A token issuer with a European distribution strategy and a Canadian development team faces a question that sits at the intersection of two distinct legal regimes: does the MiCA whitepaper (the disclosure document required under the EU's Markets in Crypto-Assets Regulation) satisfy the information obligations that apply on the Canadian side, and what does the combination demand in terms of legal structure, classification and cross-border coordination? The answer depends on which rights the token confers, where the offering is made, and who is receiving it.
As major jurisdictions tighten token disclosure expectations, Canadian crypto firms reaching EU markets must contend with MiCA's whitepaper requirements alongside Canada's own securities and derivatives oversight. Getting the classification wrong at the start converts a product launch into an unregistered securities offering on one or both sides of the Atlantic. This page sets out the process, the cross-border interaction, and where legal counsel changes the outcome.
What does the MiCA whitepaper requirement actually demand?
Under MiCA, any person seeking to offer crypto-assets to the public in the EU – or to seek admission to trading on an EU crypto-asset trading platform – must prepare and publish a whitepaper that meets the Regulation's prescribed content standards. The whitepaper is not a prospectus in the securities-law sense, but it carries meaningful disclosure obligations: a description of the issuer and the project, the rights and obligations attached to the token, the technology, the risks, and the applicable regime. It must be filed with the relevant national competent authority before public distribution.
The scope of that obligation turns on token classification. MiCA distinguishes between asset-referenced tokens (ARTs), e-money tokens (EMTs), and "other" crypto-assets. ARTs and EMTs face the most demanding issuance rules, including a prior authorisation requirement from the national competent authority. Other crypto-assets – which include most utility-style tokens – face lighter whitepaper requirements but are not exempt from the filing and disclosure regime. Securities tokens, by contrast, fall outside MiCA and into MiFID II and national prospectus rules; a token that qualifies as a transferable security in the EU cannot be offered under a MiCA whitepaper alone.
For a Canadian firm structuring an offering with EU reach, the classification question is therefore the first and most consequential step. It is also the step that most frequently goes wrong when done without cross-border counsel.
The process above describes the standard MiCA path. Your token, your user base and your jurisdiction of incorporation change the analysis materially. To scope a classification review before you commit to a structure, contact OBOLUS at info@oboluslaw.com.
How does Canada classify tokens for securities purposes?
Canadian securities law is administered province by province, with the Canadian Securities Administrators (CSA) coordinating national policy through staff notices and guidance. The primary classification tool is the investment contract test, derived from common-law principles the CSA has applied to crypto-assets through a series of regulatory publications. A token is a security – and subject to full prospectus or exemption requirements – if purchasers invest money in a common enterprise and expect profits primarily from the efforts of others.
The CSA has made clear that the label on the token does not determine its legal character. A token described as a utility token in a whitepaper is still a security if the substance of the arrangement meets the investment contract test. That position mirrors the approach taken by the SEC in the United States and, in a different technical form, by the treatment of transferable securities under EU law. The convergence of those positions matters enormously for a firm operating across both regimes.
Beyond the binary security/non-security question, Canadian rules distinguish between tokens that are regulated as derivatives and those that are not. Stablecoins and tokens with value references can attract derivatives treatment under provincial commodity regulation. Tokens that function as payment instruments may sit closer to the money-services-business perimeter under federal anti-money-laundering rules administered by FINTRAC (Canada's Financial Transactions and Reports Analysis Centre).
The cross-border point is direct: a Canadian firm that self-classifies a token as a utility token for Canadian purposes, then relies on that classification when drafting a MiCA whitepaper, is running a dual risk. If the CSA later takes the view that the token was a security, the Canadian offering was unregistered. If the ESMA-supervising national competent authority takes the same view, the MiCA whitepaper is the wrong instrument – and the offering in the EU was without the required authorisation.
What does a MiCA whitepaper review process look like for a Canadian issuer?
A structured whitepaper review for a Canadian issuer proceeds through four distinct phases, each with a defined output and a natural decision gate.
The first phase is classification mapping. Counsel reviews the token's technical architecture, the rights it confers, the mechanism by which value is transferred or accrued, and the economic substance of the arrangement. The output is a classification opinion that addresses both the Canadian securities test and the MiCA typology simultaneously. Where the two regimes reach different conclusions – which is uncommon but possible – the opinion identifies the conflict and the practical implications for distribution strategy.
The second phase is whitepaper drafting and structuring. If the token sits in the "other crypto-assets" category under MiCA and outside the securities perimeter under Canadian law, counsel drafts the whitepaper to the MiCA content standard while ensuring that no statement in the document inadvertently supports a securities characterization in Canada. The tone of risk disclosures, the description of secondary-market expectations and the characterization of investor returns all require careful coordination between the two regulatory frames.
The third phase is national competent authority (NCA) filing coordination. Under MiCA, the whitepaper must be notified to the NCA in the member state where the issuer is established or where the offering is first made. For a Canadian issuer without an EU establishment, this typically means either establishing a EU presence – often in a jurisdiction with an efficient CASP supervisory process, such as Lithuania or another EU member state with an active MiCA implementation program – or working through an EU-established entity. The choice of filing jurisdiction affects the NCA relationship, the timeline, and the passporting position for the rest of the EU.
The fourth phase is ongoing maintenance. A MiCA whitepaper must be updated when there is a significant change in the information disclosed. For an issuer also managing Canadian compliance obligations, that update cycle needs to be coordinated with Canadian counsel so that amendments do not create new securities-law exposure in Canada.
What are the cross-border tax and banking interactions?
A token offering that spans Canada and the EU generates tax and banking complexity that is independent of the legal classification question but directly affected by it.
On the tax side, the Canadian Revenue Agency (CRA) treats tokens on a facts-and-circumstances basis. A token classified as a security instrument may generate different tax consequences on issuance, secondary sale and redemption than one treated as a commodity or as a digital product. For an issuer offering tokens to EU purchasers, the MiCA classification may not align cleanly with the CRA's characterization, creating a gap between the regulatory and tax treatment that requires deliberate structuring. Airdrops and promotional distributions raise a separate question: whether the distribution event itself creates a taxable receipt for the issuer or the recipient, and whether GST/HST or EU VAT applies to the transaction.
On the banking side, Canadian crypto firms consistently report difficulty maintaining compliant payment rails when operating across jurisdictions. A firm conducting a token offering with EU distribution needs EUR-denominated settlement capability, banking relationships that will accept crypto-issuer clients, and payment flows that satisfy both FINTRAC travel-rule expectations under Canadian AML law and the travel-rule obligations that apply under EU anti-money-laundering rules. FATF Recommendation 15 provides the baseline, but the implementation details differ between the two regimes and the gap creates operational friction that is best resolved before the offering opens, not after the first transfer is challenged.
In our cross-border practice, we regularly advise token issuers who have completed the legal classification exercise but have not stress-tested the banking and payment structure. The offering mechanism – whether tokens are sold directly for fiat, exchanged for stablecoins, or distributed through a regulated exchange platform – determines which payment rails are available and what AML monitoring is required at each step.
What are the most common mistakes Canadian issuers make?
The most consequential error is treating the whitepaper as a marketing document rather than a legal instrument. MiCA requires specific content; documents drafted primarily for investor persuasion often omit technical disclosures that the Regulation mandates and include forward-looking statements about token value that attract regulatory scrutiny in both Canada and the EU.
A second recurring issue is the use of a utility label without an underlying legal opinion. The CSA has been explicit that marketing characterization does not determine legal status. Operators we advise routinely arrive with whitepapers that describe a token as a utility instrument but that describe functionality – secondary-market tradability, passive yield accrual, governance rights tied to economic participation – that bring the token squarely within the investment contract analysis. The label creates false comfort; it does not provide legal protection.
A third mistake is filing the whitepaper in the wrong EU member state. The choice of NCA affects not only the filing timeline but the supervisory relationship for the life of the offering. A firm that files in a jurisdiction where the NCA is under-resourced for crypto matters, or where the regulatory practice around MiCA is still developing, may face delays or requests for information that a better-chosen filing venue would not have generated.
Finally, issuers frequently underestimate the update obligation. A whitepaper is not a set-and-forget document. As the project develops, as the token's functionality changes, or as the team or ownership structure changes, the whitepaper must be updated and re-notified. Failure to update is itself a breach of the MiCA regime.
Is a utility label on a whitepaper enough to settle the legal classification?
A common assumption is that calling a token a utility token in the whitepaper, and describing its use-case function, settles the regulatory classification. It does not. Both the CSA in Canada and the national competent authorities implementing MiCA assess classification against the substance of the rights the token confers – the economic realities of the arrangement, not the marketing description applied to it.
A token that grants holders a right to participate in a platform's revenue, that is marketed on the expectation of price appreciation, or that has no current use-case functionality at the time of sale is likely to attract securities-law analysis regardless of how it is labeled. The MiCA "other crypto-assets" category does not include instruments that function as transferable securities under EU law; those instruments require a different authorization route entirely. The whitepaper that calls a security a utility token is not merely a compliance failure – it is the document that evidences the failure.
We assess classification against the substance of rights, not the marketing label. That assessment is the foundation of every whitepaper engagement we take on, and it is the step that creates the most value for the issuer before a regulator raises the question.
If a prior structure was built around a utility label that has not been legally tested, a second review can surface the exposure and identify the path to a defensible position. Write to OBOLUS at info@oboluslaw.com to discuss a classification review.
A cross-border whitepaper matter: coordination under two regimes
In a recent engagement, a Canadian-incorporated token issuer had drafted a whitepaper for a planned EU distribution, relying on a utility classification that had not been reviewed against either the CSA's investment contract guidance or the MiCA typology. The issuer planned to open the offering within weeks. We conducted a classification review under both regimes simultaneously and concluded that the token, as structured at that point, carried material securities-law risk in Canada and would not sit cleanly in the "other crypto-assets" category under MiCA. We advised on structural modifications to the token's economic rights, redrafted the whitepaper to the MiCA content standard, and coordinated with allied counsel in the relevant EU member state on NCA filing strategy. The offering opened on schedule under a defensible dual-regime structure, and the issuer had a documented legal basis for its classification position in both jurisdictions.
Which structure is right for your token offering?
The appropriate structure depends on the issuer's profile, the token's economic substance and the target distribution geography. Three common configurations arise in cross-Canada/EU matters.
A pure-utility token with no secondary-market expectation and genuine immediate functionality, offered exclusively to EU purchasers through a EU-established entity, follows the standard MiCA "other crypto-assets" whitepaper route. The Canadian connection is a tax and banking question rather than a securities question. The key risk is ensuring that the utility characterization is factually defensible at the time of sale, not merely at the time of planned product deployment.
A token with hybrid characteristics – governance rights, yield participation, or strong secondary-market expectation – requires a more cautious approach. In Canada, counsel may recommend a prospectus exemption filing or a structured offering to accredited investors only. In the EU, the instrument may require assessment against the transferable securities definition before a MiCA whitepaper is the right vehicle. The timeline for that dual-track process is longer and the legal costs are higher, but the cost of an unregistered offering in either jurisdiction is higher still.
An issuer seeking to conduct a global offering – including Canadian retail distribution – faces the most complex structure. Canadian retail securities offerings require either a prospectus or an exemption; there is no equivalent to the MiCA whitepaper regime in Canadian law. Structuring a compliant retail offering in Canada alongside a MiCA-compliant offering in the EU requires a deliberate separation of the offering mechanics, the disclosure documents and the distribution channels, with each stream satisfying its own regulatory framework independently.
Self-assessment: are you ready for a MiCA whitepaper review?
Before engaging counsel for a whitepaper review, issuers benefit from working through a short diagnostic.
First: can you describe, in one paragraph, every economic right the token confers on its holder – including rights that apply only in the future? If that description includes passive income, secondary-market liquidity mechanisms or rights that depend on the efforts of the issuer's team, the classification question is live.
Second: do you have a EU establishment, or a EU-established entity through which the offering will be made? If not, the NCA filing strategy requires a structural decision before the whitepaper process can begin.
Third: have you mapped the payment flows for the offering? Do you know which banking relationships will accept fiat proceeds from a token sale, and whether those relationships are compliant with both Canadian FINTRAC requirements and EU AML travel-rule obligations?
Fourth: do you have a process for monitoring material changes to the token's functionality, team or ownership structure, and an update protocol for the whitepaper when those changes occur?
If any of those questions does not have a clear, documented answer, the whitepaper review should begin with the underlying structure rather than the document itself.
Related at OBOLUS
- Token Offerings and Securities for Digital-Asset Businesses – legal counsel on classification, structuring and compliant token issuance across jurisdictions
- MiCA Whitepaper Review in South Africa – the same cross-border analysis for issuers with African operations or distribution
- EMI Onboarding for VASPs – establishing compliant payment rails and banking access alongside a token offering
FAQ
Is my token a security?
Under Canadian law, a token is a security if purchasers invest in a common enterprise and expect profits from the efforts of others – regardless of the label on the whitepaper. Under EU law, the question turns on whether the token is a transferable security under MiFID II, which would take it outside MiCA entirely. Both analyses look to the substance of the rights the token confers. A legal opinion addressing both regimes simultaneously is the only reliable basis for a classification position that will withstand regulatory scrutiny.
Do I need a MiCA whitepaper?
If you are offering crypto-assets to the public in the EU – or seeking admission to trading on an EU platform – MiCA requires a compliant whitepaper for most token types. Exemptions apply to offerings below defined thresholds and to certain professional or limited-scope distributions, but the thresholds are set by the Regulation and must be verified against your specific offering structure. Tokens classified as transferable securities fall outside MiCA and require a different regulatory instrument. A scoped review of your offering mechanics determines which obligation applies.
How should an airdrop be structured legally?
An airdrop is not automatically exempt from securities or MiCA obligations. If tokens distributed in an airdrop carry economic rights that would make them securities or regulated crypto-assets under MiCA, the method of distribution does not change the legal character of the instrument. The key questions are whether consideration is given (broadly defined), whether the tokens are identical to those being offered for sale, and whether the airdrop is directed to persons in regulated jurisdictions. Both Canadian and EU regulators have indicated that airdrop mechanics will be assessed on substance, not form.
OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise token issuers, exchanges, custodians and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance that sit around them. Digital assets are the whole of our practice. We structure licensing, banking and tax as one mandate rather than three disconnected workstreams, and we assess classification against the substance of rights, not the marketing label. To discuss your situation, contact info@oboluslaw.com.
By Roman Levitt, Technology and DeFi Counsel – specialising in token classification, cross-border offering structures and the intersection of smart-contract mechanics with regulatory obligations.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.