Legal structuring of the ICO
"We design the legal structure of your ICO: token type, issuing vehicle, optimal jurisdiction and compliance with the MiCA Regulation for a secure, traceable issuance."
Launch your ICO with full legal certainty: end-to-end legal advice on token issuance, MiCA regulatory compliance, white paper drafting, investor KYC/AML and tax structuring of your Initial Coin Offering.
"We design the legal structure of your ICO: token type, issuing vehicle, optimal jurisdiction and compliance with the MiCA Regulation for a secure, traceable issuance."
"We review and validate your ICO white paper from a legal standpoint: mandatory MiCA disclosures, risk warnings, token rights and issuer liability."
"We implement the process for identifying and verifying your ICO investors: KYC, sanctions screening, source-of-funds analysis and AML/CFT compliance."
"We analyze the ICO from the investor’s perspective: token classification, regulatory risks, strength of the white paper and regulatory compliance before you participate."
We determine whether your token is a utility token, an asset-referenced token or an e-money token under the MiCA Regulation, and we define the regulatory obligations that apply to your ICO.
Drafting and legal validation of the ICO white paper: mandatory MiCA content, risk warnings, description of the token’s rights and the issuer’s liability to investors.
Selecting and setting up the best legal vehicle to launch the ICO: foundation, limited company, SPV or offshore structure, with a jurisdiction analysis and registration with the regulator.
Design and implementation of the investor identification process: KYC, beneficial owner verification, sanctions screening and source-of-funds analysis under Law 10/2010.
Tax analysis of the issuance: taxation of the funds raised, VAT on tokens, the issuer’s formal obligations, taxation of investors resident in Spain and international planning.
Independent assessment of the ICO from the investor’s perspective: white paper analysis, regulatory classification of the token, legal risks and strength of the issuing team.
MiCA regulatory risk: since June 2024, the MiCA Regulation has applied throughout the EU. Issuing tokens without meeting its requirements can lead to bans on the offer, penalties from the regulator and criminal liability for the issuer.
Incorrect token classification: mistaking a security token for a utility token has very serious consequences. If the token grants economic or equity rights, it may be subject to securities law (MiFID II, TRLMV).
Deficient white paper: a white paper without the mandatory legal disclosures exposes the issuer to investor claims, liability for misleading information and the ICO being declared void in strict jurisdictions.
AML/CFT non-compliance: ICOs are a high-risk vector for money laundering. Failing to run KYC/AML checks on investors can block the project’s banking operations and lead to penalties from SEPBLAC or its European counterparts.
Tax contingencies: the taxation of funds raised in an ICO is complex and varies with the type of token and the issuer’s jurisdiction. Poor planning can lead to double taxation or unexpected tax adjustments.
An ICO (Initial Coin Offering) is a fundraising mechanism in which crypto-assets or tokens are issued and sold to the public on a blockchain network in exchange for established cryptocurrencies (Bitcoin, Ether) or fiat money.
Investors acquire tokens that may represent access to a service or platform (utility tokens), economic rights in a project (security tokens) or tokenized real assets (asset-referenced tokens), depending on their design and regulatory classification.
ICOs have evolved from the speculative boom of 2017–2018 into a regulated form of alternative financing for blockchain projects in the European Union under the MiCA framework.
Regulation (EU) 2023/1114 on markets in crypto-assets (MiCA), fully applicable since December 2024, sets out the first harmonized regulatory framework for public offers of crypto-assets in the European Union.
MiCA distinguishes three categories of crypto-assets, each with its own regime: utility tokens (access to goods or services), asset-referenced tokens (backed by assets) and e-money tokens (referencing a fiat currency). For each category, it sets requirements on the white paper, notification to the regulator, marketing communications and issuer liability.
ICOs that fall outside the scope of MiCA (for example, security tokens) remain subject to securities law, which makes it essential to classify the token correctly before launching the offer.
Classifying the token is the first legal step in any ICO. An incorrect classification can mean that much stricter rules apply or, in the worst case, that the offer is unlawful.
The legal analysis of the token’s nature is the starting point for any legally sound ICO.
The white paper is the ICO’s offering document and, under MiCA, it must contain clear, fair and not misleading information for investors. Its content is set out in the Annexes to the Regulation, depending on the token category.
An incomplete or misleading white paper creates civil liability for the issuer toward investors and can lead the regulator to suspend the ICO.
ICOs are among the instruments most exposed to money laundering risk, according to the risk assessment reports of the European Union and the FATF. The possibility of taking part pseudonymously with cryptocurrencies makes them a high-risk vector.
Token issuers that raise funds from investors must implement a robust KYC (Know Your Customer) process: identifying and verifying the investor’s identity, identifying the beneficial owner, screening against international sanctions lists (OFAC, EU, UN) and analyzing the source of the funds contributed.
The absence of KYC/AML controls in an ICO can result in the funds raised being blocked by banks or exchanges, regulatory penalties and, in extreme cases, criminal investigations against the team behind the project.
The taxation of an ICO in Spain depends on the nature of the token issued, the issuer’s structure and the tax residence of the investors. There is little settled administrative guidance in this area, which makes prior advice essential.
For the issuer, the funds raised in the ICO may be treated differently for tax purposes: if the token gives access to a future service, the amount could be considered an advance on income; if it represents a share in profits, it could be treated like an issue of securities. VAT on the issuance of tokens is also analyzed case by case.
For investors resident in Spain, a later sale of tokens generates capital gains or losses subject to personal income tax (IRPF, savings income), with reporting obligations that include Form 721 if the crypto-assets are held in custody abroad.
The cost of legal advice for an ICO depends on the complexity of the project, the type of token, the jurisdiction of issuance and the scope of the services required: from token classification to drafting the white paper, implementing KYC/AML or registering with the regulator.
In mid-sized projects, legal advice is a small fraction of the ICO’s total budget, yet it is the investment with the greatest impact on regulatory viability and investor confidence. A launch without a proper legal structure can result in the offer being suspended, funds being returned and irreparable reputational damage.
We offer a free initial analysis to determine your ICO’s specific legal needs and propose a scope of services tailored to the project’s stage of development.
ICOs connect with other key areas of crypto-asset regulation, AML compliance and corporate structuring. Discover the services that complement your project.
Comprehensive legal advice on crypto-assets: tokenization, exchanges, custody, DeFi and MiCA regulatory compliance in Spain and the EU.
Anti-money laundering for token issuers and exchanges: risk assessment, AML manual, training and compliance audits.
Independent report on the ICO’s regulatory compliance, suitable for submission to institutional investors, regulators or banks.
Obtaining the crypto-asset service provider (CASP) license from the CNMV: MiCA requirements, documentation and the authorization process.
Corporate compliance programs for blockchain projects: whistleblowing channel, code of ethics and internal controls adapted to the crypto sector.
Design and implementation of KYC/AML systems for token issuers: investor identification, sanctions screening and inspection readiness.
Advice on secondary transfers of tokens and stakes in blockchain projects: legal, tax and compliance structuring.
Criminal compliance program for crypto projects: whistleblowing channel, code of ethics and evidence of compliance for regulatory authorities.
Check the scenarios that apply to your project. The more that match, the greater the need for specialist legal advice before you launch your ICO.
0 of 10 scenarios
Check the scenarios that apply to your project.
Everything you need to know before launching an Initial Coin Offering: concept, MiCA regulatory framework, token types, legal process, AML/CFT compliance and mistakes to avoid.
An ICO (Initial Coin Offering) is a fundraising process in which an entity issues digital tokens on a blockchain network and makes them available to the public in exchange for cryptocurrencies or other forms of payment. Unlike a stock market IPO, ICOs are not regulated by traditional securities market rules, although this is changing radically with the entry into force of the MiCA Regulation in the European Union.
ICOs allow technology projects, startups and established companies to access capital quickly and globally, without traditional financial intermediaries. However, this agility comes with legal and regulatory responsibilities that issuers must understand and manage before launching the offer.
The MiCA Regulation (Markets in Crypto-Assets Regulation, EU 2023/1114) has been fully applicable since December 2024 and sets out the harmonized regime for public offers of crypto-assets in the 27 Member States. In Spain, the competent authorities for MiCA supervision are the CNMV (Spanish National Securities Market Commission) and the Bank of Spain, depending on the token category.
For utility token ICOs, MiCA requires a white paper with prescribed content, its notification to the CNMV before publication (unless a volume-based exemption applies) and compliance with marketing rules. For asset-referenced tokens and e-money tokens, the regime is stricter and includes obtaining prior authorization. Security tokens fall outside MiCA and are governed by securities law: the MiFID II Directive and, in Spain, Royal Legislative Decree 4/2015 (TRLMV).
The legal process for an ICO has four stages. The first is the preliminary analysis: classifying the token under MiCA, determining the jurisdiction of issuance, selecting the legal vehicle and analyzing the applicable regulatory obligations.
The second stage is document preparation: drafting and validating the white paper, the ICO terms and conditions, privacy policy, AML/KYC policy and agreements with advisors, exchanges and custodians.
The third stage is regulatory compliance: notifying the white paper to the CNMV (where required), implementing the KYC/AML process for investors, registering the issuer where applicable and coordinating with banks to manage the funds raised.
The fourth stage is post-ICO: reporting obligations to the regulator, handling investors’ withdrawal rights (14 calendar days under MiCA for retail investors), record keeping and ongoing compliance.
The FATF (Financial Action Task Force) and the European Commission have identified ICOs as one of the highest-risk instruments for money laundering and terrorist financing. The pseudonymity of blockchain transactions, the global reach of investors and the speed at which funds are raised make KYC/AML controls especially critical.
Issuers must implement a robust AML program that includes: a customer acceptance policy, standard and enhanced due diligence procedures, ongoing screening against sanctions lists (OFAC, EU, UN, SEPBLAC), monitoring of suspicious transactions and reporting to the competent authorities where appropriate.
In addition, under the 6th AML Directive (AMLD6) and its Spanish transposition, crypto-asset service providers (CASPs) involved in issuing and distributing tokens are treated as obliged entities for anti-money laundering purposes.
For investors taking part in ICOs, prior analysis is as important as it is for the issuer. Before acquiring tokens, you should check: whether a registered white paper exists and what it contains, the token’s classification and regulatory regime, the track record and credentials of the team behind the project, the smart contract governing the issuance (technical audit) and the issuer’s jurisdiction and its legal implications.
Investing in an ICO without prior due diligence exposes the investor to the risk of fraud, total loss of capital, being unable to recover the funds if the issuer becomes insolvent and tax problems from failing to report the purchase and any later sale of tokens correctly.
The most critical mistake is not classifying the token correctly before launch. Many projects assume their token is a utility token to avoid securities law, but if the token grants economic rights or expectations of appreciation, it may be classified as a security token, with all the legal consequences that entails: issuance without a prospectus, nullity of the offer and criminal liability for the promoters.
Another common mistake is publishing the white paper without legal review: a white paper that omits mandatory information or contains unverifiable statements creates civil liability for the issuer toward investors and may be suspended by the regulator. It is also common to launch the ICO without implementing KYC/AML, which usually results in the funds raised being blocked by the banks or exchanges used for conversion.
Finally, ignoring post-ICO obligations (reporting to the regulator, handling retail investors’ right of withdrawal within 14 days of purchase, updating the white paper after material changes) can lead to administrative penalties and loss of the right to operate in the EU.
If you are looking into this topic, these pages can help you broaden your analysis of confidentiality, mandate, commission and commercial distribution.
Review the essential clauses for protecting sensitive information, defining obligations and reducing risk in negotiations or collaborations.
View page MandateA useful resource for understanding representation, the scope of the engagement, the agent’s duties and the parties’ responsibilities.
View page CommissionAnalyze the legal structure of commercial intermediation, acting on behalf of others and the obligations arising from the agreement.
View page DistributionSee a practical outline for regulating supply, territory, exclusivity, term and grounds for termination in commercial relationships.
View pageKey legislation, linked to the official text:
Legislation and links reviewed in .