1. Global Landscape — Marketplace Regulatory Models
1.1 Overview
NFT marketplaces operate in a regulatory environment that is fragmented, evolving, and jurisdiction-dependent. No country has enacted a standalone, comprehensive NFT marketplace regulation statute. Instead, marketplace operators are subject to overlapping requirements drawn from securities law, anti-money laundering frameworks, consumer protection statutes, intellectual property regimes, and advertising standards. The regulatory treatment of a marketplace depends primarily on the classification of the NFTs it facilitates — whether they are unique collectibles, fungible virtual assets, or securities — and on the activities the platform performs (custody, exchange, intermediation, or passive listing).
As of June 2026, across the 20 jurisdictions surveyed, five broad regulatory models have emerged globally. The first four are graduated tiers of financial-services oversight (from no licensing through full exchange licensing) plus a transverse intermediary-liability layer; the fifth — exemplified by China — is a distinctive controlled-issuance model in which primary issuance is permitted through state-supervised channels while secondary trading is suppressed.
1.2 Model 1 — Unregulated / Minimal Oversight (Pure Collectible Exemption)
Jurisdictions: US (post-March 2026 taxonomy for genuine collectibles), UK (unique NFTs outside FCA perimeter), EU (unique NFTs exempt under MiCA Article 2(3)), France (truly unique NFTs outside MiCA/former PSAN), Germany (unique art/collectibles outside KWG/MiCA), Liechtenstein (unique NFTs under TVTG only, not securities), Switzerland (unique art NFTs generally not subordinated to FINMA), Singapore (pure collectibles outside PSA/SFA), Australia (non-financial-product NFTs), Hong Kong (genuine collectibles outside SFC remit), Japan (no-payment-function NFTs outside financial regulation), South Africa (pure NFT activity exempt — no CASP licence), Thailand (pure file-pointer collectibles outside the Decree)
Under this model, marketplaces dealing exclusively in genuinely unique, non-fungible digital collectibles — such as one-of-one digital artworks — are outside the financial services regulatory perimeter. They do not require exchange licences, broker-dealer registration, or CASP/VASP authorisation. However, they remain subject to general commercial law including consumer protection, advertising standards, and anti-fraud statutes.
South Africa makes the carve-out explicit: pure NFT activity is exempt and requires no Crypto Asset FSP licence, with the financial-services perimeter engaged only where the activity crosses into crypto-asset financial services. Thailand reaches the same outcome by a narrower route — pure file-pointer collectibles with no separable rights sit outside the Emergency Decree on Digital Asset Businesses — but layers a structural exclusion on top (see Model 5).
Limitations: This exemption is narrow and substance-dependent. If a marketplace lists NFTs that are fractionalized, issued in large fungible series, marketed as investments, or exhibit payment functionality, the platform is reclassified under a more stringent model.
1.3 Model 2 — AML-Only Registration
Jurisdictions: UK (FCA registration under MLR 2017 for cryptoasset exchange providers; HMRC art-market-participant route), EU (AMLR obligations for cultural goods dealers at EUR 10,000+), France (high-value art dealers obliged at EUR 10,000+), Germany (art/intermediary dealers obliged at EUR 10,000+ under GwG), Japan (APTCP obligations for platforms handling crypto-asset NFTs), India (FIU-IND registration as VDA Service Provider under PMLA), South Africa (FIC registration where the platform is a CASP accountable institution under FICA)
Under this model, the marketplace must register with the relevant financial intelligence authority for AML/CTF supervision and implement customer due diligence, suspicious transaction reporting, and record-keeping obligations — but is not required to obtain a full financial services licence. This model typically applies where the marketplace facilitates transactions above specified value thresholds or handles tokens that fall within AML definitions but do not constitute securities.
In the UK, NFT marketplaces that exchange NFTs for fiat or cryptocurrency may need to register with the FCA as cryptoasset exchange providers under MLR 2017 (Route 1). Separately, platforms dealing in NFTs classified as "works of art" above EUR 10,000 may be required to register with HMRC as art market participants (Route 2) — though whether NFTs qualify as "works of art" remains formally unconfirmed.
India sits squarely in this model and almost nowhere else: NFT marketplaces performing covered VDA activities are reporting entities under the PMLA (notification of 7 March 2023), must register with FIU-IND, and must appoint a Principal Officer and Designated Director — yet there is no NFT-specific market-conduct licence and no SEBI registration category for NFTs. The result is a "taxed-but-unregulated" posture: heavy AML supervision and punitive taxation layered over an enduring market-conduct vacuum.
Source: FCA, "Cryptoassets: Who needs to register"
1.4 Model 3 — Full Exchange / Platform Licensing
Jurisdictions: South Korea (VASP registration with KoFIU + ISMS certification for NFTs classified as virtual assets), EU (MiCA CASP authorisation for non-exempt NFTs), France (CASP authorisation from AMF), Germany (CASP authorisation from BaFin), Liechtenstein (TT Service Provider registration / CASP), Switzerland (FINMA licence or SRO membership), Brazil (SPSAV authorisation from BCB), Canada (Investment Dealer registration + CIRO membership), Hong Kong (AMLO VASP licence or SFO licence for VA/security NFTs), UAE/Dubai (VARA VASP licence), Bahrain (CBB Category 4 Crypto-Asset Licence), Singapore (MPI licence under PSA for DPT-classified NFTs), Australia (AUSTRAC DCE/VASP registration; AFSL for financial-product NFTs)
Under this model, the marketplace must obtain a full financial services licence to operate. This applies where the NFTs traded on the platform are classified as virtual assets, crypto-assets, or securities under the relevant jurisdiction's framework. Requirements typically include minimum capital, governance standards, segregation of client assets, cybersecurity controls, and ongoing regulatory reporting.
In South Korea, VASP registration requires mandatory ISMS certification from KISA (6-8 month process evaluating 104 control items across 16 domains), real-name bank account verification for fiat-handling platforms, and full AML/CFT compliance. As of April 2025, only 28 VASPs had completed FIU registration (5 holding real-name bank accounts). Source: Kim & Chang — FSC Publishes Regulation on VASP Reporting
In the UAE, VARA requires all NFT marketplace operators in mainland Dubai (excluding DIFC) to obtain a VA Exchange Licence and/or VA Broker-Dealer Licence. Licensed VA Exchange Services require minimum paid-up capital of AED 1,500,000, an application fee of AED 100K, and annual supervision fees of AED 300K+. Licensed VASPs must maintain net liquid assets equal to 1.2x monthly operational costs and hold reserve assets equivalent to 100% of customer liabilities. Source: VARA Licensed Activities FAQ
Brazil's SPSAV regime (BCB Resolutions 519/520/521, November 2025) requires authorisation with paid-up capital of R$10.8M–R$37.2M by activity class, with existing providers required to apply by 30 October 2026 or cease. Bahrain requires a CBB Category 4 Crypto-Asset Licence (minimum capital BHD 300,000) for NFT marketplaces, with a regulatory sandbox as an alternative entry path. Canada routes platforms that trade NFT securities/derivatives into Investment Dealer registration plus CIRO membership (direct-to-CIRO since 6 August 2024).
1.5 Model 4 — Platform Liability Frameworks (Content Moderation / Intermediary Liability)
Jurisdictions: EU (Digital Services Act), US (Section 230 of the Communications Decency Act), UK (Online Safety Act 2023), Japan (Provider Liability Limitation Act), China (CAC blockchain-filing real-name rules; heightened platform IP-review duty per Qice v. Bigverse)
Separate from financial regulation, NFT marketplaces face emerging liability as online intermediaries. The EU Digital Services Act (DSA), effective February 2024, imposes transparency, content moderation, and illegal content notification obligations on digital platforms. NFT marketplaces operating as "online platforms" under the DSA must implement notice-and-action mechanisms for illegal content (including IP-infringing NFTs), publish transparency reports, and comply with advertising transparency requirements. Very large online platforms (VLOPs) with 45+ million EU users face additional systemic risk assessment obligations.
In the US, Section 230 of the Communications Decency Act shields platforms from liability for third-party content, but this protection does not extend to federal securities law violations or IP infringement. OpenSea has argued to the SEC that NFT marketplaces "do not hold or facilitate the flow of funds or assets" and should not be classified as exchanges or brokers. Source: The Block, "OpenSea pushes SEC to clarify that NFT marketplaces are not exchanges or brokers"
China applies an especially heavy intermediary-liability standard: platforms owe a heightened prior-ownership review duty (established in Qice v. Bigverse, Hangzhou Internet Court 2022), must perform real-name authentication of issuers, sellers, and buyers, and must complete CAC blockchain filing before operating.
1.6 Model 5 — Controlled-Issuance / Anti-Financialization (China)
China's model is distinctive and does not map onto the four-tier ladder above. Crypto-native NFTs are effectively prohibited, but domestic "digital collectibles" (数字藏品) are legal under a controlled-issuance regime: primary issuance is permitted through state-supervised, RMB-only platforms, while secondary trading and resale are banned in practice. Collectibles are treated as "network virtual property" only so long as they remain non-financialized — fractionalization, batch-creation that weakens non-fungibility, securities/insurance/credit/precious-metals wrapping, speculation, and crypto settlement are all prohibited under the April 2022 three-association initiative (NIFA/CBA/SAC).
There is no single digital-collectibles licence; operators must assemble an ICP/EDI telecom permit (MIIT), a CAC blockchain filing, and an Internet Culture Business Licence (MCT), plus real-name and AML controls. Because resale is suppressed, the wash-trading, resale-royalty, and secondary-market-surveillance problems that dominate other jurisdictions are structurally absent — but so is any compliant exit liquidity for buyers. As of June 2026, no confirmed, fully operational, nationally sanctioned compliant secondary market had been established (state-exchange plans remain announcements and projections). Yin Fa [2026] No. 42 (6 February 2026) reinforced the crypto-prohibition posture, channelled RWA tokenization to CSRC approval, and banned unapproved RMB stablecoins.
Thailand shares the exclusionary instinct of this model without the controlled-issuance channel: licensed Thai exchanges have been prohibited from listing NFTs since 11 June 2021 (SEC Notification KorThor. 18/2564), so NFTs are structurally excluded from regulated venues rather than ushered into a state-run one.
2. Comparative Analysis
2.1 Marketplace Registration and Licensing Requirements
| Jurisdiction | Registration Required? | Licensing Authority | NFT Scope | Minimum Capital | Key Conditions |
|---|---|---|---|---|---|
| US | MSB registration if transmitting funds; no NFT-specific licence | FinCEN (MSB); SEC (if securities) | Case-by-case; digital collectibles exempt per March 2026 taxonomy | None for MSB; state MTL bonds vary | State-by-state MTL may be required ($500K-$2M+ total); NY BitLicense; CA DFAL (1 Jul 2026) |
| Brazil | SPSAV authorisation from BCB | BCB (SPSAV); CVM (securities tokens) | Virtual-asset NFTs; investment-feature NFTs under CVM | R$10.8M-R$37.2M by activity class | Existing providers must apply by 30 Oct 2026 or cease |
| Canada | MSB (PCMLTFA) if crypto dealer; Investment Dealer + CIRO if securities | CSA-coordinated securities commissions; CIRO; FINTRAC | Pure collectibles likely outside; security/fractional NFTs captured | Per CIRO/securities requirements | Direct-to-CIRO since 6 Aug 2024; CIRO custody framework (Bulletin 26-0033) |
| EU | CASP authorisation if NFTs are non-exempt crypto-assets | NCAs (AMF, BaFin, CONSOB, AFM) | Fractionalized, large series, or fungible NFTs | EUR 50K-150K depending on service class | Passporting across EU/EEA; AML registration even for exempt NFTs if cultural goods dealer |
| France | CASP authorisation (AMF) for in-scope NFTs; ANJ declaration for JONUM | AMF (CASP); ANJ (JONUM gaming) | Genuinely unique excluded; large-series/fractional captured | EUR 50K-150K (MiCA Art. 67) | Transition deadline 1 Jul 2026; unauthorized = up to 2 yrs + EUR 30,000 |
| Germany | CASP authorisation (BaFin) for in-scope NFTs | BaFin | Unique art/collectibles outside; large-series/fractional captured | EUR 50K-150K (MiCA Art. 67) | Shortened grandfathering ended 30 Dec 2025; penalties up to 5 yrs (KWG Sec 54) |
| Liechtenstein | TT Service Provider registration (TVTG) or CASP for in-scope | FMA | Unique NFTs under TVTG only; fungible crypto-assets under MiCA | Per TVTG/MiCA Art. 67 | FMA 3-month decision deadline; TVTG national-only (no EEA passporting until CASP) |
| Switzerland | SRO membership (AML) or FINMA direct licence | FINMA or recognised SRO | Unique art NFTs generally not subordinated; financial/payment NFTs in scope | CHF 20,000 (SRO) | SRO does NOT permit custody/asset management; DLT trading facility needs separate FINMA authorisation |
| UK | FCA registration (MLR 2017) if crypto exchange/custodial provider | FCA; HMRC (art market participant) | Broad MLR crypto definition encompasses NFTs | Case-by-case | Full authorisation under Cryptoassets Regs 2026 (gateway 30 Sep 2026; commencement 25 Oct 2027) |
| Japan | CAESP registration if NFTs classified as crypto-assets | FSA / Kanto Local Finance Bureau | Non-payment, non-fungible NFTs generally exempt | JPY 10M net assets | ECISB intermediary registration (eff. 1 Jun 2026); non-crypto-asset NFT marketplaces need no financial registration |
| South Korea | VASP registration with KoFIU if NFTs classified as virtual assets | KoFIU / FSC | Mass-produced, fractionalized, payment-functional NFTs | Not specified; ISMS certification mandatory | 28 VASPs / only 5 exchanges hold real-name bank accounts (Apr 2025) |
| China | No single licence; assemble ICP/EDI (MIIT) + CAC blockchain filing + Internet Culture Business Licence (MCT) | MIIT, CAC, MCT (CSRC for RWA) | Domestic non-financialized digital collectibles only; crypto-native NFTs prohibited | NOT VERIFIED | Primary issuance via state-supervised RMB-only platforms; secondary trading/resale banned in practice |
| Thailand | Digital Asset Exchange licence (MOF on SEC recommendation) if NFT is a digital asset | MOF on SEC recommendation; SEC; ICO portal | In-scope only where NFTs qualify as digital assets | ≥THB 100M / ≥THB 50M / ≥THB 10M by tier (licence fee THB 2.5M) | Licensed exchanges prohibited from listing NFTs since 11 Jun 2021; investment NFTs via ICO portal |
| India | FIU-IND registration as VDA Service Provider (PMLA) | FIU-IND; SEBI only if security-like; MeitY | Pure collectibles are VDAs for tax; outside market-conduct regulation | Not capital-gated (NO DATA FOUND) | No NFT-specific market-conduct licence; ~47 VDA-SPs registered by early 2024 (NOT VERIFIED) |
| Singapore | MPI licence if NFTs classified as DPTs | MAS | DPT or capital markets product NFTs | S$250K (MPI) | CMS licence for security-type NFTs; DTSP licence (FSMA Part 9) for offshore-only DPT/CMP services |
| Hong Kong | VASP licence (AMLO) or SFO licence if securities | SFC | VAs and security NFTs; genuine collectibles excluded | Per SFC requirements | Dual licensing recommended; SFO Type 1 + Type 7 for security-token NFTs |
| UAE (VARA) | VA Exchange / Broker-Dealer Licence | VARA / ADGM FSRA / DFSA / CMA | Traded, fractionalized, or investment-marketed NFTs | AED 1.5M paid-up (Exchange); 1.2x monthly opex in liquid assets | Physical office in Dubai required; CMA-VARA mutual recognition (Aug 2025) |
| Bahrain | CBB Category 4 Crypto-Asset Licence | Central Bank of Bahrain (CBB) | NFT marketplaces (exchange / digital token advisory) | BHD 300,000 (Cat 4) | Sandbox alternative entry path (up to 9 months, extendable to 12) |
| South Africa | Pure NFT activity EXEMPT; CASP FSP licence only if crypto-asset financial services | FSCA (CASP/FAIS, CISCA) | Pure NFT exempt; crypto-asset-FS or pooled-scheme NFTs captured | Per Category I FSP requirements | FIC registration as accountable institution where CASP; CISCA Manager licence for pooled-scheme NFTs |
| Australia | AUSTRAC DCE/VASP registration; AFSL if NFTs are financial products | ASIC (AFSL); AUSTRAC (DCE/VASP) | Fractionalized, investment-marketed, or scheme NFTs | DCE/VASP registration free; AFSL per requirements | Digital Assets Framework Act 2025 (DAP/TCP AFSL commences 9 Apr 2027) |
2.2 Wash Trading Rules and Market Integrity
| Jurisdiction | Wash Trading Prohibition | Detection Mechanism | Enforcement Status | Penalties |
|---|---|---|---|---|
| US | Prohibited under CEA (commodities) and Securities Exchange Act; no NFT-specific prohibition | No mandatory on-chain surveillance; blockchain analytics firms (Chainalysis) detect patterns | US prosecutors secured guilty pleas for crypto wash trading in early 2025; no NFT-specific enforcement | Criminal penalties; disgorgement; platform bans |
| EU | MiCA Articles 88-92 prohibit market manipulation for in-scope crypto-assets | CASPs required to maintain market surveillance systems | No NFT-specific wash trading enforcement as of June 2026 | Up to EUR 5M (natural persons) / EUR 15M or 15% turnover (legal persons) -- market-abuse tier, Art 111(5) (Arts 88-92) |
| South Korea | VAUPA explicitly prohibits market manipulation including wash trading | VASPs must deploy real-time monitoring and antifraud systems | First VAUPA market-manipulation conviction Feb 2026 (3 yrs, KRW 500M fine) | Minimum 1 year imprisonment; fines 3-5x illicit gains |
| Japan | BCA guidelines prohibit market manipulation and insider trading for NFT marketplaces | Self-regulatory monitoring through JVCEA/JCBA | No NFT-specific wash trading enforcement; FSA supervisory oversight | Business improvement orders; registration suspension/revocation |
| China | Secondary trading banned in practice — wash trading structurally precluded; SPP flags artificial scarcity/speculation as fraud risk | No secondary-market surveillance needed (resale suppressed); real-name authentication of all participants | No NFT wash-trading actions (no compliant secondary market exists) | Criminal exposure for illegal fundraising/fraud/money laundering on financialization |
| Thailand | SEC market-surveillance/governance rules (2024) for licensed operators; NFTs largely excluded from venues | SEC surveillance for licensed digital-asset operators | No NFT-specific enforcement (structural listing ban removes venues) | Criminal penalties under the Emergency Decree |
| UK | Market abuse regime applies to in-scope financial instruments; FCA CP25/41 proposes crypto market abuse framework | Proposed under FCA consultation papers (December 2025) | No NFT wash trading enforcement as of June 2026 | Criminal and civil penalties under FSMA |
| India | No NFT-specific market-conduct regime; SEBI manipulation rules only if NFT is a security (NOT VERIFIED) | No NFT-specific surveillance mandate | No NFT-specific enforcement as of June 2026 | SEBI penalties only if security-like |
| Singapore | SFA market manipulation provisions apply to capital markets products | MAS surveillance for licensed DPT service providers | No NFT-specific enforcement | Criminal penalties under SFA |
| Hong Kong | SFO market misconduct provisions apply to securities | SFC surveillance for licensed VATPs | No NFT-specific enforcement | Criminal prosecution; administrative penalties |
| UAE (VARA) | VARA rulebooks prohibit market manipulation | VARA compliance monitoring; transaction monitoring for insider trading/manipulation | Penalties reaching hundreds of millions of dirhams; criminal prosecution possible | Fines, operational bans, asset seizures |
| South Africa | POCA money-laundering offences apply regardless of licensing; no NFT-specific market-abuse rule | FSCA conduct supervision for licensed CASPs | No NFT-specific enforcement as of June 2026 | POCA criminal penalties; FSCA administrative sanctions |
Scale of the problem: Ethereum NFT wash trades have totaled over $30 billion all-time. Research published in the Journal of Banking & Finance (2025) found wash trading in unregulated NFT markets constitutes up to 24% of total trading volume in some collections. Individual marketplace data shows concerning patterns: LooksRare exhibited 95.68% of trading value from wash trades, Blur showed 58.16%, and OpenSea had 31.22% of trades flagged as wash trading. Notably, the wash-trading problem is most acute precisely where secondary markets are most liquid and least surveilled; jurisdictions that suppress secondary trading entirely (China) or exclude NFTs from regulated venues (Thailand) sidestep the problem at the cost of liquidity. Source: Wash Trading Statistics 2026 — CoinLaw; ScienceDirect — Wash trading and insider sales in NFT markets
2.3 Platform Liability and Content Moderation
| Jurisdiction | Intermediary Liability Regime | Application to NFT Marketplaces | IP Enforcement Obligations |
|---|---|---|---|
| US | Section 230 CDA shields platforms from third-party content liability; does not protect against securities violations | OpenSea argued it is a peer-to-peer platform, not an exchange/broker | DMCA safe harbour requires notice-and-takedown for copyright claims |
| EU | Digital Services Act (DSA) imposes notice-and-action, transparency, and content moderation duties | NFT marketplaces as "online platforms" must remove illegal content upon notification | Copyright Directive requires upload filtering for certain platforms; Resale Right Directive status for digital art unresolved |
| UK | Online Safety Act 2023 imposes duties of care on user-to-user services | NFT platforms may be in scope as user-to-user services | CDPA 1988 applies; written assignment required for copyright transfer |
| Japan | Provider Liability Limitation Act; BCA guidelines impose content verification duties | Marketplace operators must verify IP licensing for listed NFTs | Copyright Act criminal penalties: up to 10 years imprisonment / JPY 10M fine for individuals |
| South Korea | Electronic Commerce Act (amended February 2025) prohibits "dark patterns" | NFT marketplace operators subject to anti-dark-pattern provisions | Copyright Act applies; moral rights inalienable |
| China | CAC blockchain-filing real-name rules; heightened platform prior-ownership review duty | Platforms must authenticate issuers/sellers/buyers and screen for prior IP ownership before minting | Qice v. Bigverse (Hangzhou Internet Court 2022) established platform IP-review duty (RMB 4,000 award) |
| France | DSA (as EU Member State); ANJ oversight for JONUM gaming-NFT operators | NFT marketplaces as "online platforms" under DSA; JONUM operators log activity and provide wallet-tracking access | CPI Art. L.122-3 minting needs author's consent; droit de suite (Art. L.122-8) not formally extended to digital NFTs |
| Germany | DSA (as EU Member State) | NFT marketplaces as "online platforms" under DSA | UrhG exploitation rights remain with creator unless transferred; Folgerecht (Sec 26) application to NFTs unsettled |
2.4 Consumer Protection for Marketplace Users
| Jurisdiction | Key Consumer Protection Framework | NFT-Specific Provisions | Disclosure Requirements |
|---|---|---|---|
| US | FTC Act Section 5 (unfair/deceptive practices); state consumer protection acts | No NFT-specific rules; FTC fined HoYoverse $20M for loot box violations (2025) | IRS Form 1099-DA broker reporting from January 2025; no mandatory NFT listing disclosures |
| EU | Digital Content Directive (2019/770); Consumer Rights Directive; DSA | NFTs as "digital content" must meet conformity requirements | MiCA white paper requirements for in-scope crypto-assets; VAT Working Paper 1060 (non-binding) |
| UK | Consumer Rights Act 2015 (CRA); CPRs 2008 | Untested application of CRA "satisfactory quality" and "as described" standards to NFTs | ASA advertising rules require material risk information; FCA financial promotions exclude unique NFTs |
| Japan | ASCT (mail order sales); Consumer Contract Act; Premiums Act | ASCT requires seller identity, pricing, cancellation policy disclosure for online NFT sales | BCA guidelines mandate disclosure of IP rights conveyed with NFT purchase; gacha probability disclosure (2025) |
| South Korea | VAUPA deposit protection and insurance; KFTC dark-pattern rules | VAUPA requires VASPs to segregate user deposits/assets; insurance against hacking mandatory | FSC guidelines require substance-over-form classification disclosure; loot box probability disclosure (GIPA, 2024) |
| China | SAMR consumer-protection/advertising oversight; Civil Code / E-Commerce Law | SPP warns buyers acquire only network virtual property — not civil-law ownership of the underlying work | SAMR advertising rules; mystery-box ("盲盒") mechanics flagged by SPP as fraud risk |
| India | Consumer Protection Act 2019; ASCI advertising guidelines | No NFT-specific consumer-conduct rules beyond advertising | ASCI mandatory risk disclaimer (one-fifth of ad space); prohibited terms ("currency/securities/custodian") |
| Thailand | SEC customer-protection rules for licensed operators; Consumer Protection law | Suitability assessments, custody segregation for licensed digital-asset operators | SEC mandatory risk disclosures; 2024 governance/market-surveillance rules; key NFT effect is exclusionary |
| Singapore | MAS consumer protection guidelines (PS-G03) for DPT services | Prohibition on facilitating lending/staking of DPTs by retail customers; mandatory risk disclosures | Customer suitability assessments; statutory trust for customer assets |
| UAE (VARA) | VARA consumer protection provisions; CMA federal framework | VARA requires customer asset segregation and insurance | Category 2 VA Issuance documentation required |
| Bahrain | CBB Crypto-Asset Module conduct-of-business provisions | CBB-licensed providers owe client-asset and disclosure duties | CBB risk disclosure and client-money rules for licensed providers |
| South Africa | FSCA FAIS conduct standards; CISCA investor protections; POPIA (data) | Investor protections engage where NFT is a financial product or pooled scheme | FAIS disclosure for licensed CASPs; CISCA scheme disclosure for pooled-interest NFTs |
3. What Works and What Doesn't
3.1 What Works
Substance-over-form classification. Across the 20 jurisdictions surveyed, regulatory treatment converges on the principle that it depends on the economic function of an NFT, not its label or technology. The EU's MiCA Recital 11, the US SEC/CFTC March 2026 joint taxonomy, South Korea's FSC June 2024 two-step guidelines, Japan's FSA functional analysis, Thailand's functional three-prong Decree definition, South Africa's activity-based FICA/FAIS test, and Singapore's MAS approach all apply this principle. Even China, which bans crypto-native NFTs, draws its dividing line functionally — collectibles are legal only while non-financialized — rather than by label. This provides a defensible, technology-neutral basis for distinguishing collectible NFTs from financial instruments.
Tiered regulatory intensity. Jurisdictions that differentiate between unique collectible NFTs (light touch), fungible/fractionalized NFTs (medium oversight), and security-type NFTs (full securities regulation) achieve better balance between innovation and investor protection. The EU three-tier framework (MiFID II financial instrument / MiCA crypto-asset / exempt unique NFT) and the US five-category taxonomy exemplify this approach; Switzerland's SRO/FINMA escalation and South Africa's "exempt unless it crosses into financial services" carve-out reach the same proportionality by different routes.
Industry self-regulation as supplement. Japan's model — where the JCBA, BCA, and JVCEA publish detailed NFT business guidelines covering classification flowcharts, market manipulation prevention, insider trading prohibitions, and listing criteria — demonstrates that self-regulatory bodies can fill gaps faster than legislative processes. The JCBA guidelines (revised August 2024, 3rd edition) cover 10 key areas including IP rights disclosure, settlement mechanisms, and gambling compliance. China's industry self-regulation convention (Tencent/JD/Alibaba, 2022; ~30 institutions, 2023) plays an analogous gap-filling role, though aimed at suppressing financialization rather than enabling trading.
Source: So & Sato Law Offices — NFT Market and Guidelines (Japan)
Strong AML infrastructure for licensed platforms. South Korea's three-way verification chain (user real-name account, VASP real-name corporate account, bank verification) makes anonymous virtual asset trading with Korean Won functionally impossible at registered exchanges. China's mandatory real-name authentication of every participant (issuer, seller, and buyer) with RMB-only settlement achieves comparable traceability by structural design. The EU's AMLR, effective July 2027, will extend AML obligations to cultural goods dealers handling transactions at EUR 10,000+ — a threshold mirrored by France, Germany, and the UK's art-market-participant route — capturing high-value NFT art sales regardless of the NFT's financial classification.
Property rights recognition. The UK's Property (Digital Assets etc) Act 2025, which received Royal Assent on 2 December 2025, confirms that NFTs can constitute personal property — enabling recovery of stolen assets, inclusion in estates, and use as collateral. China's courts reached a parallel (if narrower) conclusion through Wang v. NFT platform (Hangzhou Internet Court, November 2022), holding NFT collectibles to be "network virtual property" protected by law. This foundational legal certainty supports marketplace infrastructure by clarifying what marketplace users actually own.
Source: GOV.UK, Property (Digital Assets etc) Bill Factsheet
3.2 What Doesn't Work
Enforcement-before-guidance. The SEC's three NFT enforcement actions (Impact Theory, Stoner Cats, Flyfish Club) in 2023-2024, brought without prior NFT-specific rulemaking, drew bipartisan commissioner dissent and created regulatory uncertainty rather than clarity. This approach forces marketplace operators to guess at regulatory boundaries, chilling legitimate activity alongside problematic conduct.
Unresolved classification thresholds. Neither MiCA nor ESMA guidelines define a specific numerical threshold for when an NFT collection becomes a "large series" indicating fungibility. Similarly, the UK's framework does not specify when an NFT qualifies as a "work of art" for AMP registration purposes, and Germany's BaFin offers only an indicative ("1,000+ NFTs with identical claims") signal. India leaves the security/CIS boundary entirely untested (no SEBI order). These gaps create zones of legal uncertainty that inhibit compliant marketplace design.
Inadequate wash trading enforcement. Despite Ethereum NFT wash trades totaling over $30 billion and research showing 24% of trading volume in some collections is attributable to wash trading, no jurisdiction has brought an NFT-specific wash trading enforcement action as of June 2026. Traditional market abuse frameworks (which apply to securities and commodities) do not automatically cover NFTs classified as collectibles, creating an enforcement gap. The jurisdictions that avoid the problem do so only by structurally removing secondary liquidity — China's resale ban and Thailand's exchange-listing ban — which is not a transferable solution for markets that want both liquidity and integrity.
Source: Chainalysis — NFT Wash Trading and Money Laundering; Financial Innovation — Advanced wash-trading detection in decentralized NFT markets
Regulatory fragmentation in the US. NFT marketplace operators targeting US customers must potentially navigate FinCEN MSB registration, SEC broker-dealer/ATS requirements (if securities NFTs), 49+ state money transmitter licences ($500K-$2M+ total cost), IRS reporting obligations, FTC consumer protection rules, and state-specific frameworks (New York BitLicense, California DFAL effective July 2026). This patchwork imposes disproportionate compliance burdens on smaller marketplace operators. Canada's provincial fragmentation (CSA-coordinated but separately administered securities commissions) and India's multi-regulator dispersion (CBDT, FIU-IND, RBI, SEBI, CBIC, ASCI, MeitY with no single NFT authority) produce comparable coordination costs.
Gaming NFT regulatory void. The intersection of NFTs and gaming presents unresolved regulatory challenges. South Korea maintains a de facto ban on P2E games under the Game Industry Promotion Act, upheld by courts in the Five Stars for Klaytn case (Seoul Administrative Court, 2023). Japan applies strict kompu gacha (complete gacha) prohibitions and Premiums Act limits to NFT game mechanics. India's Online Gaming Act 2025 bans "online money games" with broad "tokens convertible to money" language that may reach NFT/token-stake mechanics. Brazil's ECA Digital ("Lei Felca," in force 17 March 2026) bans paid random-reward loot boxes in games rated under 18. France alone affirmatively regulates Web3 gaming NFTs through the JONUM regime (ANJ-supervised, three-year experiment to 22 May 2027). The US has no federal framework, relying on FTC enforcement (HoYoverse $20M fine, 2025) and state gambling law analogies. The UK relies on failed industry self-regulation for loot boxes, with Royal Society research (2025) finding only 8.6-23.5% compliance with voluntary guidelines.
Absence of standardised listing and delisting criteria. No jurisdiction mandates specific listing standards for NFT marketplaces regarding provenance verification, IP ownership confirmation, or quality assessment of listed NFTs. Delisting procedures — when and how a marketplace must remove infringing, fraudulent, or sanctioned NFTs — are left largely to platform discretion, with the exception of general intermediary liability frameworks (DSA notice-and-action, DMCA takedown) and China's heightened prior-ownership review duty (Qice v. Bigverse).
Platform shutdown risk without user remedy. The Nike/RTFKT case (E.D.N.Y., filed April 2025) illustrates the consumer protection gap when a major NFT platform ceases operations. Nike shut down its RTFKT NFT studio in December 2024, and a class action was filed alleging a "rug pull" that destroyed the value of NFTs whose value depended on Nike's ongoing promotional efforts. Similarly, DraftKings closed its NFT marketplace in July 2023, resulting in a $10 million class action settlement (February 2025). No jurisdiction currently requires NFT marketplace operators to maintain business continuity plans, provide advance notice of shutdown, or establish wind-down funds to protect user assets — requirements that are standard for financial services firms. Source: ClassAction.org — $10M DraftKings Settlement
Resale royalty enforcement failure. Smart contract-based creator royalties — once considered a distinctive advantage of NFT technology — have been undermined by marketplace competition. OpenSea shifted between mandatory and optional royalty enforcement, and newer platforms (Blur, Magic Eden) gained market share partly by reducing or eliminating creator fee enforcement. No jurisdiction has statutory provisions governing NFT creator royalties, and China has no resale-royalty regime at all because secondary trading itself is suppressed. The EU Resale Right Directive (2001/84/EC) — transposed nationally as France's droit de suite (CPI Art. L.122-8) and Germany's Folgerecht (UrhG Sec 26) — may apply to digital art NFTs in theory, but no EU institution or national court has confirmed this application, and the Directive was drafted before digital art existed in its current form.
Inconsistent treatment of gaming NFTs across jurisdictions. The regulatory divergence on gaming NFTs creates significant cross-border compliance challenges. South Korea effectively bans domestic P2E games (Five Stars for Klaytn, Seoul Administrative Court, 2023). Japan applies strict kompu gacha prohibitions and requires probability disclosure for randomized NFT distributions (Consumer Affairs Agency, 2025). Brazil age-gates paid random-reward mechanics for under-18s (ECA Digital, 2026); India sweeps token-stake mechanics into its Online Gaming Act 2025 ban; France channels monetizable-object games into the ANJ-supervised JONUM regime. The US has no federal framework but the FTC's $20M HoYoverse enforcement action (2025) signals increasing scrutiny. The UK relies on voluntary industry self-regulation with documented compliance rates below 25% (Royal Society, 2025). A game developer creating a blockchain game with NFT rewards must navigate fundamentally different legal regimes in each target market, with no harmonisation mechanism.
4. Recommended Framework — Tiered Approach for Marketplace Regulation
4.1 Design Principles
A regulator-grade NFT marketplace framework should be built on five principles:
- Substance over form — Classification depends on the economic function of the NFTs traded, not their label
- Proportionality — Regulatory burden scales with risk: unique collectibles receive lighter treatment than investment-marketed or fractionalized NFTs
- Technology neutrality — Requirements apply to the activity (exchange, custody, intermediation), not the underlying technology
- Interoperability — Framework aligns with international standards (FATF Recommendations, IOSCO principles) to facilitate cross-border coordination
- Adaptability — Built-in review mechanisms to accommodate market evolution
4.2 Tier 1 — Collectible Marketplace (Low Risk)
Scope: Marketplaces dealing exclusively in genuinely unique, non-fungible digital collectibles with no payment, investment, or financial instrument characteristics.
| Requirement | Standard |
|---|---|
| Registration | Business registration; notification to financial regulator (no licence required) |
| AML/KYC | Simplified CDD for transactions above USD/EUR 10,000; full CDD for transactions above USD/EUR 50,000 |
| Wash trading | Mandatory basic monitoring: flag self-funded wallet transactions; publish aggregate wash trading metrics quarterly |
| Listing standards | Require IP ownership attestation from seller; automated duplicate detection; DMCA/notice-and-action mechanism |
| Consumer disclosure | Clear disclosure that NFT purchase does not transfer copyright (unless explicitly stated); fee schedule; smart contract audit status; risk warnings |
| Delisting | Remove listed NFTs within 48 hours of valid IP infringement notice; remove sanctioned-person NFTs immediately upon identification |
| Record keeping | 5-year retention of transaction records and CDD data |
| Advertising | Comply with general advertising standards; no misleading claims about rarity, value, or investment potential |
4.3 Tier 2 — Virtual Asset Marketplace (Medium Risk)
Scope: Marketplaces trading NFTs classified as virtual assets / crypto-assets (mass-produced, large series, payment-functional, or fungible collections).
| Requirement | Standard |
|---|---|
| Licence | CASP / VASP authorisation from financial services regulator |
| Minimum capital | EUR 50,000-150,000 (or equivalent) depending on services offered |
| AML/KYC | Full CDD for all customers; EDD for high-risk transactions, PEPs, and cross-border transfers above USD/EUR 1,000 |
| Travel Rule | Full compliance with FATF Recommendation 16 for all transfers |
| Wash trading | Real-time surveillance systems; behavioural and network analysis; mandatory reporting of detected manipulation to regulator |
| Listing standards | Token listing review process (per JVCEA model); assessment of fungibility, financial characteristics, and regulatory classification; issuer disclosure requirements |
| Consumer protection | Segregation of customer assets; insurance against hacking/system failure; mandatory risk disclosures before trade; complaints handling procedure |
| Market integrity | Prohibition on insider trading, front-running, and market manipulation; material information disclosure obligations |
| Reporting | Quarterly regulatory reports; annual independent audit; incident reporting within 24 hours |
4.4 Tier 3 — Securities / Investment NFT Platform (High Risk)
Scope: Platforms trading NFTs classified as securities, financial instruments, or interests in collective investment schemes — including fractionalized NFTs with profit-sharing features.
| Requirement | Standard |
|---|---|
| Licence | Full securities exchange / broker-dealer / investment firm licence |
| Minimum capital | Per existing securities regulation (e.g., EUR 730,000+ for EU investment firms; varies by jurisdiction) |
| Prospectus / disclosure | Issuer must publish prospectus or offering document meeting securities law standards |
| Investor protection | Suitability assessments; client categorisation (retail/professional); mandatory cooling-off periods; investor compensation scheme |
| Market surveillance | Full market abuse detection: wash trading, spoofing, layering, insider trading, front-running |
| Best execution | Obligation to achieve best execution for client orders |
| Custody | Regulated custodial arrangements with segregation, insurance, and cold storage requirements |
| Reporting | Real-time transaction reporting to regulator; annual financial statements; independent audit |
4.5 Classification Decision Process
The recommended classification process for marketplace operators follows a three-step analysis aligned with the approach adopted across major jurisdictions:
Step 1 — Securities test. Does the NFT confer rights equivalent to shares, bonds, derivatives, or interests in a collective investment scheme? Apply the relevant securities test (Howey test in US; ESMA financial instruments guidelines in EU; FSC two-step framework in South Korea; the Decree's functional three-prong test in Thailand). If yes: Tier 3.
Step 2 — Virtual asset test. Is the NFT used for payment or investment purposes in practice? Is it fractionalized, mass-produced, or part of a large fungible series? Apply the relevant virtual asset definition (FATF VA definition; MiCA substance-over-form analysis; FSC guidelines on NFT classification; MAS DPT definition). If yes: Tier 2. (Note: in China this step is dispositive in the negative direction — fractionalization or financialization of a collectible is prohibited outright rather than re-tiered.)
Step 3 — Collectible classification. Is the NFT genuinely unique, non-fungible, and used primarily as a collectible? Does it lack payment, investment, and financial instrument characteristics? If yes: Tier 1.
4.6 Wash Trading Detection — Technical Standards
Based on advances in blockchain analytics, the following minimum detection standards are recommended for Tier 2 and Tier 3 platforms:
- Self-funded address detection — Flag transactions where the buyer's wallet was funded by the seller's wallet or by a common funding source within a defined lookback period (minimum 10 transactions)
- Circular trading detection — Identify closed-loop transaction patterns where the same NFT returns to the original seller through intermediary wallets
- Volume anomaly detection — Flag collections or individual NFTs where trading volume exceeds a statistical threshold relative to comparable assets
- Price anomaly detection — Flag transactions where the price deviates significantly from recent comparable sales without fundamental justification
- Network analysis — Map wallet clustering and identify coordinated trading networks using graph analysis techniques
5. Decision Matrix
5.1 Marketplace Operator Classification Matrix
| Question | Answer: Yes | Answer: No |
|---|---|---|
| Does the platform hold or transmit customer funds? | Likely requires MSB/money transmitter registration (US); PSA licence (Singapore); VASP registration (South Korea); SPSAV authorisation (Brazil); CBB Cat 4 licence (Bahrain) | Reduced licensing burden; peer-to-peer / pure-collectible model may avoid certain registrations (e.g. South Africa NFT exemption) |
| Does the platform trade NFTs classified as securities? | Full securities exchange/broker-dealer licence required (Tier 3) | Proceed to next question |
| Does the platform trade NFTs classified as virtual assets / crypto-assets? | CASP/VASP licence required (Tier 2) | Proceed to next question |
| Does the platform exclusively trade unique, non-fungible collectible NFTs? | Tier 1 — collectible marketplace; business registration and basic AML at thresholds | Re-examine NFT classification |
| Does the platform facilitate transactions above EUR/USD 10,000 in digital art? | AML registration as cultural goods / art market participant may apply (EU AMLR; UK/France/Germany art-dealer route) | Standard Tier 1 requirements |
| Does the platform operate in a jurisdiction that bans NFT secondary trading or exchange listing? | Primary issuance only via state-supervised RMB channel (China); NFTs excluded from licensed venues (Thailand) | Standard tiered analysis applies |
| Does the platform serve customers in multiple jurisdictions? | Must comply with each jurisdiction's requirements; consider EU passporting (MiCA CASP) or VARA-CMA mutual recognition | Single-jurisdiction compliance |
5.2 NFT Listing Classification Matrix
| NFT Characteristic | Classification | Marketplace Tier | Key Regulatory Obligations |
|---|---|---|---|
| One-of-one digital artwork; no investment marketing | Unique collectible | Tier 1 | IP attestation; consumer disclosure; basic AML above thresholds |
| Large PFP collection (10,000 units); homogeneous membership rights | Potentially fungible crypto-asset | Tier 2 | CASP/VASP licence; full AML/KYC; market surveillance |
| Fractionalized NFT representing pooled ownership of real estate | Security / CIS interest | Tier 3 | Securities licence; prospectus; investor protection; full market abuse regime (prohibited outright in China) |
| In-game NFT (cosmetic skin); non-tradeable outside game | Utility item; likely unregulated | Tier 1 or below | Consumer protection; gaming regulation (gambling/gacha compliance in JP, KR; JONUM in FR) |
| In-game NFT with secondary market; play-to-earn rewards | Virtual asset or gambling instrument | Tier 2 (or prohibited in KR/IN) | VASP licence; gambling law analysis; gacha probability disclosure (JP); JONUM (FR) |
| NFT marketed as investment with profit expectations | Security (Howey / ESMA test) | Tier 3 | Securities registration; prospectus; anti-fraud |
| NFT representing loyalty/membership with no financial return | Utility / digital tool | Tier 1 | Consumer protection; ASCT compliance (JP); general advertising rules |
5.3 Jurisdiction Selection Matrix for Marketplace Operators
| Factor | Best Jurisdiction(s) | Rationale |
|---|---|---|
| Regulatory clarity | EU (MiCA), South Korea (VAUPA + FSC guidelines) | Comprehensive frameworks with explicit NFT provisions |
| Innovation-friendliness | US (post-March 2026), UAE (VARA), Japan, Liechtenstein (TVTG) | Pro-innovation policy posture; flexible token-law foundation |
| Tax efficiency | Singapore (no capital gains tax), UAE (no personal income tax), Hong Kong (no CGT) | Capital gains exemptions benefit NFT marketplace users |
| Cross-border reach | EU (MiCA CASP passporting across 27+ states) | Single licence enables EU-wide operation |
| IP protection | Japan (strong moral rights), France/Germany (droit de suite/Folgerecht), US (Lanham Act), UK (Property Act 2025) | Established IP enforcement precedent for digital assets |
| Gaming NFTs | France (JONUM regime), Japan (nuanced gacha regulation), US (no federal prohibition) | South Korea de facto P2E ban; India online-money-games ban |
| AML compliance | South Korea (real-name system), EU (AMLR + AMLA supervision) | Strongest enforcement infrastructure |
| Jurisdictions to avoid for NFT trading | China (secondary trading banned), Thailand (NFTs barred from licensed exchanges), India (30% flat tax + 1% TDS) | Structural exclusion or punitive fiscal burden on NFT marketplaces |
5.4 Regulatory Readiness Assessment
The following matrix helps regulators assess their own jurisdiction's readiness for NFT marketplace regulation:
| Readiness Dimension | Minimum Standard | Advanced Standard | Leading Practice |
|---|---|---|---|
| NFT classification framework | Case-by-case analysis with no published criteria | Published guidelines with substance-over-form test | Multi-tier classification with explicit thresholds and worked examples (ASIC INFO 225 model) |
| Marketplace licensing | No NFT-specific licensing path | AML registration requirement for NFT platforms | Tiered licensing (collectible / virtual asset / securities) with passporting |
| Wash trading oversight | No specific prohibition or surveillance | General market abuse provisions apply to in-scope NFTs | Mandatory on-chain surveillance with self-funded address detection and reporting obligations |
| Consumer protection | General consumer law applies by analogy | Published guidance on NFT consumer rights | Mandatory standardised disclosure notice; complaints resolution mechanism; compensation scheme |
| IP enforcement | General copyright/trademark law applies | DMCA/notice-and-action mechanism for NFT platforms | Automated IP screening at listing; mandatory provenance attestation; interoperable royalty enforcement |
| Cross-border coordination | Unilateral enforcement | Bilateral information sharing | Mutual recognition of marketplace licences; harmonised classification criteria |
| Gaming NFT regulation | No framework | Loot box probability disclosure | Integrated framework addressing gambling law, consumer protection, and age verification for NFT game mechanics |
5.5 Implementation Roadmap for Regulators
Phase 1 (0-6 months): Foundation
- Publish NFT classification guidance with substance-over-form test and worked examples
- Clarify which existing licensing regimes apply to NFT marketplaces
- Issue supervisory statement on applicability of market abuse provisions to NFT markets
- Begin stakeholder consultation on tiered marketplace regulation
Phase 2 (6-18 months): Framework Development
- Develop tiered licensing framework (Tier 1 / Tier 2 / Tier 3)
- Draft wash trading surveillance standards for marketplace operators
- Establish standardised consumer disclosure requirements
- Create listing and delisting standards in consultation with industry self-regulatory bodies
- Implement cross-border coordination agreements with peer regulators
Phase 3 (18-36 months): Full Implementation
- Enact tiered marketplace regulation
- Mandate on-chain surveillance for Tier 2 and Tier 3 platforms
- Establish enforcement capacity for NFT market abuse
- Launch periodic review mechanism (annual assessment of framework adequacy)
- Contribute to FATF and IOSCO NFT-specific guidance development
6. Key Regulatory Gaps and Recommendations
6.1 Priority Gap: Wash Trading Enforcement
Gap: No jurisdiction has brought an NFT-specific wash trading enforcement action despite billions in documented wash trading volume. The only jurisdictions without an exposure are those that suppress secondary liquidity entirely (China, Thailand), which is not a transferable solution.
Recommendation: Regulators should (1) extend market abuse prohibitions explicitly to NFT marketplaces at Tier 2 and above; (2) mandate on-chain surveillance using self-funded address detection, circular trading detection, and network analysis; (3) establish reporting obligations for marketplaces that detect suspected wash trading; and (4) coordinate cross-border enforcement through FATF and IOSCO channels.
6.2 Priority Gap: Listing and Delisting Standards
Gap: No jurisdiction mandates specific listing criteria for NFT marketplaces regarding IP provenance, quality, or classification assessment (the closest is China's heightened prior-ownership review duty under Qice v. Bigverse).
Recommendation: Adopt the JCBA/JVCEA model as a minimum standard: require marketplaces to implement a token listing review process assessing blockchain, primary sale terms, IP content, and regulatory classification before listing. Require automated IP screening (reverse image search, metadata verification) and maintain a standardised delisting procedure for infringing, fraudulent, or sanctioned NFTs.
6.3 Priority Gap: Consumer Disclosure Standardisation
Gap: Marketplace disclosure requirements vary dramatically. Most platforms disclaim all liability through terms of service.
Recommendation: Mandate a standardised disclosure notice for all NFT listings containing: (1) what the buyer receives (token only, or token plus IP licence — specifying scope); (2) whether the NFT's value depends on issuer efforts; (3) platform fees, gas fees, and royalty structures; (4) risks including smart contract vulnerabilities, metadata storage (on-chain vs. off-chain / IPFS), and platform shutdown consequences; and (5) applicable regulatory classification of the NFT.
6.4 Priority Gap: Cross-Border Coordination
Gap: NFT marketplaces operate globally, but regulation is jurisdictional. A marketplace incorporated in one country routinely serves users in dozens of others, creating enforcement and compliance challenges — and outcomes diverge sharply, from the US/Singapore/Hong Kong permissive posture to China's controlled-issuance ban on secondary trading.
Recommendation: Establish mutual recognition frameworks — building on precedents such as the VARA-CMA mutual recognition agreement (August 2025) and MiCA's EU-wide passporting — to reduce duplicative licensing burdens while maintaining supervisory standards. FATF and IOSCO should develop NFT-specific guidance supplements to their existing virtual asset frameworks.
7. Sources and Verification Notes
Primary Legislative and Regulatory Sources
- Regulation (EU) 2023/1114 (MiCA): EUR-Lex
- SEC/CFTC Joint Interpretive Release, March 17, 2026: SEC Press Release
- South Korea Virtual Asset User Protection Act (VAUPA): KLRI English Text
- FSC Guidelines on NFT Classification, June 10, 2024: FSC Press Release
- Japan FSA Discussion Paper on Crypto-Asset Regulatory Systems, April 2025: FSA
- UK Cryptoassets Regulations 2026: GOV.UK
- UK Property (Digital Assets etc) Act 2025: GOV.UK Factsheet
- Singapore PSA 2019: MAS Licensing
- MAS Consumer Protection Guidelines PS-G03: MAS
- Brazil BCB Resolutions 519/520/521 (SPSAV framework, November 2025): Banco Central do Brasil
- Thailand Emergency Decree on Digital Asset Businesses B.E. 2561 (2018): Thai SEC
- India Income-tax Act s.2(47A) VDA definition; PMLA notification (7 March 2023): FIU-IND
- China NIFA/CBA/SAC three-association initiative (April 2022) and Yin Fa [2026] No. 42: PBOC
- South Africa FICA / FAIS CASP framework: FSCA
- FATF Updated Guidance on Virtual Assets and VASPs, October 2021: FATF
- VARA Licensed Activities: VARA FAQ
- ASIC INFO 225 on Digital Assets: ASIC
Analytical and Industry Sources
- OpenSea SEC Position: The Block
- Wash Trading Statistics: CoinLaw
- Wash Trading and Insider Sales in NFT Markets: ScienceDirect
- Advanced Wash Trading Detection: Financial Innovation / SpringerOpen
- Chainalysis NFT Wash Trading Analysis: Chainalysis
- Chainalysis Crypto Market Manipulation 2025: Chainalysis
- JCBA NFT Business Guidelines: So & Sato Law Offices
- Norton Rose Fulbright NFT Global Guide: Norton Rose Fulbright
- Kim & Chang — FSC NFT Guidelines: Kim & Chang
- UAE VARA Licensing: Neos Legal
- Nasdaq — Asia Wash Trading Surveillance: Nasdaq
Verification Status
| Claim | Verification |
|---|---|
| MiCA Article 2(3) NFT exemption | Verified via EUR-Lex full text |
| SEC/CFTC March 2026 five-category taxonomy | Verified via SEC press release and CFTC press release |
| South Korea VAUPA effective July 19, 2024 | Verified via Library of Congress and FSC press release |
| FSC NFT Guidelines published June 10, 2024 | Verified via FSC official press release |
| UK Property (Digital Assets etc) Act 2025 Royal Assent December 2, 2025 | Verified via Law Commission announcement and GOV.UK |
| UK Cryptoassets Regulations 2026 enacted February 4, 2026 | Verified via GOV.UK and Latham & Watkins analysis |
| VARA licensing requirements for NFT marketplaces in Dubai (AED 1.5M Exchange paid-up capital) | Verified via VARA official FAQ and multiple law firm analyses |
| China digital collectibles: primary issuance allowed via state-supervised RMB-only platforms; secondary trading/resale banned in practice | Verified via April 2022 three-association initiative, SPP May 2023 guidance, and Yin Fa [2026] No. 42 |
| China — no confirmed nationally sanctioned compliant secondary market as of June 2026 | Verified via fact matrix (state-exchange plans remain announcements/projections) |
| Thailand — licensed exchanges prohibited from listing NFTs since June 11, 2021 | Verified via SEC Notification KorThor. 18/2564 |
| India — punitive VDA regime (30% flat tax + 1% TDS); FIU-IND PMLA registration; no NFT-specific market-conduct licence | Verified via Income-tax Act s.115BBH / s.194S and PMLA notification (7 March 2023) |
| South Africa — pure NFT activity exempt; CASP FSP licence only where activity crosses into crypto-asset financial services | Verified via FSCA CASP/FAIS framework and FICA accountable-institution rules |
| Brazil SPSAV authorisation (BCB Resolutions 519/520/521); 30 Oct 2026 deadline | Verified via fact matrix (BCB November 2025 resolutions) |
| Bahrain CBB Category 4 Crypto-Asset Licence (min capital BHD 300,000) | Verified via fact matrix (CBB Crypto-Asset Module) |
| Ethereum NFT wash trades totaling $30B+ all-time | Verified via CoinLaw wash trading statistics compilation |
| Wash trading constituting up to 24% of volume | Verified via Journal of Banking & Finance peer-reviewed publication |
| OpenSea SEC investigation closed February 2025 | Verified via CoinDesk reporting and Astraea Counsel analysis |
| Japan JCBA Guidelines revised August 2024 (3rd edition) | Verified via Mori Hamada & Matsumoto and So & Sato Law Offices |
| First VAUPA market-manipulation conviction February 2026 (3 yrs, KRW 500M fine) | Verified via Seoul Southern District Court (fact matrix) |
| No NFT-specific wash trading enforcement action in any jurisdiction (of 20 surveyed) as of June 2026 | Verified via comprehensive search across SEC, ESMA, FSC, FSA, FCA, MAS, SFC, VARA, FSCA, and peer enforcement databases; no actions found |
| MiCA market-abuse penalties (Arts 88-92): up to EUR 5,000,000 (natural persons) / EUR 15,000,000 or 15% turnover (legal persons) | Verified via Regulation (EU) 2023/1114 Article 111(5). Corrected 4 June 2026 from an erroneous "EUR 12.5M / 12.5%", which conflated the ART/EMT-issuer turnover tier (flat EUR 5M cap, 12.5% turnover) with the market-abuse cap; mirrors the canonical EU §8.3 correction |
Cross-References
- Securities Classification — When NFTs become securities across jurisdictions
- Licensing — CASP/VASP licensing requirements
- Compliance — AML/KYC obligations for NFT platforms
- US — SEC/CFTC joint taxonomy; Howey test; state licensing
- EU — MiCA framework; DSA platform obligations; AMLR
- UK — FCA perimeter; Property Act 2025; ASA enforcement
- Japan — JCBA/BCA self-regulatory guidelines; FSA functional analysis; gacha regulation
- South Korea — VAUPA; FSC NFT classification; gaming NFT restrictions
- China — controlled issuance; secondary-trading ban; anti-financialization
- Thailand — exchange NFT-listing ban; ICO-portal regime
- India — VDA tax regime; FIU-IND/PMLA; taxed-but-unregulated
- South Africa — FICA/FAIS CASP framework; pure-NFT exemption
This guidance document was originally compiled on 20 March 2026 based on Phase 1 jurisdictional research and web-verified sources, and refreshed on 4 June 2026 to integrate four additional jurisdictions (China, Thailand, India, South Africa) and re-derive cross-country aggregates across all 20 jurisdictions surveyed. All factual claims mirror the verified fact matrix; where the matrix records "NOT VERIFIED" or "NO DATA FOUND," that status is reflected honestly. The regulatory landscape for NFT marketplaces is evolving rapidly; readers should consult current sources for developments after the date of this document.