Securities Classification of Tokenized Private Credit

A token does not determine how a debt product is regulated. The answer depends on its rights, transferability, issuer, investors and what each project participant does.

Gofaizen & Sherle helps issuers and private credit managers assess those facts across selected jurisdictions. Deliverables can include a formal classification memorandum, activity-and-licensing matrix and implementation roadmap.

Assess classification before fixing the token standard and distribution model. Otherwise, the legal claim or offering route may require redesign.

This page provides general information, not a classification of a particular product. Legal conclusions must be based on the final documents, facts and target jurisdictions.

What does securities classification determine?

Securities classification determines which legal framework applies to the product and which permissions, documents and controls may be required. It is the starting point for the regulatory design, not a label added at the end.

For a tokenized private credit or bond project, the assessment normally addresses five connected questions:

1. What is the instrument? It may be a bond, note, loan participation, fund interest, money-market instrument, securitisation position, deposit-like claim or another contractual right.
2. What does the token represent? It may constitute the instrument itself, evidence an off-chain entitlement or provide access to a contractual record. The documents must establish which record prevails if systems disagree.
3. How is it offered? A private placement, public offer and restricted institutional distribution can produce different disclosure and marketing obligations.
4. Which activities will be performed? Issuing, arranging, placing, advising, safeguarding, operating a platform and facilitating secondary trading are separate functions. Different entities may need different permissions.
5. Where does the activity occur? The issuer, asset, investors, platform, custodian and marketing campaign may connect the project to several jurisdictions.

Classification affects the issuance structure, offering documents, eligible investors, promotions, custody, transfer controls and secondary-market plan. It may also identify work for an authorised third party.

Is tokenized private credit automatically a security?

No. Many debt tokens have security-like features, but the conclusion must follow the applicable legal test and the product’s substance. Calling an instrument a “utility token”, “RWA token” or “digital note” does not settle the issue.

The analysis separates three layers:

1. Underlying exposure: a loan, loan portfolio, receivable, invoice, corporate debt, treasury instrument or trade-finance claim.
2. Legal structure: the claim held directly by the investor or through an issuer, fund, trust or special-purpose vehicle (SPV).
3. Digital representation: the token and ledger used to issue, record or transfer that entitlement.

Code does not create enforceable rights to the asset merely by referring to it. Rights arise from governing law and transaction documents. Counsel must review the terms, asset transfer, register, waterfall, enforcement and relationship between on-chain and off-chain records.

The same applies to tokenized bonds: DLT issuance does not stop a corporate bond from being a bond. A bespoke, non-transferable loan claim may require a different analysis. A whitelist or lock-up does not necessarily prevent negotiability.

What information is required for a classification memorandum?

A reliable memorandum starts with an agreed product fact pack. If facts remain open, the adviser should identify assumptions and alternatives rather than issue an unqualified conclusion.

The data room usually includes:

• a product term sheet and a diagram of the legal entities and cash flows
• the loan, bond, note or participation documents
• details of the originator, lender, issuer, asset owner and any proposed SPV
• the target investor categories and each country in which marketing or sales may occur
• transferability, lock-up, whitelist, redemption and secondary-trading rules
• the proposed ledger, token standard and authoritative ownership record
• custody, wallet-control and key-recovery arrangements
• the roles of the platform, broker, placement agent, registrar, custodian, administrator, servicer and paying agent
• interest, principal, default and maturity workflows
• promotional materials and investor-onboarding steps.

For an existing portfolio, due diligence should also cover title, assignment restrictions, consents, security interests, confidentiality and loan servicing. A red-flag review identifies structural obstacles; full-scope due diligence tests the documents against the issuance model.

How are tokenized debt products assessed in the EU and EEA?

In the EU, the first boundary question is whether the token qualifies as a financial instrument under MiFID II. If it does, the fact that it uses distributed ledger technology does not move it into MiCA.

The ESMA classification guidelines apply a technology-neutral, substance-over-form approach. They state that tokenization should not alter the classification of a financial instrument. For transferable securities, the analysis considers whether the token is not an instrument of payment, forms part of a class of securities and is negotiable on the capital market. ESMA specifically identifies tokens representing bond-like debt, regular interest and future principal repayment as potentially having the characteristics of bonds.

This boundary matters because MiCA excludes crypto-assets that qualify as financial instruments. A tokenized debt product within MiFID II may instead engage the securities framework, including national implementation rules and requirements connected with investment services. A public offer or admission to trading may also require analysis under the EU Prospectus Regulation, subject to its scope and exemptions.

Classification is not the final step. The adviser must map placing, order handling, advice, custody, venue operation, settlement and maintenance of the recognised record. If DLT-based trading or settlement infrastructure is proposed, the EU DLT Pilot Regime may become relevant.

National law may govern the instrument’s form, assignment, security, insolvency and recognised register. For EEA EFTA states, the review must also confirm EEA incorporation and local implementation. MiCA is incorporated into the EEA Agreement and in force, but the national legal and supervisory layer still requires country-specific analysis.

How are tokenized debt products assessed in the United Kingdom?

In the UK, the analysis asks whether the token is a specified investment under the Financial Services and Markets Act framework and the Regulated Activities Order, or falls within another regulated category. The FCA explains that security tokens may provide rights such as ownership, repayment of a specific sum or participation in future profits and are likely to sit inside the regulatory perimeter.

The project must then test whether arranging, advising, dealing, managing or safeguarding requires authorisation and whether communications fall within the financial-promotion regime.

The perimeter is also changing. The FCA published final rules for the wider cryptoasset regime on 30 June 2026, with the new rules applying to firms granted the relevant FSMA permissions on or after 25 October 2027. The current and future regimes must therefore be separated in any implementation roadmap. The FCA’s current cryptoasset overview and its new-regime page record that transition.

The Bank of England describes the Digital Securities Sandbox as a regulated live environment for issuance, trading and settlement. It does not replace classification or perimeter analysis.

How can common private-credit structures be classified?

There is no single classification for every tokenized private debt product. The table shows the main questions a memorandum should test; it does not pre-classify a project.

An SPV is not automatically required. It can isolate assets and define creditor priorities, but “bankruptcy remote” is a legal objective, not a feature created by a smart contract. Counsel must test asset transfer, separateness covenants, insolvency law, commingling, servicing continuity and enforcement in each relevant jurisdiction.

What should a formal classification memorandum contain?

A useful memorandum gives the project team a decision, its limits and consequences. It should not stop at “security” or “not a security”.

The deliverable should contain:

• Executive conclusion: the likely classification in every covered jurisdiction, the degree of confidence and any unresolved points.
• Facts and assumptions: the product, parties, investor model, transfer rules and documents reviewed.
• Legal analysis: the applicable tests, alternative classifications and reasons for rejecting them.
• Activity matrix: which entity issues, advises, arranges, places, safeguards, registers, services, settles or facilitates trading.
• Licensing analysis: potential permissions for each activity and where a regulated third party is needed.
• Issuance and marketing rules: public or private-offer analysis, investor eligibility, selling restrictions, disclosures and financial promotions.
• Custody and record analysis: the legally authoritative record, wallet control, client-asset questions, reconciliation and recovery.
• Trading and transfer analysis: permitted transfers, venue requirements, lock-ups and cross-border restrictions.
• Dependency log: unresolved facts, local-law confirmations, regulator engagement and document changes.

Where local law requires an opinion from locally qualified counsel, the scope should identify that counsel. Gofaizen & Sherle can coordinate the jurisdiction matrix and consolidate workstreams without implying that one adviser holds every local permission.

What does the implementation roadmap add?

The roadmap converts classification into tasks, owners and decision gates.

The roadmap covers:

1. Legal structuring: select the issuer, direct or SPV model, governing law and authoritative record.
2. Documents: amend asset, offering, transfer, servicing and enforcement terms.
3. Regulatory work: prepare applications, notifications or regulator engagement where required.
4. Providers: appoint authorised placement, custody, administration, settlement or trading providers where needed.
5. Technology: align smart-contract permissions with eligibility, lock-ups, corporate actions and recovery.
6. Launch: complete disclosures, onboarding, testing, reconciliation and responsibility sign-off.
7. Lifecycle: document interest, record dates, maturity, redemption, default and reporting.

Interest payments and principal calculations may be automated, but the legal terms must identify the payee, controlling record and error process. At maturity, the workflow should reconcile payment before, or atomically with, the token being redeemed, blocked, burned or marked complete. Smart contracts implement the legal process; they do not replace it.

Which type of adviser should you appoint?

Choose the adviser by jurisdiction coverage, reliance and workstreams—not by a “tokenization” label.

Compare the exact deliverables, jurisdictions, assumptions, reliance language and local-counsel plan. Request evidence of relevant debt or capital-markets work, and confirm who performs each workstream and owns the combined answer.

How long does classification take and what does it cost?

There is no universal fee or fixed completion time. Both require a defined product, document set, jurisdiction scope and reliance level.

A proposal may use a fixed fee for a tightly defined memorandum, phased fees for fact-finding and jurisdictional analysis, or time-based billing for open-ended product development. Ask the adviser to separate:

• core classification and activity mapping
• local-counsel fees by jurisdiction
• document review and drafting
• licensing, notification or regulator-engagement work
• technology and provider review
• taxes, translations, filings and other third-party costs
• post-launch or change-management support.

Timing depends on the quality of the term sheet and data room, number of products and jurisdictions, availability of local counsel, unresolved commercial decisions and the need for regulator engagement. The client should appoint decision-makers from legal, compliance, operations and technology, maintain a question log and agree response deadlines. That is more useful than a launch promise that ignores dependencies outside the adviser’s control.

Request a scoped classification assessment

Gofaizen & Sherle can review the proposed rights, parties, investor model and jurisdictional footprint, then define the scope for a classification memorandum and implementation roadmap. The engagement can begin with a feasibility review, product workshop or document assessment and can include coordination with locally qualified counsel and regulated service providers where required.

Request a scoped proposal. The scope, timing and fees will depend on the confirmed facts, jurisdictions, documents and reliance required.