Digital asset regulation and tokenization in Austria

In Austria, a digital asset project starts by identifying whether it will offer crypto-assets, provide client services or issue financial instruments. The European Markets in Crypto-Assets Regulation, MiCA, covers the first two activities within its scope; tokenized securities require assessment under the relevant financial legislation.

The Financial Market Authority, FMA, organises access to the Austrian framework. Alongside permission, the business must be able to explain how its service will operate. That distinction matters both for a new platform and for a crowdfunding project representing investor rights with tokens.

How MiCA differs from securities regulation

The MiCA-Verordnung-Vollzugsgesetz, MiCA-VVG, implements national MiCA arrangements and designates the FMA as competent authority. Section 23 limited continuity for registered providers operating lawfully before 30 December 2024 to 31 December 2025, or an earlier authorisation decision. That transitional regime no longer provides entitlement for new operations.

MiCA distinguishes cryptoasset services from issuance of asset-referenced tokens, ARTs, and e-money tokens, EMTs. Tokenized financial instruments are excluded. Defining the right and activity therefore precedes selecting the procedure: a securities platform and an exchange service for other cryptoassets may require different permissions.

What the FMA supervises in Austria

The FMA exercises national MiCA powers with the institutional cooperation prescribed by law. Section 2 MiCA-VVG provides for cooperation with the Oesterreichische Nationalbank on certain tasks concerning ART and EMT issuers that are banks or electronic money institutions. This does not make the central bank an alternative application route for every CASP.

Projects must identify the client-facing contracting entity, the party controlling assets and each participant's services. Supervision of one group company does not automatically cover the others. Cross-border operations require checks of the services actually authorised and passporting procedure, alongside the entity identified in official registers.

How to prepare an authorisation application

The FMA application guidance describes documentation, completeness checks, substantive assessment and hearings with responsible individuals. Applications use Incoming Plattform. The FMA may examine the professional fitness of management and other key personnel orally; standard documents do not replace the ability to explain and operate the business model.

Assessment deadlines for complete applications are not the total time to launch. Preparation, remediation and changes must be considered. Financial entities covered by Article 60 use notification for the services that provision permits, rather than obtaining unrestricted access to every CASP service. ART or EMT issuance requires separate assessment.

What changes when investment rights are tokenized

The FMA's tokenization and crowdfunding guidance warns that standardisation and easier transfer can turn certain economic rights into transferable securities. Classification should therefore be reassessed after token design, rather than assuming a right always retains its previous regulatory treatment. Intermediation may also bring crowdfunding rules into scope.

Documents must establish whether holders receive a claim, participation or other right, who owes performance and how transfer occurs. Representing property cash flows does not itself establish co-ownership of real estate. Issuance terms and applicable formalities must align with the technical register, including transfer restrictions, access recovery and incident handling.

Which controls everyday operations need

The Transfer of Funds Regulation, TFR, requires originator and beneficiary information for covered cryptoasset transfers. Identification and data exchange processes must support the operating model. DORA adds technology risk, incident and third-party management for covered entities; external infrastructure does not remove a financial entity's responsibility.

The FMA sandbox FAQs explain that legal provisions cannot be suspended. Tests may limit clients, transactions and licence scope while retaining applicable requirements. Maximum participation periods and programme admission deadlines neither promise final authorisation nor exempt firms from required capital.

How to prepare a project for the FMA

Preparing an FMA discussion starts with asset classification, a description of each service and the structure of participating entities. Documents should show who makes decisions, controls keys and is accountable to clients. The FMA form and guidance help turn that model into an application and identify functions requiring internal resources or external providers.

For tokenized issuance, the next step is to assess rights and transfer conditions under securities and crowdfunding rules. The FMA’s historical guidance assists classification, but its references to former registration do not provide a current access route. A proposed sandbox test also needs assessment of admission conditions and permissions applicable during testing.

To understand how this framework applies to your project, discuss your case with our team.