November 4, 2025
October 17, 2026
Author: JoĂŁo Lages
Fund tokenization changes how investors subscribe, hold, transfer and redeem fund interests. It does not replace the fund, the manager, the depositary, the administrator or the distribution rules. The practical question is therefore not how to mint a token. It is how to make a digital fund unit carry the same enforceable rights, controls and records as the legal interest it represents.
That distinction matters for alternative investment fund managers, UCITS management companies, private-market sponsors and financial institutions assessing a tokenized share class. A weak project starts with a blockchain and searches for a use case. A credible project starts with the fund economics, investor journey and regulatory perimeter, then chooses the ledger and service providers that can support them.
This guide sets out the decisions that must be made before launch, with a European focus. It provides general information rather than legal, tax, regulatory or investment advice. Fund documentation and local counsel should determine the position in each jurisdiction.
“Tokenizing a fund” can describe three different transactions. They create different rights and should not share one undifferentiated technical design.
The first model is the cleanest answer to the search intent behind fund tokenization. It digitises the fund’s liability side: subscriptions create units, transfers change the recorded holder and redemptions cancel units. The token must map precisely to the rights in the prospectus, limited partnership agreement, articles and subscription documents.
The third model can solve distribution or minimum-ticket constraints, but it adds issuer credit risk and another legal layer. Calling the note a “fund token” can conceal that difference. The term sheet should say who owes the investor money, which assets support the claim, how fees are charged and what happens if the intermediary fails.
In the European Union, technology does not displace the existing fund and securities regimes. Units in collective investment undertakings are financial instruments under MiFID II. ESMA’s guidelines on crypto-assets as financial instruments reinforce a substance-based classification: digital form does not move a financial instrument into MiCA merely because it uses distributed ledger technology.
The fund itself may sit under the UCITS framework, AIFMD and national fund law, the Money Market Fund Regulation, ELTIF rules or a national private-fund regime. Distribution can also trigger MiFID II conduct and product-governance duties, prospectus or private-placement rules, PRIIPs disclosures, financial-promotion controls and investor-category restrictions. AIFMD II and the parallel UCITS amendments reached their EU transposition deadline on 16 April 2026, including changes to liquidity management, delegation, reporting, depositary services and loan-originating funds. Local implementation still needs to be checked.
A legal workstream should answer five questions before a smart contract specification is approved:
This sequence prevents a common design failure: coding unrestricted peer-to-peer transfers and discovering later that the fund documents, investor eligibility rules or transfer-agent controls prohibit them. For a wider view of classification and regulated responsibilities, see Lympid’s analysis of tokenized securities platforms in Europe.
The ownership model is the central operating decision. There are three workable patterns.
The distributed ledger is the official record of holders where local law and the fund constitution allow it. Transfers become legally effective when the required on-chain event is final. This can reduce reconciliation, but only if the transfer agent, administrator, manager and courts can rely on the ledger. Lost-key recovery, forced transfers, sanctions freezes and court orders need written procedures and permissions.
The transfer agent’s book remains authoritative and the token mirrors the registered position. This is easier to fit into established operations, but it preserves a reconciliation layer. A token transfer cannot be treated as final ownership until the official register accepts it. The design needs rules for timing differences, rejected transfers and conflicting balances.
A permissioned ledger or controlled smart contract becomes part of the register, while designated service providers retain powers to validate and correct entries. This can support automation without relying on anonymous possession. The legal documents must state which record prevails and who may exercise exceptional controls.
The ECB’s April 2026 study of tokenized money-market funds shows why this is a real decision rather than a theoretical debate. Around half of the funds in its sample still used a traditional book-entry ledger as the primary ownership record, even though their units were tokenized. The ECB estimated the global tokenized money-market fund market at about €7 billion at the end of 2025, including roughly €725 million in EU-domiciled funds.
A fund token has to fit the fund’s valuation and dealing rules. The operating design should follow one complete transaction from eligibility screening to cash settlement, minting, record updates, reporting and exception handling.
For an open-ended fund, define the order cut-off, valuation point, forward or historic pricing method, settlement timetable and conditions for gating, suspension or deferred redemption. Minting before the subscription is accepted can create excess units. Burning before cash is available can leave the investor with neither the token nor the redemption proceeds. The contract should execute only after the administrator or another authorised control function supplies the approved state.
For a closed-ended private-equity fund, a token does not remove commitments and capital calls. One sensible design records the investor’s admitted interest and transfer status while the administrator continues to track commitments, drawdowns, distributions and equalisation. A wallet balance alone cannot express every obligation. The investor record must also show unfunded commitment, default remedies, side-letter terms and any excuse or exclusion rights.
Consider two concrete cases:
A production model needs a named entity for each function. Depending on the vehicle and jurisdiction, the map may include the fund or general partner, AIFM or UCITS management company, portfolio manager, administrator, transfer agent, depositary, asset custodian, distributor or investment firm, payment provider, wallet or key-management provider, technology operator and trading or settlement venue.
The technology provider should not be described as performing regulated fund management, custody or placement unless it has the relevant permission and contract. Conversely, a regulated entity should not assume the technology vendor absorbs its oversight duty. Service levels, audit rights, incident response, data access, subcontracting, exit support and business continuity belong in the operating agreement.
DORA applies to managers of alternative investment funds and UCITS management companies, subject to its scope and exemptions. It covers ICT risk management, incident reporting, resilience testing and third-party risk. A smart-contract audit is therefore only one control. Managers also need key recovery, deployment governance, node and cloud dependencies, data integrity, monitoring, change management and a tested exit from the vendor.
A white-label investment platform can provide onboarding, subscription flows, investor records and transfer controls under one interface. The manager should still verify exactly which regulated entity performs distribution, holds client money, maintains the register and approves issuance. Software breadth is not the same as regulatory coverage.
A transferable token does not create buyers. Secondary liquidity requires eligible participants, approved venues or bilateral processes, reliable price formation, cash settlement, custody support and market-making economics. Transfer restrictions can also reduce the pool of counterparties.
The EU DLT Pilot Regime provides a framework for authorised DLT market infrastructures to trade and settle qualifying financial instruments. It does not turn every tokenization platform into a trading venue, and it does not guarantee that a fund unit is eligible or liquid. The manager must determine whether transfers remain on the fund register, occur through a regulated venue or require redemption and reissue.
The latest market evidence argues for conservative assumptions. The IMF’s 8 October 2026 assessment says tokenized markets are growing but remain small and fragmented across networks, platforms and settlement arrangements. A business case should therefore stand on operational savings, distribution reach or new collateral functionality before assigning value to future trading liquidity.
Network selection follows the required controls. A public network may offer broad wallet compatibility and established infrastructure, while a private or permissioned network may offer tighter participant and data controls. Either can fail if it cannot support the legal register, privacy obligations, transaction volume, recovery procedures and integration with administration systems.
Evaluate the stack at five layers:
Interoperability deserves its own test. Investors may use different custodians and chains, while administrators rely on conventional books and banking rails. Bridges add technical and governance risk. A launch should prove portability and exit procedures before it depends on one network or vendor.
A fund manager can reduce rework by approving the project in five gates.
The strongest fund-tokenization projects leave the fund’s economics recognisable while making ownership and servicing more programmable. Approve the legal claim and operating model first. Use the token only where it improves a defined transaction, record or investor journey, and keep a tested path for corrections when systems or counterparties fail.
Book a call with us today and get a free assessment.
