What the token is decides filing or authorisation. In the EU an ordinary crypto-asset needs a notified white paper, an asset-referenced token needs authorisation, and an e-money token may only be issued by a credit or electronic money institution. Switzerland classifies by economic function and treats asset tokens as securities. Hong Kong's licence follows the Hong Kong dollar peg, issued in the course of business in or outside Hong Kong.
The three numbers that decide which MiCA route you are on
The first question is not which regulator to approach but whether your token sits inside the crypto rulebook or the securities rulebook. The full selection path is in the licence selection guide; Singapore is covered separately in which Singapore crypto licence you need.
Four things to hold on to
- A white paper is a filing, not an approval. MiCA Article 4(1) requires a legal person and a white paper drawn up under Article 6, notified under Article 8 and published under Article 9 — and no regulator signs it off.
- There is no standalone EU stablecoin licence. Article 48(1) requires the issuer of an e-money token to be "authorised as a credit institution or as an electronic money institution".
- Article 2(4) takes financial instruments, deposits and funds out of MiCA entirely — a tokenised bond is a prospectus problem. And the US test changed on 17 March 2026: the SEC's 2019 framework page now carries the word "(Withdrawn)".
- Where no authorisation is required, anti-money-laundering status usually still is. FINMA treats issuing a payment token as issuing a means of payment.
Is your token even inside the crypto rulebook?
Not necessarily. MiCA Article 2(4) states that the Regulation "does not apply to crypto-assets that qualify as one or more of the following: (a) financial instruments; (b) deposits, including structured deposits; (c) funds, except if they qualify as e-money tokens". A tokenised equity or debt instrument is therefore not a MiCA question at all — it is a MiFID and prospectus question.
Start there, because it is the cheapest answer available; Article 2(3) removes crypto-assets that are "unique and not fungible with other crypto-assets" as well. Switzerland reaches the same fork by another road. In its ICO guidelines of 16 February 2018, FINMA classifies tokens by economic function — payment, utility and asset tokens — and states flatly that "FINMA treats asset tokens as securities". It also closes the obvious escape: the categories "are not mutually exclusive", and for hybrid tokens "the requirements are cumulative". A token that both grants access and promises a share of revenue carries both sets, not the lighter one. Definitions are in the glossary.
What are the three MiCA issuance routes, and which figures decide them?
Three, and the Title decides the burden. Title II covers any crypto-asset that is neither an ART nor an EMT: a legal person and a notified white paper, with the white-paper obligations disapplied below 150 persons per Member State acting on their own account, or EUR 1 000 000 over 12 months. Title III asset-referenced tokens need authorisation under Article 21. Title IV e-money tokens have no exemption at all.
The three MiCA issuance routes and the thresholds that decide them
| Route | What is required | The figures that matter |
|---|---|---|
| Crypto-asset other than ART or EMT (Title II) | Legal person, white paper drawn up, notified and published | White-paper obligations disapplied below 150 persons per Member State acting on their own account, or EUR 1 000 000 total consideration over 12 months |
| Asset-referenced token (Title III) | Authorisation under Article 21, or already a credit institution | Exempt while average outstanding value never exceeds EUR 5 000 000 over 12 months and the issuer is not linked to a network of other exempt issuers; own funds the highest of EUR 350 000, 2% of the average reserve, or a quarter of prior-year fixed overheads |
| E-money token (Title IV) | Already authorised as a credit institution or an electronic money institution, plus a notified and published white paper | No small-issuer exemption in Article 48(1) |
Article 4(3) goes further than exemption and disapplies Title II altogether where the token is free, is created automatically as a reward for maintaining the ledger or validating transactions, or "concerns a utility token providing access to a good or service that exists or is in operation". Read that last clause slowly: a roadmap is not a service in operation. What counts as free is narrower than it sounds — see the airdrop question below. The service-provider half of MiCA is covered in which CASP services you trigger.
Why is a stablecoin the heaviest route in every rulebook?
Because the holder has a payment claim against the issuer, and every banking statute has a name for that. In the EU, Article 48(1) allows an e-money token to be offered only by an issuer already "authorised as a credit institution or as an electronic money institution", with a white paper notified and published under Article 51. There is no proportionate route for a small issuer.
The adjacent payment and card-issuing permissions are compared in EMI vs API vs MPI. Switzerland reaches the same weight through deposit law. In Guidance 06/2024 FINMA states that because holders have a payment claim at any time, "these claims are usually categorised as deposits under banking law or collective investment schemes". The exit is Article 5 para. 3 let. f of the Banking Ordinance: funds guaranteed by a bank are not deposits from the public. FINMA records the practice around it: various Swiss stablecoin issuers use bank default guarantees, and so need no banking licence, only affiliation to a self-regulatory organisation as a financial intermediary.
"Although these requirements increase depositor protection, they are not comparable to the level of protection afforded by a banking licence."FINMA Guidance 06/2024, 26 July 2024
Hong Kong adds the reach that catches issuers who never planned to go there. When the Stablecoins Bill passed on 21 May 2025, the government stated that any person who, in the course of business, issues a fiat-referenced stablecoin in Hong Kong, or issues one referenced to Hong Kong dollars "in or outside Hong Kong", needs a licence from the Monetary Authority. Advertising is caught too: at all times, "including the six-month non-contravention period", only advertisements of licensed issuance are allowed. The Hong Kong MSO route is a separate question — see can an MSO or MSB cover a crypto business.
What changed in the United States on 17 March 2026?
The trigger moved from what the token is to what the issuer said. The SEC's 2019 Framework for "Investment Contract" Analysis of Digital Assets now carries its own obituary in the page title: "(Withdrawn) [Superseded by Application of the Federal Securities Laws to Certain Types of Crypto Assets and Certain Transactions Involving Crypto Assets (Mar. 17, 2026)]".
The fact sheet for the replacement says the Commission issued it to "provide a coherent token taxonomy". Three of the five categories are not securities: digital commodities, digital collectibles and digital tools — "crypto assets that perform a practical function, such as a membership, ticket, credential, title instrument, or identity badge". Stablecoins are not securities only as a "payment stablecoin issued by a permitted payment stablecoin issuer" under the GENIUS Act. Digital securities are securities.
The operative part is the second limb of the investment-contract (Howey) analysis. A non-security crypto asset becomes subject to an investment contract when the issuer offers it "by inducing an investment of money in a common enterprise with representations or promises to undertake essential managerial efforts from which a purchaser would reasonably expect to derive profits". Your marketing is now part of the classification: the same token, sold with a buy-and-burn commitment attached, is a different legal object.
What survives when no authorisation is required?
Anti-money-laundering status, usually — and it is often the only filing you make. FINMA's ICO guidelines state that "the issuing of payment tokens constitutes the issuing of a means of payment subject to this regulation as long as the tokens can be transferred technically on a blockchain infrastructure", and that AML status carries "the obligation either to affiliate to a self-regulatory organisation (SRO) or to be subject directly to FINMA supervision".
For stablecoins FINMA is blunter: the AML Act "is almost always applicable". The Swiss route end to end is in the complete SRO application process. One boundary matters: FINMA notes that token issuance normally creates no repayment claim and so is not a deposit, but "if, however, there are liabilities with debt capital character (e.g. promises to return capital with a guaranteed return), the funds raised are treated as deposits and there is a requirement under the Banking Act to obtain a licence unless exceptions apply." One sentence of guaranteed return in a white paper moves the project into banking law.
Frequently asked questions
Is an airdrop outside MiCA because nobody paid for the token?
Not automatically. Article 4(3) disapplies Title II where a crypto-asset is offered for free, but the same Article states that a crypto-asset is not considered to be offered for free where purchasers must provide personal data to the offeror in exchange for it, or where the offeror receives "any fees, commissions, or monetary or non-monetary benefits in exchange for that crypto-asset". A connect-and-sign-up campaign usually fails that test on the personal-data limb.
Our token is a tokenised bond. Which MiCA route applies?
None. Article 2(4) provides that MiCA does not apply to crypto-assets that qualify as financial instruments, deposits or funds other than e-money tokens. A tokenised bond is a financial instrument, so the applicable regime is securities law and the prospectus rules, not MiCA's white paper.
If the token is not a security, are we finished?
Only on the securities question. The AML analysis is separate and often the binding one: FINMA treats issuing a payment token as issuing a means of payment, which carries the obligation to affiliate to a self-regulatory organisation or be supervised directly by FINMA. A clean securities answer says nothing about AML status.
Before you file
This article states the wording of published regulatory documents. It is not legal advice. Whether any application is approved, and how long a regulator takes, is the regulator's discretion, and we promise neither. CryptoLicense is the licensing advisory brand of CL GLOBAL SDN BHD (1421939-T), in this business since 2020, with 100+ companies served across 10+ jurisdictions — the registration numbers are on the entity proof page. For the model-to-licence matrix, see which licence a crypto exchange needs.
Part of a series: the full guide is licence selection.