The old crypto whitepaper was a PDF with a roadmap, a token distribution pie chart and a section about the vision. Nobody was accountable for it. Under the Markets in Crypto-Assets Regulation, the document with that name is a disclosure instrument with prescribed content, a filing route and civil liability attached to the issuer and its management body. The similarity to a securities prospectus is deliberate, and it is the single biggest practical change MiCA made for anyone launching a token in the European Union.
Three regimes, not one
MiCA splits crypto-assets into three buckets and the whitepaper obligations differ across them.
Asset-referenced tokens, which aim to hold value by reference to a basket of assets, currencies or commodities, need a whitepaper that the competent authority approves as part of the issuer's authorisation. Approval, not notification.
E-money tokens, which reference a single official currency, must be issued by a credit institution or an authorised electronic money institution, and their whitepaper is notified to the authority. The EMI licence obligations sit underneath.
Everything else, the general category of crypto-assets other than those two, needs a whitepaper drawn up, notified to the competent authority and published before the asset is offered to the public or admitted to trading. There is no prior approval for this third bucket, which is why some issuers mistake it for a formality. The absence of approval does not reduce the liability. The wider MiCA regime and the stablecoin rules cover the tighter categories in more detail.
What has to be in it
The regulation prescribes the sections. Information about the offeror or the person seeking admission to trading, including the management body. Information about the issuer where that is a different entity. Details of the project, the offer to the public itself, and the crypto-asset: what it is, what rights and obligations attach to it, and how it functions. Information on the underlying technology, meaning the consensus mechanism, the protocol and the smart contracts where they exist. The risks, stated specifically rather than as a generic disclaimer. And principal adverse impacts on the climate and the environment from the consensus mechanism, which is a section most issuers write last and should not.
Two formal requirements catch people out. The whitepaper must contain a prescribed statement that it has not been approved or reviewed by any competent authority. And it must include a summary in plain language, short, giving key information, and carrying the warnings that the asset may lose value, may not be transferable, may be illiquid, and is not covered by investor compensation or deposit guarantee schemes. On the last point, our note on what compensation schemes actually cover explains the distinction.
Language matters too: the document goes to the authority in an official language of the home member state or in a language customary in international finance, and the practical answer for most issuers is English plus whatever the home authority requires.
This describes a regulatory regime and is not legal advice. Whitepaper obligations turn on how a specific token is classified, and classification is a legal question that should be settled with advisers in the relevant member state before anything is drafted.
Liability is the part that changed everything
Where a whitepaper is not complete, fair and clear, or is misleading, a holder who acquired the asset can claim for loss suffered as a result. The offeror and the members of its management body are on the hook, and any clause purporting to exclude that liability has no legal effect. That last sentence is the reason the drafting process now involves lawyers.
The practical consequence is that forward-looking language becomes expensive. A roadmap promising a mainnet by a given quarter is a statement a holder can point at. Performance projections, partnership hints and revenue models presented as facts all carry the same exposure. Firms that ported their old marketing paper into the MiCA template found this out during review, because the two documents have opposite purposes: one was written to excite, the other to inform without misleading.
Material changes create an ongoing duty. New information capable of affecting a purchase decision means a modified whitepaper, notified and published, with the earlier version kept available. This is a maintained document, not a launch artefact.
Marketing communications travel with it
MiCA regulates the advertising as well as the disclosure. Marketing communications must be identifiable as such, must be fair, clear and not misleading, must be consistent with the whitepaper, and must state that a whitepaper exists along with where to find it. They are notified to the authority on request and, for the tighter token categories, alongside the whitepaper itself.
Consistency is the operative word. A social post claiming utility the whitepaper does not describe creates a conflict between two documents you published, and the regulator does not have to choose which one is right in your favour. Firms that already deal with marketing restrictions on leveraged products will recognise the pattern.
Sequencing a launch
The order that works is classification first, structure second, drafting third. Determine which of the three regimes the asset falls into, because that decides whether you need an authorisation with an approved whitepaper or a notification. Confirm which legal entity is the offeror and where it sits, because that fixes the competent authority. Only then draft, and draft the risk and technology sections with the engineers in the room rather than the communications team.
Exemptions exist at the small end. Certain offers, including small offers below a threshold, offers to a limited number of qualified investors, and free distributions where the recipient provides nothing of value, fall outside the publication requirement. The conditions are narrow and the definition of free is narrower than most airdrops assume. Do not build a launch plan on an exemption without advice.
If the asset is going to be listed or served through a service provider, remember the two workstreams meet. The trading venue or exchange listing it has its own obligations under the CASP authorisation, and a whitepaper that does not satisfy the venue's own review will not be listed regardless of what the regulator said.
"The moment a whitepaper carries civil liability, the person who writes it stops being the marketing team. That change alone rewrites how tokens get launched in Europe."
— Roman Onta, Executive Director, SINGUARD
Key Takeaways
- Asset-referenced tokens need an approved whitepaper, e-money tokens and other crypto-assets need a notified one.
- Prescribed content covers the offeror, the project, the technology, the risks and the environmental impact of the consensus mechanism.
- Civil liability attaches to the offeror and its management body, and exclusion clauses have no effect.
- Marketing communications must be consistent with the whitepaper and say where it can be found.
Frequently Asked Questions
Does every token need a MiCA whitepaper?
Every crypto-asset offered to the public or admitted to trading in the EU needs one unless a specific exemption applies. Exemptions include certain small offers, offers limited to qualified investors and genuinely free distributions, and their conditions are narrow.
Does a regulator approve the whitepaper?
Only for asset-referenced tokens, where whitepaper approval forms part of the issuer's authorisation. E-money tokens and other crypto-assets follow a notification route, and the document itself must state that no authority has approved or reviewed it.
Who is liable if the whitepaper is misleading?
The offeror or the person seeking admission to trading, together with the members of its management body. A holder who suffered loss because the information was incomplete, unfair, unclear or misleading can claim, and disclaimers purporting to exclude that liability are ineffective.
About the Author
Roman Onta is an Executive Director at SINGUARD. He builds the Prop Firm CRM, the Broker CRM, Scalegram and CopySignals side by side with his brother Alex Onta, and he helped on the design of eTrader, the division Alex built and leads. His ground is worldwide payment processing, AML compliance and the corporate structures brokers are built on, work the two of them carry together, shaped by executive roles in the UAE and international corporates. He lives and works in Dubai for most of the year. Meet the executive duo leading Singuard's five divisions.