In the UK, the Financial Conduct Authority (FCA) treats a security token the same way it treats the underlying investment: if a token has the features of a share, bond, or fund unit, it is a "specified investment" under existing law and the full regulatory perimeter applies. There is no separate token carve-out for securities. Newer powers under FSMA 2023 are building a broader cryptoasset regime, and the Digital Securities Sandbox lets tokenized securities be tested in live markets. This is the UK map.

Key takeaways

• A security token is usually a "specified investment," so existing UK securities law and FCA authorisation apply.
• The Financial Promotion regime tightly controls how cryptoassets can be marketed to UK consumers.
• FSMA 2023 gives the Treasury and FCA powers to build a wider cryptoasset and stablecoin regime.
• The Digital Securities Sandbox (BoE + FCA) lets tokenized securities trade and settle under modified rules.

How the FCA classifies tokens

The FCA's long-standing approach is substance over form. A token with the characteristics of a regulated investment - a tokenized security - is a specified investment, so issuing, advising on, or trading it are regulated activities needing authorisation.

Tokens that are purely utility or exchange tokens have historically sat largely outside the perimeter, though that is changing as the UK builds a dedicated cryptoasset regime. Classification still comes first.

Marketing rules you can't ignore

The UK's Financial Promotion regime is strict. Since the cryptoasset promotion rules took effect on 8 October 2023, communications to UK consumers must be clear, fair, not misleading, carry prescribed risk warnings, and come from or be approved by an FCA-authorised person - plus a 24-hour cooling-off period for first-time investors in a given firm.

For an RWA offering, this shapes how you can reach UK investors - casual promotion is not allowed, and the penalties are real: breaching the financial-promotion rules is a criminal offence carrying up to two years' imprisonment, so marketing must be planned around them from the start, not retrofitted.

The direction of travel: FSMA 2023

The Financial Services and Markets Act 2023 gave HM Treasury and the FCA powers to bring a broader set of cryptoassets and activities into regulation, including stablecoins. The UK is phasing in a dedicated regime rather than relying only on the existing perimeter.

For securities this changes little - they are already regulated - but it signals a maturing, more comprehensive UK framework that issuers and platforms should track. The FCA and Treasury have been consulting through 2025 on the detailed rules for cryptoassets and fiat-backed stablecoins, including bringing stablecoin issuance and custody inside the regulatory perimeter, so a platform settling RWA trades in a UK stablecoin should expect to deal with an authorised, supervised issuer rather than an unregulated one before long.

The Digital Securities Sandbox

To modernise how tokenized securities trade and settle, the Bank of England and FCA launched the Digital Securities Sandbox - a live environment where firms can operate DLT-based issuance, trading, and settlement under temporarily modified rules.

Opened to applicants in 2024 and designed to run for around five years, it is the UK counterpart to the EU's DLT Pilot Regime, and the clearest route for on-chain secondary markets in UK securities - with the difference that its findings are meant to feed a permanent regime rather than expire. The investor and tokenize guides cover access and structuring.

Where to go next

• Next: how to invest in RWAs from the UK.
• Compare: how the US compares.
• Glossary: security token.

Sources: UK FCA (fca.org.uk); Financial Services and Markets Act 2023; Bank of England (bankofengland.co.uk), as of 2026.