Real-world asset (RWA) tokenization, the process of converting physical assets like real estate, bonds, and commodities into blockchain-based digital tokens, is rapidly expanding, but the regulatory framework treating these tokens as securities rather than cryptocurrencies is creating a complex compliance landscape for issuers across the US, EU, UK, and Asia. The legal challenge isn't the technology itself; it's the classification. Most tokenized real-world assets fall under securities law, and the rules that apply depend on where you issue, where you sell, and who you buy the tokens.

Why Are Regulators Treating RWA Tokens as Securities?

When you tokenize a real-world asset, you're not creating the asset itself on the blockchain. Instead, you're creating a digital claim on that asset, wrapped in a legal structure that defines what the token holder owns, what they can do with it, and what protections they have. If the token represents an investment contract where holders expect profit from the efforts of others, it qualifies as a security token under most jurisdictions' laws.

Real estate tokens, bond tokens, and fund interest tokens almost always fall into this category. This classification triggers full securities regulation, which is far more stringent than the lighter-touch rules that apply to many cryptocurrencies. The distinction matters enormously because it determines which regulators oversee the project, what disclosures are required, and how the tokens can be marketed and sold.

What Are the Main RWA Categories and Their Regulatory Homes?

Different types of tokenized assets face different regulatory requirements depending on their underlying nature and the jurisdiction where they're issued. Here's how regulators are categorizing the most common RWA types:

• Real Estate Tokens: Classified as security tokens and subject to securities law, property law, and anti-money laundering (AML) requirements across all major jurisdictions.
• Tokenized Bonds: Treated as security tokens with prospectus requirements and MiFID II compliance obligations in the EU, a regulatory framework governing investment services and markets.
• Commodities (Gold, Oil, Agricultural Products): Classification varies by jurisdiction; in the US, the Commodity Futures Trading Commission (CFTC) may have jurisdiction if they're traded on derivatives markets, while the EU applies MiFID II rules.
• Art and Collectibles: Fractional ownership tokens are classified as security tokens, requiring securities law compliance plus authentication and valuation standards.
• Luxury Items: Fractional tokenization triggers security token classification with full securities law and valuation requirements.
• Private Credit: Classified as security tokens subject to lending regulations and securities law.
• Fund Interests (UCITS, AIFs): Tokenized fund shares are security tokens governed by fund regulations and MiFID II.
• Carbon Credits: Classification varies by jurisdiction, with environmental regulations and AML compliance required.
• Intellectual Property: Tokenized IP rights are security tokens requiring IP law and securities law compliance.

How Are the US SEC and CFTC Regulating Tokenized Assets?

In the United States, the Securities and Exchange Commission (SEC) is the primary regulator for tokenized real-world assets. On January 28, 2026, three SEC divisions, Corporation Finance, Trading and Markets, and Investment Management, issued guidance clarifying that the technology format does not change a security's legal status. In other words, tokenizing a bond doesn't make it less of a security; it's still a security, just in digital form.

US issuers have several pathways to launch RWA tokens without full SEC registration. Regulation D, specifically Rule 506, allows private placement of security tokens to accredited investors (those meeting specific income or net worth thresholds) without SEC registration. This is the most common route for US-focused RWA projects. Regulation S permits issuance to non-US persons outside the US, enabling international offerings. Regulation A+ allows a mini-IPO structure with public offerings up to USD 75 million with reduced disclosure requirements. Regulation CF enables crowdfunding-style offerings up to USD 5 million to retail investors.

The CFTC classifies Bitcoin and Ethereum as commodities. Tokenized commodities like gold, oil, and agricultural products may fall under CFTC jurisdiction if they're traded on futures or derivatives markets, creating a potential overlap with SEC authority depending on the token's structure.

What's Happening in Europe With MiCA and the DLT Pilot Regime?

The European Union has built two parallel frameworks for tokenized assets. MiCA, the Markets in Crypto-Assets Regulation (Regulation 2023/1114), became fully applicable in December 2024. However, MiCA explicitly excludes tokenized securities and tokenized deposits. If your RWA token qualifies as a security, MiCA does not apply; instead, the securities framework, including MiFID II (Markets in Financial Instruments Directive II), the Prospectus Regulation, and CSDR (Central Securities Depositories Regulation), governs the token.

In May 2026, the European Commission launched a public consultation on MiCA review, running through August 31, 2026. Peter Kerstens, one of MiCA's architects, stated that the EU should prioritize tokenization over DeFi (decentralized finance) regulation, signaling that policymakers view RWA tokenization as a higher priority for the bloc's digital finance strategy.

The DLT Pilot Regime (Regulation 2022/858), a regulatory sandbox for trading and settlement of tokenized financial instruments using distributed ledger technology, has been in force since March 23, 2023. On June 25, 2025, the European Securities and Markets Authority (ESMA) recommended amendments to make the regime permanent and more flexible. On December 4, 2025, the European Commission proposed a major upgrade, DLT Pilot 2.0, which would raise the issuance threshold from EUR 6 billion to EUR 100 billion and expand eligible instruments to all MiFID II securities.

The DLT Pilot 2.0 proposal introduces several innovations: Crypto Asset Service Providers (CASPs), entities authorized under MiCA, can now qualify to operate DLT trading and settlement systems. Platforms managing less than EUR 10 billion in assets face simplified authorization. Stablecoins, specifically e-money tokens under MiCA, can be used for settlement. A new Pan-European Market Operator (PEMO) status is proposed. The proposal is expected to go through EU trialogues in late 2026 and the first half of 2027, with final agreement expected by the end of 2027.

How Are the UK and Singapore Approaching RWA Regulation?

The UK's Financial Conduct Authority (FCA) regulates security tokens under existing financial services legislation. Tokenized real-world assets that qualify as specified investments fall under the Financial Services and Markets Act 2000. The FCA has taken a relatively progressive stance, operating a regulatory sandbox that has tested tokenized assets. Financial promotions rules apply to any marketing of security tokens to UK persons, meaning issuers must ensure their marketing materials comply with FCA standards.

Singapore's Monetary Authority of Singapore (MAS) regulates tokenized assets under multiple frameworks. Security tokens fall under the Securities and Futures Act. Digital payment tokens are regulated under the Payment Services Act. The MAS has been active in tokenization pilots, including Project Guardian, demonstrating the regulator's commitment to fostering innovation while maintaining oversight.

Steps to Navigate RWA Tokenization Compliance Across Jurisdictions

• Fit and Jurisdiction Assessment: Determine which jurisdictions are appropriate for your RWA project based on the asset type, target investors, and regulatory environment. Different assets face different regulatory burdens in different regions.
• Token Classification and Structuring: Work with legal counsel to classify your token as a security, utility token, e-money token, or asset-referenced token, then structure the legal documentation accordingly to ensure compliance with applicable securities laws.
• Company Formation and Licensing: Establish the appropriate corporate entity in your chosen jurisdiction and apply for any required licenses or registrations with relevant regulators, such as the SEC in the US or the FCA in the UK.
• AML and Compliance Setup: Implement anti-money laundering (AML) and know-your-customer (KYC) procedures to comply with financial crime prevention requirements in your jurisdiction.
• Prospectus and Disclosure Preparation: If your token qualifies as a security, prepare and file required disclosure documents, such as a prospectus under EU rules or offering documents under US Regulation D.

The regulatory landscape for RWA tokenization is maturing rapidly. Rather than creating new crypto-specific rules, regulators are applying existing securities, commodities, and financial services frameworks to tokenized assets. This approach provides clarity for issuers but also means that RWA projects face the same compliance burden as traditional securities offerings. The key takeaway for founders and operators is that tokenization is not a regulatory shortcut; it's a new delivery mechanism for assets that remain subject to the same legal classification and oversight as their non-tokenized counterparts.