Investor Protection Frameworks for Tokenized RWAs

1. Global Landscape -- Investor Protection Models

Investor protection for tokenized real-world assets follows four distinct regulatory models across the 21 jurisdictions surveyed. The model a jurisdiction adopts determines the practical scope of protections available to investors in tokenized securities, bonds, fund units, and other RWA instruments. IOSCO's November 2025 Final Report on Financial Asset Tokenization reinforced that the principle of "same activities, same risks, same regulatory outcomes" should guide all jurisdictions, and that existing securities classification regulatory and enforcement frameworks remain applicable to tokenized assets.

Across the 21 jurisdictions, the dominant approach is technology-neutral application of existing securities law: 19 of 21 apply their full or substantially full securities investor-protection suite (disclosure, conduct, segregation) to tokens that qualify as securities, while only a small number layer crypto-specific frictions or rely on lighter offshore-structuring regimes.

Model A: Full Securities Investor Protection Applied

Jurisdictions:

US,

EU (MiFID II scope),

France,

Germany,

Ireland,

Luxembourg,

Liechtenstein,

Switzerland,

Japan,

Hong Kong,

Canada,

Australia, Abu Dhabi (ADGM)

Under this model, tokenized assets that qualify as securities receive the identical suite of investor protections as their traditional counterparts. The regulatory premise is that tokenization changes the recordkeeping technology, not the legal character of the instrument. Investors benefit from prospectus/disclosure requirements, suitability and conduct-of-business rules, compensation scheme eligibility (where the underlying broker-dealer or investment firm is a member), client-asset segregation, and full enforcement jurisdiction.

In the US, the SEC's January 28, 2026 three-division joint statement (two-category framework: issuer-sponsored vs. third-party) confirmed that the format of issuance or technology used for recordkeeping, whether on-chain or off-chain, does not alter the application of the federal securities laws. Tokenized securities held at FINRA/SIPC-member broker-dealers (such as Securitize Markets) are eligible for SIPC coverage up to $500,000 per customer, provided the tokens qualify as registered securities under federal law. The SEC's March 18, 2026 approval of Nasdaq tokenized-securities trading (Release 34-105047) extends this regime to a national securities exchange, with trades settling T+1 conventionally through NSCC/DTC rails (not atomic).

In the EU, tokenized financial instruments under MiFID II receive the full suite of investor protections: suitability and appropriateness assessments, best execution, conflict-of-interest management, client asset segregation under CSDR, and eligibility for national Investor Compensation Schemes (ICFs) where the investment firm is an authorized member. France, Germany, Ireland, Luxembourg, and Liechtenstein implement this EU baseline through directly-applicable MiFID II/Prospectus Regulation/MiCAR plus domestic infrastructure statutes (France's PACTE/Blockchain Ordinance, Germany's eWpG, Luxembourg's Blockchain Laws I-IV, Liechtenstein's TVTG Token Container Model). Ireland adds no bespoke domestic blockchain statute, relying on EU law plus Central Bank of Ireland guidance.

In Japan, ERTRs (Electronically Recorded Transferable Rights) are classified as Type I securities under the FIEA, triggering mandatory securities registration statements, prospectus delivery, and the full conduct-of-business framework applicable to Type I Financial Instruments Business Operators.

In Abu Dhabi, the ADGM FSRA deems a token exhibiting the economic/legal features of a Security (FSMR s. 58(2)(b)) a "Digital Security," regulated identically to a conventional security with Approved Prospectus, market-abuse, and transaction-reporting obligations.

Model B: Crypto-Specific Investor Protection

Jurisdictions:

UK (financial promotions regime),

Singapore (DPT haircut),

Bahrain (DTO suitability layer),

UAE (VARA whitepaper + risk-disclosure regime)

This model applies targeted, crypto-specific protections that supplement or modify existing securities regulation. The UK's financial promotions regime imposes mandatory risk warnings ("Don't invest unless you're prepared to lose all the money you invest"), 24-hour cooling-off periods for first-time investors, appropriateness assessments, and bans on investment incentives for qualifying cryptoassets. These requirements layer on top of existing conduct-of-business rules (COBS) for security tokens that qualify as specified investments.

Singapore's DPT haircut mechanism applies a minimum 50% discount to the market value of digital payment token holdings when assessing accredited investor qualification, with a cap of S$200,000. MAS-regulated stablecoins are exempt from this haircut. This approach recognizes the volatility risk of digital assets while maintaining access for sophisticated investors.

Bahrain's CRA Module requires Digital Token Offering (DTO) issuers to perform investor suitability assessments and meet DTO-specific disclosure obligations. The UAE's VARA 9 April 2026 RWA/stablecoin guidance adopts a disclosure-led whitepaper plus separate risk-disclosure-statement approach with distributor due diligence, layered on top of the ADGM/DIFC traditional-securities regimes.

Model C: Professional/Accredited Investor Only

Jurisdictions:

Singapore (primary distribution channel),

Cayman Islands, British Virgin Islands,

Hong Kong (complex products only, since Nov 2023), some sandbox regimes

Under this model, tokenized securities are distributed primarily or exclusively to professional or accredited investors as defined by statute. The offshore fund-domicile centres — Cayman and BVI — sit squarely here: Cayman's 2026 tokenised-funds framework channels offerings to professional/sophisticated investors (registered mutual fund route commonly US$100,000 minimum initial investment), and BVI Professional Funds require a US$100,000 minimum with Private Investment Funds limited to 50 investors under professional/sophisticated gating. Neither operates a broad retail-marketing regime.

Hong Kong historically restricted all security tokens to professional investors (portfolio of at least HKD 8 million) under its March 2019 STO Statement. The November 2023 SFC circulars liberalized this position, permitting retail access to non-complex tokenized securities while maintaining professional-investor-only restrictions for complex products; the April 2026 circular further extended 24/7 retail secondary trading of tokenised SFC-authorised products via VATPs.

Singapore structures most tokenized RWA offerings as accredited or institutional investor offerings under SFA exemptions (sections 274-275). Retail access has been minimal, though the Franklin Templeton-DBS tokenized money market fund authorized by MAS in November 2025 signals a cautious expansion, with retail access from Q1 2026 at a minimum investment of US$20.

Model D: Light Touch / No Specific Protection

Jurisdictions: Certain free-zone and sandbox regimes for non-security tokens only

No surveyed jurisdiction leaves tokenized securities without a securities-grade overlay. Where general consumer or commercial law applies in place of a securities regime, it is confined to tokens that fall outside the securities/financial-instrument perimeter (e.g. VARA Exempt VAs, utility tokens under Bahrain's CRA, BVI sole-issuance of non-investment virtual assets, payment/utility tokens generally). IOSCO has specifically cautioned that jurisdictions should proceed cautiously and ensure existing securities regulatory frameworks apply to tokenized assets; this model is therefore not a basis for regulatory design for instruments with investment characteristics.

2. Disclosure and Prospectus Requirements

Prospectus and disclosure obligations represent the first line of investor protection. Across all 21 jurisdictions, the principle is consistent: tokenization does not alter the obligation to provide investors with material information about the security, the issuer, and the risks. The practical thresholds, exemptions, and format requirements differ substantially. Across the surveyed jurisdictions, all 21 require securities-grade disclosure for tokens that qualify as securities; the variation is in thresholds, format, and whether DLT-specific risk disclosure is mandated.

2.1 EU Prospectus Regulation (EU 2017/1129) and Listing Act Amendments

When a tokenized asset qualifies as a transferable security under MiFID II, any public offer or admission to trading on a regulated market requires a prospectus approved by the competent authority of the home Member State. The

EU Listing Act (Regulation EU 2024/2809), published 14 November 2024 with the Prospectus Regulation amendments applying from 5 June 2026, makes material changes (these apply uniformly across the EU members surveyed —

France,

Germany,

Ireland,

Luxembourg — and EEA member

Liechtenstein):

Exemptions from prospectus requirement:

• Offer addressed solely to qualified investors (as defined in MiFID II)
• Offer to fewer than 150 natural or legal persons per Member State (other than qualified investors)
• Securities with minimum denomination of EUR 100,000 per unit
• Investors each investing at least EUR 100,000
• Total consideration below the applicable threshold (EUR 12M from 5 June 2026)

Source: Davis Polk -- Changes to EU Prospectus Regulation under Listing Act; EUR-Lex -- Regulation (EU) 2024/2809; Ashurst -- EU Prospectus Regulation December 2024 Amendments

2.2 US Registration Exemptions and Disclosure

The United States does not have a single prospectus threshold. Instead, disclosure requirements depend on which registration exemption the issuer uses. All tokenized securities are subject to federal securities laws regardless of format.

The SEC's Division of Corporation Finance issued guidance in April 2025 confirming that crypto asset securities can use existing registration and exemption frameworks, with specific disclosure guidance for blockchain-native offerings.

Source: SEC -- Regulation A; SEC -- Offerings and Registrations of Securities in the Crypto Asset Markets (April 10, 2025); SEC -- General Solicitation Rule 506(c)

2.3 Singapore SFA Part 13 Prospectus

Offers of tokenized capital markets products (securities, CIS units, derivatives) must be made in or accompanied by a prospectus registered with MAS under Part 13 of the Securities and Futures Act 2001, applying the same regime as non-tokenized counterparts.

For tokenized CIS units offered to retail investors, MAS authorisation or recognition is required under the Code on Collective Investment Schemes.

Source: MAS -- Securities and Futures Act 2001; MAS -- Securities and Futures (Licensing and Conduct of Business) Regulations

2.4 Switzerland FinSA Prospectus

Under the Financial Services Act (FinSA), asset tokens offered to the public in

Switzerland require a prospectus approved by a licensed Prospectus Review Body (Prüfstelle).

FinSA also requires a Key Information Document (KID) for financial instruments offered to retail clients.

Source: CapLaw -- Exemptions from the Duty to Publish a Prospectus under FinSA; PwC Switzerland -- FinSA New Requirements

2.5 Japan FIEA Disclosure for ERTRs

Issuers of ERTRs making a public offering or secondary distribution must file a securities registration statement with the JFSA and deliver a prospectus to investors in advance or at the time of acquisition. ERTRs are classified as Type I securities (Paragraph 1 Securities), triggering the most stringent disclosure tier under the FIEA, with civil liability for misrepresentation in STO documents. The Japan Security Token Offering Association (JSTOA) sets additional self-regulatory disclosure standards.

Source: So & Sato -- Security Token Offerings in Japan; GLI -- Blockchain & Cryptocurrency Laws 2026: Japan

2.6 Offshore and Free-Zone Disclosure (Cayman, BVI, Abu Dhabi, UAE, Bahrain)

The offshore and free-zone centres apply securities-grade disclosure where the token is an investment, often with mandatory token-specific risk disclosure:

• Cayman Islands: The 2026 tokenised-funds framework requires an offering document with prescribed contents plus mandatory token-risk disclosure (cybersecurity, transferability) and how those risks are mitigated, and a parity rule that tokenised interests carry the same rights as traditional ones.
• BVI: No bespoke token-offering prospectus regime; SIBA conduct-of-business, disclosure, and suitability obligations apply where the token is an "investment," and exchanges impose mandatory risk disclosures. Sole issuance of a non-investment virtual asset proceeds without a prospectus.
• Abu Dhabi (ADGM): An Approved Prospectus (FSMR s. 61, MKT 4.5) must be filed ≥20 days before the offer with IFRS audited financials; it must be comprehensible to retail investors, avoid boilerplate risk disclosure, give prominence to "other rights" (e.g. voting), and flag the asset-backed nature. An Exempt Offer route (Professional Clients other than natural persons; <50 persons; or ≥US$100,000 subscription) still produces deemed Securities.
• UAE: Per zone — VARA's 9 April 2026 guidance mandates a whitepaper plus separate risk-disclosure statements and distributor due diligence; ADGM/DIFC apply prospectus/exempt-offer rules.
• Bahrain: DTO issuers must classify tokens, submit the classification to the CBB, and comply with DTO disclosure and investor-suitability obligations under the CRA Module.

2.7 Comparative Table: Disclosure Requirements (21 Jurisdictions)

3. Retail Access Restrictions

Retail access to tokenized securities varies dramatically across the 21 jurisdictions, from open access (with safeguards) to near-total prohibition. The trend across major markets is toward cautious liberalization, driven by the recognition that blanket restrictions on retail participation may push investors toward unregulated offerings with less protection. The offshore fund-domicile centres (

Cayman, BVI) and several EU fund jurisdictions (

Ireland,

Luxembourg) sit at the restrictive end, channelling tokenized exposure to professional/well-informed investors.

3.1 Jurisdictions Allowing Retail Access to Tokenized Securities

United States: Retail access is available through Reg A+ (Tier 1: up to $20M; Tier 2: up to $75M with 10% income/net worth investment cap for non-accredited investors) and Reg CF (up to $5M with investor limits based on income/net worth). The vast majority of institutional-grade tokenized RWA offerings (BlackRock BUIDL, Hamilton Lane, KKR) use Reg D 506(c), which restricts participation to verified accredited investors. tZERO received FINRA approval in December 2025 to act as a retailer of open-end investment companies, including tokenized mutual funds; the SEC's March 2026 Nasdaq approval contemplates exchange-traded tokenized securities settling through DTC.

EU: Retail investors can access tokenized securities through regulated markets and DLT market infrastructures. The DLT Pilot Regime explicitly permits direct retail access under certain conditions (exemption from MiFID II intermediary requirements). MiCA-regulated crypto-assets (non-securities) are available to retail investors subject to CASP suitability requirements. Among EU members surveyed,

Germany (Kraken xStocks on the 360X DLT MTF, Feb 2026) and

France (LISE DLT TSS, first on-chain IPO subscriptions Apr 2026) host the most active retail-facing DLT venues, while

Ireland and

Luxembourg restrict retail tokenized-fund exposure to tokenised units of traditional-asset funds (UCITS/RIAIF barred from direct digital-asset exposure).

Switzerland: Retail access is permitted at DLT trading facilities (Art. 73c FMIA); Taurus SA received FINMA approval to offer tokenized shares to retail (Jan 2024), and BX Digital operates as the sole DLT trading facility.

Hong Kong: The SFC's November 2023 circulars explicitly liberalized retail access. Tokenized securities that are not complex in their underlying form may be offered to retail investors. The 20 April 2026 circular further permits 24/7 secondary trading of tokenised SFC-authorised products on VATPs (initial focus tokenised MMFs). Products complex in their underlying structure remain restricted to professional investors (portfolio of at least HKD 8 million, approximately USD 1 million).

Japan: ERTRs are available to retail investors through registered Type I FIBOs, with mandatory prospectus delivery. The market has been dominated by "custody-type" retail products, primarily tokenized real estate trust beneficiary certificates and corporate bonds; native on-chain tokens remain in pilot.

Australia: No specific tokenized-RWA retail restriction is stated; general financial-product conduct and suitability obligations (PDS, DDO with target market determinations) apply pending the DAP/TCP categories commencing 9 April 2027.

Abu Dhabi (ADGM): Full retail MTF secondary trading is available only where an Approved Prospectus is registered on a primary RIE; Exempt-Offer Digital Securities traded on an MTF are limited to non-retail clients.

UAE (Dubai/DLD): Fractional property ownership through the DLD Real Estate Tokenisation Project is open to retail from AED 2,000, the most advanced government-led retail property-tokenization channel worldwide.

3.2 Accredited/Qualified Investor Thresholds by Jurisdiction

3.3 Investment Caps for Retail

3.4 Risk Warnings and Cooling-Off Periods

The

UK imposes the most prescriptive risk warning regime for cryptoassets:

• Mandatory risk warning: "Don't invest unless you're prepared to lose all the money you invest"
• 24-hour cooling-off period for first-time investors
• Personalised risk warnings requiring positive friction
• Appropriateness assessments testing consumer understanding
• Ban on investment incentives (refer-a-friend schemes, new joiner bonuses)

These requirements apply under PS23/6 (effective 8 October 2023) to qualifying cryptoassets. Security tokens already within the FCA regulatory perimeter are subject to the full financial promotions regime under Section 21 FSMA 2000. Among the other 20 jurisdictions, none imposes a comparable statutory cooling-off period; the closest analogues are appropriateness/suitability assessments (EU MiFID II, Singapore FAA, Bahrain CRA, UAE VARA distributor due diligence) and mandatory token-risk-disclosure statements (Cayman 2026 framework, UAE VARA Apr 2026 guidance, Abu Dhabi prospectus rules).

Source: FCA PS23/6 -- Financial Promotion Rules for Cryptoassets; FCA FG23/3 -- Finalised Guidance on Cryptoasset Financial Promotions

4. Suitability and Conduct Rules

Conduct-of-business rules ensure that firms distributing tokenized securities act in the best interests of their clients. The application of suitability and appropriateness requirements is a critical differentiator between jurisdictions.

4.1 EU MiFID II Suitability and Appropriateness

Tokenized financial instruments falling within MiFID II scope are subject to the full conduct-of-business framework. This baseline applies in the

EU and across the EU/EEA members surveyed —

France,

Germany,

Ireland,

Luxembourg, and

Liechtenstein:

• Suitability assessment (Article 25(2)): Required for advisory and portfolio management services. Firms must obtain information on the client's knowledge and experience, financial situation, and investment objectives, and ensure any recommended transaction is suitable.
• Appropriateness assessment (Article 25(3)): Required for non-advised services in complex financial instruments. Firms must assess whether the client has the knowledge and experience to understand the risks.
• Execution-only (Article 25(4)): Available for non-complex financial instruments only (shares admitted to a regulated market, certain bonds, UCITS). Tokenized versions of these instruments may qualify for execution-only if the underlying is non-complex.
• Best execution (Article 27): Firms must take all sufficient steps to obtain the best possible result for clients.
• Client categorisation: Retail, professional, eligible counterparty. Category determines the level of protection.

ESMA's classification guidelines (published 17 December 2024; official translations 19 March 2025) confirmed that the technological format does not determine whether MiFID II suitability rules apply -- market usage and economic substance do.

Source: ESMA -- MiFID II Interactive Single Rulebook; Merklescience -- MiCAR vs. MiFID II

4.2 UK Consumer Duty

The FCA's Consumer Duty (in force since 31 July 2023) applies to all regulated activities involving security tokens and sets a higher standard than previous conduct rules:

• Act to deliver good outcomes for retail customers
• Ensure products and services offer fair value
• Test that customers understand what they are investing in
• Provide appropriate support throughout the customer journey

For the new cryptoasset regime (FSMA 2000 (Cryptoassets) Regulations 2026, SI 2026/102, made 4 February 2026, commencing 25 October 2027), the FCA has proposed that the Consumer Duty will apply to qualifying stablecoin issuance and firms conducting regulated cryptoasset activities. The Consumer Duty will not apply to the Admissions and Disclosures regime for non-stablecoin qualifying cryptoassets.

The FCA has confirmed that the Consumer Duty, rather than the FSCS, is intended as the primary protective mechanism for retail investors in crypto-linked products.

Source: CoinDesk -- UK FCA Consumer Duty Crypto (January 2026); A&O Shearman -- Consumer Duty and Cryptoassets

4.3 US Fiduciary Duty for RIAs

Registered Investment Advisers (RIAs) managing portfolios that include tokenized securities owe a fiduciary duty under the Investment Advisers Act of 1940. This includes:

• A duty of care (providing advice in the best interest of the client, seeking best execution, providing advice and monitoring over the course of the relationship)
• A duty of loyalty (full and fair disclosure of all material facts, including conflicts of interest)

Broker-dealers distributing tokenized securities are subject to FINRA Rule 2111 (suitability) and Regulation Best Interest (Reg BI), which requires broker-dealers to act in the best interest of the retail customer at the time of the recommendation.

For tokenized fund products (e.g., BlackRock BUIDL offered through qualified purchaser channels), the investment adviser owes fiduciary duties to the fund and its investors.

Source: SEC -- Regulation Best Interest; SEC -- Investment Advisers Act of 1940

4.4 Singapore CMS Conduct Rules

CMS licence holders distributing tokenized capital markets products must comply with the Securities and Futures (Licensing and Conduct of Business) Regulations, including:

• Know-your-client obligations
• Suitability assessment for advisory services (Financial Advisers Act 2001)
• Fair dealing outcomes (MAS Guidelines on Fair Dealing)
• Risk disclosures, including custody-related risks such as loss or theft of private keys
• Client asset segregation (Division 3, Part III of the LCB Regulations)

For Variable Capital Company (VCC) structures used in tokenized funds, MAS Circular IID 04/2025 (26 June 2025) sets out supervisory expectations, including mandatory independent custodians for most VCC assets.

Source: MAS -- Securities and Futures (Licensing and Conduct of Business) Regulations; MAS -- Guidelines on Fair Dealing

4.5 Other Jurisdictions' Conduct Frameworks

• Hong Kong: SFC Code of Conduct suitability/complexity assessment applied identically to tokenized and non-tokenized versions; competent-staff and DLT due-diligence requirements.
• Japan: Type I FIBO conduct obligations under FIEA plus JSTOA investor-protection guidelines.
• Canada: CIRO/CSA suitability and KYC obligations; OM exemption requires suitability advice for higher eligible-investor caps.
• Australia: Design and distribution obligations (DDO) with target market determinations; best-interests obligations for advisers.
• Switzerland: FinSA conduct rules (appropriateness/suitability by service type) and KID for retail instruments.
• Abu Dhabi: COBS conduct rules; Market Abuse (FSMR Part 8) and transaction reporting (s.149) apply to Digital Securities.
• UAE/
  Bahrain: VARA distributor due diligence and CRA investor-suitability assessments, respectively, supplement zone/securities conduct rules.

5. Compensation Schemes

Investor compensation schemes represent the last resort safety net when an authorized firm fails. The application of these schemes to tokenized securities is inconsistent across jurisdictions and represents one of the most significant gaps in the current regulatory landscape. Notably, the offshore fund-domicile centres (

Cayman, BVI) operate no statutory investor-compensation scheme, relying instead on client-asset segregation.

5.1 SIPC (United States)

The Securities Investor Protection Corporation (SIPC) protects customers of SIPC-member broker-dealers against loss of securities and cash held in brokerage accounts when a firm fails.

• Coverage limit: $500,000 per customer, including a $250,000 limit for cash
• Application to tokenized securities: Tokenized securities that are legally registered with the SEC and meet the federal definition of a "security" are eligible for SIPC coverage if held by a SIPC-member broker-dealer. Securitize Markets, LLC is a FINRA/SIPC member.
• Critical limitation: Unregistered digital asset securities that are investment contracts not registered with the SEC are not covered by SIPC, even if held by a SIPC-member firm
• Practical gap: Most tokenized RWA offerings use Reg D exemptions and are therefore "restricted securities" -- their SIPC eligibility depends on the broker-dealer holding arrangement, not the registration status of the security itself

Source: SIPC -- What SIPC Protects; CCN -- SEC Releases Crypto FAQs: Custody, Tokenized Securities & Broker-Dealers

5.2 FSCS (United Kingdom)

The Financial Services Compensation Scheme (FSCS) does not cover losses from investments in cryptoassets, including security tokens in most circumstances.

• FSCS position: "There are no consumer protections for those who buy any cryptoassets and NFTs, and they are not FSCS protected."
• Deposit protection limit: GBP 120,000 per person per institution (increased from GBP 85,000 on 1 December 2025)
• Investment claims limit: GBP 85,000 per person per firm
• Security token nuance: Security tokens held by an FCA-authorised firm may benefit from CASS protections (client asset segregation) but not FSCS compensation. If an FCA-authorised crypto exchange fails, fiat currency held in e-money accounts may be covered under e-money protection rules, but the cryptoassets themselves are not.
• Primary protection mechanism: The FCA has confirmed that the Consumer Duty, rather than FSCS, is the intended primary protective mechanism for retail investors in crypto-linked products.

Source: FSCS -- Cryptoassets: Are They Covered?; FSCS -- What We Cover

5.3 EU Investor Compensation Schemes (ICFs)

Under MiFID II, EU Member States (including surveyed members

France,

Germany,

Ireland,

Luxembourg, and EEA member

Liechtenstein) must maintain Investor Compensation Schemes that cover claims by investors against authorized investment firms that are unable to meet their obligations.

• Minimum coverage: EUR 20,000 per investor (Directive 97/9/EC)
• Application to tokenized securities: Where a tokenized financial instrument falls within the scope of MiFID II and is held by an authorized investment firm that is a member of the national ICF, the investor is in principle eligible for ICF compensation if the firm fails
• Gap: The ICF Directive has not been specifically amended to address DLT-based holdings. The practical applicability depends on the national implementation and whether the DLT record qualifies as a securities account for ICF purposes
• DLT Pilot Regime: Operators of DLT market infrastructures must ensure that exemptions granted from CSDR or MiFID II provisions are accompanied by compensatory measures ensuring investor protection and market integrity

Source: European Commission -- Investor Compensation Schemes; DLA Piper -- EU Capital Markets Overhaul

5.4 Coverage Gaps Summary (21 Jurisdictions)

Note: French ICF coverage of EUR 70,000, German EUR 20,000 (90%), and other national figures are jurisdiction-level implementations of the EUR 20,000 minimum under Directive 97/9/EC; specific national maxima beyond the EUR 20,000 floor are NOT independently re-verified against each national scheme's current rules.

6. Secondary Market Liquidity

The availability of secondary market liquidity is a core investor protection concern for tokenized securities. Without functional secondary markets, investors may be locked into positions with no practical exit mechanism, negating one of the primary theoretical benefits of tokenization (fractional liquidity).

6.1 Current State of Secondary Market Liquidity

IOSCO's November 2025 Final Report identified the lack of secondary market liquidity as a key structural challenge in scaling tokenization. The World Economic Forum and SIFMA have similarly noted that despite tokenization, significant liquidity for most tokenized assets has not emerged. Limited buyer pools and the absence of trading infrastructure mean many tokens remain untradeable or trade at significant discounts. The offshore fund-domicile centres (

Cayman, BVI) and fund jurisdictions (

Ireland,

Luxembourg) deliberately host no domestic secondary trading venue, leaving transfers to operator-approved book-entry reconciliation or to onshore platforms onto which their fund interests plug.

6.2 Market Maker Requirements

No jurisdiction currently imposes mandatory market-making obligations specific to tokenized securities. However, existing securities market-making rules apply:

• EU DLT Pilot Regime: DLT MTF and DLT TSS operators are not required to maintain market makers, but must operate under MiFID II market integrity requirements. The Market Integration Package (adopted 4 December 2025) would raise the aggregate threshold from EUR 6B to EUR 100B and make the regime permanent, potentially enabling greater liquidity. France's LISE and Germany's 360X/21X are live DLT venues under this regime.
• US: ATS operators for tokenized securities are subject to Reg ATS fair access requirements when exceeding 5% of volume in any NMS security. The SEC's March 18, 2026 approval of Nasdaq tokenized-securities trading (Release 34-105047) uses DTC-settled blockchain trades (T+1 via NSCC/DTC) with existing market-maker infrastructure; go-live is targeted Q3 2026.
• Japan: The Osaka Digital Exchange (ODX) START Market operates for secondary trading of security tokens (8 tokens / JPY 33.6bn combined market cap as of 31 Mar 2026), with market-making supported by major securities firms (Nomura, SBI, Daiwa).
• Hong Kong: SFC-licensed VATPs support 24/7 secondary trading of tokenised SFC-authorised products from 20 April 2026 (initial focus tokenised MMFs).
• Switzerland: SDX and BX Digital provide regulated DLT trading-facility secondary markets with atomic settlement.
• Abu Dhabi: Digital Securities trade on an RIE (primary + secondary) or MTF (generally secondary); the Realize T-BILLS Fund is the first ADGM tokenized fund.

6.3 Redemption Rights and Lock-Up Periods

Smart contract-enforced transfer restrictions are increasingly used to programmatically enforce Rule 144 holding periods (US), Reg S distribution compliance periods, and contractual lock-ups; Cayman and BVI tokenised-fund interests are similarly transferred via operator-approved transfers reconciled to book-entry registers.

Source: SEC -- Rule 144: Selling Restricted and Control Securities; SIFMA -- Tokenized Securities Markets Require Strong Investor Protections; IOSCO -- Final Report on Tokenization of Financial Assets (November 2025)

7. Comparative Table (21 Jurisdictions)

8. What Works and What Doesn't

8.1 What Works

Technology-neutral application of existing securities law. The most effective investor protection regimes -- the US, EU (and France, Germany, Ireland, Luxembourg, Liechtenstein), Japan, Switzerland, Hong Kong, and Abu Dhabi -- apply existing securities regulation to tokenized instruments without creating separate, weakened protection regimes. The principle "same asset, same risk, same rules" ensures investors receive equivalent protections regardless of the technological format. The SEC's January 2026 statement, ESMA's December 2024 classification guidelines, Japan's ERTR framework, and ADGM's FSMR s. 58(2)(b) deeming power all exemplify this approach. 19 of 21 surveyed jurisdictions follow it.

Graduated disclosure thresholds. The EU's tiered approach (EUR 12M threshold from 5 June 2026, qualified investor exemption, minimum denomination exemption) and the US's multiple exemption pathways (Reg D, Reg A+, Reg CF) provide proportionate disclosure requirements that accommodate both institutional and retail offerings without imposing prohibitive compliance costs on smaller issuers.

Mandatory token-risk disclosure with parity rules. The newest frameworks -- Cayman's 2026 tokenised-funds statute, the UAE VARA April 2026 guidance, and Abu Dhabi's prospectus rules -- require explicit token-specific risk disclosure (cybersecurity, transferability) plus a parity rule that tokenised interests carry the same rights as traditional ones. This closes the information gap unique to on-chain instruments.

Crypto-specific retail frictions (UK). The UK's mandatory risk warnings, cooling-off periods, and appropriateness assessments represent an effective supplement to traditional conduct-of-business rules. These measures address the specific behavioural risks associated with digital assets (impulse investing, insufficient understanding of DLT risks) without prohibiting access outright.

Accredited investor DPT haircut (Singapore). MAS's approach of applying a 50% haircut to digital asset holdings for accredited investor qualification is a pragmatic mechanism that acknowledges the volatility of digital assets while maintaining a meaningful threshold for investor sophistication.

SFC "see-through" approach (Hong Kong). The SFC's principle of looking through the tokenization layer to the underlying asset allows regulators to apply proportionate protections based on the true risk profile of the product, avoiding both over- and under-regulation.

Segregation-first offshore design (Cayman, BVI, Abu Dhabi). Where no statutory compensation scheme exists, the offshore and free-zone centres compensate with strict client-asset segregation: Cayman's VASP custody and parity rules, BVI's Section 27 safekeeping (client assets identified, segregated, and accounted for separately), and ADGM's legal-entity segregation of custody from trading with independent third-party reconciliation. This provides asset-recovery protection even absent a payout fund.

8.2 What Doesn't Work

Blanket exclusion of tokenized securities from compensation schemes. The FSCS's categorical exclusion of all cryptoassets from coverage creates a significant protection gap for investors in tokenized securities that are economically equivalent to traditional securities. A tokenized government bond should not lose FSCS protection merely because it is recorded on a distributed ledger.

Absence of any compensation scheme (offshore centres). Cayman, BVI, Singapore, Switzerland (for securities), Australia (no payout scheme, AFCA only), the UAE, and Abu Dhabi operate no statutory investor-compensation payout fund for tokenized securities. While segregation mitigates this, investors bear residual loss risk in a custodian/operator failure that segregation does not fully cover.

Static accredited investor thresholds. The US accredited investor threshold ($1M net worth, $200K income) has not been adjusted since 1982, while inflation has significantly eroded its filtering effect. Approximately 19% of US households now qualify. By contrast, Singapore's S$2M threshold and Hong Kong's HKD 8M threshold were set more recently and more accurately reflect the intended risk tolerance.

Insufficient secondary market infrastructure. No jurisdiction has successfully established deep, liquid secondary markets for tokenized securities. IOSCO's November 2025 report identified this as the primary barrier to tokenization fulfilling its promise of enhanced liquidity. The gap between theoretical 24/7 tradability and practical illiquidity undermines investor protection for retail participants who may be unable to exit positions. The fund-domicile model (Cayman, BVI, Ireland, Luxembourg) consciously hosts no domestic venue, deepening reliance on onshore secondary markets.

Fragmented cross-border recognition. There is no mutual recognition framework for tokenized securities between any pair of major jurisdictions. An investor in a tokenized bond issued under EU Prospectus Regulation has no assurance of equivalent protections if secondary trading occurs on a platform authorized in another jurisdiction. The offshore centres explicitly offer no passport (Cayman, BVI, Abu Dhabi), and the UK and Switzerland lost EU passporting post-Brexit and post-2019 respectively.

9. Recommended Framework

Based on the comparative analysis of 21 jurisdictions, IOSCO's November 2025 recommendations, and observed regulatory outcomes, the following framework is recommended for jurisdictions developing or refining investor protection regimes for tokenized RWAs.

9.1 Core Principles

1. Technology neutrality with DLT-aware implementation. Apply existing securities investor protection rules to tokenized instruments. Do not create weaker parallel regimes. Supplement with DLT-specific risk disclosures (smart contract risk, private key management, network risk) as the UK, Singapore, Cayman, the UAE, and Abu Dhabi have done, ideally paired with a parity rule (tokenised = traditional rights).

2. Proportionate disclosure. Adopt tiered prospectus thresholds calibrated to the jurisdiction's market size and investor base. The EU's EUR 12M threshold and the US's multi-exemption approach offer workable models. Require DLT-specific disclosures (blockchain used, smart contract audit status, custody arrangement, redemption mechanism) in all offering documents.

3. Graduated retail access. Avoid blanket prohibition of retail access, which pushes investors to unregulated markets. Instead, impose graduated protections: appropriateness testing, investment caps for non-accredited investors, mandatory risk warnings, and cooling-off periods for first-time participants. The UK's model provides a strong template; the UAE's DLD fractional-property entry (AED 2,000) shows graduated retail access can extend to tokenized real assets.

4. Extend compensation schemes — or mandate robust segregation. Amend investor compensation scheme legislation to explicitly cover tokenized securities held by authorized intermediaries (the US SIPC model). Where no payout scheme exists (offshore/free-zone centres), mandate the strict client-asset segregation and independent reconciliation that Cayman, BVI, and Abu Dhabi have adopted as the substitute protection.

5. Address secondary market liquidity. Require issuers of tokenized securities to disclose the expected liquidity profile and any redemption mechanisms. Consider requiring authorized platforms to implement liquidity arrangements (designated market makers, regular auction mechanisms, or issuer repurchase facilities) for securities marketed to retail investors.

6. Harmonize accredited investor definitions. Index accredited/qualified investor thresholds to inflation or GDP per capita. Consider incorporating financial literacy assessments (as the US has done with Series 7/65/82 holders) as an alternative to purely wealth-based thresholds. Adopt the Singapore DPT haircut approach for digital asset holdings.

9.2 Implementation Priority

10. Decision Matrix

Use this matrix to determine the applicable investor protection regime based on the asset classification and distribution channel.

Step 1: Asset Classification

Step 2: Distribution Channel

Step 3: Jurisdiction-Specific Requirements

Verification Notes

Last verified: 4 June 2026. Source of truth: .claude/rwa-regulation-fact-matrix.json (canonical per-jurisdiction facts for all 21 jurisdictions). "X of N" aggregates derived for N=21.