Stablecoin issuance sits at the intersection of monetary law, securities regulation, and payments oversight – and the structuring choices made before a token is minted determine which of those regimes applies, and in which forum enforcement may follow. An asset-referenced token (ART) or an e-money token (EMT) issued without the correct authorisation is not merely non-compliant: it is potentially an unauthorised deposit-taking or e-money issuance, triggering civil and criminal exposure across every jurisdiction where the token circulates. This analysis maps the authorisation paths, the structural decisions that shift a token between regimes, and the cross-border risks that issuers most commonly underestimate.
The central structuring question is not "what do we call this token" but "what rights does it confer, and against whom." Under MiCA – the EU's Markets in Crypto-Assets Regulation, supervised by ESMA and the national competent authorities – that question receives a codified answer for the first time in a major trading bloc. The regime separates ARTs, EMTs, and other crypto-assets into distinct authorisation tracks, each with its own whitepaper, governance, and reserve requirements. Operators we advise routinely arrive at this question after the product has already been sketched in a pitch deck, which is almost always too late for clean structural choices.
What is a stablecoin in law, and why does the label matter less than the rights?
A stablecoin is, in law, whatever rights its holder can enforce against whoever issued it – and that analysis, not the marketing name, drives classification. The commercial category "stablecoin" covers at least three legally distinct instruments: an EMT (a claim on the issuer redeemable at par in fiat), an ART (a claim backed by a basket of assets or currencies), and a commodity-backed token that may be a security or a transferable instrument depending on jurisdiction. The word "stablecoin" appears in no major securities statute and resolves nothing about legal treatment.
Under MiCA, an EMT is defined by its reference to a single official currency and its unconditional redemption obligation at par. An ART references multiple currencies, commodities, or other assets – or a combination. The practical consequence is significant: EMT issuance requires authorisation as a credit institution or e-money institution in an EU member state, subject to passporting. ART issuance requires a separate CASP-adjacent authorisation with reserve, custody, and governance requirements that more closely resemble fund management than payments. Both require a whitepaper, but the whitepaper content and the prior-approval threshold differ between the two tracks.
In our cross-border practice, we have seen token projects assume that a "soft peg maintained by algorithm" escapes both categories. That assumption is wrong under current regulatory thinking. Where an algorithmic mechanism maintains a price reference, regulators assess whether any residual claim exists against an identifiable issuer. If it does, the token is likely an ART or EMT. If it does not, it may still be a security in jurisdictions applying an economic-substance test.
What are the MiCA authorisation tracks for stablecoin issuers?
MiCA creates two distinct issuer authorisation tracks – one for EMT issuers and one for ART issuers – and the track determines both the regulatory burden and the eligible issuer form. EMT issuers must be authorised credit institutions or e-money institutions under existing EU financial regulation; the MiCA layer adds whitepaper, redemption, and operational requirements on top of the existing licence. ART issuers face a standalone MiCA authorisation process administered by the relevant national competent authority, with ESMA involvement for "significant" ARTs.
The significance threshold for ARTs – triggered by holder numbers, market capitalisation, or transaction volumes – escalates supervisory intensity materially. A "significant" ART issuer moves from national NCA supervision to direct EBA oversight, with enhanced own-funds requirements, interoperability obligations, and limits on transaction volumes per day. That threshold is not a ceiling most issuers plan around at launch, but it shapes the structural decisions made at authorisation: a token designed for global retail adoption may cross it faster than the business model projects.
Passporting under MiCA is available to CASPs, but EMT and ART issuer authorisations operate on a different basis: the issuer authorisation granted in one member state permits the token to be offered across the EU/EEA without separate per-country filings, subject to the whitepaper notification process. That passporting logic is why Lithuania, Malta, and other member states see substantial early-stage interest from issuers whose primary market is pan-European. In our practice, the choice of NCA is as much an operational decision as a legal one: processing timelines, supervisory dialogue culture, and local banking relationships all differ meaningfully between member states.
Operators we advise routinely find that the whitepaper approval requirement for ARTs – requiring prior NCA sign-off before the token is offered publicly – extends the pre-launch timeline by weeks to months depending on the NCA and the completeness of the initial submission. EMT whitepapers, by contrast, do not require prior NCA approval but must be published and comply with prescribed content standards before the token is marketed.
Outside MiCA, which stablecoin regimes should an issuer map?
A stablecoin intended for global circulation requires a jurisdiction-by-jurisdiction analysis, not a single authorisation. MiCA governs EU distribution, but the same token reaching users in Singapore, the UAE, the UK, or the United States triggers separate and often inconsistent obligations. The structural choice is whether to issue from a single entity into multiple markets, or to use a multi-entity structure with separate issuers or distribution entities in each key market.
In Singapore, the Monetary Authority of Singapore (MAS) regulates stablecoins under the Payment Services Act framework, with specific single-currency stablecoin (SCS) rules that impose reserve, redemption, and disclosure requirements on issuers above a defined threshold. MAS has been explicit that its regime applies to Singapore-dollar and G10-currency stablecoins issued in Singapore or marketed to Singapore users – the geographic perimeter is drawn by user reach, not issuer domicile alone.
In the UAE, VARA's rulebooks cover stablecoin-related activities as part of its activity-based licensing regime for virtual assets in mainland Dubai. ADGM's FSRA maintains a parallel framework for the Abu Dhabi financial free zone. An issuer distributing into both zones faces two distinct regulatory relationships, and a token that qualifies for one framework's lighter-touch treatment may not qualify for the other's. We have seen cross-border structures that optimise for MiCA compliance while inadvertently triggering VARA's transfer-and-settlement licence requirement because the distribution agent sits in Dubai.
In the United States, the federal-level treatment of stablecoins remains unsettled as between SEC securities analysis, CFTC jurisdiction over commodity-backed instruments, and FinCEN/state money-transmitter licensing for the fiat-conversion layer. The NYDFS BitLicense and the New York limited-purpose trust charter represent the most developed state-level frameworks for dollar-stablecoin issuers. An issuer targeting US retail distribution without engaging this analysis is not making a conservative choice; it is making an uninformed one.
For a scoped multi-jurisdiction authorisation map, contact OBOLUS at info@oboluslaw.com. The process above describes the standard path. Your facts – the entity structure, the user base, the reserve custody arrangement – change the analysis materially, and a map built on incorrect assumptions about your token's classification can misdirect months of preparation.
How does token classification determine whether securities law applies to a stablecoin?
Securities law applies to a stablecoin when its holder has an expectation of profit derived from the efforts of others – the economic substance test applied, with variations, across most major jurisdictions. A well-structured EMT or ART avoids this by being redemptive rather than investment-bearing: the holder's return is par value, not profit. The structural risk is any feature that introduces yield, governance upside, or residual-value exposure.
Yield-bearing stablecoins present the most acute classification tension. A token that passes through staking or lending returns to its holder looks, from a securities-law perspective, like an investment product – regardless of the label. In our cross-border practice, we assess yield-bearing features against the substance of rights conferred, not the marketing frame. The relevant questions are: who manages the yield-generating activity, does the holder bear investment risk, and can the yield vary based on the issuer's commercial performance?
Governance tokens attached to stablecoins add a further layer. Where a governance token confers material economic rights over the stablecoin reserve or protocol, regulators in the UK, Singapore, and the EU have each signalled that the governance token itself may be a security even if the stablecoin is not. The two-token structure – a stablecoin plus a governance token – requires separate classification analysis for each instrument, and the interaction between them may affect the classification of both.
A common assumption in the market is that labelling a token "utility" in the whitepaper settles the legal classification. It does not. Classification turns on economic substance – what the token actually does for its holder in practice – not on how the issuer describes it. Regulators in all leading regimes apply a substance-over-label test. We have seen enforcement actions proceed against tokens whose whitepapers were carefully drafted to avoid securities language but whose mechanics created precisely the investment relationship the drafter sought to avoid.
How should stablecoin reserves and custody be structured to meet regulatory expectations?
Reserve and custody structuring is the most operationally intensive aspect of stablecoin authorisation, and it is the area where regulatory expectations diverge most sharply between jurisdictions. Under MiCA, ART issuers must hold reserves in segregated, liquid assets with custodians that meet prescribed criteria; the reserve composition rules are set at the regulatory level and are not a commercial negotiation. EMT issuers face an equivalent safeguarding obligation drawn from the e-money institution framework.
The practical challenge is custody. A stablecoin reserve held in bank deposits requires a banking relationship that is willing to hold the reserve on a segregated basis and to produce the attestations regulators require. In the current environment, banks in several major jurisdictions have limited appetite for crypto-related reserve custody relationships, particularly where the issuer is a new entrant without an operational track record. Issuers we advise typically spend more time on the banking and custody stack than on the regulatory application itself.
In a recent structuring matter, a payments technology company sought to issue a euro-denominated EMT for use in a closed-loop settlement network. We structured the reserve custody arrangement through an EU-regulated credit institution, negotiated the segregation and reporting terms, and mapped the passporting path from the chosen member-state NCA. The token launched without a pre-launch regulatory intervention. The key structural decision was the choice of reserve custodian before the authorisation application was filed – not after.
Cross-border reserve structures add complexity. A stablecoin reserve held across multiple currencies in multiple jurisdictions may trigger asset-management regulation in addition to payment and e-money rules. Where the reserve includes non-cash instruments – short-duration government bonds, money-market fund units – the issuer's management of that reserve may constitute portfolio management under applicable law. That determination affects both the licence required and the third-party administrator the issuer must engage.
Which structure should a stablecoin issuer choose given its profile?
The right structure depends on the issuer's primary market, reserve currency, distribution model, and risk tolerance – and there is no universal answer.
Profile A – EU-first, single fiat currency (euro or other EU member-state currency): The path is EMT authorisation in the most operationally suitable EU member state, with passporting across the EU/EEA. The entity form must be a credit institution or e-money institution. Timeline is driven by the NCA's processing capacity and the completeness of the application, and varies by member state. Key risk: the prior e-money licence requirement means the issuer must be authorised before the token is issued – there is no provisional launch path.
Profile B – Multi-currency or asset-backed, targeting EU and Gulf markets: The path branches. MiCA ART authorisation covers EU distribution; a parallel VARA licence or FSRA recognition covers the Gulf. The two regimes have different reserve and disclosure requirements; a single reserve pool may not satisfy both without structural adaptation. The entity structure typically requires at least one EU-regulated issuer entity and a separate distribution or service entity in the UAE hub. Timeline is substantially longer than for Profile A. Key risk: reserve composition rules under MiCA and VARA may conflict, requiring a reserve structure that satisfies both – an exercise that requires early regulatory dialogue in both jurisdictions.
Profile C – Dollar stablecoin targeting US and Asia-Pacific distribution: The US layer requires engagement with the NYDFS framework or a federal-level structure when available; the Singapore layer requires MAS registration and compliance with the SCS rules. Neither regime offers passporting to the other. This profile typically requires three entities – a US issuer, a Singapore-licensed distributor, and an offshore holding entity – with separate reserve pools or a carefully structured shared pool. Key risk: the regulatory uncertainty at the US federal level means the issuer may be building against a moving target, and the structure chosen today may require amendment when federal stablecoin legislation is enacted.
Profile D – Offshore issuance, global retail distribution: This profile carries the highest regulatory risk. An issuer domiciled in a jurisdiction without a stablecoin-specific regime – BVI, Cayman, or similar – that distributes globally does not escape EU, US, Singapore, or UK regulation; it exposes itself to all of them without the protection of any authorised issuer status. Regulators in all leading jurisdictions assess distribution by reference to where users are, not where the issuer is incorporated. We do not advise this structure for tokens intended for broad retail circulation.
If a prior application stalled or a banking relationship fell through, a second structural review often surfaces the cause and the path forward. Write to OBOLUS at info@oboluslaw.com or message us at t.me/oboluslaw. Issuers who have already invested in an authorisation process have the most to gain from early-stage course correction rather than a full restart.
What must a stablecoin whitepaper disclose, and when?
The whitepaper for a stablecoin is a regulated disclosure document under MiCA, not a marketing brochure – and the consequences of material inaccuracy fall on the issuer and, in some cases, its directors personally. Under MiCA, the whitepaper must describe the issuer, the token's rights and obligations, the reserve composition and custody arrangements, the redemption mechanism, the governance structure, and the principal risks. For ARTs, the whitepaper requires prior NCA approval before publication; for EMTs, it does not, but it must comply with prescribed content standards and be published before any offer is made.
The cross-border disclosure angle is frequently overlooked. A MiCA-compliant whitepaper satisfies EU obligations, but the same document distributed to Singapore users must comply with MAS's disclosure expectations for digital payment token services, and its distribution to US persons may constitute the offer of a security if the token fails the applicable economic-substance test. We routinely advise issuers to produce a base whitepaper that meets the most demanding applicable standard – typically MiCA's – and to layer jurisdiction-specific addenda addressing local regulatory treatment, tax characterisation, and distribution restrictions.
Token classification under securities law turns on economic substance, not on how the whitepaper describes the instrument. A whitepaper that describes a token as a "payment instrument" while the underlying mechanics give holders a yield entitlement does not resolve the classification question – it creates an additional misrepresentation risk. The whitepaper should describe what the token actually does, with a clear legal characterisation section that reflects advice from qualified counsel in each key distribution jurisdiction.
What AML and Travel Rule obligations attach to stablecoin issuers?
Stablecoin issuers are virtual asset service providers under FATF Recommendation 15, and the Travel Rule – the obligation to transmit originator and beneficiary data with each transfer – applies to transfers above the applicable de-minimis threshold in each jurisdiction. Under MiCA, EMT and ART issuers must implement AML/CFT programmes consistent with the applicable EU AML directive, and the Travel Rule data requirements apply to transfers involving their token.
The operational challenge for a stablecoin issuer is that the Travel Rule obligation extends to transfers between unhosted wallets in certain jurisdictions. The EU's Transfer of Funds Regulation, as extended to crypto-assets, requires that originator and beneficiary information accompany transfers from a CASP to an unhosted wallet above the applicable threshold. For an EMT issuer whose token is widely used in peer-to-peer payments, the compliance architecture must address wallet screening, data collection, and the technological capability to pass Travel Rule data at the point of transfer.
Ongoing compliance also requires transaction monitoring calibrated to the stablecoin's use pattern. A stablecoin used primarily for cross-border remittances has a different risk profile – and therefore different alert thresholds – than one used for DeFi protocol collateral. Regulators in the leading hubs increasingly expect issuers to demonstrate that their monitoring systems are calibrated to the actual behaviour of their token, not to a generic financial institution template.
What are the most common structuring mistakes stablecoin issuers make?
The most damaging structuring mistakes in stablecoin issuance are made before the first regulatory filing, not during it. The four we encounter most frequently are: choosing the issuer jurisdiction before the token's legal classification is resolved; building the reserve structure around banking convenience rather than regulatory prescription; launching a yield-bearing feature without a securities-law analysis in each distribution market; and treating the MiCA whitepaper as the only disclosure document needed for global distribution.
A fifth mistake deserves particular attention: the multi-token structure assembled to separate "stable" and "governance" functions without a combined classification analysis. Where a governance token confers rights over the stablecoin reserve, or where governance token holders receive economic benefits derived from the stablecoin's circulation, both tokens may be securities in jurisdictions applying an economic-substance test. Structuring them separately does not resolve the combined analysis – it only makes the analysis harder to present to a regulator.
Issuers sometimes arrive at a compliance review after the token has launched with a preliminary structure and trading has begun. At that point, the structural correction options narrow materially. A post-launch migration to a compliant structure – entity migration, reserve restructuring, and a revised whitepaper – is possible, but it is a complex, costly exercise that requires regulatory dialogue in multiple jurisdictions simultaneously. The cost of early-stage structuring advice is a fraction of a remediation engagement.
Related at OBOLUS
- Token Offerings & Securities practice – Authorisation, structuring and distribution advice for token issuers across key markets.
- Security Token Offering Structuring: The Disputes Angle – How structuring decisions made at issuance shape enforcement and litigation exposure.
- Real-World Asset Tokenization in Bermuda – Jurisdiction-specific analysis of the Bermuda framework for RWA token issuers.
FAQ
Is my token a security?
The answer depends on economic substance, not on how the token is labelled. Regulators in all leading jurisdictions – including under MiCA, the MAS Payment Services Act regime, and US federal law – assess whether the token confers an expectation of profit derived from the efforts of others. A token that offers yield, governance upside tied to issuer performance, or residual-value exposure may be a security regardless of what the whitepaper calls it. A qualified legal assessment against the applicable test in each distribution jurisdiction is the only reliable answer.
Do I need a MiCA whitepaper?
If your token is offered to EU or EEA users and falls within MiCA's scope – as an ART, an EMT, or another crypto-asset above the exemption threshold – a MiCA-compliant whitepaper is mandatory before the token is publicly offered or admitted to trading. For ARTs, the whitepaper requires prior NCA approval; for EMTs, it must be published before any offer but does not require advance approval. Non-compliance exposes the issuer to supervisory action, marketing bans, and potential civil liability to purchasers.
How should an airdrop be structured legally?
An airdrop is a token distribution event and carries the same classification and disclosure obligations as any other offer, depending on jurisdiction and token type. A free distribution does not, by itself, remove a token from securities regulation if the token confers investment rights. Under MiCA, certain airdrop structures qualify for a whitepaper exemption, but the conditions are narrow. In the US and Singapore, the free-distribution argument provides limited protection where the token is otherwise investment-bearing. Legal structuring of the airdrop – who receives it, under what conditions, and in which jurisdictions – should be completed before the distribution is announced.
OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance that sit around them. We assess token classification against the substance of rights, not the marketing label – and we advise crypto exchanges, custodians, token issuers and funds across more than seventy licensing jurisdictions. Digital assets are the whole of our practice. To discuss your situation, contact info@oboluslaw.com.
By Victor Olsen, Regulatory & Compliance Analyst – specialising in token classification, stablecoin authorisation and multi-jurisdiction regulatory structuring for digital-asset issuers.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.