MiCA does not cover security tokens — and that is the expensive part
If your token is a transferable security or a fund unit, MiCA is not your regime. The rules that do apply are older, heavier and far better established — and mistaking one for the other is the costliest error in this market.
Last verified 3 September 2026
A founder arrives with a plan to tokenize a real-estate fund and a budget built around a MiCA authorisation. The budget is wrong, and not by a little. MiCA was never the regime for that instrument — and the discovery usually happens after money has been spent.
The boundary in one sentence
If a token qualifies as a MiFID financial instrument, it falls outside MiCA's product scope. A transferable security is a MiFID financial instrument. So is a unit in a collective investment undertaking. Tokenising either one does not change what it is; it changes how it is recorded.
This is not a loophole or an interpretation. It is how the regulation is scoped: MiCA governs crypto-assets that are not already covered by the existing financial-services framework. The European Commission, ESMA and national regulators such as the CSSF all publish this directly, and we link their material rather than paraphrasing it, because on a point this consequential their wording carries authority ours would not.
What applies instead
The alternative is not "nothing". It is the older and heavier stack:
- MiFID II — for the instrument itself and for anyone dealing, advising or operating a venue around it.
- The Prospectus Regulation — if you are offering to the public, with the disclosure obligations and exemptions that come with it.
- AIFMD or UCITS — if the vehicle is a fund, bringing the manager, the depositary and marketing restrictions into scope.
- Market abuse, CSDR and national law — depending on the instrument and where it trades.
- The EU DLT Pilot Regime — which can apply to eligible tokenised financial instruments and the infrastructures that trade and settle them.
None of that is lighter than MiCA. That is the point people miss when they hear "MiCA does not apply" and read it as good news.
Why the mistake is expensive
Three distinct costs follow from getting this wrong, and they compound.
The wrong budget. A CASP authorisation and a regulated fund launch are not the same order of expense, and neither is a substitute for the other. Our cost index shows advisers quoting year-one MiCA CASP costs anywhere from EUR 92,000–110,000 to EUR 415,000–690,000 — and both can be right, because they are pricing different scopes of the same authorisation. If the instrument was a security all along, that entire line was the wrong question.
The wrong adviser. Crypto-regulatory specialists and securities or funds lawyers are frequently different people. Scoping the work as MiCA tends to route it to the first group, and the classification question — the one that decides everything downstream — gets answered late by whoever is already engaged.
The wrong structure. Decisions about the wrapper, the transfer restrictions and who may hold the token get made under one regime's assumptions and then have to survive another's. Unwinding that after investors are on the register is materially harder than getting it right at the scoping stage.
The one question to settle first
Before jurisdiction, before platform, before cost: what right does the token represent, and would that right be a financial instrument if no blockchain were involved? Everything else follows from the answer, and the answer is a legal conclusion about your specific rights and structure — not something a comparison page can give you.
Two practical notes. First, a project can contain both: an out-of-scope security token and MiCA-regulated crypto-assets or services, such as a stablecoin settlement leg. These are classified separately, and "MiCA does not apply" to one part says nothing about the other. Second, "outside MiCA" is never the same as "unregulated" — if you hear it used that way, treat it as a signal about the adviser.
Where to go next
- Compare what each regime actually licenses in the jurisdiction matrix — including Luxembourg for EU fund structures and Liechtenstein, whose TVTG predates MiCA and coexists with it.
- See what a classification opinion is actually called and costs in token legal opinions.
- Read the regulators directly: the European Commission on crypto-assets, ESMA on MiCA, and the CSSF.
Reference material, not legal advice. Classification depends on your specific rights, structure and distribution — get it from counsel licensed where you are issuing.