Token issuers approaching an exchange listing often treat the legal question as a compliance checkbox – something to address after the tokenomics are settled and the exchange relationship is live. That sequencing is expensive. The classification of a token under applicable securities law, the MiCA (Markets in Crypto-Assets Regulation) regime, or the relevant national VASP framework determines not just whether the listing is permissible, but which exchange, in which jurisdiction, under which disclosure obligations, can carry it. Getting the structuring right before the term sheet is signed is the point at which legal counsel adds the most leverage – and the point at which most teams engage too late.
This analysis sets out the structuring logic an issuer's legal team must work through before pursuing an exchange listing: the classification question, the cross-border regulatory interaction, the whitepaper and disclosure stack, the exchange due-diligence process, and the structural decisions that follow from each. Each section opens with a direct answer the issuer can extract and act on.
Why Token Classification Must Come Before Exchange Outreach
Token classification is the threshold question, and it cannot be deferred to the exchange's legal team. An issuer that arrives at a listing conversation without a documented classification analysis is asking the exchange to absorb legal risk on the issuer's behalf – exchanges in every major jurisdiction have learned not to do that. Under MiCA, the classification question divides tokens into asset-referenced tokens (ARTs), e-money tokens (EMTs) and "other" crypto-assets, each carrying a distinct authorization and whitepaper regime. Under the US federal framework administered by the SEC and CFTC, the same token may be assessed under multiple doctrines simultaneously. Under the SFC regime in Hong Kong and the MAS Payment Services Act in Singapore, the test focuses on whether the token constitutes a capital markets product or a digital payment token, with materially different licensing consequences for the exchange.
The classification is not a marketing decision. It is a legal conclusion derived from the substance of the rights the token confers. A token that entitles the holder to a share of protocol revenue, a governance right with economic content, or a redemption mechanism tied to an external asset base will attract securities analysis in most common-law and civil-law jurisdictions regardless of the label applied in the whitepaper. We assess classification against the substance of rights, not the marketing term – and that assessment must be documented before exchange counsel begins their own review, because the issuer's analysis will be the first thing the exchange requests.
The process above describes the standard path. Your token's specific rights structure, distribution mechanics and target user base will change the analysis materially. For a scoped classification assessment before you approach an exchange, contact OBOLUS at info@oboluslaw.com.
How Securities Law Operates as the Exchange Gate
Every major exchange applies its own legal review, and that review is governed by the regimes applicable to the exchange itself – not just to the issuer. This asymmetry matters. A token issuer classified as offering a utility instrument in one jurisdiction may still be listed as a restricted asset on an exchange licensed in a jurisdiction whose regulator takes a different view. In our cross-border practice, we regularly see issuers blindsided by exchange-side restrictions that arise not from the issuer's home regime but from the listing venue's regulatory obligations.
Under the FCA regime in the United Kingdom, for example, the financial promotion rules impose obligations on any person who communicates a financial promotion to UK persons – obligations that travel with the token's marketing materials, not just with the issuer's place of registration. An exchange listed in the UK, or accessible to UK retail users, applies those rules to every token it considers. The same logic applies under ESMA's oversight of MiCA-authorized CASPs across the EU: a CASP passporting services into multiple member states cannot list a token whose classification is unresolved without exposing itself to supervisory action in any member state where that token reaches retail investors.
The practical consequence is that the issuer's classification memo – drafted by the issuer's counsel, reviewed by the exchange's counsel, and often shared with the relevant regulator in the exchange's home jurisdiction – becomes a document with legal effect in multiple forums simultaneously. It must be written for that audience. A memo that is legally defensible in one jurisdiction may be inadequate in another. Cross-border structuring of the issuer entity, the token issuance vehicle, and the distribution mechanics must therefore be completed before the memo is finalized, because the memo's conclusions depend on where each element sits.
What Does a MiCA Whitepaper Actually Require?
A MiCA whitepaper is a mandatory disclosure document required for public offers of crypto-assets addressed to EU persons, and its obligations are distinct from – and in addition to – any exchange listing documentation. Under MiCA, the whitepaper must be notified to the relevant national competent authority and published before the offer commences. The content requirements are prescriptive: the rights and obligations attached to the crypto-asset, the technology basis, the issuer's financial position, and the risks must all be disclosed in a form that is accurate, clear and not misleading. Importantly, the issuer bears civil liability for a whitepaper that does not comply – a liability that extends to investors who suffer loss as a result of incomplete or incorrect information.
The whitepaper obligation applies to "other crypto-assets" – the residual MiCA category – as well as to ARTs and EMTs, though the content and authorization requirements differ across the three classes. An ART issuer must obtain ESMA-supervised authorization before issuance begins; the whitepaper is part of the authorization package, not a freestanding document. For "other" crypto-assets, the whitepaper is notified but not pre-approved, which creates a different risk profile: the issuer publishes, the market reacts, and the national competent authority may challenge the classification or the content after the fact.
The interaction between the MiCA whitepaper and the exchange listing prospectus – or the equivalent document required by the exchange – is an area where issuers frequently underestimate the workload. These are not the same document and cannot simply be repurposed from one context to another. The MiCA whitepaper is a regulatory filing; the exchange listing document is a commercial and contractual instrument. They must be consistent, but they serve different masters. In our practice, we have seen issuers produce a polished exchange listing deck that directly contradicts the classification position taken in the whitepaper – an inconsistency that creates immediate legal exposure in both directions.
What Cross-Border Structuring Choices Does an Issuer Actually Face?
The structuring decision for an exchange listing involves at least four interlocking variables: the issuer entity's jurisdiction, the token issuance vehicle's jurisdiction, the exchange's primary listing venue, and the geographic scope of the distribution. Each variable interacts with the others, and the combination determines the aggregate regulatory burden. There is no universally correct answer – the right structure depends on the issuer's commercial objectives, the token's classification profile, and the exchange relationships already in place.
A token issuer targeting EU retail liquidity will need to address MiCA directly, either by obtaining CASP-level support from a licensed partner or by structuring the issuer entity in an EU member state with a well-developed supervisory relationship. Lithuania's Bank of Lithuania has historically offered a relatively accessible entry point for EU CASP activity; Malta's MFSA operated the predecessor VFA framework now transitioning to MiCA. Neither guarantees a smooth listing, but both provide a recognized regulatory home that EU-based exchanges can work with.
A token issuer targeting Asian liquidity faces a different set of choices. The SFC in Hong Kong operates a VATP licensing regime that distinguishes between professional and retail investors; the MAS in Singapore applies the Payment Services Act's digital payment token framework. Both regimes require the exchange – not just the issuer – to be licensed, and the exchange's obligations to conduct due diligence on listed tokens are explicit. An issuer that has not resolved the classification question in the context of these regimes will not clear the exchange's legal review, regardless of what its home-jurisdiction classification memo says.
For issuers seeking a lighter regulatory footprint – typically infrastructure tokens, DAO governance tokens, or tokens distributed primarily to institutional counterparties – structures in the BVI (under the VASP Act 2022), the Cayman Islands (under CIMA's VASP regime), or the AIFC in Kazakhstan (under AFSA's digital asset framework) remain available. The trade-off is access: a BVI or Cayman structure may not give the token direct access to EU or Singapore retail exchanges without additional layer analysis and, in some cases, a separate EU or Singapore entity.
What Does Exchange Due Diligence Look Like, and How Should Counsel Prepare?
Exchange due diligence for a new token listing has become materially more rigorous since the major regulatory actions in the US market and the implementation of MiCA in the EU. A well-prepared issuer can expect the exchange's legal team to request: a classification opinion or memo from independent counsel; the MiCA whitepaper or equivalent disclosure document; a corporate structure chart showing the issuer entity, the token issuance vehicle, and any foundation or DAO layer; AML/KYC documentation for the issuer's beneficial owners; the token's smart contract audit report; and a representation regarding the geographic scope of the initial distribution.
Each of these documents interacts with the others. The classification opinion must be consistent with the whitepaper. The smart contract audit must confirm that the token's on-chain behavior matches the rights described in both. The AML/KYC documentation must cover the full beneficial ownership chain, including any foundation or DAO that controls the token supply. In our cross-border practice, we regularly advise issuers on assembling this package as a coherent set of documents rather than a collection of separately commissioned reports – the coherence is itself a legal deliverable, because inconsistency between documents is the primary trigger for exchange legal teams to escalate review or decline a listing.
The exchange's own regulatory position shapes what it will ask for. A CASP authorized under MiCA operating under ESMA oversight will ask different questions from a Singapore exchange licensed under the MAS Payment Services Act, or from a US exchange operating under state money-transmitter licenses and engaging with the SEC and CFTC on token classification. Issuers preparing for a multi-exchange listing need to build a due diligence package that addresses all three, with jurisdiction-specific annexes where the answers diverge.
If a prior listing application stalled or a due diligence process raised classification issues that were not resolved, a second read of the documentation can surface the structural reason and the route forward. Contact OBOLUS at info@oboluslaw.com to discuss a documentation review engagement.
How Do Airdrop and Distribution Mechanics Affect Listing Eligibility?
Airdrop and pre-listing distribution mechanics are not legally neutral. The manner in which a token reaches its initial holders – whether by purchase, by work contribution, by airdrop to existing protocol users, or by allocation to a foundation treasury – affects both the securities analysis and the AML/KYC obligations that apply at the listing stage. An exchange conducting due diligence on a token with a large, diffuse airdrop distribution must satisfy itself that the prior distribution did not constitute an unregistered offer of securities in jurisdictions whose users received tokens.
Under MiCA, tokens issued "for free" – including airdrops – may still attract whitepaper obligations if the issuer expects the token to trade on a CASP platform. The "for free" carve-out under MiCA is narrower than many issuers assume; where airdrops are used as a marketing mechanism to generate liquidity ahead of a listing, the regulatory position is that an offer is occurring even absent direct monetary consideration. National competent authorities in leading EU member states have signaled that they will review airdrop mechanics as part of CASP authorization and token-listing assessments.
The Travel Rule – the obligation, derived from FATF Recommendation 15, to pass originator and beneficiary data with virtual asset transfers – also interacts with distribution mechanics. An exchange listing a token whose initial distribution involved transfers to unidentified wallets, without originator data, will face questions about whether the Travel Rule was complied with at the issuance stage. This is not a purely technical question; it is a regulatory compliance question that the exchange's own AML officer will raise. Issuers should document the basis for each distribution tranche before the listing conversation begins.
Decision Matrix: Which Structuring Path Fits Which Issuer Profile?
The right structuring path for an exchange listing depends on the issuer's profile across four key dimensions: the token's classification risk, the target distribution geography, the exchange venues being pursued, and the issuer's existing corporate structure. The following four profiles represent the most common patterns in our cross-border practice; most issuers will fall between two of them and need a hybrid approach.
Profile A – High classification risk, EU distribution target. The token has economic rights content that creates material securities-law risk. The issuer is seeking a listing on one or more EU-licensed CASPs. The path here is MiCA authorization in a member state with a cooperative national competent authority, with a full ART or "other crypto-asset" whitepaper, a classification opinion from EU-qualified counsel, and exchange-specific due diligence packages built to ESMA standards. The timeline from engagement to listing-ready documentation is typically measured in months, not weeks, and the structuring decisions – entity jurisdiction, foundation placement, token issuance vehicle – must be resolved before the whitepaper is drafted. Key risk: an adverse NCA view on classification after publication of the whitepaper creates immediate reputational and legal exposure.
Profile B – Lower classification risk, institutional distribution. The token is a pure infrastructure or governance token with no economic rights content. Distribution is limited to professional and institutional counterparties. The issuer is seeking a listing on institutional-grade venues rather than retail exchanges. A BVI or Cayman structure under the relevant VASP regime provides a recognized regulatory home; the due diligence package emphasizes the governance rights analysis and the AML/KYC documentation for beneficial owners. Timeline to listing-ready is shorter, but access to retail EU or Singapore venues remains limited without additional structuring. Key risk: token utility can acquire economic rights content over time as the protocol matures; the classification analysis must be forward-looking, not just a snapshot of launch mechanics.
Profile C – Asian distribution focus, retail access. The token is targeting retail liquidity in Hong Kong and Singapore. The SFC's VATP regime and the MAS Payment Services Act framework both apply, and the exchange must be licensed in both jurisdictions. The issuer needs to present a classification opinion addressed to both regimes, with the SFC's securities-law test and the MAS digital payment token definition each addressed separately. Allied counsel in the relevant jurisdiction will be engaged for local-law opinions. Timeline depends heavily on the exchange's own licensing status and internal due diligence protocols. Key risk: regulatory misalignment between the two jurisdictions requires careful documentation to avoid the issuer's position in one market undermining its position in the other.
Profile D – Global listing ambition, multiple venue strategy. The issuer wants listings on EU, Asian and offshore venues simultaneously. This is the most complex profile. The due diligence package must be built in layers: a core classification memo that addresses the substance of the token's rights under multiple legal systems; jurisdiction-specific annexes prepared with allied counsel in each relevant forum; a whitepaper that satisfies MiCA's content requirements without making representations that create securities liability in non-EU jurisdictions; and an AML/KYC package that meets the highest standard required by any venue in the set. The coordination cost is significant; the legal bill is front-loaded; but the alternative – sequential listing applications that each discover a new legal issue – is almost always more expensive in total.
A Common Assumption: The Utility Label Settles Classification
A common assumption among early-stage issuers is that describing a token as a "utility token" in the whitepaper resolves the classification question. It does not. Every major regulatory regime that has addressed token classification has adopted a substance-over-label approach: the legal classification follows from the economic and legal substance of the rights conferred, not from the terminology used to describe them. A token labeled "utility" that entitles the holder to a governance vote with economic content, a share of protocol revenue, or a redemption right against the issuer will be analyzed as a potential security or ART regardless of the label.
This is not a theoretical concern. Exchanges operating under the FCA, MiCA/ESMA, the SFC, and the MAS frameworks have each received regulatory guidance – formal or informal – that directs them to look through marketing labels to the substance of the rights. An exchange that lists a "utility token" without independent legal analysis of the substance is accepting regulatory risk on behalf of the issuer; most exchanges in the leading hubs have adopted internal policies that make an independent classification opinion a mandatory condition of listing review.
The issuer's counsel must therefore draft the classification opinion with the exchange's regulatory exposure in mind, not just the issuer's. The opinion addresses: the rights conferred by the token on-chain and off-chain; the governance structure and whether token holders have any control rights with economic value; the tokenomics and whether any feature of the supply, burn or distribution mechanism creates a reasonable expectation of profit derived from the efforts of others; and the target distribution, because the same token may be a utility instrument in one jurisdiction and a restricted security in another. That last point – the geographic sensitivity of classification – is the most frequently overlooked element of the analysis.
Structuring in Practice: A Recent Listing Engagement
In a recent matter, a protocol development company based in a common-law offshore jurisdiction approached us after its listing application to a major EU-licensed CASP had been paused by the exchange's legal team. The issue was not the token's technology or trading volume; it was an inconsistency between the whitepaper's classification position and the governance rights described in the token's smart contract. The smart contract included a revenue-sharing distribution mechanism that the whitepaper had not addressed. We worked through the classification analysis under the relevant MiCA framework and the exchange's home-jurisdiction regime, coordinated a technical amendment to the smart contract to remove the contested mechanism, and produced a revised whitepaper and classification memo in a form the exchange's counsel could accept. The listing proceeded in the same quarter. The lesson for issuers is consistent: the smart contract is a legal document. Its on-chain behavior must match the classification position in every disclosure document the issuer publishes.
Related at OBOLUS
- Token Offerings & Securities practice – the full scope of our token issuance and securities law advisory work
- Token issuance rules in Abu Dhabi Global Market (ADGM) – how the FSRA regime applies to token offerings and listings
- EMI licence for crypto firms in Guernsey – licensing and structuring options for issuers seeking an offshore EU-adjacent base
FAQ
Is my token a security?
The answer turns on the substance of the rights the token confers, assessed under the laws of each jurisdiction where the token will be distributed or traded. No single test applies globally. Under US federal law, the analysis focuses on the reasonable expectation of profit from others' efforts. Under MiCA, the question is whether the token falls within the ART, EMT or "other crypto-asset" categories. Under the SFC and MAS frameworks, separate tests apply. A classification opinion from counsel familiar with each relevant regime is the only reliable answer for an issuer preparing for an exchange listing.
Do I need a MiCA whitepaper?
If your token will be publicly offered to persons in the EU – including through a listing on an EU-licensed CASP – and does not qualify for a recognized exemption, a MiCA whitepaper is required. The document must meet prescriptive content requirements set by ESMA and the relevant national competent authority, and the issuer bears civil liability for material inaccuracies. Exemptions exist for tokens offered exclusively to qualified investors, for tokens distributed in small volumes, and for certain payment-linked instruments, but each exemption carries its own conditions that must be carefully analyzed against the issuer's specific distribution plan.
How should an airdrop be structured legally?
An airdrop is not legally neutral. The securities-law analysis focuses on whether recipients received tokens in exchange for services, in anticipation of economic gain, or as part of a broader distribution strategy designed to generate trading liquidity – any of which can bring the airdrop within the scope of an offer of securities or an offer under MiCA. The AML analysis focuses on whether the issuer can identify the recipients and satisfy Travel Rule obligations for any transfers that follow. Structuring an airdrop requires a classification opinion, a defined recipient set with appropriate KYC, and a distribution mechanics analysis completed before the airdrop executes.
OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance that sit around them. We assess token classification against the substance of rights, not the marketing label – a discipline that has allowed us to advise issuers through exchange listing processes in multiple concurrent jurisdictions. Digital assets are the whole of our practice. To discuss your listing structure, contact info@oboluslaw.com or message us at t.me/oboluslaw.
By Roman Levitt, Technology & DeFi Counsel – specialising in token classification, smart-contract legal analysis and cross-border exchange listing structuring for protocol issuers and digital-asset businesses.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.