Enforcement actions against tokenised fund structures are accelerating. A tokenised fund (a collective investment vehicle whose economic interests are represented by digital tokens recorded on a distributed ledger) sits at the intersection of securities law, collective investment scheme regulation, and emerging virtual asset service provider (VASP) regimes worldwide. Operators who assume that a familiar offshore wrapper — a Cayman exempted fund, a BVI structure, a Swiss-domiciled vehicle — transplants cleanly into a blockchain-native fundraising model are discovering, often at significant cost, that regulators disagree. The wrong domicile locks in tax leakage and limits which investors you can accept; the wrong instrument classification converts what should be an operational conversation into an enforcement file.
This analysis examines what recent regulatory signals across the leading fund-domicile jurisdictions tell operators about structuring tokenised funds correctly from the outset. It addresses classification risk, the cross-border reality of a token sale that reaches investors in multiple regulatory perimeters simultaneously, and the practical steps that separate defensible structures from exposed ones.
Why Tokenisation Changes the Classification Analysis
Tokenisation does not change the underlying economic substance of a fund interest, but it changes almost every regulatory trigger associated with how that interest is created, transferred and marketed. The foundational question regulators ask is whether the token confers rights that, taken together, constitute a collective investment scheme, a security, or an e-money instrument. The label the issuer applies is irrelevant. The substance-over-label principle — settled in the practice of every leading regulator from the SEC and CFTC in the United States to ESMA under MiCA (the EU's Markets in Crypto-Assets Regulation) and the SFC in Hong Kong — means that a token representing a proportional share of pooled assets managed for profit is a fund interest, regardless of whether the white paper calls it a "utility token" or a "governance token."
In our practice, we see this classification error repeated by operators who have invested heavily in the mechanics of token issuance while deferring the legal-structure question. The mechanics — smart contracts, a chosen blockchain, a custody provider — are straightforward to change before launch. The regulatory classification is not. A collective investment scheme that has already distributed tokens to hundreds of wallet addresses across multiple jurisdictions faces a remediation problem that is orders of magnitude more complex than front-loading proper structuring advice.
The cross-border dimension compounds this. A token representing fund interests can be transferred peer-to-peer in seconds across jurisdictional lines. That mobility means that a fund structured in one perimeter is functionally marketing to investors in every perimeter where its tokens trade. Regulators, particularly the FCA in the United Kingdom, the SEC in the United States, and the SFC in Hong Kong, have demonstrated clearly that they will look through the domicile of the vehicle to the location of the investor and, increasingly, to the location of the token's market.
What Does Recent Enforcement Actually Signal?
The enforcement signals that matter most to tokenised fund operators cluster around three themes: investor-protection failures, unlicensed activity by fund managers and placement agents, and AML/CFT shortfalls in subscription and redemption processes.
On investor protection, regulators have consistently targeted structures that distributed fund tokens without adequate disclosure. Under MiCA, the EU has introduced mandatory whitepaper obligations for most crypto-asset categories; a tokenised fund whose interests qualify as an asset-referenced token (ART) or a security-type instrument triggers additional layers of disclosure beyond the whitepaper itself. ESMA has signalled that national competent authorities will treat a token-issuance-without-disclosure case the same way they treat an unregistered securities offering — a posture that, combined with MiCA's passporting mechanism, gives EU regulators wide geographic reach.
The second theme — unlicensed fund management — has been the dominant driver of action in the United States, where the SEC and CFTC have both asserted jurisdiction over tokenised vehicles whose assets include commodity-linked tokens alongside securities. In our cross-border practice, we advise operators that a tokenised fund with a US investor base — even a small one, even through secondary-market token transfers the issuer did not directly arrange — requires careful analysis of whether US securities law registration or exemption applies. The regulatory cost of getting this wrong is not merely a fine; it includes disgorgement of returns and, in the most serious cases, bars on the principals from managing client money.
The third theme — AML/CFT — sits beneath most enforcement actions as a secondary finding. A tokenised fund that relies on wallet-address verification alone, without applying know-your-customer procedures calibrated to a collective investment scheme, will fail AML examination. The Travel Rule (the FATF requirement to pass originator and beneficiary data with a virtual asset transfer) applies to the token-transfer layer, not just the subscription and redemption transactions. Structures that separate the on-chain transfer mechanics from the compliance function create a gap that regulators, particularly under the FATF Recommendation 15 framework, view as a deliberate evasion rather than a technical oversight.
How Does the Choice of Domicile Affect Enforcement Exposure?
Fund domicile is the single most consequential structural decision for a tokenised vehicle, and it should be made by mapping the investor base, the asset mix, and the distribution method simultaneously. No single domicile is optimal for every profile.
The Cayman Islands and the BVI remain the dominant offshore fund jurisdictions for digital-asset vehicles. CIMA, the Cayman Islands Monetary Authority, administers the Virtual Asset (Service Providers) Act, which imposes registration and licensing requirements on VASPs operating within or from the Cayman Islands. The BVI Financial Services Commission applies the VASP Act 2022, which similarly requires registration of virtual asset service providers. Neither jurisdiction offers a regulatory passport into the EU or the UK; a Cayman or BVI vehicle targeting EU investors must separately satisfy MiCA or the relevant national private-placement regime in each target member state.
Switzerland offers a distinct proposition. FINMA applies a token taxonomy — payment, utility, and asset tokens — that has proven durable as other regimes have evolved. A tokenised fund whose interests qualify as asset tokens will typically require FINMA authorisation as a collective investment scheme. Switzerland's bilateral-agreement posture with the EU means it is not an automatic passport into the EEA, but its AML framework, which includes mandatory SRO affiliation, is well-regarded by institutional investors. Operators we advise who are targeting European family offices and institutional allocators frequently consider Switzerland as a primary or parallel domicile.
For operators whose investor base is concentrated in the Gulf, the ADGM (Abu Dhabi Global Market), regulated by the FSRA (Financial Services Regulatory Authority), and Dubai's VARA (Virtual Assets Regulatory Authority) present complementary options. ADGM's framework for virtual assets as regulated activities, combined with its common-law court system, has attracted structuring of tokenised vehicles where the sponsor is based in the UAE. VARA covers mainland Dubai activities and applies activity-based licences across exchange, custody, management, and transfer functions — a tokenised fund manager will typically require at least the management and, if self-custodying, the custody activity licence.
Singapore and Hong Kong present the clearest contrast in Asia. MAS (the Monetary Authority of Singapore) administers the Payment Services Act, which regulates digital payment token services, and separately imposes collective investment scheme obligations on fund structures. A tokenised fund distributing to Singapore investors must satisfy both layers. The SFC in Hong Kong has developed a VASP licensing regime for virtual-asset trading platforms; a tokenised fund that lists its tokens on a Hong Kong platform will interact with that regime even if the fund itself is domiciled offshore. In our practice, operators building Asia-Pacific distribution tend to structure a primary Cayman vehicle with a Singapore or Hong Kong management entity that holds the relevant local licence.
What Are the Structural Models, and Which Profile Fits Which?
Tokenised fund structures generally follow one of three models, each with a distinct risk and regulatory profile.
The first model is the native tokenised fund: fund interests are issued as tokens from inception, there is no parallel paper-register share class, and the token is the primary evidence of the investor's legal interest. This model requires the deepest regulatory analysis because it eliminates the traditional paper-based investor-protection infrastructure — the transfer agent, the share register, the regulated custodian holding certificates — and replaces it with on-chain equivalents that most fund regulators have not yet fully codified. Operators who choose this model bear the highest compliance build cost at the outset, but they also carry the cleanest story for institutional investors who want genuine DLT-native settlement.
The second model is tokenisation of existing fund interests: a conventional fund — a Cayman exempted limited partnership, a Luxembourg SICAV, a Delaware LP — issues tokens that represent existing registered interests on a parallel basis. The underlying legal interest is the traditional share or LP unit; the token is a representation for settlement and transferability purposes. This model is favoured by managers who want to preserve an established regulatory track record while adding secondary-market liquidity. Its regulatory risk is lower because the underlying fund is already authorised, but it introduces a new layer of analysis: is the token itself a regulated instrument in the jurisdiction where it trades, independent of the underlying fund interest?
The third model is a fund-of-funds or portfolio-token structure: the token represents a proportional claim on a diversified basket of digital assets held by a vehicle that functions like a collective investment scheme but may not be registered as one. This is the highest-risk model from an enforcement perspective. Regulators — particularly the SEC, FCA, and ESMA — have consistently characterised these vehicles as collective investment schemes subject to full registration requirements. The absence of registration is the primary enforcement trigger.
Decision matrix for operators:
Profile A — an institutional manager with an established AUM in conventional fund structures seeking to add blockchain-native settlement: the tokenisation-of-existing-interests model is the natural starting point. The management entity already holds the relevant licence; the incremental analysis concerns the token's classification in secondary markets and the AML layer at the token-transfer level. Timeline to structural readiness is typically measured in weeks for the legal analysis, with technology integration running in parallel.
Profile B — a DeFi-native team launching a yield-generating vehicle for the first time: the native tokenised fund model requires a full regulatory build — entity selection, management-company licensing, investor-eligibility rules, AML programme, custody arrangements — before the first token is issued. Timeline is jurisdictionally variable; in a well-developed regime such as ADGM, MAS, or the Cayman Islands, the process from engagement to first close is typically a matter of months, not weeks. The cross-border analysis of where token transfers will flow must be completed before the smart contract is deployed.
Profile C — an asset manager seeking to monetise an illiquid private-equity or real-estate portfolio through token-based secondary liquidity: this profile is the fastest-growing category we encounter. The primary risk is not the fund structure itself but the secondary-market venue. If tokens representing the fund interests trade on a platform regulated as a VASP, a securities exchange, or an alternative trading system, that trading activity will be subject to the licensing requirements of the platform's regulator — and potentially those of the investors' home jurisdictions. Getting the secondary-market analysis wrong converts a liquidity-enhancement strategy into an enforcement exposure.
The process above describes the standard path. Your facts — the entity, the user base, the banking — change the analysis. To map the licence, banking and structuring stack for your tokenised fund, write to OBOLUS at info@oboluslaw.com or map your options via our contact page.
What Does a Defensible AML and Travel Rule Programme Look Like for a Tokenised Fund?
A defensible AML programme for a tokenised fund is not merely a KYC checklist applied at subscription. It spans three distinct moments: the onboarding of the investor, the ongoing monitoring of on-chain transfer activity, and the redemption or secondary-market transfer of the token.
At onboarding, the standard collective investment scheme requirements apply — identification and verification of the investor, beneficial ownership screening, source-of-funds analysis, and ongoing monitoring obligations. What is new in a tokenised structure is the wallet-address layer. Regulators, including the FCA under its Money Laundering Regulations (MLR) registration regime and ESMA under MiCA, expect the fund to maintain a mapping between verified investor identities and the wallet addresses from which subscription proceeds arrive and to which token distributions are sent. A fund that cannot produce that mapping on demand is exposed in any regulatory examination.
The Travel Rule — the FATF obligation to transmit originator and beneficiary information alongside a virtual asset transfer — applies when the fund or its transfer agent transmits tokens to or receives tokens from another VASP or obliged entity. The de-minimis threshold and technical implementation standards vary by jurisdiction, but the principle is universal across all FATF member jurisdictions. A tokenised fund that routes distributions through a custodian or sub-custodian that does not have Travel Rule-compliant messaging in place creates a break in the compliance chain. In our cross-border practice, we routinely see structures where the fund manager has a strong AML programme but has not verified whether the custodian's token-transfer workflow meets the Travel Rule standard in each relevant jurisdiction.
Sanctions screening at the wallet-address level is a separate obligation from KYC but equally critical. Tether (USDT) and Circle (USDC), as the dominant stablecoin issuers, both maintain contract-level blacklisting authority and act on OFAC designations and equivalent government directives. A tokenised fund that holds or distributes stablecoins to a sanctioned address — even inadvertently — creates a sanctions exposure that is independent of the fund's general AML programme. Smart-contract-level sanctions screening, or at minimum a pre-transfer wallet-screening workflow, is now expected by sophisticated institutional investors.
How Does Custody Interact With Fund Structure?
Custody is a regulated activity in every leading fund-domicile jurisdiction, and tokenised fund operators who treat it as a technology problem rather than a legal one consistently underestimate its complexity. The question is not only who holds the private keys; it is who bears the regulatory obligation of a custodian, how that custodian is licensed, and whether the custodian's licence covers the specific asset types held by the fund.
Under MiCA, crypto-asset custody is a regulated CASP (Crypto-Asset Service Provider) activity. A CASP authorised in one EU member state may passport the custody function across the EU and EEA — a significant structural advantage for tokenised funds with a pan-European investor base. The CASP authorisation process, while streamlined relative to a full banking licence, involves capital requirements, governance standards, and client-asset segregation obligations that are calibrated to the custody of digital assets specifically.
In the Cayman Islands and BVI, custody is addressed through the fund's prime brokerage and custodian arrangements, which are subject to the fund's constitutional documents and the relevant VASP registration requirements. Neither jurisdiction has yet codified a digital-asset custody licence equivalent to the MiCA CASP model; the regulatory expectation is that the custodian either holds a licence in its home jurisdiction (typically the US, UK, or EU) or operates under a combination of the VASP Act requirements and contractual safeguarding arrangements that satisfy the fund's institutional investors.
Singapore's MAS expects Digital Payment Token service providers — which typically includes custodians of crypto-assets — to hold a licence under the Payment Services Act. A tokenised fund whose custodian is not MAS-licensed cannot distribute tokens to Singapore investors without creating a gap in the regulatory chain that will surface in due diligence by any institutional allocator.
In a recent matter, a fund manager seeking to launch a native tokenised vehicle identified a custody provider with strong technology credentials but no VASP or equivalent licence in any jurisdiction the fund intended to distribute to. We worked with the manager to identify an alternative structure — a licensed custodian in an ADGM-regulated entity as primary custody, with a technology-provider agreement with the preferred platform for sub-custody mechanics — that satisfied both the regulatory and operational requirements. The structure was agreed before token issuance, avoiding the need to restructure after the fact.
What Are the Most Common Structural Mistakes Operators Make?
Operators building tokenised fund structures make a consistent set of errors. Identifying them early determines whether the structure is defensible on examination or requires expensive remediation.
The first mistake is treating the offering as a technology deployment rather than a securities distribution. A token launch that distributes fund interests to hundreds of wallet addresses without a subscription agreement, an investor eligibility determination, or a disclosure document is an unregistered securities offering in every jurisdiction whose law applies the Howey test or its equivalent. The SEC's actions in this area have been consistent: the medium of distribution does not change the regulatory characterisation of the instrument.
The second mistake is confusing the fund's domicile with the limit of regulatory reach. A BVI fund whose tokens are listed on a platform accessible to EU retail investors will be examined for MiCA compliance by ESMA and relevant national competent authorities. Domicile determines which home regulator supervises the vehicle; it does not immunise the issuer from the host-state obligations of every jurisdiction where investors hold the token.
The third mistake is building the secondary-market liquidity mechanism before the primary regulatory structure. In our practice, we have seen teams spend months negotiating listing agreements with token exchanges while the underlying fund structure remains unresolved. A listing agreement signed before the fund's regulatory status is clear creates contractual obligations that may be impossible to honour without regulatory authorisation.
A common assumption in this market is that any offshore vehicle works equally well for a digital-asset fund. It does not. The relevant variables — FATF compliance posture of the domicile, investor eligibility rules, custodian licensing requirements, and tax treatment of token distributions — vary significantly between the Cayman Islands, the BVI, Switzerland, Singapore, Malta (where the MFSA administers a VFA framework transitioning to MiCA), and the ADGM. Selecting a domicile without mapping those variables to the specific investor base and asset mix is the single most common structural error we see.
If a prior application stalled or a structure was challenged on examination, a second analytical read can surface the structural reason and the route forward. To pressure-test your structure before you commit, message us via our contact page or at info@oboluslaw.com.
What Do Institutional Investors Now Expect From Tokenised Fund Structures?
Institutional investor due diligence on tokenised fund structures has become substantially more rigorous as enforcement activity has increased. Allocators who were content, two or three years ago, to accept a white paper and a smart-contract audit as structural diligence now expect documentation equivalent to what they would require for a conventional regulated fund — and additional layers specific to the digital-asset wrapper.
The baseline institutional expectation is a licensed management entity, a licensed custodian, a documented AML programme with Travel Rule compliance, and a legal opinion from qualified counsel in the fund's domicile addressing the regulatory classification of the token. That opinion must go beyond the question of whether the token is a security; it must address the fund's obligations as a VASP or CASP, the custody arrangement, and the AML framework applied to token transfers.
Beyond the baseline, sophisticated allocators are increasingly requiring evidence of on-chain compliance infrastructure. This includes wallet-address whitelisting in the smart contract (restricting transfer to verified, KYC'd addresses), on-chain cap table management, and integration with at least one recognised forensic monitoring provider. Forensic monitoring partners — organisations such as Chainalysis, TRM Labs, and Elliptic, which provide on-chain tracing and sanctions screening — are now standard components of an institutional-grade tokenised fund's compliance infrastructure. Their presence in the fund's operational documentation is a due-diligence positive.
Operators we advise who are building toward an institutional first close typically spend as much time on the compliance-documentation stack as on the commercial terms. That allocation of effort reflects the reality that institutional capital will not move without it.
Related at OBOLUS
Related at OBOLUS
- Digital-asset fund structuring and investment vehicles – full service overview: fund formation, domicile selection, manager licensing and investor compliance
- GP/LP structuring for digital assets – the disputes angle – how fund structure choices affect dispute resolution and partner disputes
- AML and Travel Rule regime in Switzerland – FINMA's AML framework and Travel Rule obligations for Swiss-domiciled vehicles
FAQ
Where should a crypto fund be domiciled?
The right domicile depends on three variables: the target investor base, the asset mix, and the intended distribution mechanism. A fund targeting institutional EU investors needs to address MiCA's CASP and disclosure requirements; one targeting Gulf family offices may favour ADGM or VARA structures. Cayman and BVI vehicles remain common offshore choices but do not carry regulatory passports into the EU, UK, or US. Domicile selection should be completed before token issuance, not after investor commitments are received.
Does a digital-asset fund manager need a licence?
In almost every leading fund jurisdiction, yes. A manager that pools investor capital and makes discretionary decisions over a digital-asset portfolio is conducting a regulated activity — collective portfolio management or investment management — regardless of whether the fund interests are represented by tokens or conventional shares. The applicable regime varies: MiCA's CASP authorisation in the EU, the Payment Services Act licence in Singapore, VARA's management-activity licence in Dubai, or a collective investment scheme manager authorisation in the Cayman Islands or BVI. Managing without the relevant licence is the primary enforcement trigger globally.
How is custody arranged for a crypto fund?
Custody for a tokenised fund requires both a regulatory and a technical solution. Regulatory custody means the custodian holds a licence covering the relevant asset types in the fund's home jurisdiction and, where required by investor-side regulation, in the investors' jurisdictions. In the EU, custody of crypto-assets is a CASP activity under MiCA. In Singapore, it falls within the Payment Services Act licensing regime. Technical custody — key management, multi-signature controls, sub-custody arrangements — must be documented as part of the fund's operational infrastructure and reviewed by institutional allocators in due diligence.
About OBOLUS
OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance that sit around them. Digital assets are the whole of our practice. We match domicile to investor base, asset mix and redemption profile — and where a structure needs forensic support, we work alongside recognised forensic partners to convert on-chain evidence into court-ready disclosure applications. To discuss your situation, contact info@oboluslaw.com.
By Roman Levitt, Technology & DeFi Counsel — specialising in the regulatory and structural analysis of tokenised fund instruments across common-law and civil-law regimes.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.