By Stylianos Kampakis PhD, CEO, Tesseract Academy
In this CAIA mini-course, we introduce the work of Stylianos Kampakis PhD, CEO of Tesseract Academy, and member of the Quantum Finance Boardroom. Each installment of this series will present a new chapter in Dr. Kampakis’ work on real estate tokenization.
Legal & Regulatory Map (high‑level links)
When dealing with real assets and investors, legal and regulatory compliance is paramount. Tokenization does not exist in a lawless void – in fact, in most cases a tokenized asset is still subject to the same laws that would apply off-chain. The twist is figuring out how those laws map onto a blockchain-based system. Here we outline the high-level regulatory landscape and key points to keep in mind.
- Securities Laws: A crucial question to ask is: Does my token represent something that regulators would classify as a security (such as a stock, bond, investment contract, etc.)? If yes (and for real estate tokens that represent equity or debt, the answer is almost always “yes” in major jurisdictions), then all the usual securities laws apply. For example, in the United States, tokens that represent investment in a common enterprise with an expectation of profit (the classic Howey Test definition of a security) will be regulated by the SEC like any other security. The SEC has even published an analytical framework for digital assets to help determine if a token is a security. If it is, you need to either register the offering or fit it under an exemption (like a private offering to accredited investors, etc.), and secondary trading may need to occur on a registered platform (like an ATS – Alternative Trading System).
- Jurisdiction matters: Different countries have taken different approaches to tokenized assets:
- European Union: The EU recently passed MiCA (Markets in Crypto-Assets Regulation) in 2023, which creates a framework for certain crypto assets. However, MiCA largely excludes tokenized versions of traditional securities (shares, bonds, etc.), because those are expected to follow existing securities laws (MiFID II and others). So if you tokenize equity in the EU, you likely treat it like issuing normal securities (with prospectus requirements, etc.), not rely on MiCA (which is more for things like utility tokens or stablecoins).
- United Kingdom: The UK has shown support for tokenization, e.g. the Investment Association proposed a blueprint for fund tokenization. The UK Law Commission has been working on recognizing digital assets in law (proposing a new category of personal property for them). The main idea is to clarify how ownership of a token is recognized legally. While generally the same principles apply (a security token is a security), the UK is modernizing its laws to ensure tokens are properly covered as property.
- Switzerland: Switzerland was an early mover – it passed a DLT Act that updated laws to recognize ledger-based securities. They also created a new type of license for trading venues (the “DLT Trading Facility”). Swiss regulator FINMA has approved infrastructure like SDX (SIX Digital Exchange) to operate a stock exchange for digital securities. So in Switzerland you can natively issue a token that is recognized as a security in law (a ledger-based security) and trade it on a regulated digital exchange.
- Singapore: The Monetary Authority of Singapore (MAS) has been supportive through initiatives like Project Guardian (pilot projects exploring tokenization of finance). Singapore allows licensed platforms like ADDX to offer tokenized securities to investors under its regulatory sandbox and licensing regimes. Essentially, Singapore treats tokenized securities similarly to traditional ones, but is actively encouraging experimentation under regulatory supervision.
- Hong Kong: The Securities and Futures Commission (SFC) in Hong Kong permits tokenization of certain products (like funds) for distribution to investors, provided the products are already SFC-authorized and certain safeguards are in place. They have issued guidance for intermediaries dealing with tokenized securities, emphasizing that standard rules still apply (e.g., suitability checks, proper custody, etc.).
- United Arab Emirates (Dubai/Abu Dhabi): Dubai’s Virtual Asset Regulatory Authority (VARA) has its own comprehensive framework for virtual assets, including provisions for issuance of tokens. In Abu Dhabi, the ADGM’s Financial Services Regulatory Authority treats digital securities within its existing markets framework and has detailed guidance dating back to 2018, updated over time. They basically allow tokenized securities but within the context of recognized regulatory structure (brokers, exchanges, etc. need approval).
- European Union: The EU recently passed MiCA (Markets in Crypto-Assets Regulation) in 2023, which creates a framework for certain crypto assets. However, MiCA largely excludes tokenized versions of traditional securities (shares, bonds, etc.), because those are expected to follow existing securities laws (MiFID II and others). So if you tokenize equity in the EU, you likely treat it like issuing normal securities (with prospectus requirements, etc.), not rely on MiCA (which is more for things like utility tokens or stablecoins).
(These are just examples; the regulatory environment is evolving. Always consult legal experts in the relevant jurisdiction when planning a token offering.)
- Key universal principles: Despite regional differences, some principles are consistent:
- If your token represents equity, debt, or a share in profits, investor protection laws are likely in play. This means requirements on disclosure (informing investors properly), suitability (selling to appropriate people), and ongoing reporting.
- Secondary trading restrictions: After issuing, you often can’t just let anyone trade with anyone. Many jurisdictions require using regulated intermediaries (like broker-dealers) or platforms for matching buyers and sellers of security tokens. Peer-to-peer transfer might be allowed in private markets, but only among qualified parties. The token’s built-in restrictions (whitelists, etc.) help enforce this by only letting authorized investors hold it.
- KYC/AML and record-keeping: No matter where you are, regulators will expect that you know who your investors are (KYC) and are monitoring for illicit financial activity (AML – Anti-Money Laundering checks). Just because it’s a token doesn’t exempt you from checking that Bob isn’t on a sanctions list or that Alice isn’t laundering money. In fact, because tokens can move easily, it’s even more important to bake in those controls. Also, you must maintain proper records of ownership – regulators may want to see a clear audit trail of who owned the security when (the blockchain can help here if used well).
- No techno-bypasses: A phrase to remember is “token = security certificate.” The token is just a new form of representing the investment. It doesn’t change the nature of the investment. So you generally can’t avoid a law by saying “but we use blockchain.” Regulators have been very clear on this: substance over form.
- If your token represents equity, debt, or a share in profits, investor protection laws are likely in play. This means requirements on disclosure (informing investors properly), suitability (selling to appropriate people), and ongoing reporting.
- Legal wrapper: Always have a solid legal wrapper around the token. For example, if using an SPV, its operating agreement should clearly describe the token and the rights it conveys (dividends, voting, etc.). The token might also reference this off-chain contract (some tokens include a field that points to a legal document URL or an IPFS hash of the prospectus/offering memorandum for transparency).
- Investor agreements: In many cases, token offerings are done as private placements to accredited or institutional investors. Investors might sign a subscription agreement or accept terms that include how the token can be used, any transfer restrictions, etc. Those terms should match what the smart contract enforces to avoid any disconnect between what the code does and what the legal promise is.
Jurisdiction of the blockchain: Interestingly, some laws consider the location/jurisdiction of where the security is “issued.” With blockchain, if you issue on Ethereum, which jurisdiction is that? Typically, regulators focus on where the issuer and investors are, not where the nodes are, but we’re in evolving territory. Some legal systems (like Liechtenstein, or France to some extent) have laws acknowledging on-chain transfers as legally effective if certain conditions are met.
Learn more about CAIA Association and how to become part of a professional network that is shaping the future of investing, by visiting https://caia.org/


