To tokenize a real-world asset in Europe, you place the asset in a legal wrapper, usually a company or a special purpose vehicle, issue shares or bonds of that wrapper in token form and register them under securities law. In Spain that means a register kept by an ERIR, a prospectus or an exemption, and distribution through authorised entities.
Much of what is published about RWA tokenization is written for the US market or for offshore structures, and skips the legal steps. This guide takes the European issuer’s view: what RWA tokenization means under securities law, the process step by step, which assets fit and how the regulated route compares with the offshore one. If you need the definition first, read what real-world assets are.
What RWA tokenization means under securities law
RWA tokenization is the representation of rights over a real-world asset as transferable tokens recorded on distributed ledger technology (DLT). The underlying asset can be a building, a loan portfolio, a fund or a stream of royalties. The token is not the asset. It is an instrument that carries defined rights over the asset, or over the vehicle that holds it.
The decisive question in the EU is which rights the token carries. If they match a financial instrument listed in Annex I of MiFID II, such as a share, a bond or a fund unit, the token is a security token. Securities law then applies in full: MiFID II conduct and licensing rules, the Prospectus Regulation for public offers, and the national regime of the issuing state (Directive 2014/65/EU; Regulation (EU) 2017/1129).
MiCA does not govern these tokens. The regulation excludes crypto-assets that qualify as financial instruments from its scope (art. 2.4, Regulation (EU) 2023/1114). ESMA’s Guidelines on the conditions and criteria for the qualification of crypto-assets as financial instruments (ESMA75453128700-1323), applicable since 18 May 2025, set out how supervisors draw that line.
Spain turned this framework into a working route. Law 6/2023 recognises financial instruments represented on DLT and requires an authorised entity, the ERIR, to keep the legal register of holders. The register regime is developed by Royal Decree 814/2023, and the first ERIR, URSUS-3 Capital, A.V., was authorised in November 2024 (art. 8, Law 6/2023; RD 814/2023).
How to tokenize real-world assets: the process step by step
A regulated RWA issuance follows seven steps. The order matters: each step fixes decisions that the next one cannot undo cheaply.
| Step | Decision | Who is involved | Governing rule |
|---|---|---|---|
| 1. Asset selection | Does the asset produce a right that can be verified and assigned? | Issuer, valuers, auditors | Property, contract and company law |
| 2. Legal wrapper | Company, SPV, fund or direct debt issuance | Corporate lawyers, notary | Company law (in Spain, Royal Legislative Decree 1/2010) |
| 3. Instrument qualification | Share, bond, fund unit or MiCA crypto-asset | Regulatory counsel | MiFID II Annex I, ESMA guidelines, MiCA art. 2(4) |
| 4. ERIR registration | Which registrar, which network, which contingency plan | ERIR, technology provider | Art. 8 Law 6/2023, RD 814/2023 |
| 5. Offer regime | Prospectus or exemption; single country or EU passport | Issuer, counsel, CNMV | Regulation (EU) 2017/1129 as amended by the Listing Act |
| 6. Distribution | Who places the tokens, with which investors | Authorised investment firm or bank | MiFID II, anti-money-laundering law |
| 7. Lifecycle | Payments, votes, transfers, reporting and exit | Issuer, ERIR, paying agent, trading venue | Issuance terms, DLT Pilot Regime |
1. Asset selection
Not every asset is ready. Ownership must be clean and documented, the value must be supported by a recognised method, and any income must be verifiable and assignable. A practical screening test: describe in one sentence what the token pays, from which source and in what order of priority. If that sentence cannot be written, the problem is the structure, not the technology.
Output: a short asset file with title documents, valuation and cash-flow history.
2. Legal wrapper or SPV
Investors rarely hold a fraction of the physical asset. They hold shares or bonds of a vehicle that owns or finances it, which ring-fences the asset from the sponsor’s other risks. In Spain, equity tokens require a sociedad anónima, because the participations of a private limited company cannot be represented as negotiable securities; debt structures avoid that constraint. We explain the vehicle in setting up a Spanish SPV for tokenization.
Output: an incorporated vehicle with bylaws or terms that define the investors’ rights.
3. Instrument qualification
Before any smart contract is written, counsel confirms what the token legally is. Under the ESMA guidelines, a token is a transferable security when it cumulatively is not an instrument of payment, forms part of a class of securities and is negotiable on the capital market. Labels such as “utility” do not change the outcome. The full test is in MiCA vs MiFID II: how to classify a token.
Output: a written qualification opinion that the rest of the file relies on.
4. ERIR registration
In Spain, DLT-represented securities must be recorded by an ERIR, which keeps a single-tier register with full legal effect and must maintain a contingency plan if the ledger fails. As of 2 October 2026 the CNMV register lists one ERIR, URSUS-3 Capital; Bestinver Securities announced its authorisation in May 2026 but did not yet appear on the register. Outside Spain, the equivalent step follows national law, such as the licensed crypto securities registrar under Germany’s eWpG. Read what an ERIR is for the registrar’s duties.
Output: an ERIR mandate, the chosen network and the issuance registered.
5. Offer regime
A public offer of securities needs a prospectus approved by a national supervisor unless an exemption applies: offers only to qualified investors, offers to fewer than 150 non-qualified investors per member state, or offers below EUR 12 million over 12 months since 5 June 2026 under the Listing Act (Regulation (EU) 2024/2809), with a member state option of EUR 5 million and the Spanish adaptation pending. Below the threshold, Spain still requires an issuance document for registration. A CNMV-approved prospectus can be passported to other member states by notification (arts. 24-25, Regulation (EU) 2017/1129); see the EU prospectus passport.
Output: an approved prospectus, or a documented exemption with its limits.
6. Distribution
Placing financial instruments with investors is an investment service under MiFID II, so the offer runs through an authorised investment firm or credit institution. That entity applies product governance and appropriateness or suitability rules, and investors pass KYC and anti-money-laundering checks before subscribing. Whitelisting wallets in the smart contract mirrors that file; it does not replace it.
Output: a placement agreement, a defined target market and onboarded investors.
7. Lifecycle
After the issuance, payments, votes, amortisation and transfers execute against the ERIR register, and offers made under a prospectus carry ongoing disclosure duties. Supervised secondary venues exist under the DLT Pilot Regime: the first Spanish DLT trading and settlement system was authorised by the CNMV on 26 November 2025 (Regulation (EU) 2022/858). A reform proposed by the Commission on 4 December 2025 would raise the regime’s caps, but it is still in negotiation.
Output: a calendar of corporate actions and an exit plan that works even without secondary liquidity.
Which assets fit
Any asset that can sit inside a company, a fund or a debt instrument can support a security token issuance. Four categories dominate current practice.
- Real estate debt and equity. A vehicle holds the property or the development loan, and investors subscribe its tokenized shares or bonds. The structures are explained in tokenizing real estate in Spain.
- Funds and managed vehicles. Units or shares of an investment vehicle are represented on DLT, which simplifies subscription and the register of holders.
- Bonds and notes. Debt from companies or energy projects is tokenized directly, with payment terms executed against the register.
- Intellectual property royalties. Music, audiovisual and patent income is packaged into instruments whose payments track what a vehicle collects; see IP tokenization.
What tokenization never does is turn a financial claim into an unregulated product. If the instrument grants economic or governance rights over a company, it is a security, whatever the marketing calls it.
The regulated EU route vs the offshore route
Issuers usually weigh speed and upfront cost against legal certainty and market access. The comparison below states the trade-off plainly, including where the offshore route wins.
| Criterion | Regulated EU route (Spain) | Offshore route |
|---|---|---|
| Legal nature of the token | A registered security with the same rights as a traditional share or bond | A contractual claim whose strength depends on the offshore documents and courts |
| Register of holders | Kept by an authorised ERIR under CNMV supervision | Kept by the platform or the issuer, with no supervised registrar |
| Access to EU investors | Direct; a CNMV-approved prospectus passports across the EU | Restricted; marketing into the EU triggers EU securities law |
| Upfront cost and speed | Higher: structuring, ERIR onboarding and, where required, prospectus approval | Lower and faster at the point of issuance |
| Risk carried forward | Concentrated at the start, then largely resolved | Requalification and enforcement risk for as long as EU investors hold the token |
The offshore route is not illegal in itself. It becomes a problem when the tokens reach EU investors, because securities law follows the offer, not the server. Reverse solicitation is a narrow exception, not a distribution strategy. The offshore route wins the first three months; the regulated route wins the years that follow.
Who supervises
In Spain, the CNMV authorises the ERIR, approves prospectuses and supervises the regulated entities in the chain. ESMA sets the criteria for classifying crypto-assets as financial instruments and coordinates supervisors across the Union. HokenFi operates on this route as the technology layer: it is not an entity authorised by the CNMV, and the regulated functions of each issuance are covered by authorised partners, including the ERIR and specialised counsel.
If your asset fits a security wrapper, the regulated European route already exists. Take the 2-minute issuance assessment or request a proposal.
This content is educational. It is not legal, tax or investment advice. Check the current version of each rule on EUR-Lex and the relevant national gazettes.
HokenFi is a software and infrastructure provider; it does not provide regulated services (CASP, investment firm, financial advisor or ERIR). This article is for information only and is not financial or legal advice.
Frequently asked questions
How do you tokenize a real-world asset in Europe?
In seven steps: select an asset with a verifiable, assignable right; place it in a legal wrapper such as an SPV; confirm that the token is a financial instrument; register it with an ERIR in Spain or the national registrar elsewhere; settle the offer regime, prospectus or exemption; distribute through an authorised firm with KYC; and run payments, votes and transfers against the register.
Which real-world assets can be tokenized?
Any asset that can be held through a company, a fund or a debt instrument. Common cases are real estate debt and equity through special purpose vehicles, fund units, corporate and project bonds, and intellectual property royalties packaged as income-linked instruments. The token represents a security issued by the vehicle, not the physical asset itself, so the asset needs clean title and verifiable income.
Does MiCA regulate RWA tokenization?
Not when the token qualifies as a financial instrument. MiCA excludes crypto-assets that qualify as financial instruments under MiFID II (art. 2.4, Regulation (EU) 2023/1114). Tokenized shares, bonds or fund units are governed by securities law: MiFID II, the Prospectus Regulation and national rules such as Spain's Law 6/2023. ESMA's guidelines, applicable since 18 May 2025, set the qualification test.
Do I need an SPV to tokenize an asset?
Usually, yes. A special purpose vehicle holds the asset and issues the shares or bonds that become tokens, which ring-fences the asset from the sponsor's other risks and gives investors a clear legal claim. A company can also tokenize its own shares or bonds directly. In Spain, tokenized shares require a sociedad anónima; debt structures avoid that corporate-form constraint.
Can a tokenized security issued in Spain be sold across the EU?
Yes. A prospectus approved by the CNMV can be passported to any EU member state under articles 24 and 25 of the Prospectus Regulation, with a notification instead of a new approval. An offer that relies on an exemption has no passport, and member states may apply a lower threshold or national disclosure rules, so cross-border distribution without a prospectus needs a country-by-country review.
