Global Tokenization Policy & Cross-Border Regulation

Global Tokenization Policy: International Frameworks and Cross-Border Coordination

Digital asset tokenization is inherently borderless, but regulation remains jurisdiction-bound. This tension between the global nature of blockchain-based assets and the territorial limits of regulatory authority defines the most significant policy challenge in the tokenization space. International standard-setting bodies — the Financial Action Task Force (FATF), the Bank for International Settlements (BIS), the International Organization of Securities Commissions (IOSCO), and the Financial Stability Board (FSB) — are attempting to build coordination frameworks, but implementation varies dramatically across jurisdictions.

The FATF Travel Rule (Recommendation 16, as applied to virtual assets through the Updated Guidance of 2021) is the most consequential international standard for crypto-asset service providers. It requires Virtual Asset Service Providers (VASPs) and other obliged entities to collect, hold, and transmit originator and beneficiary information for virtual asset transfers exceeding applicable thresholds ($1,000/EUR 1,000 in most jurisdictions). Despite near-universal adoption in national law, technical implementation remains uneven — the absence of a universal messaging standard for VASP-to-VASP data transmission has spawned competing solutions including TRISA, OpenVASP, Shyft, and Sygna, with no single protocol achieving dominant market share.

The Bank for International Settlements (BIS) has been at the forefront of conceptualizing how tokenization can transform the financial system. The BIS Innovation Hub’s “Finternet” vision and unified ledger concept — articulated in the 2023 Annual Economic Report and expanded through subsequent working papers — envisions a tokenized financial infrastructure where central bank money, commercial bank money, and tokenized assets coexist on shared platforms. BIS projects including mBridge (cross-border CBDC), Project Mariana (DeFi for FX), and Project Agor (tokenized deposits) represent practical experiments in building this infrastructure.

IOSCO published its Policy Recommendations for Crypto and Digital Asset Markets in November 2023, establishing 18 recommendations organized around six outcome areas: governance, conflicts of interest, cross-border cooperation, operational and technological risk, client asset protection, and market integrity. The recommendations are designed to be applied by IOSCO’s 130+ member jurisdictions to their domestic regulatory frameworks, and IOSCO has initiated monitoring of implementation progress.

The FSB has developed a framework for the regulation of crypto-asset activities and global stablecoin arrangements, building on its 2020 high-level recommendations. The FSB framework emphasizes “same activity, same risk, same regulation” and calls for comprehensive regulation of stablecoin arrangements with potential systemic significance. The FSB’s Global Regulatory Framework for Crypto-Asset Activities, finalized in 2023, provides recommendations that G20 members are expected to implement.

Central Bank Digital Currencies (CBDCs) represent a parallel track of policy development that intersects significantly with tokenization. Over 130 countries are exploring CBDCs at various stages — from research to pilot to launch. The regulatory frameworks being developed for CBDCs address questions of monetary sovereignty, privacy, financial inclusion, and interoperability that directly affect the broader tokenization ecosystem.

For multinational tokenization platforms, the fragmented international landscape creates both regulatory arbitrage opportunities and compliance complexity. Understanding how international standards translate into national implementation — and where gaps and contradictions exist — is essential for strategic planning.

Frequently Asked Questions

What is the FATF Travel Rule and who must comply?

The FATF Travel Rule (Recommendation 16 as applied to virtual assets) requires Virtual Asset Service Providers (VASPs) and other obliged institutions to obtain, hold, and transmit required originator and beneficiary information with virtual asset transfers. For transfers above applicable thresholds (typically $1,000 or EUR 1,000), the originator VASP must transmit the name, account number, and physical address (or national identity number, customer identification number, or date and place of birth) of the originator, plus the name and account number of the beneficiary. The rule applies to all FATF member jurisdictions (currently 40 members including all G20 countries) and is being adopted globally through national legislation.

What is the BIS unified ledger concept?

The BIS unified ledger, articulated in the 2023 BIS Annual Economic Report and subsequent publications, envisions a shared programmable platform where central bank money (as a CBDC), tokenized commercial bank deposits, and tokenized real-world assets coexist. The concept is that by placing these different forms of money and assets on a common infrastructure, settlement can occur atomically (delivery versus payment in a single transaction), reducing counterparty risk and increasing efficiency. The BIS Innovation Hub is testing components of this vision through projects including mBridge (multi-CBDC cross-border payments), Agor (tokenized deposits), and others.

What are IOSCO’s 18 recommendations for crypto markets?

IOSCO’s Policy Recommendations for Crypto and Digital Asset Markets (November 2023) cover six areas: (1) organizational and governance requirements for crypto-asset service providers; (2) identification and management of conflicts of interest; (3) cross-border regulatory cooperation; (4) management of operational and technological risks; (5) protection of client money and assets; and (6) retail investor access, suitability, and distribution. The 18 individual recommendations provide detailed expectations for how jurisdictions should regulate crypto-asset intermediaries, with particular emphasis on ensuring crypto regulations are equivalent to traditional financial services standards for comparable activities.

How many countries are developing CBDCs?

Over 130 countries representing more than 98% of global GDP are exploring CBDCs at various stages. As of 2026, several countries have launched retail CBDCs including the Bahamas (Sand Dollar), Nigeria (eNaira), Jamaica (JAM-DEX), and Eastern Caribbean states (DCash). Major economies including China (e-CNY), India (digital rupee), the EU (digital euro), Brazil, and others are in advanced pilot stages. The United States, UK, and Japan are in research and design phases. The regulatory frameworks being developed for CBDCs address privacy, monetary policy transmission, financial stability, and interoperability with existing payment systems and tokenized asset platforms.

What does “same activity, same risk, same regulation” mean in practice?

This principle, championed by the FSB and endorsed by G20 leaders, holds that crypto-asset activities that present the same risks as traditional financial activities should be subject to equivalent regulatory requirements. In practice, this means a crypto exchange should face comparable requirements to a traditional securities exchange (market integrity, investor protection, operational resilience), a stablecoin should be regulated similarly to other payment instruments or e-money, and crypto custody should meet standards comparable to traditional asset custody. Implementation varies — some jurisdictions extend existing financial regulations to crypto, while others create dedicated crypto frameworks designed to achieve equivalent outcomes.

How does cross-border crypto regulation coordination work?

Cross-border coordination operates at multiple levels. International standard-setting bodies (FATF, IOSCO, FSB, BIS) establish principles and recommendations that member jurisdictions are expected to implement nationally. Bilateral and multilateral MOUs between regulators enable information sharing and supervisory cooperation. FATF mutual evaluations assess member countries’ implementation of virtual asset recommendations. The EU’s MiCA creates a regional single-market approach. However, significant gaps remain — there is no global registry of licensed crypto service providers, no universal messaging standard for Travel Rule compliance, and jurisdictions differ substantially in how they classify and regulate different types of digital assets.

Which jurisdictions are considered most tokenization-friendly?

Jurisdictions frequently cited as having favorable regulatory frameworks for tokenization include: Switzerland (DLT Act, tokenized securities framework), Singapore (MAS licensing with clear regulatory framework), the UAE (VARA and ADGM competing frameworks), Liechtenstein (Token and VT Service Provider Act), Luxembourg (blockchain-enabled securities settlement), and Hong Kong (VATP licensing with retail access). Rankings depend on the specific tokenization activity — some jurisdictions are more favorable for security token issuance, others for exchange operations, and others for real-world asset tokenization. Factors include regulatory clarity, licensing timelines, capital requirements, tax treatment, and access to banking services.

What are the biggest gaps in international crypto regulation?

Key gaps include: the absence of a universal standard for classifying digital assets (securities vs. commodities vs. payment instruments vs. utility tokens); inconsistent Travel Rule implementation and no dominant messaging protocol; lack of coordination on DeFi regulation (most frameworks focus on centralized intermediaries); divergent approaches to stablecoin reserve and redemption requirements; no agreed framework for cross-border regulatory recognition or passporting of crypto licenses; and limited supervisory cooperation mechanisms for real-time enforcement. These gaps create both regulatory arbitrage opportunities and compliance challenges for global operators.