNMV supervision and registration by an ERIR.
What are the ESMA guidelines on crypto-assets as financial instruments?
They are the Guidelines on the conditions and criteria for the qualification of crypto-assets as financial instruments (ESMA75453128700-1323), issued under Article 2(5) of MiCA. The final report was published on 17 December 2024 and the guidelines apply from 18 May 2025. They take a substance over form approach and set criteria for transferable securities, fund units, derivatives, NFTs and hybrid tokens.
Do I need a CASP licence to sell a tokenized bond?
No. A tokenized bond is a financial instrument, so placing it with investors is an investment service under MiFID II, carried out by an authorised investment firm or credit institution. A CASP licence covers services on MiCA crypto-assets, not securities. In Spain the bond must also be registered by an ERIR under Law 6/2023 and Royal Decree 814/2023.
Can a utility token be reclassified as a financial instrument?
Yes. Supervisors look at the rights the token grants, not its label. If a token marketed as utility pays dividends, interest or a share of profits, or carries votes on corporate decisions, it can qualify as a transferable security. ESMA's guidelines add that for hybrid tokens the financial instrument nature prevails, while an expectation of price appreciation alone is not enough.
