Selling security tokens to retail investors or only to professionals changes the entire issuance: it determines whether a prospectus is required or an exemption applies, what conduct obligations are assumed and how advertising may be carried out. European law categorizes investors, and each category carries a different level of protection.
You are going to issue security tokens and you still don't know who you can sell to. It is not a minor detail. The answer determines whether you need a prospectus or rely on an exemption, how many conduct obligations you assume and how you can advertise. European law does not treat all investors equally: it sorts them into categories, and each category opens or closes doors for you as an issuer. Deciding your target audience is, in practice, deciding your cost, your timeline and your regulatory burden. Here we break it down so you can choose wisely.
Before you start, a mental shortcut. MiFID II (the European directive that governs financial instrument markets) classifies investors into three levels according to their capacity to understand and bear risk. It is like a layered protection system: the less expert the investor is presumed to be, the more protection the rule puts around them, and the more obligations fall on you. Your security token is a financial instrument for these purposes (Directive 2014/65/EU, MiFID II; Ley 6/2023, LMVSI). So this classification applies fully to you.
The underlying rule: the more retail your audience, the more protection you owe them and the more burdens you assume; the more professional, the less apparatus you need
MiFID II recognizes three types of client: retail, professional and eligible counterparty. Retail receives the maximum protection. Professional receives reduced protection because they are presumed to have knowledge and capacity. Eligible counterparty, the minimum level, is reserved for large financial and public entities. For you, as issuer, the logic is direct: if you target only qualified investors, you can rely on the prospectus exemption and operate with fewer conduct obligations; if you open your issuance to retail investors, you enter the terrain of the prospectus, enhanced assessment and advertising rules (Directive 2014/65/EU; Regulation (EU) 2017/1129).
What it means for you: your audience is not a commercial decision you make at the end. It is a regulatory decision you make at the beginning, because it determines the entire regime of your issuance.
The three MiFID II investor categories
The classification is not optional or arbitrary. The rule sets criteria and you, or the intermediary placing the issuance, apply them before offering anything. Each category defines how much protection the investor receives and, in mirror image, how much you owe them.
Retail client
It is the default category. Anyone who does not fit as professional or eligible counterparty is retail. They receive maximum protection: full pre-contractual information, risk warnings, suitability or appropriateness assessment and access to complaint mechanisms. They are the saver or small company without demonstrated financial experience. Targeting your issuance at this audience places you in the most demanding regime.
Professional client
It is someone who has the experience, knowledge and capacity to make their own investment decisions and assess risks. The rule distinguishes two routes: professionals by nature (financial institutions, large companies that exceed certain thresholds of balance sheet, turnover and own funds) and professionals upon request, who request that treatment and evidence high-level criteria such as experience trading in the markets, size of their portfolio of financial instruments and frequency of transactions (Directive 2014/65/EU, Annex II). We do not give exact figures here: the thresholds are set by the rule and should be verified in its current version.
Eligible counterparty
It is the subset of professionals with whom you operate with minimum protection: credit institutions, investment firms, insurance companies, funds, governments and central banks. It is regulated as a separate category for certain services (Art. 30 Directive 2014/65/EU). For most issuers of security tokens, this level is far away; your real decision usually comes down to retail vs professional.
What it means for you: almost no one is a professional by default. If you want to target only qualified investors, they must be classified and documented. Assuming your investor is professional without proving it exposes you.
What changes for the issuer depending on who you target
Investor category is not theory: it pulls three specific levers in your operation. The prospectus, conduct obligations and advertising. Each one goes up or down depending on the audience.
Prospectus or exemption
If your offer is aimed exclusively at qualified investors, it is exempt from the obligation to publish a prospectus (art. 1.4 of Regulation (EU) 2017/1129). You save the document, its approval by the CNMV (your securities market regulator) and much of the timeline and cost. If you open the offer to retail investors, you return to the general regime: unless other exemptions apply by amount or number of investors, you need a prospectus. The difference between one route and the other is measured in months and budget.
Conduct obligations and assessment
When there is an intermediary providing investment services on your issuance, MiFID II requires it to assess the investor. With retail investors, the assessment is enhanced: suitability if there is advice or portfolio management, appropriateness for other services. With professional investors, part of that knowledge is presumed and the burden is lightened. More protection for the retail investor means more steps before they invest and more responsibility on whoever places the offer.
Advertising
Advertising for your issuance follows different rules depending on the audience. Aimed at retail investors, the commercial communication of financial instruments is subject to the CNMV's advertising rules and, when the product is promoted as an investment object with crypto-asset features, Regulation (EU) 2023/1114 (MiCA) applies only if the asset is not a financial instrument; tokenized transferable securities are outside MiCA and follow MiFID II and the LMVSI. Aimed only at qualified investors, the advertising framework is more flexible because the recipient has greater analytical capacity. It is advisable to review case by case which regime applies to your asset.
What it means for you: selling to professional investors is cheaper and faster; selling to retail investors expands your investor base but burdens you with prospectus, assessment and advertising rules. There is no free option, there is an option that fits.
How to decide your target audience
The choice is not made by intuition. Start from three questions. How much capital do you need and from how many investors? What budget and timeline can you bear for the regulatory part? Who is really your natural investor for this asset?
If your issuance is medium-sized and your natural investor is a limited group with experience (family offices, companies, qualified investors), targeting only professional investors gives you the most agile route: prospectus exemption and fewer burdens. If you need a broad base or your product fits the retail saver, you accept the retail regime with prospectus and enhanced protection in exchange for reaching more people.
Beware of a common mistake. Targeting the offer at qualified investors is not putting it in a legal text and forgetting about it. It involves controlling who has access, classifying each investor and documenting it. If a retail investor enters an offer you sold as exempt, the problem is yours. Classification is an operational obligation, not a declaration.
What it means for you: choose the audience that matches your size, your budget and your real investor, and then sustain that decision with access controls and documented classification.
Comparison table: retail vs professional
| Dimension | Retail investor | Professional / qualified investor |
|---|---|---|
| Protection | Maximum | Reduced (knowledge is presumed) |
| Prospectus | Required, unless other exemptions apply | Exempt offer if it is only for qualified investors |
| Assessment | Enhanced: suitability or appropriateness | Lightened, part presumed |
| Advertising | MiFID II and LMVSI conduct rules | More flexible framework |
| Regulatory cost and timeline | High | Lower in relative terms |
| Investor base | Broad, general public | Limited, qualified |
| Operational burden for you | High | Lower, but it requires classifying and controlling access |
What to do now
Start by defining your audience before designing the issuance, because it conditions everything else. If you decide to target only qualified investors, prepare access controls and documented classification for each investor. If you open to retail investors, budget for the prospectus and the approval timeline. For the complete step by step of the issuance, follow the guide to how to issue a security token in Spain with ERIR, Ley 6/2023 and the CNMV. To place your case in the general framework, review what asset tokenization is. If you are going to tokenize equity, see share tokenization in Spain. And if you stumble on a term, the glossary clears it up for you.
Frequently asked questions
Can I sell security tokens to anyone?
It depends on how you structure the offering. If you target only qualified investors, you qualify for the prospectus exemption and operate with fewer burdens (art. 1.4 Regulation (EU) 2017/1129). If you open to retail investors, you enter the general regime with a prospectus and enhanced protection.
What is the difference between a retail investor and a professional investor?
The retail investor receives maximum protection by default. The professional investor has experience, knowledge and ability to assess risks, either by nature or upon request by providing evidence of portfolio criteria, experience and frequency of transactions (Directive 2014/65/EU, Annex II).
Does targeting only qualified investors exempt me from the prospectus?
Yes. An offering directed exclusively to qualified investors is exempt from the obligation to publish a prospectus (art. 1.4 Regulation (EU) 2017/1129). But you must control access and classify each investor to sustain that exemption.
What advertising rules apply to my issuance?
It depends on what the token is. If it is a transferable security, its advertising follows the conduct rules of MiFID II and the LMVSI. If it is not a financial instrument, Regulation (EU) 2023/1114 (MiCA) applies. Circular 1/2022 of the CNMV, which regulated the advertising of crypto-assets, has been repealed since 28 December 2024.
What is an eligible counterparty?
It is the minimum level of protection, reserved for large financial and public entities: banks, investment firms, insurers, funds and governments (art. 30 Directive 2014/65/EU). For most issuers of security tokens it is far off.
Does selling only to professional investors save me obligations?
Yes, it reduces cost and time: prospectus exemption and streamlined assessment. In exchange, it requires classifying each investor and controlling who accesses the offering. If a retail investor enters an exempt offering, the problem is yours.
Notice
Informational content. It does not constitute legal, tax or investment advice. HokenFi is a software and infrastructure provider; it does not provide regulated services. Check the current version of the rules cited in the BOE and EUR-Lex.
Cited regulations
- Directive 2014/65/EU (MiFID II), in particular art. 30 and Annex II
- Ley 6/2023, de 17 de marzo, de los Mercados de Valores y de los Servicios de Inversión (LMVSI)
- Regulation (EU) 2017/1129 (Prospectuses), art. 1.4
- Regulation (EU) 2023/1114 (MiCA): advertising of crypto-assets that are not financial instruments; Circular 1/2022 of the CNMV was repealed on 28 December 2024
