Skip to content
Foundations · Beginner

Custody & Ownership: What You Actually Own

4 min read

When you buy a tokenized asset, what do you own - the token, a legal claim, or the real asset? Here is how custody and ownership actually work for RWAs.

Igor BuryiUpdated November 9, 2026

When you buy a tokenized asset, you own three things stacked on top of each other: a token in your wallet, a legal claim that the token represents, and - underneath both - the real asset that actually produces the value. The token is the record of ownership, not the asset itself. What protects you if something goes wrong is the legal claim, and who holds the keys decides how much day-to-day control you have.

Key takeaways

  • The token is a record of ownership, not the asset. The value comes from the real asset and the legal claim beneath it.
  • Most return-paying RWAs are security tokens: your legal claim is usually shares in the entity that holds the asset.
  • "Custody" means two separate things - who holds the asset off-chain, and who holds the keys to your token.
  • With a self-custody wallet you control the token yourself; with a custodial account a provider holds it for you. Each carries different risks.
  • A token with no enforceable claim behind it is a number on a screen. Check the claim before you check the chart.

What you actually own

Buying a tokenized asset is not like buying a physical thing you take home. You end up holding a token, but the token is only useful because of what sits behind it. Think of three layers: the token on-chain, the legal claim it stands for, and the asset that generates the money.

The layer people see is the token - a balance in a wallet, transferable in minutes. The layer that matters when something breaks is the legal claim. In most deals the asset is parked in a special-purpose vehicle, a company whose only job is to hold that one asset, and your token maps to shares or a membership interest in that company. That claim - not the token's code - is what a court, a liquidator, or a buyer would recognize.

The three layers of ownership

Here is how the layers line up, from the record you hold down to the thing that makes the money:

The three layers of what you own

On-chain token

The record, not the asset

  • Balance in your wallet
  • Transferable record

Legal claim

What law actually enforces

  • SPV shares / membership interest
  • Subscription agreement

Underlying asset

Where the value comes from

  • Property, T-bill, loan, gold
  • Held off-chain
What you hold in a tokenized asset - the token, the legal claim, and the real asset beneath them.

Read it bottom-up. The underlying asset produces rent, interest, or sale proceeds. The legal claim entitles you to your slice of that through fractional ownership. The token is the on-chain record that says the claim is yours and lets you move it. If any layer is missing or weak - no real asset, no enforceable claim, a token that does not actually map to the shares - the stack does not hold, no matter how clean the smart contract looks.

Who holds the keys: self-custody vs custodial

"Custody" gets used two ways in RWAs, and conflating them causes most of the confusion. The first is custody of the asset: who physically holds the Treasury bills, the gold, or the deed off-chain. For a regulated deal that is usually a qualified custodian, a licensed institution whose job is to safeguard client assets. The second is custody of your token: who holds the keys.

Self-custodyCustodial
Who holds the keysYouA platform / provider
ControlFull - move it yourselfProvider acts for you
If keys are lostNo recoveryProvider can restore
Who you trustYourselfThe provider's controls
Transfer limits still apply✓ Yes✓ Yes
Self-custody vs custodial access to your token.

With self-custody, your token lives in a wallet only you control through its private key. You can hold and move the token without asking anyone, but if you lose the key, no one can recover it for you. With custodial access, a platform holds the token on your behalf - easier to recover, but you are trusting that platform and its controls. Either way, security tokens are usually locked to approved addresses: the contract only lets approved wallets hold the token, and a transfer agent keeps the official register of who owns what. So even in self-custody, you cannot freely send a regulated token to just anyone.

What to check before you buy

Judge the ownership before the yield. A few concrete questions cut through most of it:

  • What is the legal claim? Shares in an SPV, a note, a fund interest - and is it documented? "You own a token" is not an answer.
  • Where is the asset, and who holds it? A named qualified custodian beats a vague "held securely."
  • Can you verify the backing? Look for ongoing proof of reserves or audited reporting, not a one-time claim.
  • Who holds your keys, and can you exit? Understand self-custody vs custodial, the approved-wallet rules, and how you would ever sell.

If the answers are thin, the token is the easy part and the ownership is the risk.

Where to go next

Sources: U.S. SEC (sec.gov); rwa.xyz, as of 2026.

Frequently asked questions

When I buy a tokenized asset, do I own the asset itself?

Not directly. You own a legal claim - usually shares in the entity that holds the asset - and the token is the on-chain record of that claim. The token's worth depends entirely on how enforceable that claim is.

What is the difference between custody of the asset and custody of my token?

Custody of the asset is who safeguards the real thing off-chain, often a qualified custodian. Custody of your token is who holds the keys to it - you (self-custody) or a platform (custodial). They are separate questions.

Is self-custody safer than letting a platform hold my token?

It is more control, not automatically more safety. Self-custody removes platform risk but puts key security entirely on you - lose the key and there is no recovery. Custodial access is recoverable but relies on the provider's controls.

Can I send a tokenized security to any wallet I want?

Usually not. Most security tokens only allow approved, identity-verified wallets to hold them, and a transfer agent keeps the official ownership register. Even self-custodied, the token cannot move to an unapproved address.

Educational content, not financial or legal advice. Tokenized assets carry risk; do your own research and consult a professional before investing.

Igor Buryi

Written by

Igor Buryi

Co-founder, Capital Strategy · Co-founder & Capital Strategy, Unicorn Invest

Experienced real-estate investor and venture builder with over a decade of successful entrepreneurship. PropTech co-founder, now bringing US real-estate development on-chain.

Share

Related Content

Test your knowledge

Evaluate your RWA & tokenisation skills with our quests.

0 of 8 passed0%

Pass 80% of all quests (7 of 8) to unlock your RWA Certificate.

All quests →

Get new RWA guides by email

Occasional updates when we publish new lessons. No spam, unsubscribe anytime.