Stablecoin issuance sits at the intersection of payments law, securities regulation and monetary policy. An operator that mis-classifies its token at the design stage does not merely face a compliance gap – it risks converting a product launch into an unregistered securities offering, triggering reserve and redemption obligations it never budgeted for, or being barred from its intended markets before the first token is minted. As major financial centers converge on dedicated stablecoin regimes while others still apply legacy frameworks by analogy, the cross-border question – which regime governs, and which classification controls – has become the central legal issue for any issuer building at scale.
The short answer is that no single global standard yet governs stablecoin issuance authorisation (the formal process by which a regulator licenses or registers an entity to issue a peg-stabilised digital asset). The applicable regime depends on the token's structure, the issuer's domicile, where users are located and where the asset is offered. This analysis maps the leading regimes, contrasts their classification logic, identifies the structural decision points and offers a cross-border decision matrix for issuers choosing where and how to launch.
What Is a Stablecoin, Legally Speaking?
A stablecoin is a digital asset designed to maintain a stable value relative to a reference asset – typically a fiat currency, a basket of currencies or another financial instrument. That commercial description, however, tells a regulator almost nothing. What matters legally is the structure of rights the token confers on its holder and the mechanism by which stability is achieved.
Under MiCA (the EU's Markets in Crypto-Assets Regulation), the classification splits into two formal categories. An asset-referenced token (ART) is pegged to a basket of assets, currencies or commodities. An e-money token (EMT) is pegged to a single fiat currency and functions like electronic money. Each category attracts its own authorisation track, its own capital and reserve requirements and its own ongoing obligations. A token that falls outside both – for instance a purely algorithmic stablecoin with no reserve backing – may still qualify as a crypto-asset under the catch-all regime, but with a different set of requirements.
In the United States, no single federal framework yet governs stablecoins directly. The SEC and the CFTC have each asserted jurisdiction over various stablecoin structures, and FinCEN applies money-services-business rules to issuers. The substance-over-label principle is paramount: a stablecoin that confers profit rights, governance rights or a promise of return on the reference portfolio may satisfy the investment-contract test applied by the SEC, making it a security regardless of how the issuer markets it.
In our cross-border practice, we consistently find that issuers underestimate how much the rights attached to a token – redemption mechanics, reserve income, governance participation – shift the classification outcome. A utility label on a whitepaper does not settle the legal position. Regulators across every major regime assess the substance of those rights, and the classification that follows is a legal conclusion, not a marketing choice.
To map the classification of your proposed token before you commit to a structure, contact OBOLUS at info@oboluslaw.com. The process above describes the standard analytical path. Your token's specific rights architecture, reserve design and target markets change the analysis materially.
How Does MiCA Regulate Stablecoin Issuers?
Under MiCA, any entity issuing an ART or EMT to the public in the EU must obtain prior authorisation from its home-state competent authority, with ESMA playing a supervisory coordination role and national competent authorities (NCAs) handling the authorisation itself. The regime came into force for stablecoin categories ahead of the broader CASP (crypto-asset service provider) authorisation timeline, making it the earliest operational element of MiCA for most issuers.
For an EMT, the issuer must be either a credit institution or an electronic money institution (EMI) already authorised in an EU member state, or must obtain such authorisation. The token must be redeemable at par on demand. Reserve assets must be held in segregated, low-risk instruments. A whitepaper (the MiCA-defined disclosure document) must be prepared, notified to the NCA and published before any offer.
For an ART, the authorisation requirements are more extensive. The issuer need not be a bank or EMI, but it must demonstrate governance, risk management and reserve adequacy to the NCA. Significant ARTs – those that breach the thresholds that ESMA and the NCA assess for user base size and transaction volume – attract direct ESMA supervision. The whitepaper for an ART is more detailed than for a standard crypto-asset and must describe the reserve composition, the redemption rights and the conflict-of-interest policy.
A critical cross-border point: MiCA passporting means that an ART or EMT authorisation obtained in one EU member state allows the issuer to offer across the entire EEA. This makes the choice of home-state NCA a structural decision, not merely a procedural one. The supervisory culture, the processing timeline and the capital expectations of the NCA can vary. Lithuania's Bank of Lithuania and Malta's MFSA both operated as preferred EU VASP entry points under pre-MiCA regimes, and both are now calibrating their CASP and ART/EMT authorisation pipelines. Issuers we advise frequently weigh these NCA-level differences alongside the legal framework itself.
What Does the US Require for Stablecoin Issuance?
US stablecoin regulation is currently a patchwork, with federal and state frameworks applying simultaneously and without clear hierarchy between them. An issuer targeting US users must map every layer before launch.
At the federal level, the SEC's position is that certain stablecoins – particularly those with yield-bearing features or those that are marketed with a return on the reserve portfolio – may constitute securities under the investment-contract analysis derived from longstanding federal case law. The CFTC has indicated that commodity-linked stablecoins fall within its remit. FinCEN treats stablecoin issuers as money services businesses, requiring AML/KYC programs and, in many structures, registration.
State-level money-transmitter licensing (MTL) is the most immediate operational requirement for most issuers. Depending on the distribution model, an issuer may need MTLs in dozens of states. The NYDFS BitLicense remains the most demanding single-state requirement and is effectively mandatory for any issuer with a meaningful New York user base. The BitLicense review process is substantive: NYDFS examines capital adequacy, cybersecurity, consumer protection and AML controls.
In our cross-border practice, we have seen issuers structure the US market access question by domiciling the issuance vehicle outside the US, limiting on-chain availability to non-US addresses and implementing geofencing – then revisiting US compliance once a federal stablecoin framework clarifies the position. That approach carries its own risks: the SEC has not been deterred by offshore issuance structures where US persons accessed the token. The cross-border angle is not a safe harbour; it is a risk-management tool that requires legal discipline at every distribution point.
How Does the UAE Approach Stablecoin Authorisation?
The UAE has developed two parallel digital-asset regulatory regimes that apply to stablecoin issuance: VARA in mainland Dubai and the FSRA within the ADGM free zone in Abu Dhabi. A stablecoin issuer must identify which regime applies based on where the issuer is incorporated and where it conducts regulated activities.
VARA (the Virtual Assets Regulatory Authority) regulates virtual asset activities in mainland Dubai and requires activity-specific authorisation. Stablecoin issuance as a transfer or settlement activity, or as a component of an exchange or broker-dealer operation, requires the issuer to hold the relevant VARA licence and comply with VARA's rulebooks. VARA has adopted a prescriptive rulebook structure, including conduct, technology and AML requirements that apply at the activity level. Dirham-pegged or USD-pegged stablecoins have attracted VARA's attention as potential payment instruments, and VARA has signalled expectations around reserve quality and issuer capitalisation.
The FSRA within the ADGM applies a separate framework. The ADGM operates as a common-law free zone, and the FSRA's regime for virtual assets permits the issuance and custody of "recognised" virtual assets within that framework. An issuer seeking ADGM authorisation operates in a common-law environment, which has practical advantages for structuring reserve arrangements and for access to the DIFC Courts' jurisdiction for dispute resolution.
The UAE's dual-centre structure means that a stablecoin business serving regional and international markets must decide whether to operate under VARA, under the FSRA, or – in some models – under both. We regularly advise operators on this choice, which turns on the nature of the stablecoin's reserve mechanism, the target user base and the banking relationships the issuer needs to maintain.
How Do Singapore and Hong Kong Differ on Stablecoin Regulation?
Singapore and Hong Kong have both implemented VASP licensing regimes and have each addressed stablecoins directly, but their approaches reflect different policy priorities and different assessments of where stablecoins sit in the financial system.
In Singapore, the MAS (Monetary Authority of Singapore) has introduced a stablecoin regulatory framework as an extension of the Payment Services Act. The MAS framework applies to single-currency stablecoins (SCS) pegged to the Singapore dollar or major G10 currencies, issued in Singapore. Issuers of in-scope SCS must hold a Major Payment Institution licence under the Payment Services Act and comply with reserve, redemption and disclosure requirements that MAS has set out in its finalised framework. The MAS approach is notable for its clarity: it draws a line between in-scope stablecoins and other digital payment tokens, avoiding the classification ambiguity that characterises the US environment.
In Hong Kong, the SFC (Securities and Futures Commission) regulates virtual-asset trading platforms under the VASP licensing regime, while the Hong Kong Monetary Authority (HKMA) has proposed a separate licensing regime for stablecoin issuers. The HKMA's proposed framework, which targets fiat-referenced stablecoins used for payment purposes, would require issuers to maintain full backing, provide redemption at par and meet governance and AML standards. The HKMA and SFC have coordinated on where the boundary falls between a stablecoin as a payment instrument (HKMA jurisdiction) and a stablecoin with investment features (SFC jurisdiction).
For an issuer targeting both markets, the cross-border question is not simply which licence to obtain first. MAS and HKMA requirements overlap in some areas (reserve quality, redemption obligations) but diverge in others (disclosure timing, redemption mechanics, governance structure). A dual-jurisdiction structure requires the issuer to build the higher standard into its baseline operations and then map the jurisdiction-specific delta.
If you are assessing a dual-market Singapore-Hong Kong structure, write to OBOLUS at info@oboluslaw.com. A prior application that stalled in one market can often be repositioned once the structural reason for the friction is identified.
What Is the Token Classification Logic Across Regimes?
Token classification is the threshold question for every stablecoin issuer: the regulatory regime that applies, the authorisation required and the ongoing obligations all flow from how the regulator classifies the token. The principle that classification turns on substance, not label, is shared across MiCA, the US federal framework, MAS, the SFC and VARA – but each regime applies it differently.
The key axes of classification analysis are consistent. First: what rights does the token confer on the holder? A token that entitles the holder to a share of reserve income, to governance votes over reserve composition, or to a variable return linked to an index may satisfy a securities test even if the peg is stable. Second: what is the redemption mechanism? A token redeemable at par on demand in fiat currency looks like e-money. A token with conditional, delayed or discretionary redemption looks more like an investment instrument. Third: who are the counterparties? A token issued to retail users raises consumer protection concerns that a wholesale-only issuance to institutional participants may not.
Under MiCA, the ART/EMT classification is largely structural: the regulator applies the definitions to the token's design and issues an authorisation on that basis. Under the US framework, the SEC applies the investment-contract test to the economic reality of the offering, including the issuer's conduct and communications. Under MAS, the SCS framework applies to defined currency pegs; a stablecoin outside those parameters is assessed under the broader digital payment token or capital markets framework. Under VARA, the activity-based licencing model means classification turns on what the issuer does with the token, not only what the token is.
In our practice, we assess token classification against a structured checklist: the rights architecture, the redemption design, the reserve composition, the marketing materials and the distribution mechanism. A common finding is that a token designed as an EMT equivalent passes the ART test in at least one jurisdiction due to a minor structural feature – often a reserve composition that includes non-fiat assets. Fixing that before launch is straightforward. Fixing it after authorisation has been applied for is far more costly.
What Is the Cross-border Decision Matrix for Stablecoin Issuers?
The right issuance jurisdiction for a stablecoin issuer is not a generic answer – it depends on the token's structure, the target market and the issuer's operational profile. The following decision matrix addresses the four most common issuer profiles we advise.
Profile A: EU-market EMT issuer, fiat-pegged, retail-facing. The optimal path is authorisation as an EMI (or use of an existing EMI) in a pro-innovation EU member state with an NCA prepared to process MiCA CASP and EMT authorisations concurrently. Lithuania and Malta are the historical entry points, though processing timelines and supervisory expectations vary. The issuer then passports across the EEA. Key risk: the NCA's EMT-reserve requirements and the whitepaper disclosure timeline can extend the pre-launch period significantly.
Profile B: Global stablecoin issuer, USD-pegged, wholesale and institutional distribution. Singapore offers a clear MAS framework for USD-pegged SCS with institutional counterparties. The ADGM/FSRA provides a common-law alternative with regional reach. For US institutional users, FinCEN registration and state MTL analysis remain mandatory regardless of the issuance jurisdiction. The cross-border risk here is that even a Singapore-domiciled issuer faces SEC scrutiny if US persons access the token.
Profile C: MENA-market dirham- or dollar-pegged stablecoin, regional payments focus. VARA authorisation is the primary route for mainland Dubai operations. The FSRA/ADGM route suits an issuer that wants common-law governance, arbitration access and a regional distribution framework. Both require reserve arrangements with locally acceptable banking counterparties, and the banking due-diligence timeline often exceeds the regulatory timeline.
Profile D: Asia-Pacific multi-currency stablecoin, retail and institutional. The HK HKMA proposed framework and the MAS SCS framework may both apply. A multi-currency peg that does not align with either regulator's defined SCS parameters will require a bespoke engagement. The SFC's securities-law analysis applies to any investment features. In this profile, launching in one jurisdiction first – Singapore for institutional, Hong Kong for exchange-integrated products – and then expanding is typically the lower-risk path.
A micro-matter from our recent practice illustrates the stakes of this matrix. In a recent cross-border engagement, a payments-focused issuer had structured a USD-pegged token with a reserve earning mechanism – a feature intended to cover operational costs. On analysis, that feature triggered the ART classification under MiCA and the investment-contract inquiry under the US framework simultaneously. We restructured the reserve mechanism to separate operational fee recovery from any holder-facing yield, achieving EMT classification in the target EU jurisdiction and reducing the US securities risk to a manageable level. The issuer launched on its planned timeline without revising its token design in any user-facing respect.
What Are the AML, Travel Rule and Whitepaper Obligations for Stablecoin Issuers?
AML obligations apply to stablecoin issuers across every major regime and are non-negotiable regardless of the issuance jurisdiction chosen. The FATF Recommendation 15 framework, which covers virtual assets and virtual asset service providers, establishes the baseline: issuers must implement risk-based AML/KYC programs, perform transaction monitoring and – where the Travel Rule (the obligation to pass originator and beneficiary data with a transfer) applies – ensure that transfer data accompanies on-chain transactions above the applicable threshold.
Travel Rule compliance is operationally complex for stablecoin issuers because the token may move between wallets across multiple jurisdictions in a single transaction. The applicable threshold varies by jurisdiction; the data-transmission obligation applies at the VASP-to-VASP level, meaning that the issuer's Travel Rule obligations depend on its direct counterparties (exchanges, custodians, payment processors) as much as on the end-users. MiCA imposes a Travel Rule obligation on CASPs, including stablecoin issuers that are also CASPs. MAS applies the Travel Rule under the Payment Services Act. The FCA applies it under the UK Money Laundering Regulations.
Whitepaper obligations under MiCA are among the most operationally significant pre-launch requirements in any jurisdiction. An ART or EMT whitepaper must be notified to the NCA before publication. The NCA does not approve the whitepaper in the sense of endorsing its contents, but it may object within a defined review period. The whitepaper must disclose the reserve composition, the redemption rights, the governance structure and the risk factors in terms that are clear, fair and not misleading. A token offering that proceeds without a compliant whitepaper – or with a whitepaper that misrepresents the reserve or redemption mechanics – exposes the issuer to administrative sanctions and civil liability to holders.
Outside the EU, whitepaper equivalents exist under MAS (the stablecoin notice requirements) and under the HKMA proposed framework. VARA requires disclosure as part of its application and ongoing conduct rulebooks. The US has no federal whitepaper requirement as such, but SEC disclosure principles apply to any securities offering and FinCEN requires AML program documentation.
What Are the Common Mistakes in Stablecoin Authorisation?
The issuers we advise most frequently encounter the same set of structural and procedural errors. Identifying them early is substantially cheaper than correcting them mid-application or after launch.
The first and most common error is proceeding without a definitive classification opinion. Issuers frequently assume that a USD peg makes a token an EMT equivalent under MiCA, or a payment token under MAS, without working through the rights architecture. A token with yield, governance rights or conditional redemption may classify differently in each jurisdiction. An undocumented classification assumption is not a defence in any enforcement context.
The second error is mismatching the issuance vehicle with the target market. A Cayman-domiciled issuer is not automatically exempt from MiCA if EU users access the token. VARA and MAS both apply their regimes based on where users are located and where the activity is conducted, not only where the issuer is incorporated. The "offshore and out of reach" assumption does not hold in 2025's enforcement environment.
The third error is underestimating the banking component. Every stablecoin issuer must hold reserve assets. Reserve assets must be held by banks or qualifying custodians. Obtaining compliant banking relationships for a stablecoin reserve takes longer than obtaining the regulatory authorisation in most jurisdictions. An issuer that secures a VARA licence or MiCA authorisation and then cannot open a reserve account is not operational.
A common assumption is that once a regulator grants authorisation, the issuer's compliance obligations are essentially satisfied. In practice, authorisation is the beginning of ongoing supervision: reserve reporting, redemption performance monitoring, AML program audits and whitepaper update obligations continue for the life of the token. We have seen issuers surprised by the first annual supervisory review because they treated the application as the finish line.
Operators we advise routinely benefit from treating the regulatory, banking and tax elements of a stablecoin launch as a single integrated mandate. A tax structure that is efficient in the issuance jurisdiction may create withholding exposure on reserve income in the banking jurisdiction. A custody arrangement that satisfies MiCA may not satisfy the HKMA's proposed reserve segregation requirements. These interactions are predictable and manageable when mapped at the outset.
If your stablecoin authorisation process has stalled or a reserve banking relationship has been declined, contact OBOLUS at info@oboluslaw.com. A second read of the structure frequently identifies the friction point and the route forward.
Related at OBOLUS
- Token Offerings & Securities Practice – Structuring and classifying token issuances across major jurisdictions
- Airdrop Legal Structuring: The Disputes Angle – Legal and disputes considerations for token distribution events
- Exchange Disclosure Orders in Germany: BaFin – Disclosure order procedure and BaFin engagement for asset recovery
FAQ
Is my token a security?
Whether a token qualifies as a security depends on the rights it confers, not the label it carries. In the United States, the investment-contract analysis asks whether holders invest money in a common enterprise with an expectation of profits from the efforts of others. Under MiCA, the question is whether the token falls within the ART, EMT or transferable-securities definitions. A detailed rights-architecture review is required before a defensible classification position can be taken.
Do I need a MiCA whitepaper?
Any entity offering a crypto-asset to the public in the EU, or seeking admission to a trading platform there, generally requires a MiCA-compliant whitepaper. ART and EMT issuers must notify the whitepaper to the relevant national competent authority before publication. Exemptions exist for small offers, offers to qualified investors only and certain private placements – but each exemption has conditions that must be independently satisfied. Proceeding without a required whitepaper exposes the issuer to administrative sanctions and civil liability.
How should an airdrop be structured legally?
An airdrop must be analysed as a token distribution event with potential securities-law, tax and AML consequences. If the airdropped token is a security, the distribution may constitute an unregistered offering. Tax authorities in most jurisdictions treat airdrop receipts as taxable income at the time of receipt. AML obligations may apply if the airdrop involves KYC-gated participation. The structure – eligibility criteria, value per recipient, jurisdictional targeting – determines which obligations apply and how they should be managed before distribution begins.
OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance that sit around them. Digital assets are the whole of our practice. We assess token classification against the substance of rights, not the marketing label – and we structure licensing, banking and tax as one mandate rather than three disconnected workstreams. To discuss your situation, contact info@oboluslaw.com.
By Glen Sorensen, Disputes & Recovery Analyst – specialising in cross-border token classification disputes, stablecoin enforcement matters and the intersection of regulatory authorisation with on-chain asset recovery.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.