What legal regime governs a security token offering in Ireland?
A security token offering (an STO – a capital-raise in which the tokens confer rights typically associated with transferable securities, such as equity participation, profit-sharing or debt claims) conducted in or from Ireland sits at the intersection of two regulatory regimes: the existing EU prospectus and MiFID II securities framework, and the newer MiCA (Markets in Crypto-Assets Regulation) regime supervised by ESMA and, at national level, the Central Bank of Ireland (CBI). Ireland joined the EU single market for financial services from the outset, and the CBI is both the national competent authority for MiCA and the domestic gatekeeper for prospectus approvals and MiFID II authorisation. Getting the classification right before structuring the offer is not optional – it determines which regime applies, which disclosures are required, and whether the offer can passport across the EU without a separate approval in each member state.
The critical threshold question is whether a token is a transferable security under existing EU financial instruments law. If it is, MiCA's token-specific provisions do not apply – the token falls squarely under the prospectus regime and MiFID II. If the token is instead an asset-referenced token (ART) or an e-money token (EMT), MiCA's bespoke issuer-authorisation track governs. Tokens that meet neither test – those conferring no financial rights – are utility tokens and generally need only a MiCA whitepaper with no prior CBI authorisation, subject to certain exemptions. The regime that applies to your offering depends entirely on the substance of the rights the token confers, not the label you give it.
Ireland is a consistently used EU jurisdiction for structured product issuance, fund domicile, and cross-border fintech operations. Its common-law legal tradition, tax treaty network, and the CBI's established prospectus-approval practice make it a credible home for inbound token issuers seeking EU market access. For a group with US or APAC parent entities, Ireland also serves as a natural EU gateway – but the cross-border structuring carries its own compliance surface.
For a scoped assessment of your token's classification and the applicable Irish regulatory regime, contact OBOLUS at info@oboluslaw.com. The process above describes the standard path. Your facts – the rights the token confers, the investor base, and the distribution method – change the analysis materially.
How does token classification work under Irish and EU law?
Token classification is the first and most consequential decision in an STO, and it turns entirely on economic substance, not on what the whitepaper calls the instrument. Irish securities law implements the EU's MiFID II definition of transferable securities, which covers instruments that represent equity participation in a body corporate, debt instruments, and other securities that give the right to acquire or sell such instruments. The Central Bank of Ireland applies that definition rigorously: a token that entitles holders to a share of profits, a residual claim on assets, or a vote in governance decisions will almost certainly be assessed as a transferable security regardless of the marketing description attached to it.
MiCA adds two further categories that matter for token issuers. An asset-referenced token (ART) is one designed to maintain a stable value by referencing a basket of assets, currencies or commodities. An e-money token (EMT) references a single fiat currency. Both categories require issuer authorisation under MiCA before any public offer in the EU. The CBI is the national competent authority that would process those authorisation applications for an Irish-domiciled issuer.
The practical reality we observe in cross-border practice is that many token projects are structured with hybrids in mind – tokens that start as utility instruments but carry economic rights that regulators in one or more EU member states would characterise as securities. The misclassification risk is asymmetric: label a security as a utility token and you face enforcement, forced restructuring, and potential civil liability to investors. Label a utility token as a security unnecessarily and you incur prospectus costs and distribution restrictions that may not be warranted. Both errors are costly.
Ireland does not maintain its own separate national crypto-asset classification test. The analysis runs against the EU framework – MiCA, MiFID II and the Prospectus Regulation – as implemented by the CBI. That uniformity is a structural advantage: an opinion from qualified Irish counsel that a token does not constitute a transferable security carries weight across the EU passporting regime.
What does the STO prospectus and authorisation process in Ireland involve?
Where a token is classified as a transferable security, an Irish STO typically requires a prospectus approved by the Central Bank of Ireland under the EU Prospectus Regulation, unless an exemption applies – most commonly the exemption for offers made solely to qualified investors, or below the threshold at which a full prospectus is triggered. The CBI's prospectus review process follows the EU-wide procedure: the issuer submits a draft, the CBI reviews and returns comments, and the process iterates until the document is approved. Once approved, the prospectus may be passported to other EU/EEA member states by simple notification, giving the issuer single-point EU market access.
The practical steps for a tokenised securities offer in Ireland run roughly as follows. The issuer first obtains a legal classification opinion confirming the instrument is (or is not) a transferable security. Where it is, a prospectus is drafted to CBI standards, covering the issuer, the token's economic characteristics, the rights it confers, the risk factors, and the mechanics of the offering. The token's smart contract mechanics are described in technical annexes – the CBI expects disclosure of on-chain rights at the same level of precision it would expect for conventional instruments. The issuer simultaneously addresses the tokenisation layer: whether tokens are held in custody by a regulated custodian, whether there is a registry function, and how corporate actions (redemptions, dividends, governance votes) operate on-chain.
For an Irish-domiciled special purpose vehicle (SPV) issuing tokenised bonds or notes, the structure can be relatively compact. The SPV issues tokenised instruments, the proceeds are deployed to the underlying asset pool or project, and holders receive yield or capital return through on-chain distributions. The CBI's existing infrastructure for SPV supervision – well-established under Ireland's Section 110 securitisation regime – provides a familiar regulatory environment for debt-like token structures. Equity-like structures carry higher disclosure and ongoing obligations.
Where the token is a MiCA ART or EMT, the authorisation application goes to the CBI as national competent authority. That application is more detailed than a simple whitepaper filing and includes governance, reserve management, and operational resilience requirements specific to MiCA. Timelines for MiCA authorisation are set by the regulation itself at the EU level. Whitepaper-only filings for non-ART/EMT tokens that do not constitute transferable securities are subject to shorter lead times – but the whitepaper must be notified to the CBI and must meet MiCA's content requirements.
In our cross-border practice, we regularly advise on the pre-filing phase – the classification analysis and the regulatory engagement strategy – before any document is submitted to the CBI. That upfront work consistently reduces the back-and-forth in the formal review process.
What mistakes do issuers most commonly make when structuring an Irish STO?
The single most common structuring error is treating token classification as a marketing decision. A utility label on a whitepaper does not determine the legal classification. Regulators – and courts, if enforcement follows – assess what the token actually does, what rights it actually confers, and how a reasonable investor would understand the economic proposition. A token marketed as a utility instrument but structured to track the performance of an underlying asset will be examined on its economic substance. If that substance maps to a transferable security, the utility label carries no legal weight.
The second frequent error is isolating the Irish regulatory analysis from the distribution footprint. An Irish STO that passes the CBI's prospectus review may still constitute an unregistered securities offering in the United States if tokens are offered to US persons, trigger a financial promotions issue in the United Kingdom under the FCA's rules, or require a separate prospectus in Switzerland under the FINMA regime. The cross-border surface of a token offering – who can hold the token, who can trade it, which exchanges list it – must be addressed before the offering opens, not after. We have seen offerings that were well-structured for the Irish and EU market but created enforcement exposure in other jurisdictions purely because the geographic restriction mechanics in the smart contract and the transfer agent agreements were not aligned.
The third error is underestimating the ongoing obligations that follow authorisation. A MiCA CASP (Crypto-Asset Service Provider) authorisation or an ART authorisation carries continuous reporting, incident notification, and governance obligations. Issuers who treat authorisation as a one-time cost and do not budget for the ongoing compliance function find themselves under supervisory pressure within the first operating year.
A common assumption is that structuring a token as a "utility" instrument reliably avoids securities law. That assumption has caused significant enforcement exposure for issuers in multiple jurisdictions. The substance of the rights governs the classification, and a thoughtful pre-offer analysis – comparing the token's rights against the relevant definitions in each target jurisdiction – is the only reliable basis for structuring decisions.
How do tax and banking interact with an Irish STO structure?
Ireland's tax environment shapes how an STO structure is assembled at the group level. Irish corporate tax rates and the country's extensive double-tax treaty network make the Irish issuing vehicle attractive for groups with EU operations, but the interaction between the token's legal form and Irish tax treatment must be considered at the outset. A token that constitutes a debt instrument for Irish tax purposes will be treated differently from one characterised as equity or a hybrid. The distinction affects the issuer's deductibility of distributions and the investor's withholding tax position – both of which are material to the offering's economics.
Value-added tax treatment of token issuances and on-chain transactions in Ireland follows EU VAT principles. Whether the issuance of a token constitutes a supply of services or a financial transaction exempt from VAT depends on the token's classification and the nature of any services bundled with it. That analysis must be done per token type; there is no blanket EU rule that resolves it uniformly across all token structures.
Banking access for token issuers in Ireland remains a practical constraint. Irish-regulated banks apply heightened due-diligence requirements to crypto-asset businesses, and the appetite of individual institutions for STO proceeds custody and operational banking varies. Issuers we advise often work through a combination of an Irish account for regulated proceeds and specialist digital-asset banking relationships in other jurisdictions for treasury functions. Building the banking stack before the offering launch – and disclosing the banking arrangements accurately in the prospectus or whitepaper – is an operational step that is routinely underestimated in the project timeline.
For groups sitting between Ireland and a non-EU parent – common for US- or APAC-based operators using Ireland as their EU entry point – the cross-border legal and tax interaction between the Irish issuing vehicle and the parent entity requires careful structuring. Transfer pricing, thin capitalisation, and the EU's anti-hybrid rules all potentially interact with the token's financial characterisation. Allied counsel in the relevant jurisdiction typically covers the non-EU side of that analysis.
A recent matter: tokenised note issuance, cross-border restriction mechanics
In a recent structuring engagement, a technology group sought to issue tokenised notes via an Irish SPV to EU-based institutional investors. The notes carried a fixed yield and a redemption right at maturity – plainly a transferable security under MiFID II, requiring a CBI-approved prospectus. We advised on the classification analysis, the prospectus structure, and the geographic restriction mechanics in the token's smart contract. A particular challenge arose because the group's existing investor base included parties in jurisdictions where a public offer without local registration would have been impermissible. We worked with allied counsel in those jurisdictions to map the transfer restrictions into the token's on-chain rules and into the subscription agreement, ensuring that secondary transfers to restricted persons were prevented at the contract layer, not merely by a warning in the offering document. The offering completed within the targeted window and the CBI's prospectus comments were resolved in two rounds of review.
Which Irish STO structure fits which operator profile?
The right structure depends on three variables: the legal nature of the rights the token confers, the identity and location of the target investor base, and whether ongoing listing and secondary market liquidity are part of the commercial plan.
A group issuing tokenised debt instruments to EU-qualified investors only will typically use an Irish SPV, file a prospectus with the CBI under the qualified-investor exemption (avoiding a full retail prospectus), and passport to other EU states as needed. Timeline from classification opinion to approved prospectus is typically measured in weeks for a well-prepared filing, though complex structures or novel instruments extend that period. Key risk: the economic terms of the note must be clearly disclosed; ambiguity in the redemption mechanics or yield waterfall creates CBI comment risk.
A group issuing tokens that do not constitute transferable securities – where the token's rights are genuinely utility-based – will rely on MiCA's whitepaper regime. The whitepaper must comply with MiCA's mandatory content requirements and be notified to the CBI before the public offer opens. No prior approval is required for most non-ART/EMT utility tokens, but the CBI may intervene if the whitepaper is deficient or if the classification is contested. Timeline is shorter than the prospectus route but not trivial: drafting a MiCA-compliant whitepaper, obtaining a classification opinion, and completing the notification process takes meaningful preparation time. Key risk: a post-filing reclassification by the CBI or ESMA triggers a full prospectus obligation mid-offer.
A group issuing an ART or EMT requires full MiCA issuer authorisation from the CBI before any offer. This is the most intensive route: governance frameworks, reserve management policies, redemption rights, and operational resilience plans are all reviewed. Timeline is set by MiCA's authorisation procedure at the EU level. Key risk: underprepared applications draw significant CBI queries and extend the timeline materially.
For issuers with a US parent or US investor base, the analysis must include the US securities law dimension. The Irish structure does not insulate the offer from US jurisdiction if tokens are offered to US persons. A Regulation S exemption or Regulation D filing – managed through allied US counsel – is typically layered alongside the Irish regulatory work. We regularly advise on the coordination between the two tracks.
Self-assessment checklist before launching an Irish STO
Before engaging the formal regulatory process, an issuer should be able to answer the following questions with documented, counsel-reviewed positions.
- What rights does the token confer on the holder? Are those rights economic, governance, or both?
- Does the token's economic substance map to a transferable security under MiFID II, an ART or EMT under MiCA, or a utility token?
- Which investors will receive the offer, and in which jurisdictions are they located?
- Are geographic transfer restrictions built into the token's on-chain mechanics, not merely stated in the offering document?
- Has Irish tax counsel reviewed the issuer's treatment of token distributions and the investor's withholding position?
- Is a regulated custodian in place, or is the custody model disclosed accurately in the offering document?
- What is the plan for ongoing CBI reporting and incident notification obligations post-authorisation?
- Has the banking stack – operating account, proceeds custody, secondary market settlement – been confirmed before the offering opens?
None of these questions has a generic answer that applies across all token structures. Each turns on the specific facts of the issuer, the token, and the offering.
If a prior STO application stalled or an account was closed, write to info@oboluslaw.com. A second structural read can surface the specific point of friction and the route back – whether that is a reclassification, a revised distribution model, or a change in the issuing vehicle's jurisdiction.
Related at OBOLUS
- Token offerings and securities for digital-asset businesses – our core practice covering STO structuring, classification analysis and securities law compliance across jurisdictions.
- Stablecoin issuance authorisation in El Salvador – a comparative view of stablecoin and ART authorisation requirements in a non-EU jurisdiction.
- Oracle and data-feed liability in Panama – on-chain data infrastructure liability for token and DeFi structures with cross-border data dependencies.
FAQ
Is my token a security?
Whether a token is a security depends on the substance of the rights it confers, not on how it is described in a whitepaper or marketing document. Under Irish and EU law, the relevant test is the MiFID II definition of a transferable security – broadly, instruments representing equity participation, debt claims, or rights to acquire such instruments. If your token entitles holders to profit-sharing, a residual claim, or governance rights tied to economic outcomes, a securities classification is likely. Classification should be confirmed by formal legal opinion before any offer is made.
Do I need a MiCA whitepaper?
Most public offers of crypto-assets in the EU – including Ireland – require a MiCA-compliant whitepaper, which must be notified to the Central Bank of Ireland before the offer opens. Exemptions exist for offers below certain thresholds and for offers made solely to qualified investors, but the exemption conditions must be met precisely. Tokens that constitute transferable securities under MiFID II are outside MiCA's whitepaper regime entirely and instead require an EU Prospectus Regulation prospectus, approved by the CBI. The applicable document depends on the token's classification.
How should an airdrop be structured legally?
An airdrop – a distribution of tokens without payment from recipients – can still trigger regulatory obligations depending on the token's classification and the method of distribution. If the airdropped token is a transferable security, distributing it without a prospectus or applicable exemption may constitute an offer of transferable securities. Even for non-security tokens, a MiCA whitepaper obligation may arise if the distribution is made to a sufficient number of EU recipients. Airdrops should be assessed against the classification of the underlying token and the exemption conditions in each target jurisdiction before the distribution is executed.
OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance that sit around them. Digital assets are the entirety of our practice, and we act only for businesses – not retail investors. We assess token classification against the substance of rights, not the marketing label, and we advise on the full cross-border offering stack from Irish regulatory filing through to secondary-market transfer restrictions. To discuss your situation, contact info@oboluslaw.com or message us at t.me/oboluslaw.
By Roman Levitt, Technology & DeFi Counsel – specialising in token structuring, on-chain rights analysis, and cross-border securities law compliance for digital-asset issuers.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.