Legal Counsel for Stablecoin Issuers: Legal Counsel for Crypto Firms

A stablecoin issuer sits at the intersection of payments law, securities regulation, banking supervision and anti-money-laundering compliance – often across three or four jurisdictions at once. The legal exposure is not theoretical. Mis-classifying a token can convert a product launch into an unregistered securities offering. Issuing a reserve-backed instrument without the right authorisation can trigger enforcement by regulators that move faster than most boards anticipate. This page maps the full legal lifecycle for stablecoin issuers: from formation and token classification through licensing, banking arrangements, Travel Rule (the obligation to pass originator and beneficiary data with a transfer) compliance, and into dispute resolution when things go wrong.

The legal question every stablecoin issuer must answer first is not "what shall we call it?" – it is "what rights does this instrument confer, and which regulatory regime captures those rights?" Under MiCA (the EU's Markets in Crypto-Assets Regulation), the answer determines whether the token is an asset-referenced token (ART) or an e-money token (EMT), each carrying a distinct authorisation path. Outside the EU, parallel classification exercises are required under the regimes of Singapore's MAS, the UK's FCA, and Hong Kong's SFC, among others. In our practice, we begin every stablecoin engagement with that classification exercise – before the whitepaper is drafted, before the entity is formed, and well before the first line of smart-contract code is reviewed.

Token Classification: The Threshold Question Every Issuer Faces

Token classification is determined by the substance of the rights the instrument confers – not by the label placed on it in a whitepaper or a marketing deck. This is the single most consequential legal determination a stablecoin issuer will make, and it must precede every other step in the build.

A common assumption among founding teams is that placing the word "utility" in a whitepaper settles the legal classification. It does not. Regulators assess the economic reality: does the token confer a right to repayment, a claim on assets, a share in profits, or a redemption right? If it does, it may be an ART, an EMT, an e-money instrument, or a security – depending on the jurisdiction. The label is, at most, one data point among many.

Under MiCA, the classification turns on whether the instrument references one or more fiat currencies (pointing toward EMT status) or a broader basket of assets (pointing toward ART). EMTs are treated as e-money and their issuers must hold an e-money institution authorisation in an EU member state or obtain a bespoke MiCA licence. ARTs carry a separate, more demanding authorisation requirement, including reserve composition rules and investor redemption rights. Both categories require a crypto-asset whitepaper (the MiCA-mandated disclosure document) approved or notified before any public offer.

In Singapore, the MAS applies the Payment Services Act framework to tokens that function as digital payment tokens. In the United Kingdom, the FCA's MLR registration regime applies to firms operating in the crypto-asset space, and the financial-promotion rules constrain how a stablecoin can be communicated to UK persons even when the issuer is offshore. Each of these regimes reaches the same instrument differently. A cross-border issuer targeting users in multiple regions cannot rely on a single classification opinion.

We assess classification against the substance of rights, using a jurisdiction-by-jurisdiction matrix that maps the instrument's features against each applicable regime before advising on structure.

For an early assessment of your token's classification risk across the jurisdictions relevant to your user base, contact OBOLUS at info@oboluslaw.com. The process above describes the standard analytical path. Your specific instrument – its reserve mechanism, redemption rights, and target holders – changes the analysis materially.

Entity Formation and Licensing: Building the Right Legal Foundation

The entity structure for a stablecoin issuer must be chosen to satisfy the licensing requirements of every jurisdiction in which the business intends to operate, hold reserves, or serve users – and those three may not overlap.

For EU-facing issuers, MiCA requires that the authorised entity be incorporated in a member state. The choice of member state matters: national competent authorities differ in supervisory intensity, processing capacity and practical engagement with novel business models. Operators we advise routinely explore Lithuania – where the Bank of Lithuania has developed experience with digital-asset businesses during the transition from the earlier VASP regime to MiCA CASP authorisation – alongside Malta, where the MFSA's VFA framework is transitioning to MiCA, and other member states with active supervisory pipelines.

For issuers targeting the Gulf, VARA (the Virtual Assets Regulatory Authority in Dubai) offers an activity-based licensing structure across categories including custody, exchange, and transfer and settlement services – each relevant to a stablecoin operation depending on the business model. The ADGM's FSRA in Abu Dhabi operates a parallel regime with its own recognised virtual assets framework. These two UAE hubs are not interchangeable: VARA's remit covers mainland Dubai but excludes the DIFC financial free zone, where separate rules apply.

Singapore's MAS licences stablecoin-related activities under the Payment Services Act, with tiered licence categories calibrated to transaction volume and payment function. The applicable tier determines the capital and compliance obligations that attach. Hong Kong's SFC VATP licensing regime applies to trading platforms rather than issuers directly, but issuers listing their token on a licensed Hong Kong platform will be subject to that platform's due-diligence requirements – a regulatory exposure that often surprises issuers who do not anticipate the downstream licensing chain.

Licensing timelines vary by jurisdiction and by the completeness of the application dossier. In our cross-border practice, we have seen applications in well-resourced jurisdictions move from submission to approval in a matter of weeks, while more complex multi-category applications take considerably longer. The most common cause of delay is an incomplete picture of the business model at submission – regulators expect issuers to have resolved the classification question, the reserve structure, and the AML programme before the application is filed.

Reserve Structure and Banking: Where Regulatory and Commercial Risks Meet

A stablecoin's reserve structure is simultaneously its commercial proposition and its principal regulatory vulnerability. Regulators across the leading hubs increasingly expect issuers to hold reserves in segregated, liquid, low-risk assets – and to be able to demonstrate that at any time, not just at audit.

Under MiCA, reserve composition and custody requirements for ART and EMT issuers are set out in the applicable rulebook. The principle – that reserves must be held to protect holders' redemption rights – is consistent across regimes, even where the specific asset categories and custody arrangements differ. An issuer that commingles reserve assets, pledges them as collateral, or invests them in instruments that cannot be liquidated on short notice is in a materially different regulatory position than one that holds segregated cash and short-term government instruments.

Banking is the operational constraint that most frequently disrupts a stablecoin issuer's timeline. Banks in most major jurisdictions are cautious about servicing firms that hold, move or custody digital assets. The practical result is that an issuer with a MiCA licence in one EU member state may struggle to open a reserve account in the same jurisdiction – because the licensor and the bank operate under different risk tolerances. In our cross-border practice, we address this early: banking strategy is part of the initial structure review, not an afterthought.

Offshore reserve custody – holding reserves through a trust structure or a regulated custodian in a different jurisdiction from the issuer – introduces a further layer of regulatory analysis. Does the MAS, the FSRA, or the FCA look through the custody arrangement to assess whether the issuer's reserve obligations are actually met? In our experience, the answer is generally yes: regulators assess substance, not form. Structures designed to ring-fence reserves from regulatory reach tend to attract closer scrutiny rather than less.

How Does MiCA Affect a Stablecoin Issuer Outside the EU?

MiCA has extraterritorial effect: a non-EU issuer whose stablecoin is admitted to trading on an EU platform, or actively marketed to EU persons, is within scope of MiCA's whitepaper and conduct requirements regardless of where the issuer is incorporated. This is the most frequently misunderstood aspect of the regime among issuers based in Dubai, Singapore or the British Virgin Islands.

The mechanism is direct. MiCA's whitepaper obligation and its ART/EMT authorisation requirements are triggered by the offer of the crypto-asset to the public in the EU or its admission to trading on an EU crypto-asset trading platform. An issuer does not need an EU establishment to be caught; it needs only to have EU-resident holders or EU-listed token status.

Practically, this means a VARA-licensed stablecoin issuer in Dubai that lists its token on a MiCA-authorised European exchange must ensure its token meets MiCA's classification, reserve and redemption requirements – or risk enforcement by an EU national competent authority. The same applies to a Cayman Islands-incorporated issuer whose token is distributed through EU-facing decentralised platforms. ESMA has been explicit that the regulation covers economic substance, not corporate geography.

In our practice, we map MiCA exposure as part of every cross-border structure review for stablecoin issuers – regardless of where the issuer is domiciled. The question is not whether MiCA applies; it is which obligations attach given the distribution method and holder base.

If your stablecoin is listed or distributed in the EU and you have not mapped your MiCA exposure, write to OBOLUS at info@oboluslaw.com. If a prior application stalled or a compliance review raised questions you could not resolve, a second read can surface the structural issue and the route forward.

AML, Travel Rule and Sanctions: The Compliance Infrastructure an Issuer Must Build

Every stablecoin issuer operating across the major regulatory hubs must build and maintain an AML/CFT programme aligned with the FATF Recommendations – particularly Recommendation 15, which applies the FATF standards to virtual asset service providers. The Travel Rule adds a specific obligation: when a transfer of virtual assets crosses a defined threshold, the transmitting institution must pass originator and beneficiary data to the receiving institution.

The Travel Rule threshold varies by jurisdiction – it is set under the applicable regime in each relevant market, not by a single global standard. A stablecoin issuer routing transfers through multiple jurisdictions must map the applicable threshold in each, maintain compatible data-exchange infrastructure, and ensure its counterparty institutions are likewise Travel Rule compliant. In practice, that last requirement is the hardest to satisfy: the stablecoin ecosystem still contains intermediaries who have not deployed Travel Rule solutions, creating gaps that regulators are increasingly focussed on.

Sanctions exposure is acute for stablecoin issuers because, unlike most crypto-assets, major stablecoins – particularly USDT issued by Tether and USDC issued by Circle – carry a contract-level freeze and blacklist capability exercisable by the issuer. Tether and Circle generally act on law-enforcement instruction, a court order, or an OFAC designation. An issuer that does not maintain its own sanctions screening programme will be dependent on the infrastructure of the dominant issuers – which may not move as quickly as its own programme would.

For proprietary stablecoin issuers, the compliance infrastructure must include: a KYC/KYB programme calibrated to the issuer's distribution model; transaction monitoring aligned with the risk profile of the instrument; Travel Rule data-exchange capability; and sanctions screening at both the minting and redemption stages. This is not a checklist that can be deferred to post-launch. Regulators expect it to be operational from day one of commercial activity.

What Happens When a Stablecoin Issuer Faces a Dispute or Recovery Event?

Stablecoin issuers face a distinct category of disputes: claims arising from the peg mechanism, redemption failures, smart-contract exploits, reserve mismanagement, and misappropriation by internal or external actors. The recovery tools available – and their speed – depend on the jurisdiction in which the issuer is domiciled, where the relevant assets are held, and which legal system governs the instrument.

England and Wales is the leading forum for crypto asset recovery: its courts have developed a sophisticated body of authority recognising digital assets as property, available for injunctive relief and proprietary claims. The worldwide freezing order (an injunction freezing a defendant's assets globally) and the Norwich Pharmacal order (compelling a third party to disclose the identity of a wrongdoer) are the two primary tools. Courts in England and Wales have issued both in crypto-asset contexts, and the CFAAR (Crypto Fraud and Asset Recovery) network, launched in London in September 2021, supports multi-jurisdictional coordination. The DIFC Courts in Dubai have issued worldwide freezing orders in support of foreign proceedings, and Singapore's courts have granted proprietary injunctions over crypto-assets.

For a stablecoin issuer, the recovery clock starts the moment a misappropriation or exploit is detected. On-chain assets move fast. Recovery requires immediate engagement with a forensic partner capable of tracing transactions across chains, followed by rapid legal action to secure a freeze before withdrawal is complete. We work alongside forensic partners to convert on-chain evidence into court-ready disclosure applications – and we know which forums move fast enough to be useful.

Micro-matter: In a recent matter, a stablecoin issuer identified a significant outflow from its reserve wallet following an internal control failure. Working in coordination with a blockchain forensics provider, we traced the funds through multiple exchange accounts and, within days, secured a disclosure order in a leading common-law forum. The affected balance – a seven-figure sum – was frozen before the counterparty completed the final withdrawal step. The issuer's legal exposure was materially contained as a result of acting within hours of detection.

Decision Matrix: Which Legal Path Matches Your Issuer Profile

Stablecoin issuers do not all look the same, and the legal path is not the same for all of them. The operative variables are: the reserve mechanism, the target holder base, the distribution method, and the jurisdictions where the issuer, its reserves, and its users are located.

Profile A – EU-facing EMT issuer. An issuer pegging to a single EU currency and targeting EU retail holders must obtain e-money institution authorisation in a member state, or a bespoke MiCA EMT licence, draft and notify a compliant whitepaper, and build a reserve structure meeting MiCA's segregation and composition expectations. The authorisation timeline varies by member state and application readiness. The key risk is under-estimating the reserve and redemption infrastructure required before authorisation is granted.

Profile B – Multi-currency ART issuer with global distribution. An issuer referencing a basket of currencies or assets must follow the ART path under MiCA for any EU distribution, obtain activity-specific licences under VARA, MAS, or SFC regimes for Gulf and Asia distribution, and build a cross-jurisdictional AML programme. This profile carries the highest compliance overhead. The key risk is misclassifying the instrument – treating it as an EMT when the basket composition means it is, in substance, an ART.

Profile C – Offshore issuer with no direct EU distribution. An issuer incorporated in the BVI or the Cayman Islands, with no EU-listed token status and no active marketing to EU persons, has the lowest MiCA exposure – but must still satisfy the regime of the jurisdiction where it is incorporated (BVI FSC under the VASP Act, CIMA under the Cayman VASP Act), the Travel Rule in any jurisdiction where it transmits value, and the AML expectations of any banking partner it retains. The key risk is inadvertent MiCA exposure through secondary trading on EU-licensed platforms.

Profile D – Enterprise or institutional stablecoin issuer. A bank, payment institution or corporate issuing a stablecoin for internal settlement or enterprise use faces a different analysis: the instrument may not constitute a public offer, limiting whitepaper obligations, but the issuer must still address the classification question, the AML programme, and – if the instrument is interoperable with public chains – the risk of retail participation triggering public-offer thresholds. In our cross-border practice, this profile is increasingly common among financial institutions exploring programmable settlement.

A Common Assumption About Utility Labels – and What Regulators Actually Test

A common assumption is that labelling a stablecoin as a utility instrument or a payment token removes it from the securities and e-money perimeter entirely. Regulators across every major jurisdiction have made clear that this is incorrect. The classification test is functional: what rights does the holder actually acquire? If those rights include redemption for fiat, a claim on a reserve pool, or a return linked to an asset basket, the label on the instrument is not the determinative factor.

In the EU, ESMA has been explicit that the substance of the instrument governs its MiCA classification. In Singapore, the MAS applies the same logic under the Payment Services Act. In the United Kingdom, the FCA's approach to the scope of the financial-promotion rules for stablecoins looks to the nature of the arrangement, not its marketing description. A "utility" stablecoin that is, in substance, a redemption instrument is an EMT or an ART – or, in some jurisdictions, a regulated e-money instrument or a security – regardless of what the whitepaper says.

The practical consequence for issuers is that classification opinions must be grounded in a detailed analysis of the instrument's mechanics: the reserve composition, the redemption mechanism, the rights on insolvency, and the governance structure around the peg. A one-page opinion that recites the utility label and concludes no licence is needed is not a defensible legal position in any of the jurisdictions where serious stablecoin business is conducted.

Related at OBOLUS

• Token Offerings and Securities Law for Digital Asset Businesses – Legal advice on token structuring, securities analysis, and cross-border offering compliance.
• Token Legal Classification: Where the Legal Lines Are Drawn – A practical analysis of how regulators classify tokens across major regimes.
• EMI Licence for Crypto Firms: Practical Lessons for Boards – Operational and regulatory lessons from the e-money licensing process for crypto businesses.

FAQ

Is my token a security?

Whether a token is a security depends on the rights it confers and the applicable jurisdiction's classification test – not on how it is labelled. In the US, the SEC applies an economic-substance analysis; in the EU, MiCA introduces its own ART/EMT/other-crypto-asset taxonomy; in Singapore, the MAS looks at the Payment Services Act perimeter. Across all of these, the substance of the instrument – redemption rights, profit participation, asset claims – is determinative. A classification opinion must be grounded in the instrument's mechanics and the jurisdictions relevant to the issuer and its holder base.

Do I need a MiCA whitepaper?

Any issuer making a public offer of a crypto-asset to persons in the EU, or seeking admission to trading on an EU platform, must prepare a MiCA-compliant crypto-asset whitepaper – unless an exemption applies. Exemptions exist for certain private placements, professional-investor-only offers, and instruments below a defined transaction threshold. For ART and EMT issuers, the whitepaper must be approved or notified to the relevant national competent authority before the offer commences. Non-EU issuers are not exempt if their token is offered or traded in the EU.

How should an airdrop be structured legally?

An airdrop that distributes tokens of meaningful value to recipients who have performed tasks, held qualifying assets, or met selection criteria may constitute a public offer of crypto-assets in jurisdictions that apply a functional, economic-substance test. Under MiCA, freely distributed tokens with no consideration may fall within a specific exemption – but the mechanics matter. The token's classification, the selection criteria, the jurisdictions of recipients, and the value threshold all feed the analysis. An airdrop structure that is defensible in one jurisdiction may not be in another; legal review before distribution is the standard we recommend to every issuer.

OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise stablecoin issuers, exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance that sit around them. Digital assets are the whole of our practice. We assess token classification against the substance of rights, not the marketing label – and we work alongside forensic partners to convert on-chain evidence into court-ready disclosure applications when recovery is needed. To discuss your situation, contact info@oboluslaw.com or message us at t.me/oboluslaw.

By Roman Levitt, Technology & DeFi Counsel – specialising in token structuring, smart-contract legal risk and cross-border classification for stablecoin and DeFi issuers.

This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.