Tokenizing real assets in Germany (2026): the legal and practical map.

The reason this matters is that a lot of the fear around tokenizing an asset in Europe comes from a sense that you are operating in a legal grey zone, and that a regulator will one day decide your token was never really a security or was secretly one and you got it wrong. In Germany that fear is smaller than almost anywhere, because the legislature actually wrote the answer down. A security can live on a blockchain, the token in the register is the security, and BaFin supervises it as securities activity. You are not improvising a structure and hoping it holds; you are using one the law already describes.

None of that makes it trivial. The structuring, the vehicle, the register provider, the offering route, and the way you market the raise all have to be set up correctly, and the useful thing to know from the start is which parts are the settled legal foundation and which parts are the genuine work. This guide walks each German piece, then ends on the part that is hard in Germany exactly as it is hard everywhere: the raise itself.

The foundation is the eWpG, the Gesetz uber elektronische Wertpapiere, the Electronic Securities Act, in force since 2021. Before it, German law effectively assumed a security had to exist as a physical paper certificate deposited somewhere. The eWpG broke that assumption. It lets a security be issued electronically by entering it into an electronic securities register, with no paper certificate at all.

The part that matters for tokenization is that the eWpG goes further than plain dematerialisation. It expressly provides for crypto securities, Kryptowertpapiere, recorded in a crypto-securities register kept on a decentralized, tamper-resistant recording system, which in practice means a blockchain. So a genuinely on-chain security is not a workaround in Germany or a token that merely points at a paper deed sitting in a vault. The entry in the crypto-securities register is the security itself. That is a real and unusual legal foundation, and among EU member states it puts Germany near the front rather than the middle.

For a CFO the practical takeaway is simple. When someone tells you a token represents your bond or your participation right, in Germany that statement can be literally true at the level of law, not just a marketing gloss over a traditional instrument. The token is recognized as the security, which is exactly the certainty you want before you ask investors to fund against it. What actually happens end to end, from asset to instrument to raise, is walked through in the how-businesses-tokenize guide.

Here is the piece that saves most issuers a lot of worry. Keeping the crypto-securities register, the Kryptowertpapierregisterfuhrung, is itself a regulated financial activity in Germany that requires BaFin authorization. That sounds heavy until you realise what it means for you: you do not have to become a registrar. In practice, issuers use an already-authorized registrar or tokenization platform to keep the register, and rely on that licence rather than building one.

So the division of labour is clean. You provide the asset and the offering. A licensed provider keeps the crypto-securities register, and depending on how the deal is set up, other regulated roles may be handled by licensed partners too, for example custody, the placement of the tokens, or fund-management functions if the structure is a fund. Each of those roles can carry its own authorization requirement, but the point is that they attach to specialist providers, not to you as the operating business raising the money. BaFin is the supervisor sitting over all of it as the financial regulator.

What you should not do is assume none of this applies because it is on a blockchain. The opposite is true in Germany. Because the token is a recognized security, the surrounding activities are recognized regulated activities, which is a good thing, because it means there is a known, licensed way to do each of them rather than a legal vacuum. Which roles your specific structure triggers, and which need a BaFin licence versus a licensed partner, is exactly the kind of thing to confirm with German counsel and current BaFin guidance before you commit to a design.

A common source of confusion in 2026 is where MiCA fits. The short version: for a tokenized real asset, MiCA usually does not fit at all. MiCA governs crypto-assets that are not financial instruments. A token that gives its holder a claim on a real asset's cash flow, a bond-like return, a participation, a share of profits, is a financial instrument, which puts it under MiFID II and the wider body of EU and German securities law, not under the MiCA crypto-asset regime.

That distinction is the whole game, because the regime decides your obligations. If your token is a security, you live in the world of securities rules: the prospectus regime and its exemptions, securities-law conduct rules, and BaFin supervision as securities activity. If a token were a pure crypto-asset with no such claim, it would fall to MiCA and its CASP licensing world instead. For a real-asset raise you almost always want, and land in, the securities side, because the entire point of the instrument is that it carries a real claim. The boundary between the two, and what pulls a token onto the MiFID II side rather than the MiCA side, is set out in the MiCA and CASP licensing guide.

The reason this is reassuring rather than alarming is that securities law is mature and well-understood, and Germany's eWpG plugs a tokenized security straight into it. You are not asking a regulator to invent a category for you. You are using the oldest and best-mapped part of financial regulation, with a modern statute that lets the security live on-chain. That is a far more comfortable place to raise capital than the frontier it is sometimes made out to be.

Once your token is a security, the next question is whether you need a full approved prospectus to offer it. For most tokenized real-asset raises the answer is no, because the offer is structured to fit an exemption under the EU Prospectus Regulation. The common routes are an offer only to qualified investors, an offer to fewer than 150 non-qualified investors per member state, or a high enough minimum ticket per investor. Any of these can take you out of the full-prospectus requirement while still letting you raise real money.

Germany also has a national small-offer regime. Historically it has allowed public offers up to about EUR 8 million with a lighter securities information sheet, a Wertpapier-Informationsblatt, instead of a full prospectus, subject to conditions. Treat that ceiling as commonly around EUR 8 million and verify the current threshold and its conditions, because these figures and the rules attached to them change, and the exact number that applies to your offer today should come from counsel, not from a guide. The general shape, a lighter document for a capped public offer, is the useful thing to carry into planning.

The exemption you rely on is not just paperwork, it shapes the raise. Choosing the qualified-investor route, the sub-150 route, the minimum-ticket route, or the German small-offer route changes who you are allowed to market to, how you can market to them, and how large a raise you can run without a full prospectus. That is a strategic decision, not a formality, and it is worth getting right before you start talking to investors. The exemption routes and how each one constrains the raise are covered in the prospectus exemptions guide.

Somewhere in the structure a legal entity has to hold the real asset and be the thing your token is a claim against. In Germany the familiar candidates are a GmbH, the standard limited-liability company, or a GmbH & Co. KG, a limited partnership with a GmbH as its general partner, which is a very common vehicle for holding assets and participations because of how it combines limited liability with partnership flexibility. Either can sit under a tokenized issuance as the entity that owns the asset and services the token.

You are not forced to keep the holding vehicle in Germany, though. Many tokenized deals put the asset in a special-purpose vehicle in another EU jurisdiction chosen for its SPV, tax, or fund-wrapper characteristics, while the raise still reaches German and European investors under the same EU securities framework. Which is better depends on the asset, the investor base, the tax position, and whether a fund wrapper is involved, and it is a genuine trade-off rather than an obvious call.

Two companion guides do the work here. What an SPV is for and how it ring-fences a single asset so your token is a claim on that asset and nothing else is in the how-businesses-tokenize guide and the SPV structuring guides on the site. Where to domicile that SPV within the EU, and how Germany compares with the usual alternatives for a tokenized raise, is the whole subject of the best-EU-jurisdiction guide. The right answer for you is a structuring decision to take with counsel, not a default.

Read the table top to bottom and a pattern shows up. The first four rows, the law, the regulator, the register, and the MiFID II classification, are settled ground in Germany. You are not inventing them; you are using them. The last two rows, the exemption you choose and the vehicle you hold the asset in, are where the real decisions sit, and they are decisions about your specific asset and raise rather than about German law being unclear.

Here is the thing worth saying plainly, because it is the opposite of how tokenization is usually sold. In Germany the legal recognition and the token are the easier, more predictable part of the job. The eWpG has done the hard legal work for you, licensed registrars exist, and the securities framework is mature. What is hard, in Germany exactly as everywhere else, is the raise: actually placing the tokens with investors who will fund your asset.

Distribution is the part that people underestimate every time. A perfectly structured, fully compliant, German-law-recognized token that no one buys has raised nothing. The token being real does not make the money appear. Reaching the right investors, meeting them within whatever exemption you chose, and getting them to commit is the work, and it is a service, not a legal step. It is also why matching your vehicle and exemption to the investors you can actually reach matters so much: the structure and the raise are one problem, not two.

On the numbers, the costs and the timeline are the usual EU ranges rather than anything Germany makes worse. You are paying for structuring, the vehicle, the register or platform, issuance, and offering documentation, and then for running the distribution. A realistic budget is in the cost guide, and a realistic sense of how long it takes from decision to funded is in the timeline guide. Germany's clear eWpG footing tends to reduce legal uncertainty rather than add cost, but it does not shorten the part that is genuinely long, which is the raise.