1. Summary of Each Organization's Position
The five international standard-setters below sit above the 21 national and sub-national jurisdictions covered in this study — five in the Americas (United States, Brazil, Canada, Cayman Islands, British Virgin Islands), five in Asia-Pacific (Australia, Hong Kong, Japan, Singapore, South Korea), eight in Europe (EU, France, Germany, Liechtenstein, Luxembourg, Switzerland, UK, Ireland), and three in the Middle East & Africa (Bahrain, UAE, Abu Dhabi (ADGM)). Each jurisdiction implements these standards differently, but every framework in this study traces to one or more of the bodies below.
1.1 IOSCO — Securities Markets Conduct
IOSCO is the global standard-setter for securities markets regulation, with over 130 member jurisdictions. IOSCO's work on tokenized RWAs spans two major workstreams.
18 Policy Recommendations for Crypto and Digital Asset Markets (November 2023, IOSCOPD747). These recommendations establish a global regulatory baseline for crypto-asset service providers (CASPs), organized into nine chapters covering the full lifecycle: overarching framework, governance and conflicts, order handling, listing and primary markets, abusive behaviors, cross-border cooperation, custody, operational and technological risks, and retail distribution. The core principle is "same activities, same risks, same regulatory outcomes." This principle is echoed almost verbatim in national framings across the study — Hong Kong's "same business, same risks, same rules," Singapore's "same activity, same risk, same regulatory outcome," and the UK's "same risk, same regulatory outcome."
Final Report on Tokenisation of Financial Assets (November 2025, IOSCOPD809). This report specifically addresses tokenized securities, bonds, and fund units. Key findings include: adoption remains limited despite efficiency opportunities; the primary barriers to scalability are interoperability challenges across blockchains and the lack of credible high-quality settlement assets; and risks mirror existing categories but manifest differently under DLT. IOSCO encourages members to apply existing regulatory frameworks, issue new guidance where frameworks are insufficient, and adopt sandbox programs for testing.
Thematic Review (October 2025, IOSCOPD801). Assessed implementation of the 18 recommendations across member jurisdictions, finding varied progress with particular challenges in harmonizing cross-border treatment, implementing consistent custody standards, and addressing conflicts of interest in vertically integrated platforms.
MMoU/EMMoU and direct membership. IOSCO's Multilateral Memorandum of Understanding (MMoU) and Enhanced MMoU (EMMoU) are the principal channels for cross-border enforcement cooperation. Among the study's jurisdictions this matters most for the offshore and free-zone regulators that build cross-border legitimacy on it: Abu Dhabi's FSRA relies on the IOSCO MMoU (cooperation with 100+ regulators) as its primary third-country recognition mechanism, and Canada frames its tokenization work as reflecting the 18 Policy Recommendations. The Cayman Islands (CIMA) and British Virgin Islands (FSC) operate within the IOSCO cooperation architecture even though neither has a bespoke tokenized-securities mutual-recognition regime.
1.2 BIS — Financial Infrastructure and Settlement
The BIS has articulated the most comprehensive institutional vision for tokenized finance through its Annual Economic Reports and Innovation Hub projects.
Unified Ledger Concept (2023 Annual Report, Chapter III). Proposed a transformative financial infrastructure combining tokenized central bank money, tokenized commercial bank deposits, and tokenized assets on a shared programmable platform. Key features: programmability, composability, atomic settlement, and smart contracts. The BIS explicitly favors tokenized deposits over stablecoins, citing stablecoins' failures on singleness, elasticity, and integrity tests.
Tokenization Trilogy (2025 Annual Report, Chapter III). Built on the 2023 concept with three pillars: tokenized central bank reserves, tokenized commercial bank money, and tokenized government bonds. Empirical findings include over 20 tokenized sovereign/supranational bonds issued globally (approximately USD 4 billion), evidence of tighter bid-ask spreads for tokenized bonds (17 basis points vs. 30 for conventional), and identification of repos as the "next natural setting" for tokenization.
Innovation Hub Projects. Project Agora (7 central banks, 43 financial institutions) explores cross-border payment tokenization. Project Pine (with NY Fed) demonstrates monetary policy in tokenized environments. Project Promissa (with SNB and World Bank) tokenized government promissory notes, compressing encashment from weeks to seconds. Project Guardian (with MAS) conducted over 15 tokenization trials, producing the Guardian Fixed Income Framework with ICMA. The study's jurisdictions host the most advanced national settlement experiments aligned with this vision: Switzerland's Project Helvetia III (production-grade wholesale-CBDC settlement on SDX), the EU/ECB DL3S, TIPS Hash-Link and Trigger Solution trials (with Germany's Bundesbank and Banque de France as national legs), Australia's Project Acacia, Hong Kong's Project Ensemble/EnsembleTX, and the UK's Project Meridian. The four newly integrated jurisdictions sit at different points on this curve: Abu Dhabi's purpose-built Digital Settlement Facility (DSF) supports atomic/instantaneous DvP for digital securities; Ireland's CBI prioritises settlement in central bank money and its DP12 discussion paper (5 Mar 2026) envisages atomic DvP of tokenised ETFs against wholesale CBDC, but no live Irish DLT settlement system exists yet; while the Cayman Islands and British Virgin Islands have no domestic wholesale-CBDC or atomic-settlement infrastructure (NO DATA FOUND), deliberately leaving market-infrastructure layers to onshore venues.
CPMI Guidance. The Committee on Payments and Market Infrastructures applies the Principles for Financial Market Infrastructures (PFMI) to DLT-based systems performing systemically important functions. The CPMI 2025-2027 work programme includes continued work on tokenization and DLT in payment systems. Abu Dhabi's FSRA mirrors PFMI logic at the venue level by mandating legal-entity segregation between trading and custody/settlement (RIE/MTF vs. DSF/RCH).
1.3 FSB — Financial Stability
The FSB monitors global financial system stability and its work centers on two major publications.
Nine High-Level Recommendations for Crypto-Asset Activities (July 2023). Endorsed by G20 leaders, covering: regulatory powers and frameworks, general regulatory requirements, cross-border cooperation, governance, risk management, data collection and reporting, disclosure requirements, financial stability risk management, and multi-function service provider regulation. Recommendation 1 establishes that tokenized assets meeting existing securities definitions should be regulated under existing frameworks — the substance-over-form principle that every one of the 21 jurisdictions applies, whether through the US Howey test, Singapore's economic-substance test, Cayman's Schedule 1 SIBA enumerated list, BVI's fact-specific SIBA "investment" enquiry, Ireland's EU two-track test, or Abu Dhabi's FSMR s. 58(2)(b) deeming power.
Financial Stability Implications of Tokenisation (October 2024). Found that tokenization remains nascent and does not currently pose material financial stability risk, but identified five vulnerabilities that could materialize at scale: liquidity mismatches (tokens appearing more liquid than underlying assets), leverage risks (composability and rehypothecation through smart contracts), valuation opacity (oracle dependencies), interconnectedness (new contagion pathways), and operational fragility (smart contract errors, key mismanagement).
Thematic Peer Review (October 2025). Found notable advancements across many jurisdictions but few finalized frameworks. Gaps identified in: CASP regulation, coverage of higher-risk activities (lending, margin trading), data collection, and financial stability monitoring. Put forward eight recommendations for jurisdictions and standard-setting bodies. The study's evidence corroborates the "few finalized frameworks" finding — only a minority of the 21 jurisdictions have an in-force bespoke statute (Switzerland's DLT Act, Germany's eWpG, Liechtenstein's TVTG, the EU's MiCA/DLT Pilot stack and its national legs, Japan's ERTR regime, the Cayman tokenised-funds framework in force 24 Mar 2026), while several remain pre-commencement (Australia's DAF Act enacted 8 Apr 2026 but commencing 9 Apr 2027; South Korea's FSCMA/AERSB amendments passed 15 Jan 2026, in force Jan 2027; the UK's cryptoasset regime made but commencing 25 Oct 2027).
1.4 FATF — Anti-Money Laundering and Counter-Terrorist Financing
FATF is the global standard-setter for AML/CFT measures, directly impacting tokenized RWA platforms through its definitions and obligations.
Updated Guidance on VAs and VASPs (October 2021). Defines virtual assets as "digital representations of value that can be digitally traded, or transferred, and can be used for payment or investment purposes." Critically excludes securities already covered by existing FATF Recommendations. Defines VASPs through five activities (exchange, transfer, safekeeping, issuer services). Clarified positions on stablecoins (subject to VA/VASP standards), DeFi (functional approach; creators may be VASPs), and NFTs (generally not VAs unless used for payment/investment).
Travel Rule (Recommendation 16). Extended to VA transfers, requiring originator and beneficiary identification for transfers by VASPs. De minimis threshold of USD/EUR 1,000. Implementation remains challenging: the "sunrise problem" persists where some jurisdictions have implemented while counterparty jurisdictions have not. As of June 2025, 85 of 117 responding jurisdictions (73%) have passed Travel Rule legislation. FATF tracks Recommendation 15 implementation across 67 jurisdictions covering approximately 98% of global VASP activity. Every one of the 21 jurisdictions in this study has implemented or is bound by Travel Rule obligations: the Cayman Islands brought Travel Rule obligations into force on 1 July 2022, the BVI's VASP Act 2022 was designed to FATF standards, the EU (and its members Ireland, France, Germany, Luxembourg) applies the Travel Rule through the Transfer of Funds Regulation, and Abu Dhabi applies UAE federal AML/CFT laws plus the FATF Recommendations.
Grey-list dynamics. FATF listing decisions materially affect the offshore and Gulf jurisdictions in this study. The Cayman Islands was removed from the FATF grey list (and EU AML high-risk list) in October 2023, and the UAE (covering its ADGM free zone) was removed from the grey list in February 2024 — both events strengthening their standing as tokenization domiciles. The BVI remains a major VASP-registration venue (14 registered VASPs as at 30 July 2025) under a FATF-aligned VASP Act, with the FSC running thematic AML/CTF reviews.
Risk-Based Approach. Requires jurisdictions to identify and assess ML/TF risks, apply proportionate measures, and allocate supervisory resources based on risk profiles. Risk factors for tokenized RWA platforms include product complexity, customer profile, geographic exposure, and use of privacy-enhancing technologies. The offshore and free-zone jurisdictions reinforce this with parallel international tax-transparency obligations: Cayman, the BVI, and Abu Dhabi all apply CRS/FATCA (Abu Dhabi via ADGM CRS Regulations 2017), and Cayman and the BVI are layering in the OECD Crypto-Asset Reporting Framework (CARF) — the BVI's CARF legislation is effective for the 2027 calendar year (first reports to the ITA in 2028).
1.5 UNIDROIT — Private Law Foundations
UNIDROIT addresses the foundational private law questions that public law frameworks assume but do not resolve.
Principles on Digital Assets and Private Law (adopted May 2023, published October 2023). Contains 19 principles addressing: digital asset definition and scope, control as the foundational proprietary concept, transfer by change of control, innocent acquirer protections, custodial relationships (duties, obligations, client rights, segregation), secured transactions and priority rules, and insolvency protections. The "linked assets" concept (Principle 4) explicitly covers tokenized RWAs. The conflict-of-laws waterfall (Principle 5) provides applicable law determination for cross-border transfers.
National private-law analogues. Several study jurisdictions have already enacted or codified the private-law clarity UNIDROIT promotes: Switzerland's ledger-based securities (Art. 973d CO) and DEBA Art. 242a bankruptcy segregation, the UK's Property (Digital Assets etc) Act 2025 establishing digital assets as a third category of personal property, Germany's eWpG eliminating the certificate requirement, and Liechtenstein's Token Container Model. The four newly integrated jurisdictions are notable for their common-law and tax-transparent foundations: the Cayman Islands and British Virgin Islands both rely on English common law (the BVI with UK Privy Council final appeal) and resolve ownership through private-key control and contractual operator-approved transfers reconciled to book-entry registers, while Abu Dhabi's ADGM operates its own English common-law system and pioneered the world-first DLT Foundations regime (2023) for the legal personality of on-chain structures. Ireland relies on directly-applicable EU law plus CBI guidance rather than a bespoke domestic private-law statute.
HCCH-UNIDROIT Joint Project. Launched 2023 to examine feasibility of a normative framework on law applicable to cross-border digital asset holdings and transfers. Examines how the HCCH Securities Convention PRIMA rule applies to DLT-based custody. An Experts' Group was mandated in March 2025.
Implementation Strategy (endorsed May 2024). Four-part approach: position Principles as the leading international standard, identify priority jurisdictions (Asia as initial focus), raise awareness, and ensure broad accessibility through translations.
2. Comparative Coverage Table
This table identifies which regulatory dimensions each international organization covers in its published frameworks.
| Dimension | IOSCO | BIS | FSB | FATF | UNIDROIT |
|---|---|---|---|---|---|
| Securities classification | Yes (CDA Recs Ch. 4; Tokenisation Report) | Referenced (technology-neutral) | Yes (Rec. 1) | Excluded from VA definition | Not directly (defers to national law) |
| Licensing/authorization | Yes (CDA Recs Ch. 1-2) | Referenced | Yes (Recs. 1-2) | Yes (VASP registration/licensing) | No |
| DLT infrastructure/settlement | Yes (Tokenisation Report) | Yes (unified ledger, CPMI/PFMI) | Referenced | No | No |
| Custody | Yes (CDA Recs Ch. 7) | Yes (Projects Guardian, Promissa) | Referenced | Yes (safekeeping as VASP activity) | Yes (Principles 10-13) |
| Investor protection | Yes (CDA Recs Ch. 9) | Referenced | Yes (Rec. 7) | No | Indirect (innocent acquirer, insolvency) |
| AML/KYC | Yes (CDA Rec. 6) | Referenced | Yes (Rec. 6, referencing FATF) | Yes (primary framework) | No |
| Cross-border cooperation | Yes (CDA Recs Ch. 6; MMoU/EMMoU) | Yes (Projects Agora, Mandala) | Yes (Rec. 3) | Yes (Travel Rule, mutual evaluations) | Yes (Principle 5 conflict-of-laws; HCCH Joint Project) |
| Financial stability | Referenced | Yes (2025 Report) | Yes (primary framework) | No | No |
| Market integrity/abuse | Yes (CDA Recs Ch. 5) | No | Referenced | No | No |
| Governance | Yes (CDA Recs Ch. 2) | Referenced | Yes (Rec. 4) | No | No |
| Operational/technology risk | Yes (CDA Recs Ch. 8) | Yes (CPMI) | Yes (Rec. 5) | No | No |
| Private law (ownership, transfer) | No | No | No | No | Yes (primary framework) |
| Insolvency/resolution | No | No | Referenced | No | Yes (Principles 18-19) |
| Tax | No | No | No | No | No |
3. Convergence Areas
The five international organizations agree on several foundational positions:
3.1 Same Activity, Same Risk, Same Regulation
All four organizations that address regulatory treatment (IOSCO, BIS, FSB, FATF) endorse the principle that tokenization does not alter the regulatory perimeter. IOSCO and the FSB use the phrase explicitly. The BIS advocates technology-neutral regulation. FATF excludes from the VA definition securities already covered by existing recommendations. UNIDROIT's principles are designed to complement, not displace, existing financial market regulation. The principle is near-universal across the 21 study jurisdictions: it appears as an explicit framing in Hong Kong ("same business, same risks, same rules"), Singapore, the UK and the EU, and operates implicitly through every substance-over-form classification test — from the Cayman Islands' SIBA enumerated-list test and the BVI's fact-specific "investment" enquiry to Abu Dhabi's FSMR s. 58(2)(b) deeming power and Ireland's EU two-track economic-substance test.
3.2 Custody Requires Segregation and Client Protection
IOSCO's custody recommendations (CDA Recs 12-16) require segregation, safekeeping, and disclosure. The FSB's governance and risk management recommendations impose custodial standards. UNIDROIT's Principles 10-13 establish that custodied digital assets are not part of the custodian's insolvency estate. FATF requires custodians holding private keys to register as VASPs. The BIS's Project Guardian addresses custody within the fixed income framework. All organizations converge on the principle that client assets must be protected from custodian failure — a principle reflected in every study jurisdiction's custody rules, including the Cayman VASP custody-licence segregation requirement (Phase 2, eff. 1 Apr 2025), the BVI's Section 27 safekeeping arrangements with prohibition on encumbering client deposits, Ireland's depositary mandate plus MiCAR Art. 75 segregation, and Abu Dhabi's requirement that custody of Digital Securities be conducted through a separately licensed legal entity (DSF or RCH) with independent third-party reconciliation at least annually.
3.3 Cross-Border Coordination Is Essential
IOSCO's Chapter 6 recommendations and the MMoU/EMMoU framework address international regulatory cooperation. The FSB's Recommendation 3 promotes consistent cross-border approaches. FATF's Travel Rule requires cross-VASP information sharing. The BIS's Project Agora tests cross-border payment settlement with seven central banks. UNIDROIT's conflict-of-laws waterfall and the HCCH Joint Project address applicable law determination. All organizations recognize that tokenized assets cross borders more easily than traditional instruments and that regulatory coordination must match. The study's jurisdictions illustrate the spectrum of cross-border posture: the EU and its members (including Ireland) operate a single passport for tokenized and traditional instruments alike; offshore and free-zone venues (Cayman, BVI, Abu Dhabi) lack any passport and instead rely on the IOSCO MMoU, FATF Travel Rule, and national private-placement regimes; and Abu Dhabi's FSRA explicitly grounds its third-country recognition on its IOSCO MMoU signatory status.
3.4 Existing Frameworks Should Be Applied Before New Ones Are Created
IOSCO encourages members to apply existing regulatory frameworks to tokenized assets where appropriate. The FSB's Recommendation 1 states that assets meeting existing securities definitions should be regulated accordingly. FATF excludes already-regulated securities from the VA definition. UNIDROIT's principles are designed to fill gaps in existing private law, not replace it. The BIS advocates for adapting existing financial infrastructure (central bank money, CSD systems) rather than building parallel systems. The newly integrated jurisdictions exemplify the "apply existing law" model most strongly: the BVI has no bespoke tokenization statute (regulating through SIBA/VASP Act/BCA on substance and rights), Ireland relies entirely on directly-applicable EU law with no domestic blockchain statute, and the Cayman 2026 tokenised-funds framework deliberately channels tokenized instruments into the existing Mutual Funds, Private Funds, and SIBA regimes rather than creating a parallel one.
3.5 Vertical Integration Creates Conflicts of Interest
IOSCO's Chapter 2 recommendations address governance and conflicts in vertically integrated CASPs. The FSB's Recommendation 9 requires appropriate regulation of multi-function service providers. Both organizations identify the combination of issuance, trading, and custody functions in a single entity as a structural risk that existing financial regulation has historically separated. Abu Dhabi's ADGM operationalizes this concern directly, requiring legal-entity segregation between trading venues (RIE/MTF) and custody/settlement (DSF/RCH) so that a trading venue cannot self-settle within the same legal entity.
4. Gaps — What No Organization Has Addressed
4.1 Taxation of Tokenized Assets
No international organization has produced guidance on the tax treatment of tokenized securities. There is no international framework equivalent to FATF for AML or IOSCO for securities conduct in the taxation domain. The OECD's Crypto-Asset Reporting Framework (CARF) addresses information exchange but not substantive tax treatment — and the study's offshore jurisdictions are now adopting it (Cayman via CARF/updated CRS, the BVI with CARF effective for 2027). This gap leaves jurisdictions to develop tax rules independently, producing the wide variation documented in the taxation frameworks guidance — from the tax-neutral offshore and Gulf venues (Cayman, BVI, Bahrain, UAE/ADGM) to Germany's substance-based capital-investment treatment and France's PFU flat tax.
4.2 Smart Contract Governance and Liability
While IOSCO and the FSB reference smart contract risks (operational vulnerabilities, opaque interdependencies), no organization has produced specific governance standards for smart contracts used in tokenized securities. Questions such as who bears liability for a smart contract bug that mis-distributes bond coupons, or how a smart contract upgrade should be governed, remain unaddressed at the international level. Abu Dhabi's DLT Foundations regime addresses the legal-personality question for on-chain structures but does not resolve smart-contract liability as such.
4.3 DeFi Protocol Regulation
FATF applies a functional approach to DeFi, identifying creators and operators as potential VASPs. IOSCO's DeFi report (December 2023) addresses governance and accountability challenges. However, no organization has produced actionable regulatory standards for decentralized tokenization protocols that operate without identifiable intermediaries. This gap is increasingly relevant as DeFi protocols become venues for trading tokenized real-world assets.
4.4 Interoperability Standards Across Blockchains
IOSCO's November 2025 Tokenisation Report identifies interoperability as one of two key structural barriers to scaling. The BIS acknowledges that multiple ledgers may coexist connected through APIs. However, no organization has proposed technical or governance standards for cross-chain interoperability of tokenized securities. This leaves interoperability to private-sector initiatives without international coordination — visible in the study's fragmented venue landscape, where tokenized funds and bonds settle across heterogeneous ledgers (Ethereum, IOTA, Polygon, Avalanche, XRP Ledger, Canton, Hyperledger Fabric, and private chains such as SWIAT and ibet).
4.5 Retail Investor Access Thresholds for Tokenized Products
While IOSCO's retail distribution recommendations (Chapter 9) address suitability and disclosure, no organization has provided guidance on appropriate minimum investment thresholds, fractional ownership limits, or retail access criteria specific to tokenized instruments. National approaches vary enormously — from Singapore's USD 20 minimum (Franklin Templeton-DBS fund) and the UAE's AED 2,000 fractional property minimum, through the professional-only gating in the Cayman Islands (registered mutual fund route commonly US$100,000), the BVI (professional funds US$100,000), and Abu Dhabi (Exempt Offer ≥ US$100,000), to Luxembourg's well-informed-investor regime and the US's accredited-investor-only Reg D pathway.
4.6 Environmental and Sustainability Standards for Tokenized Assets
Despite Hong Kong's focus on tokenized green bonds and the EIB's sustainable finance tokenization, no international organization has addressed how environmental or sustainability labeling should apply to tokenized instruments, or whether the efficiency gains of tokenization (reduced settlement infrastructure) should be counted as sustainability benefits.
5. Implementation Implications for National Regulators
5.1 Priority Sequence for Alignment
National regulators building or refining RWA tokenization frameworks should prioritize alignment with international standards in the following sequence:
-
FATF compliance first. Travel Rule implementation and VASP registration/licensing are the most immediate enforcement risk. FATF mutual evaluations directly affect a jurisdiction's standing and can result in grey-listing. As of June 2025, 73% of responding jurisdictions have enacted Travel Rule legislation; regulators in the remaining 27% face increasing pressure. The stakes are visible in the study: the Cayman Islands (Oct 2023) and the UAE (Feb 2024, covering ADGM) were both removed from the FATF grey list, materially strengthening their tokenization-domicile standing.
-
IOSCO CDA Recommendations second. The 18 recommendations provide the operational framework for CASP regulation. The October 2025 thematic review means that implementation gaps are visible to IOSCO and peer jurisdictions. Regulators should map their existing frameworks against the nine chapters and address any deficiencies, and — for offshore and free-zone regulators in particular — maintain IOSCO MMoU/EMMoU standing as the primary cross-border cooperation channel (as Abu Dhabi's FSRA does explicitly).
-
FSB financial stability recommendations third. While tokenization does not currently pose material stability risk, the FSB's five identified vulnerabilities (liquidity mismatches, leverage, valuation opacity, interconnectedness, operational fragility) should inform supervisory monitoring frameworks. Regulators should establish data collection and reporting mechanisms before tokenized markets reach systemically significant scale.
-
BIS infrastructure standards fourth. The BIS unified ledger and tokenization trilogy concepts inform long-term infrastructure planning. Regulators should engage with central bank CBDC projects (aligned with BIS Projects Agora, Helvetia, Guardian) to ensure tokenized assets can settle in central bank money — as Switzerland (Helvetia III), the EU/Germany/France (DL3S, Trigger Solution), Australia (Acacia), Hong Kong (Ensemble), and the UK (Meridian) already do, while Ireland's CBI signals the same priority through DP12.
-
UNIDROIT private law principles fifth. Domestic private law reform to accommodate digital asset ownership, transfer, custody, and insolvency is the slowest-moving but most foundational layer. Regulators should assess whether their jurisdiction's property law, insolvency law, and conflict-of-laws rules are compatible with the 19 UNIDROIT Principles. The UK's Law Commission report (June 2023) and Property (Digital Assets etc) Act 2025, Switzerland's DLT Act, and the common-law foundations of the Cayman Islands, the BVI, and Abu Dhabi's ADGM provide implementation models.
5.2 Key Implementation Decisions
| Decision | IOSCO Guidance | BIS Guidance | FSB Guidance | FATF Guidance | UNIDROIT Guidance |
|---|---|---|---|---|---|
| Should tokenized securities use existing securities law? | Yes (same activity, same regulation) | Yes (technology-neutral) | Yes (Rec. 1) | Yes (exclude from VA if already regulated) | Defers to national law |
| Should CASPs be separately licensed? | Yes (CDA Recs Ch. 1-2) | No position | Yes (Rec. 2) | Yes (VASP licensing) | No position |
| Should custody require asset segregation? | Yes (CDA Recs Ch. 7) | Yes (Project Guardian) | Yes (implied by Recs 4-5) | Yes (safekeeping obligations) | Yes (Principles 10-13) |
| Should cross-border coordination be formalized? | Yes (Ch. 6; MMoU) | Yes (Projects Agora, Mandala) | Yes (Rec. 3) | Yes (Travel Rule) | Yes (Principle 5; HCCH project) |
| Should DLT-specific settlement finality be defined? | No specific guidance | Yes (CPMI/PFMI application) | No specific guidance | No position | No specific guidance |
5.3 Common Pitfalls in Implementation
Based on the international frameworks and verified national experiences across the 21 jurisdictions:
- Creating a parallel regulatory universe for tokenized assets rather than applying existing frameworks contradicts the consensus position of all five organizations. The BVI (no bespoke statute), Ireland (EU law only), and the Cayman tokenised-funds framework (channeling into existing funds/securities regimes) illustrate the consensus-aligned alternative.
- Delaying VASP licensing/registration exposes the jurisdiction to FATF grey-listing risk and undermines IOSCO compliance assessments — the very risk the Cayman Islands and UAE/ADGM resolved by exiting the grey list (2023 and 2024 respectively).
- Ignoring the private law layer (ownership, transfer, insolvency) creates legal uncertainty that regulation alone cannot resolve. UNIDROIT Principles should inform domestic law reform; common-law jurisdictions (Cayman, BVI, ADGM) and statute-reformers (UK Property Act 2025, Switzerland, Germany) show contrasting routes to the same clarity.
- Neglecting settlement infrastructure means that efficiency gains from tokenization remain theoretical. BIS evidence shows institutional adoption requires central bank money settlement; Ireland's reliance on external platforms (its MMFs underlie JP Morgan Kinexys and Archax) shows how a fund-domicile can supply assets without yet hosting domestic settlement infrastructure.
- Failing to collect data on tokenized asset markets prevents early detection of FSB-identified stability vulnerabilities.
6. Recommended Approach to International Alignment
6.1 Minimum Viable Alignment
A jurisdiction seeking to establish an internationally aligned RWA tokenization framework should, at minimum:
- Enact VASP licensing/registration with FATF-compliant AML/KYC and Travel Rule obligations.
- Confirm that tokenized securities are classified and regulated as securities under existing law (IOSCO, FSB alignment).
- Establish custody standards requiring asset segregation and client protection (IOSCO, UNIDROIT alignment).
- Implement cross-border cooperation mechanisms (IOSCO MMoU signatory status, bilateral MoUs with key counterparty jurisdictions).
- Assess domestic private law for compatibility with UNIDROIT Principles on control, transfer, and insolvency.
The four newly integrated jurisdictions each satisfy this minimum without a bespoke statute: the Cayman Islands and BVI through FATF-aligned VASP Acts plus common-law property rules and SIBA/funds classification; Abu Dhabi through the FSRA VA/Digital Securities framework, IOSCO MMoU membership, and DSF-segregated custody; and Ireland through the directly-applicable EU MiFID/MiCAR/DLT Pilot stack supervised by the CBI.
6.2 Advanced Alignment
Jurisdictions seeking to position themselves as leaders in tokenized RWA markets should additionally:
- Develop wholesale CBDC or tokenized central bank money for settlement (BIS alignment) — achieved in production by Switzerland (SDX/Helvetia III) and in pilots by the EU, Germany, France, Australia, Hong Kong, and the UK, with Ireland's DP12 signalling intent.
- Establish DLT-specific trading venue or sandbox licensing (IOSCO Tokenisation Report recommendation) — e.g. the EU DLT Pilot Regime (with Ireland's CBI as a competent authority), Switzerland's DLT trading facility, Abu Dhabi's RIE/MTF + RegLab, and the Cayman/BVI regulatory sandboxes.
- Publish explicit tax guidance confirming technology neutrality (no international standard exists, but this is a demonstrated success factor from the economic outcomes analysis).
- Participate in BIS Innovation Hub projects (Agora, Guardian) to benefit from multi-jurisdictional testing.
- Engage with the HCCH-UNIDROIT Joint Project on applicable law for cross-border token transfers.
- Establish a data collection framework for monitoring FSB-identified financial stability vulnerabilities.
6.3 Framework Interaction Model
The five international frameworks operate as complementary layers, not alternatives:
Layer 5: UNIDROIT — Private law foundations (ownership, transfer, custody, insolvency)
Layer 4: BIS — Settlement infrastructure (central bank money, CPMI/PFMI)
Layer 3: FATF — AML/KYC/Travel Rule (integrity layer)
Layer 2: FSB — Financial stability monitoring (macro-prudential)
Layer 1: IOSCO — Market conduct and investor protection (micro-prudential)
National regulators should build from Layer 5 upward: private law clarity (UNIDROIT) enables settlement infrastructure (BIS), which enables AML-compliant transactions (FATF), which enables stability-monitored markets (FSB), which enables investor-protective market conduct (IOSCO). Jurisdictions that build from the top down — imposing market conduct rules without private law clarity or settlement infrastructure — create frameworks that lack foundational stability. The study's most mature frameworks (Switzerland, Germany, the EU) span all five layers; the offshore and free-zone venues (Cayman, BVI, Abu Dhabi) are strongest at Layers 5 and 3 (common-law private-law clarity and FATF integrity) and deliberately thinner at Layer 4 (settlement infrastructure), pairing with onshore venues for market infrastructure; and fund-domicile jurisdictions like Ireland and Luxembourg supply the underlying assets that other jurisdictions' platforms settle and distribute.
Verification Notes
All positions attributed to international organizations are drawn from the corresponding files in the international-frameworks directory of this repository, and all jurisdiction-specific facts are mirrored from the verified per-jurisdiction RWA regulation fact matrix (21 jurisdictions; this synthesis recomputes any aggregate from that matrix and introduces no fact not present in it):
- IOSCO: IOSCOPD747 (November 2023), IOSCOPD809 (November 2025), IOSCOPD801 (October 2025), MMoU/EMMoU framework verified via official IOSCO publications
- BIS: Annual Economic Reports 2023 and 2025 (Chapter III), Project Promissa (April 2025), CPMI DLT report verified via official BIS publications
- FSB: July 2023 High-Level Recommendations, October 2024 Tokenisation Report, October 2025 Thematic Peer Review verified via official FSB publications
- FATF: October 2021 Updated Guidance, June 2024 and June 2025 Targeted Updates; grey-list actions (Cayman Islands Oct 2023; UAE Feb 2024) verified via official FATF publications
- UNIDROIT: Principles (May 2023 adoption, October 2023 publication), Implementation Strategy (May 2024), HCCH Joint Project milestones verified via official UNIDROIT and HCCH publications
- Jurisdiction integration (including the four added in this refresh — Cayman Islands, British Virgin Islands, Ireland, Abu Dhabi/ADGM): mirrored from the canonical fact matrix; "NOT VERIFIED" / "NO DATA FOUND" statuses (e.g. Cayman/BVI atomic-settlement infrastructure; live Irish DLT settlement system) are reflected honestly and not overstated.