Real-world asset tokenization in the United Kingdom sits at the intersection of financial-markets regulation, property law and digital-infrastructure oversight – and the legal classification of the token determines which regime applies before a single line of code is written. Under the Financial Conduct Authority (FCA) regime, a token that confers rights equivalent to a share, debt instrument or collective investment unit is a specified investment and triggers the full weight of financial-promotion rules, regulatory perimeter controls and, where applicable, prospectus obligations. A token that merely records title or grants access to a real-world asset without conferring those financial rights occupies a different, but still regulated, space. Getting the analysis wrong converts a product launch into an unregistered offering.
This guide sets out the step-by-step legal process for tokenizing real-world assets in the UK – from initial classification through structure, issuance and secondary-market considerations – with the cross-border dimensions that affect most operators in practice. Every step is grounded in the applicable regime; every timeline note is qualitative where the registry does not supply a verified figure.
Step 1 – Classify the token before anything else
Token classification under the FCA regime is determined by substance, not by the label on a whitepaper. A token that gives its holder economic rights over an underlying asset – revenue participation, a redemption claim, a proportionate interest in a fund – is almost certainly a security token (a specified investment under the Financial Services and Markets Act framework). A token that merely anchors an ownership record in a registry and does not confer those financial-instrument rights is assessed differently, though it may still attract regulation as a cryptoasset under the Money Laundering Regulations or as a qualifying cryptoasset under the UK financial-promotion rules.
In our practice, this is the single step where project teams lose the most time. A common assumption is that placing a "utility" label on a whitepaper settles the legal classification. It does not. The FCA's own guidance is explicit: the substance of the rights the token confers, not the terminology chosen by the issuer, is what determines the regulatory category. We assess classification against a structured rights-analysis: what does the holder receive, from whom, and on what conditions? That analysis feeds directly into Steps 2 and 3.
The cross-border note is immediate. Where the underlying asset is held offshore – a real-estate portfolio in the UAE, a trade-receivables book in Singapore – the classification question must be run in each relevant jurisdiction. MiCA (the EU's Markets in Crypto-Assets Regulation) applies its own asset-referenced token and e-money token categories if any token component resembles a stablecoin or a claim on a pool of assets. Operators distributing to EU residents need both analyses in parallel.
Step 2 – Select the legal wrapper for the asset side
The asset-side legal wrapper – the vehicle that holds the underlying real-world asset and to which the token corresponds – is as important as the token structure itself. UK law offers several routes, each with different regulatory, tax and investor-protection consequences.
An English law special-purpose vehicle (SPV) – typically a private limited company or a limited-liability partnership – holds the asset and issues the token as a representation of economic interest. This is the most familiar route and integrates cleanly with existing conveyancing, registration and security-perfection rules. However, where the SPV issues tokens to a broad investor base, the collective investment scheme perimeter may be engaged under the FCA regime, requiring authorisation or an exemption.
A trust structure can separate legal title from economic interest more cleanly, which has advantages for tokenized real estate and receivables. English law trusts are well-understood by courts and financiers alike. The trustee – typically a regulated entity – holds the asset; the token represents the beneficial interest. The design question is whether the beneficial interest as tokenized constitutes a specified investment: if it does, the financial-promotion and dealing rules apply to any offering of the token.
For project teams considering a decentralized governance layer, the absence of a legal wrapper creates liability exposure at every level of the stack. We regularly advise on inserting a regulated UK company or a foundation into the structure before governance token issuance, precisely to provide the accountability that on-chain governance alone cannot supply.
Operators distributing to retail must also assess whether their token falls under the UK financial-promotion rules that have applied to qualifying cryptoassets since October 2023.CTA #1 – The classification and wrapper decision are foundational: every subsequent regulatory, tax and banking choice flows from them. If you are at the design stage, the time to map the structure is before the smart contract is deployed. Map your options with OBOLUS before you commit.
Step 3 – Engage the FCA registration and authorisation track
Depending on the token classification reached in Step 1, one or more of the following FCA tracks will be required: cryptoasset registration under the Money Laundering Regulations (MLR), authorisation as a regulated firm to carry on specified investment activities, or notification under the financial-promotion rules where a communicator of the promotion is themselves not authorised.
MLR registration covers anti-money-laundering and counter-terrorist-financing obligations and is the threshold requirement for any business carrying on cryptoasset exchange or transfer activities in the UK. The FCA has publicly noted a high rejection rate for MLR registration applications where AML policies and controls are inadequate. Registration does not authorise financial activity; it is a compliance baseline, not a licence to operate investment business.
Where the token is a specified investment, the issuer or an intermediary distributing it must either be FCA-authorised or rely on an exemption. The FCA's authorisation process is detailed and evidence-intensive: business-plan review, fit-and-proper assessment of senior persons, demonstration of adequate capital, systems and controls documentation, and a clear articulation of how the regulated activity maps to the token product. The timeline varies significantly by application quality and the novelty of the product; issuers should expect the process to run across multiple months, not weeks.
The financial-promotion rules add a further layer. Since October 2023, communications that are promotions of qualifying cryptoassets must either be made or approved by an FCA-authorised person. The practical effect is that an unauthorised issuer may not communicate an invitation or inducement to engage with its token product without routing the promotion through an authorised approver – a process with its own due-diligence and liability considerations.
How does UK property law handle tokenized ownership?
English law can recognise a token as evidence of a property right, but the token does not by itself perfect title to most real-world assets. For real estate, legal title transfers through the Land Registry process; a token can represent the beneficial interest under a trust, but legal title must still be formally conveyed. For financial instruments, title and settlement obligations flow from the applicable securities-law rules, not from on-chain record alone.
The UK Law Commission's work on digital assets – culminating in its 2023 report – confirmed that a distinct category of personal property can accommodate digital assets that do not fit the traditional chose-in-action or chose-in-possession binary. This matters practically: it supports the use of English law to perfect security over tokenized assets and to bring recovery claims in respect of stolen or misappropriated tokens. English courts have already recognised cryptoassets as property in landmark cases including AA v Persons Unknown [2019], and the common-law tradition continues to develop around digital-asset property rights.
The cross-border note here is significant. Where a token represents an interest in an asset located outside the UK – a warehouse in the Netherlands, a receivable owed by a Singapore counterparty – the governing law of the underlying asset relationship must be separately addressed. English law can govern the token and the trust deed; it cannot override the lex situs (the law of the place where the asset is located) for real-property transfer. Dual-jurisdiction structuring is the norm, not the exception.
What are the AML and Travel Rule obligations for RWA token issuers?
AML obligations under the FATF-aligned UK regime apply to any business carrying on cryptoasset activities, including the issuance, transfer and exchange of security tokens and other qualifying cryptoassets. The Travel Rule (the obligation to pass originator and beneficiary data with a transfer) applies in the UK consistent with the FATF Recommendation 15 standard; the specific data thresholds are set by the applicable UK regulations and should be verified against current FCA/HM Treasury guidance.
For RWA token issuers, the practical implication is that the transfer and settlement infrastructure – whether on a public chain, a permissioned ledger or a hybrid – must be capable of carrying Travel Rule data. That engineering requirement feeds the smart-contract design phase. Issuers who build the token logic first and attempt to retrofit compliance architecture afterwards regularly encounter costly re-designs. We have seen this pattern across multiple sectors: real estate, trade finance, fund units. The answer is to engage compliance counsel at the architecture stage.
Secondary-market trading introduces the counterparty dimension. If tokens trade on a venue – whether a UK-based trading platform or an overseas exchange with UK user access – that venue's own AML and KYC obligations apply. The issuer cannot fully control secondary compliance, but it can design the token with transfer restrictions or on-chain whitelisting that limits trading to KYC-verified addresses. Whether such restrictions are legally effective and commercially workable is a structuring question that should be addressed before token issuance.
Cross-border tax and banking interaction
Taxation of RWA tokens in the UK is governed by substance: what right does the token represent, and what economic event occurs when it is issued, transferred or redeemed? HMRC does not apply a single tax treatment to all tokens. Income from token activity – yield distributions, staking rewards on tokenized assets – is likely to be treated as income rather than capital unless the facts strongly support a capital characterisation. The capital gains tax position on disposal of a security token that represents an underlying asset depends on the nature of the underlying right and the identity of the holder. These are jurisdiction-specific questions; tax counsel must be engaged early in the structure design.
Banking for RWA token projects in the UK remains challenging. UK-licensed banks and electronic-money institutions apply their own risk policies to crypto-adjacent businesses, and account opening for an issuer of tokenized assets – especially where the token is classified as a specified investment or where the investor base is international – requires a well-documented compliance programme and a clear regulatory-status statement. Operators who have not completed the FCA registration or authorisation process before approaching banks will find their options significantly narrowed.
The cross-border banking layer compounds this. An RWA token project that banks in the UAE, holds assets in Switzerland through a FINMA-regulated vehicle, and distributes tokens to EU investors must map three regulatory environments and three banking cultures simultaneously. In our cross-border practice, the projects that proceed smoothly are those that run the regulatory, tax and banking analysis in parallel rather than sequentially.
CTA #2 – If a prior structuring attempt stalled – whether at the FCA application stage, at account opening or at a cross-border tax complexity – a fresh legal read can identify the specific bottleneck and the route through it. If you have hit that wall, map your options with OBOLUS now.
Common mistake – Skipping the secondary-market analysis
A recurring error in RWA tokenization is treating the primary issuance and the secondary market as separate legal events rather than as parts of a single regulated activity. The FCA regime does not draw that line cleanly. Where an issuer creates a token that will trade on a secondary venue – even an overseas venue – the financial-promotion rules, dealing prohibitions and market-abuse framework can all be engaged from the moment of the initial design decision.
Operators we advise routinely underestimate the secondary-market footprint of their token. A token issued under an exemption for professional investors that subsequently trades on a public decentralized exchange accessible to UK retail users may invalidate the exemption analysis and trigger retrospective liability for the issuer. The answer is to design the token's technical transfer controls – on-chain whitelisting, jurisdiction-gated access – in a way that is legally consistent with the offering perimeter defined at Step 1.
A second common error: assuming that decentralization eliminates the issuer from the regulatory picture. It does not. Where the issuer retains administrative keys, controls an upgrade mechanism, or receives a fee from token activity, regulators in the UK – as elsewhere – will look through the decentralized architecture to the economic reality.
Decision points – Which operator profile suits which structure?
Profile A – Real-estate fund tokenizing UK property for international investors. The typical route is an English-law trust SPV holding legal title, with the token representing a beneficial interest under a declared trust. The collective investment scheme perimeter must be carefully assessed. FCA authorisation or reliance on an available exemption is required before marketing to retail investors; MLR registration is the floor. Banking should be structured through a regulated payment institution with documented crypto-business onboarding. Timeline to a compliant first issuance: materially longer than a non-tokenized fund structure, given the novel product review the FCA applies.
Profile B – Trade-finance receivables tokenization for institutional buyers. The token represents an assignment of receivables or a participation interest. Classification turns on whether this is a specified investment; it will often be. The offering can be structured under the professional-investor exemption if the buyer base is genuinely institutional. The AML and Travel Rule architecture must be built in from inception. Cross-border complications arise where the obligor on the receivable is in a non-English-law jurisdiction: the assignment must be effective under the governing law of the receivable, not only under English law.
Profile C – Infrastructure project using a utility token to give access to a tokenized physical asset. This is the highest-risk profile from a misclassification standpoint. If the token confers any economic upside from the asset – price appreciation, yield, a redemption right – the utility characterisation will not hold. We assess every utility-token structure against the full rights analysis before advising on the registration strategy.
Micro-matter – Tokenized real estate, cross-border structure
In a recent matter, a property-technology company sought to tokenize a portfolio of UK commercial properties for distribution to investors based primarily in the Gulf and Southeast Asia. The initial structure had been designed around a simple token-issuance model without a formal trust deed, without FCA registration, and without any secondary-market transfer restrictions. We were engaged after the token sale had been paused following questions from a prospective banking partner about the regulatory basis of the product. We restructured the asset-holding layer as an English-law bare trust, ran the classification analysis in both the UK and the UAE, advised on the MLR registration track, and designed the smart-contract transfer restrictions to limit secondary trading to whitelisted wallets. The project resumed on a documented compliance basis, and the banking relationship was established with a regulated UK payment institution within the quarter.
Related at OBOLUS
- DeFi, Tokenization and Smart-Contract Law – our core practice for on-chain legal structuring and regulatory advice
- Cross-chain bridge legal risk – legal risk analysis for bridge protocols under increasing regulatory scrutiny
- Crypto exchange setup in Liechtenstein – jurisdiction guide for operators considering the TVTG regime as an alternative EU-adjacent base
FAQ
Can a DeFi protocol be regulated?
Yes – in the UK, regulation follows economic function, not architectural form. A DeFi protocol that performs exchange, lending or asset-management functions may engage the FCA's regulated-activities perimeter regardless of whether it is operated by an identifiable legal entity. Where control exists – through admin keys, governance rights, fee extraction or an upgrade mechanism – regulators will attribute that control to an identifiable party. The absence of a central counterparty narrows but does not eliminate regulatory exposure.
What legal wrapper suits a DAO?
English law does not yet recognise a DAO as a distinct legal person. Without a wrapper, DAO members may be treated as a general partnership, exposing every member to unlimited joint liability. Practical options include a UK limited company with governance rights mapped to token holdings, a Scottish limited partnership, a Cayman or BVI foundation, or a Marshall Islands DAO LLC. The right choice depends on the DAO's activity, its member base and its regulatory obligations. Each wrapper carries different tax, liability and regulatory consequences.
Who is liable when a smart contract fails?
Liability for a smart-contract failure in the UK turns on the relationship between the parties, the governing terms and the cause of the failure. Where a bug in audited code causes loss, the auditor's professional liability may be engaged. Where the deployer retains upgrade or admin rights, the deployer bears the primary exposure. Where the failure is caused by an external oracle or a bridge exploit, liability analysis must trace each actor in the chain. In all cases, the governing-law clause in the associated legal documentation and the existence of a legally enforceable relationship between the parties will determine who can be sued, in which court, and on what cause of action.
OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance that sit around them. Digital assets are the whole of our practice. We assess token classification against the substance of rights, not the marketing label – because a mis-classification at the design stage is the most expensive mistake in a tokenization project. Our disputes team coordinates freezing relief and on-chain tracing across leading common-law forums when recovery is needed. To discuss your situation, contact info@oboluslaw.com.
By Roman Levitt, Technology and DeFi Counsel – specialising in smart-contract legal architecture, token classification and DeFi regulatory risk for on-chain businesses operating across multiple jurisdictions.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.