Regulated entities planning to issue a stablecoin face a classification question that is simultaneously a licensing question, a capital question and a cross-border question. The answer determines which regulatory regime governs the issuance, which authorisation is required before a single token reaches a user's wallet, and whether the issuer's existing licences cover the activity or leave it dangerously exposed. A mis-classification — treating an asset-referenced token (a token whose value is stabilised by reference to a basket of assets or currencies) as a mere utility token — can reframe an entire product launch as an unauthorised offering.
This page maps the authorisation path for regulated entities seeking to issue a stablecoin, with particular focus on the MiCA regime (the EU's Markets in Crypto-Assets Regulation, supervised by ESMA and national competent authorities) alongside the frameworks operated by VARA in Dubai, ADGM/FSRA in Abu Dhabi, MAS in Singapore and the FCA in the United Kingdom. The analysis addresses the process, the common structural mistakes, the cross-border interaction between issuer domicile and user jurisdiction, and the decision logic a regulated entity should apply before committing to a structure.
Why Stablecoin Issuance Is a Distinct Regulatory Event
Issuing a stablecoin is not the same regulatory act as trading one. A regulated entity — a licensed exchange, a custody provider, a payment institution — that decides to issue its own stablecoin steps outside its existing permissions and into a separate, often more demanding, authorisation category. That distinction is frequently underestimated.
Under MiCA, the two principal stablecoin categories each carry their own authorisation obligations. An e-money token (EMT) — a token that purports to maintain a stable value by reference to the value of one official currency — can only be issued by a credit institution or an authorised e-money institution. An asset-referenced token (ART) — a token that references a basket of assets, currencies or other crypto-assets — requires a dedicated ART authorisation from a national competent authority, with ESMA holding a supervisory role for issuers that reach systemic thresholds. Neither category is a lighter-touch registration; both require a formal whitepaper, reserve management and redemption obligations, and ongoing prudential supervision.
The position in Dubai under VARA is structured differently. VARA's activity-based licence categories include transfer and settlement services, and a stablecoin issuance that is used as a settlement medium sits within that framework. An entity already licensed by VARA for exchange or brokerage does not automatically hold the additional permissions required to issue a stablecoin; a separate activity approval is required. We regularly advise VARA-licensed operators on the scope of their existing permissions before a stablecoin product is developed, precisely because the cost of a scope error is an enforcement referral.
MAS in Singapore applies its own token classification analysis under the Payment Services Act. A digital payment token issued as a stablecoin may require a major payment institution licence if the issuer crosses relevant thresholds, and the reserve and audit expectations for stablecoin issuers have been tightened materially since MAS published its stablecoin regulatory approach. The FCA in the United Kingdom is progressing its own stablecoin issuance regime, with systemic stablecoin issuers expected to fall under Bank of England oversight; the timeline for full implementation is a matter operators should monitor actively.
The cross-border angle is immediate. A regulated entity incorporated in one jurisdiction but issuing tokens to users in several others must satisfy the regime of the issuer jurisdiction and, depending on the reach of each target regime, may also need to satisfy the rules of the user jurisdictions. MiCA's whitepaper obligations, for instance, are triggered by offers to the public in any EU member state, regardless of where the issuer is domiciled.
For a scoped assessment of your stablecoin issuance structure, contact OBOLUS at info@oboluslaw.com. The process above describes the standard path. Your facts — the entity type, the reference asset, the user geography — change the analysis materially. Map your options
How Does Token Classification Determine the Authorisation Path?
Token classification is the threshold question, and it turns on substance — the rights conferred on the holder — not on the label chosen by the issuer. A whitepaper that describes a token as a "utility token" or a "points system" does not insulate the issuer from a regulatory authority that reaches a different conclusion on the underlying rights structure. In our practice, we assess classification against the economic and legal substance of the token before any marketing document is drafted.
The relevant classification axes are: (i) whether the token's value is algorithmically stabilised, reserve-backed or simply market-priced; (ii) whether the holder has a redemption right against the issuer; (iii) whether the token is denominated by reference to a single official currency or a multi-asset basket; and (iv) whether the token confers any profit participation or governance right that could constitute a financial instrument under the applicable securities law.
Under MiCA, a token with a direct redemption right against the issuer at par value and denominated in a single currency will typically be an EMT. Reserve-backed tokens pegged to a basket are ARTs. Tokens that are neither — speculative crypto-assets without a stabilisation mechanism — fall into MiCA's general "other crypto-assets" category, with a lighter whitepaper regime but no authorisation requirement. The boundary between ART and an EMT-like instrument is genuinely contested in some product designs, and the cost of landing on the wrong side is a post-launch re-authorisation.
The securities law dimension adds a further layer. Where a stablecoin confers rights — yield, governance votes, profit participation — that resemble those of a transferable security, the issuer must also assess whether the applicable securities law regime (MiFID II in the EU, the Securities and Futures Ordinance in Hong Kong, the Securities and Exchange Act in the United States) is engaged. A token offering that crosses into a securities offering triggers prospectus, registration and broker-dealer obligations that no stablecoin-specific regime displaces.
We structure the classification analysis as a written opinion delivered before the product architecture is finalised. That sequencing matters. Re-engineering a token's rights structure after a whitepaper has been published and a community has formed is significantly more costly — operationally and reputationally — than building the correct structure from the outset.
What Does the MiCA Authorisation Process Require of a Stablecoin Issuer?
A regulated entity seeking ART authorisation under MiCA must satisfy its national competent authority on a set of substantive requirements before the first token is issued — not as a concurrent workstream, but as a precondition. The MiCA authorisation process for an ART issuer is among the more demanding in the global stablecoin field.
The application package includes a detailed whitepaper (the mandatory disclosure document under MiCA, covering the token's rights, the reserve composition, the redemption mechanism and the risk factors), a governance and internal-controls description, a business plan, and evidence of the issuer's own-funds adequacy against the applicable minimum. For EMT issuers, the pathway runs through the e-money institution authorisation rather than a standalone MiCA application, meaning that an entity without an existing EMI licence must first obtain one — a process that is measured in months, not weeks.
The whitepaper under MiCA is a regulated document. It is not a marketing document that happens to contain disclosures. It must be approved by the competent authority, published in a prescribed format, and kept current. An operator who treats the whitepaper as a legal formality to be handled after the commercial structure is set will face requests for material amendment that restart the review clock.
For ART issuers that reach the thresholds at which ESMA designates an ART as "significant", a more intensive supervisory regime applies, including direct ESMA oversight alongside the home NCA. Reserve management obligations intensify, and the issuer must maintain a sufficient liquidity buffer. The significance thresholds are set in the regulation; operators planning issuances at scale should model against them from the outset.
The passporting benefit is significant. A MiCA authorisation in one EU member state permits the issuer to offer the token across the entire EU/EEA without separate per-country authorisations. For an issuer targeting European users from a single domicile — Malta, Lithuania and Ireland are among the frequently considered options — this is the structural advantage that makes MiCA authorisation worth the investment in the application process.
One practical note: member states are at varying stages of implementing their MiCA supervisory infrastructure. The timeline from application submission to authorisation varies by competent authority. We work with allied counsel in the relevant jurisdiction to track the current processing posture at each NCA before recommending a domicile for a new ART issuer.
What Are the Reserve and Redemption Obligations That Bind a Stablecoin Issuer?
Reserve and redemption obligations are the operational core of stablecoin regulation. They represent the point at which a licensing question becomes a treasury management question and a banking question simultaneously. A regulated entity that clears the authorisation process but has not mapped its reserve structure to the applicable regime's requirements will face supervisory findings — and, in the worst case, token suspension orders — after launch.
Under MiCA, ART and EMT issuers are required to hold a reserve that is fully segregated from the issuer's own assets, composed in a prescribed manner, and subject to audit and reporting obligations. The reserve must be custodied with credit institutions or, in certain cases, with authorised crypto-asset custodians. The principle — reserve assets must be liquid, low-risk and ring-fenced — is fixed in the regulation; the detailed composition rules are supplemented by delegated acts and regulatory technical standards issued by ESMA.
Redemption rights under MiCA are mandatory. Holders of an ART or EMT have a right to redeem at par value at any time, and the issuer must maintain the reserve in a state that can satisfy redemption demand without suspension. This is a materially different obligation from the redemption terms that some earlier stablecoin issuers built into their structures — soft redemption windows, minimum holding periods, or redemption at the issuer's discretion. MiCA forecloses those structures for tokens offered to EU users.
Outside the EU, the reserve and redemption picture is less uniform. MAS in Singapore requires stablecoin issuers to hold reserves in cash or cash equivalents held at Singapore-regulated financial institutions. VARA in Dubai has its own reserve expectations for stablecoin issuers operating within its mainland perimeter. The FCA's emerging stablecoin regime is expected to require systemic issuers to meet Bank of England standards on reserve composition and redemption.
The cross-border tension is real. An issuer who structures reserves to satisfy MiCA may find that the MAS standard requires a different asset composition or a different custodian profile. We structure the reserve framework analysis as a multi-regime exercise, identifying the most demanding applicable standard and engineering the reserve to satisfy it — so the issuer does not need to maintain parallel reserve structures for each regulated market.
If a prior application stalled or a reserve structure was questioned by a regulator, a second read can surface the structural reason and the route forward. Contact OBOLUS at info@oboluslaw.com or map your options.
Common Structural Mistakes in Stablecoin Issuance Authorisation
The most consequential structural mistakes in stablecoin issuance are made before an application is filed. They are decisions — about the token's rights architecture, the issuer entity, the reserve custodian or the user geography — that are commercially rational in isolation but create regulatory incompatibilities that surface only when the competent authority begins its review.
The first and most common mistake is treating the token classification analysis as a formality. A common assumption is that a utility label on a whitepaper settles the legal classification. It does not. Regulators assess classification against the substance of the rights the token confers. An issuer who proceeds on the basis of the intended classification — without a written analysis that traces each element of the token's rights structure to the applicable framework — is carrying unquantified regulatory risk into the application.
The second mistake is domiciling the issuer entity without modelling the regulatory implications. The choice of issuer jurisdiction affects the required authorisation type, the competent authority, the reserve custodian eligibility, and the passporting scope. A payment institution incorporated in an EU member state with an EMI licence is closer to EMT issuance than a BVI holding company; the holding company structure may offer other advantages but requires a separate authorisation entity to be established.
The third mistake is treating banking as a downstream problem. Reserve custodians for stablecoin issuers are a constrained pool. Credit institutions that are willing to hold ring-fenced reserve assets for a stablecoin issuer, subject to the segregation and reporting obligations, are not numerous. Operators who complete the authorisation process without first confirming that a qualifying custodian will accept the mandate face a post-authorisation bottleneck that can delay launch by several months.
In our cross-border practice, we have seen operators reach advanced stages of the MiCA ART application process before discovering that their proposed reserve custodian did not satisfy the MiCA custodian eligibility criteria. The resolution required restructuring the reserve architecture and re-engaging the competent authority with an amended application. Earlier diligence would have avoided both the delay and the cost.
The fourth mistake is publishing the whitepaper before the authorisation is granted. Under MiCA, the whitepaper is a pre-issuance document, not a post-authorisation formality. But where an operator has publicised a whitepaper — particularly one that describes rights and redemption mechanics — the competent authority may treat that publication as an offer to the public that triggered obligations the operator has not yet satisfied.
How Does Cross-Border Geography Affect the Authorisation Stack?
The geography of a stablecoin's users is as legally significant as the geography of its issuer. Most major stablecoin regulatory regimes attach obligations at the point of offer or use, not only at the point of issuance. A regulated entity that issues a stablecoin from a single jurisdiction but distributes it to users across multiple markets must assess each target market's applicable regime — and the absence of a local licence does not constitute a safe harbour.
The EU dimension is the most immediate for issuers targeting European users. MiCA's whitepaper and authorisation obligations apply to any offer to the public within the EU, regardless of the issuer's home jurisdiction. An issuer domiciled in Dubai, Singapore or the United States who distributes a stablecoin to EU users without the applicable MiCA authorisation is exposed to enforcement action by the relevant EU national competent authority. Geographic blocking is a practical risk-management tool but requires robust implementation and ongoing monitoring.
For an issuer targeting users across the Gulf Cooperation Council, the interaction between VARA's mainland Dubai perimeter and ADGM/FSRA's Abu Dhabi perimeter is a recurring question. The two regimes are distinct; an activity licence from VARA does not extend to the ADGM financial free zone, and vice versa. Operators targeting both Dubai and Abu Dhabi users, or operating from a holding structure that spans both free zones, require a mapped authorisation strategy that addresses both regimes.
Singapore and Hong Kong represent a distinct regional pair. MAS under the Payment Services Act and the SFC under Hong Kong's VASP licensing regime each apply their own stablecoin classification and issuance rules. For an operator building a stablecoin product for distribution across South-East Asia and the wider Asia-Pacific region, the question of whether to domicile the issuance entity in Singapore, Hong Kong, or a third jurisdiction — and whether allied counsel are in place in each target market — is a structural decision that cannot be deferred to the post-launch phase.
Tax residency of the issuer entity and the characterisation of reserve income under local tax law also interact with the choice of issuer domicile. Reserve assets typically generate yield; the tax treatment of that yield — whether it flows to the issuer or to a separate reserve-management vehicle, and how it is characterised in each applicable jurisdiction — is a structuring question that we address as part of the authorisation mandate, not as a separate downstream workstream. We structure licensing, banking and tax as one mandate rather than three disconnected workstreams.
Decision Matrix: Which Profile Should Choose Which Authorisation Path?
The authorisation path for a stablecoin issuer depends on four variables: the entity type and existing licences, the reference asset and token rights structure, the target user geography, and the reserve custodian available. The matrix below describes the principal profiles and their corresponding paths.
Profile A: EU-licensed e-money institution seeking to issue a single-currency stablecoin for EU users. The natural instrument is an EMT under MiCA, issued directly from the existing EMI entity. The authorisation requirement is a compliant whitepaper filed with the home NCA, reserve composition aligned to MiCA delegated acts, and mandatory redemption mechanics. The timeline from application to authorisation varies by NCA; operators should model for a process measured in months. Key risk: reserve custodian eligibility and NCA processing capacity at the chosen domicile.
Profile B: VARA-licensed Dubai exchange seeking to issue a dirham-pegged stablecoin for Gulf-region users. The required instrument is a VARA activity approval covering transfer and settlement services, together with VARA's specific stablecoin guidelines. The existing exchange licence does not extend to issuance. Cross-border risk: if UAE users access the token from within the EU through a secondary market, MiCA's offer-to-the-public trigger may be engaged. Allied counsel in the EU should be instructed in parallel if European distribution is anticipated.
Profile C: Payment institution domiciled outside the EU or UAE, targeting a global user base. This profile requires a multi-regime analysis before an issuer entity is selected. The MiCA, MAS, FCA and VARA regimes each impose distinct requirements, and no single jurisdiction's authorisation covers all four. The recommended approach is to sequence authorisations by the size of the target user population in each regime, beginning with the most demanding, and to structure the issuer entity and reserve custodian to satisfy the most restrictive common standard. Timeline: the combined authorisation stack is a multi-year project at scale; phased geographic rollout is the standard commercial approach.
Profile D: Regulated entity with an existing banking or credit institution licence seeking to issue a basket-referenced ART for institutional use. An ART authorisation under MiCA is available to credit institutions without a separate entity establishment requirement. The authorisation application must address the basket composition, the reserve management framework, and the redemption mechanism. The significance threshold analysis — determining whether ESMA will take on a direct supervisory role — should be modelled before the application is filed, as the additional compliance infrastructure required for a significant ART is materially more demanding than for a standard ART.
Related at OBOLUS
Related at OBOLUS
- Token Offerings & Securities for Digital Asset Businesses – practice overview covering the full token classification and offering regime
- MiCA Whitepaper Review for Established Operators – legal review and approval-ready drafting of MiCA whitepapers
- Stablecoin Issuance Authorisation for Established Operators – parallel service for operators not yet in the regulated category
FAQ
Is my token a security?
Token classification turns on the rights conferred, not the label applied. If a token grants profit participation, a share of revenue, or governance rights over a profit-generating enterprise, most major regimes — including MiFID II in the EU and the securities law frameworks applied by the SFC in Hong Kong and the SEC in the United States — will consider it a financial instrument. A written classification opinion, assessed against the applicable regime's substantive criteria, is the only reliable basis for a launch decision. We assess classification against the substance of rights, not the marketing label.
Do I need a MiCA whitepaper?
A MiCA whitepaper is required before any public offer of a crypto-asset — including a stablecoin structured as an ART or EMT — to users within the EU, regardless of the issuer's domicile. The whitepaper must be approved by the relevant national competent authority prior to publication, and it must follow the prescribed disclosure format. Certain exemptions exist — for offers below a defined threshold, for offers to qualified investors only, or for tokens that qualify as e-money under existing e-money regulation — but each exemption requires its own legal assessment before it can be relied upon.
How should an airdrop be structured legally?
An airdrop — the free distribution of tokens to wallet addresses — is not automatically exempt from the regulatory obligations that apply to a token offering. Under MiCA, a distribution that constitutes an offer to the public triggers whitepaper and authorisation obligations, even if no payment is required from recipients. The structuring question is whether the airdrop is genuinely gratuitous, or whether it forms part of a broader commercial arrangement that is, in substance, an offer. Legal review before the airdrop mechanism is designed — not after the distribution list is compiled — is the correct sequencing.
About OBOLUS
OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance that sit around them. Digital assets are the whole of our practice. We assess token classification against the substance of rights rather than the marketing label, and we structure licensing, banking and tax as one mandate rather than three disconnected workstreams. To discuss your stablecoin issuance structure, contact info@oboluslaw.com or message us at t.me/oboluslaw.
By Roman Levitt, Technology & DeFi Counsel — specialising in token classification, stablecoin structuring and cross-border regulatory authorisation for digital-asset issuers.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.