Liechtenstein (2026): DLT Dematerialised Securities, Tokenised Securities and the Optional Control‑agent Model

Last updated: 2 June 2026

Liechtenstein has positioned itself at the forefront of digital‑asset regulation since the Token and TT Service Provider Act (TVTG) entered into force in 2020, and the 2026 EEA DLT reforms now add a significant new layer to that framework. Firms evaluating tokenised securities in Liechtenstein must contend with a reshaped landscape that introduces an optional control‑agent model for dematerialised securities recorded on distributed‑ledger technology. At the same time, the Markets in Crypto‑Assets Regulation (MiCAR), implemented in Liechtenstein through the EEA Agreement, has redrawn the licensing perimeter for crypto‑asset service providers (CASPs).

This guide provides the practical, step‑by‑step compliance playbook that general counsel, compliance officers, fintech founders and custody heads need to navigate these overlapping regimes, covering legal classification, licensing decisions, operational controls, contract drafting and a phased implementation timeline.

Executive Summary and Decision Checklist for Tokenised Securities in Liechtenstein

Before diving into the legal detail, firms should work through the following decision points to determine which regulatory track applies to their planned activity and what immediate steps they need to take.

• Classify the instrument first. Determine whether the token represents a transferable security (equity, bond, fund unit) or a non‑security crypto‑asset. This single classification drives every subsequent licensing and compliance decision.
• Identify the applicable regime. Transferable securities recorded on DLT may fall under the new dematerialised‑securities rules, the TVTG, MiCAR or a combination. Non‑security tokens generally fall under MiCAR alone.
• Decide whether to adopt the control‑agent model. The 2026 EEA DLT reforms make the control‑agent function optional. Firms may choose to act as a control agent, appoint one, or continue to rely on traditional custodial structures.
• Map existing licences against the target activity. A TVTG registration, CASP licence or banking licence may cover some, but rarely all, activities involved in issuing, settling or safekeeping DLT securities.
• Engage with the FMA early. The Finanzmarktaufsicht Liechtenstein (FMA) expects proactive dialogue, particularly where a firm’s proposed service profile spans multiple regulatory regimes.
• Budget for contracts and operational build‑out. New agreements (control‑agent appointment, token‑holder terms, sub‑custody arrangements) and IT/AML upgrades are essential before going live.

Industry observers expect that the majority of Liechtenstein banks, CASPs and payment institutions exploring tokenisation will need to address at least three of these six decision points simultaneously, making early legal mapping essential.

Key Legal Texts and Timeline: What Changed in 2025–2026

The regulatory landscape for DLT securities in Liechtenstein has evolved rapidly. The table below summarises the critical legislative milestones that shape the current framework, drawn from publicly available FMA and Liechtenstein Finance materials.

Practical implication: Firms operating under a TVTG registration alone must now assess whether their tokens qualify as transferable securities under the DLT reforms. If they do, additional obligations, and potentially additional authorisation, apply. The TVTG continues to operate in parallel, but the FMA has indicated through its published supervisory materials that the TVTG is not itself part of financial‑market legislation, meaning that firms engaged in activities triggering financial‑market regulation require separate or supplementary authorisation.

What Are DLT Dematerialised Securities? Legal Test and Practical Examples

Legal definition under Liechtenstein law

Under the 2026 reforms, a dematerialised security is a right, typically a financial instrument such as an equity share, bond or fund unit, that exists in book‑entry or digital form rather than as a physical certificate. When that book entry is maintained on a distributed ledger, the security becomes a DLT dematerialised security. The legal test turns on three elements: (1) the right must qualify as a transferable security under applicable financial‑market law; (2) the record of ownership or entitlement must be maintained electronically, with no requirement for a paper instrument; and (3) the DLT system used must meet defined technical and governance standards.

This framework builds on principles familiar from Liechtenstein’s existing securities legislation but adapts them to the technological reality of blockchain‑based record‑keeping. Academic analysis from the Universität Liechtenstein has highlighted that the legal classification of tokenised instruments, whether they represent property rights, claims or participations, remains the decisive factor in determining regulatory treatment.

Practical examples

• Tokenised equity. A Liechtenstein‑incorporated company issues shares as DLT tokens. Each token represents a pro‑rata ownership interest. The shareholder register is maintained on‑chain, and transfers execute via smart‑contract logic subject to the control agent’s validation.
• Tokenised bonds. A fixed‑income instrument is issued as a dematerialised security on DLT. Coupon payments and redemption mechanics are encoded in the smart contract, with the control agent ensuring settlement finality.
• Tokenised fund units. Units in a Liechtenstein‑domiciled investment fund are represented as DLT tokens, enabling fractional ownership and faster subscription/redemption processes. The fund administrator or a third‑party control agent maintains the register.

In all three cases, the instrument’s legal character as a security, not merely as a token, is what triggers the dematerialised‑securities regime and, potentially, the obligation to appoint or act as a control agent.

The Control‑Agent Model Explained: Legal and Operational Mechanics

Legal basis and optional nature

The control‑agent model introduced by the 2026 EEA DLT reforms is explicitly optional. Issuers of DLT dematerialised securities may choose to designate a control agent, but they are not required to do so. The control agent functions as the entity responsible for maintaining the definitive register of holders, validating transfers and ensuring that the on‑chain record is legally authoritative. In this sense, the control agent occupies a role analogous to a registrar or transfer agent in traditional securities infrastructure, but with additional responsibilities tailored to DLT environments.

The optional character of the model means that issuers who prefer a conventional custodial arrangement, where a licensed bank or securities firm holds and administers the securities, remain free to do so. Early indications suggest that the control‑agent model will be most attractive to firms seeking to reduce intermediation costs, accelerate settlement or offer direct token‑holder access to on‑chain records.

Operational flow: how the control‑agent model works in practice

The operational mechanics of the control‑agent model can be broken down into five stages:

1. Issuance. The issuer creates the dematerialised security as a DLT token. The control agent verifies that the token’s smart contract accurately reflects the legal terms (entitlements, transfer restrictions, corporate‑action mechanics).
2. Registration. The control agent maintains the definitive holdings register on the DLT. This register is the legally binding record of ownership. Off‑chain reconciliation with any parallel records (e.g., commercial register entries for equity) must be completed at defined intervals.
3. Transfer. When a token holder initiates a transfer, the control agent validates the transaction, checking identity (AML/KYC), transfer restrictions (lock‑ups, sanctions screening) and any contractual conditions, before the transfer is confirmed on‑chain.
4. Settlement. The confirmed on‑chain transfer constitutes settlement. The control agent is responsible for ensuring settlement finality: once the transaction is recorded, it is irrevocable and binding on all parties.
5. Ongoing administration. The control agent handles corporate actions (dividends, voting, splits), responds to regulatory inquiries and maintains records for audit and supervisory purposes.

Comparison: control agent vs traditional custodian vs CASP

The likely practical effect of this structure is that control agents will compete with traditional custodians on cost and speed of settlement, while custodians will retain advantages in regulatory familiarity and institutional‑client trust.

Licensing and Regulatory Treatment: TVTG, CASP, Payment Institutions and Control Agents

Decision table, which licence for which activity

One of the most pressing questions for firms considering tokenised securities in Liechtenstein is whether their existing licence covers the planned activity. The FMA has made clear in its published TVTG guidance that the TVTG itself is not part of financial‑market legislation, it creates a stand‑alone registration regime for TT service providers. This means that a TVTG registration alone does not authorise a firm to engage in activities that are regulated under banking, securities or fund‑management law.

FMA supervisory expectations and reporting

The FMA supervises both TVTG‑registered entities and licensed financial institutions. For firms seeking to act as a control agent, the likely supervisory expectations, based on published FMA materials and general financial‑market supervisory standards, include the following:

• Governance. Clear organisational structure; fit‑and‑proper assessment of directors and beneficial owners; documented decision‑making processes for transfer validation and corporate actions.
• AML/CFT. Full compliance with Liechtenstein’s Due Diligence Act (SPG), including customer identification, ongoing monitoring, suspicious‑transaction reporting and sanctions screening.
• IT and cybersecurity. Robust infrastructure meeting FMA expectations for operational resilience, including incident‑response plans, penetration testing and business‑continuity arrangements.
• Outsourcing. If any element of the control‑agent function is outsourced (e.g., smart‑contract development, node operation), the outsourcing must comply with FMA outsourcing guidance, including retention of oversight and regulatory responsibility.
• Reporting. Periodic regulatory reporting, likely aligned with existing financial‑intermediary or TT‑service‑provider reporting cycles, covering transaction volumes, AML incidents and operational‑risk events.

When a new licence or registration is required

A new authorisation is likely required when a firm’s proposed control‑agent activities extend beyond the scope of its existing licence. Industry observers expect the most common trigger to be a TVTG‑registered entity that wishes to maintain the definitive register for instruments qualifying as transferable securities, an activity that may cross into regulated financial‑intermediary territory. The recommended approach is to submit a detailed activity description to the FMA and request a formal classification before commencing operations.

Custody, Settlement and Operational Requirements for DLT Securities

Settlement finality, reconciliation and safekeeping

Securities settlement in Liechtenstein for DLT dematerialised securities centres on the principle that the on‑chain record, once confirmed, constitutes the legally definitive record of ownership. For control agents, this means implementing technical mechanisms that ensure:

• Irrevocability. Once a transfer is confirmed on the DLT, it cannot be reversed except by a new, separately authorised transaction (e.g., court order, error‑correction protocol).
• Reconciliation. Regular reconciliation between the on‑chain register and any off‑chain records (commercial register, issuer records, sub‑custodian accounts), at minimum daily, with real‑time reconciliation as best practice.
• Segregation. Token holdings must be segregated from the control agent’s own assets. This segregation must be legally effective in insolvency, meaning token holders retain their entitlements even if the control agent becomes insolvent.

AML/KYC and CDD changes for tokenised securities

The tokenisation of securities does not reduce AML/KYC obligations; in many cases, it increases them. Control agents must conduct customer due diligence (CDD) on both transferors and transferees for each on‑chain transfer. Where the token incorporates transfer restrictions (e.g., accredited‑investor requirements, jurisdictional limitations), the control agent must enforce those restrictions at the smart‑contract level and maintain auditable records demonstrating compliance.

Firms moving from a traditional securities infrastructure to a DLT‑based model should budget for upgraded transaction‑monitoring systems capable of real‑time sanctions screening against on‑chain addresses, together with enhanced record‑keeping to satisfy the FMA’s expectations under the Due Diligence Act.

IT and security requirements for DLT systems

Control agents and other entities operating DLT infrastructure for dematerialised securities should implement controls including:

• Key management. Separation of hot and cold wallet infrastructure; multi‑signature authorisation for critical operations; hardware security module (HSM) usage for private‑key storage.
• Smart‑contract audit. Independent audit of all smart contracts governing issuance, transfer and corporate‑action mechanics before deployment and after material updates.
• Incident response. Documented incident‑response and disaster‑recovery plans tested at least annually, covering scenarios including chain forks, consensus failures and key compromise.
• Access controls. Role‑based access to administrative functions; logging and monitoring of all privileged operations.

Contracts, Legal Drafting and Standard Clauses for Tokenised Securities in Liechtenstein

Key contract clauses for control‑agent agreements

The contractual framework underpinning a DLT dematerialised securities programme typically involves three core documents: the control‑agent appointment agreement (between issuer and control agent), the token‑holder terms (between issuer and each holder), and any sub‑custody or technology‑services agreement. The following clauses are critical:

Sample clause: transfer finality

The following illustrative clause demonstrates how transfer finality may be drafted in a control‑agent agreement. It should be adapted to the specific DLT protocol and reviewed by qualified Liechtenstein counsel:

“A transfer of Tokens shall be deemed final and irrevocable upon confirmation by the Control Agent that (a) the transaction has been validated in accordance with the applicable smart‑contract logic, (b) all required AML/KYC and transfer‑restriction checks have been satisfied, and (c) the transaction has been recorded on the DLT with a minimum of [number] block confirmations. Upon such confirmation, legal title to the underlying Security shall pass to the transferee, and no party may reverse or contest the transfer except by order of a court of competent jurisdiction or through a separately authorised error‑correction procedure.”

Note: This sample language is provided for illustrative purposes only. Bespoke drafting by qualified counsel is essential, particularly to address the interaction between on‑chain finality and Liechtenstein civil‑law requirements for the transfer of specific instrument types.

Practical Compliance Checklist and Timeline for Adopting the Control‑Agent Model

Firms planning to implement DLT dematerialised securities, whether as issuer, control agent or custodian, should follow a phased timeline. The checklist below is organised by function and suggested implementation period.

Phase 1: Months 0–6, legal mapping and regulatory engagement

• Classify all planned token instruments (security vs non‑security; equity vs debt vs fund unit).
• Map existing licences (TVTG, CASP, banking, payment institution) against target activities.
• Submit a detailed activity description to the FMA for preliminary classification.
• Engage Liechtenstein legal counsel to draft or review control‑agent appointment agreement and token‑holder terms.
• Conduct a gap analysis on AML/KYC systems: can current infrastructure support per‑transfer CDD for on‑chain transactions?

Phase 2: Months 6–12, build‑out and authorisation

• Apply for any required additional authorisation or licence extension with the FMA.
• Procure or build DLT infrastructure meeting FMA IT‑security expectations (key management, smart‑contract audit, incident response).
• Implement reconciliation processes between on‑chain register and off‑chain records.
• Train compliance, operations and IT staff on new workflows and regulatory obligations.
• Finalise and execute contractual documentation (control‑agent agreement, sub‑custody terms, token‑holder terms).

Phase 3: Months 12–24, go‑live and ongoing compliance

• Conduct a pre‑launch review with external auditors and legal counsel.
• Go live with initial tokenised instrument issuance under the control‑agent model.
• Establish periodic reporting to the FMA in line with supervisory expectations.
• Schedule annual smart‑contract audits and penetration tests.
• Monitor regulatory developments: FMA guidance, EEA legislative updates and MiCAR delegated acts may alter requirements.

Firms that have already launched token programmes under the TVTG should be able to compress Phase 1, as much of the legal classification and regulatory engagement groundwork will already be in place. Entirely new market entrants should allow the full 18–24‑month runway.

Frequently Asked Practical Questions

What is the control‑agent model for dematerialised securities and how does it work?

The control agent is an entity that maintains the definitive on‑chain register of holders for a DLT dematerialised security. It validates each transfer by checking AML/KYC compliance and contractual restrictions, confirms the transaction on the DLT, and ensures settlement finality. The model is optional, issuers may use it to reduce intermediation while retaining a legally authoritative record of ownership.

Will tokenised securities on DLT be treated differently after the 2026 reforms?

Yes. The 2026 EEA DLT reforms provide a specific legal framework for treating DLT‑recorded instruments as dematerialised securities under Liechtenstein law. This gives on‑chain records the same legal status as traditional book entries, provided the applicable technical and governance standards are met. Firms that previously operated under the TVTG alone may now need supplementary authorisation.

Does a TVTG, CASP or payment licence cover acting as a control agent?

Not necessarily. The FMA has stated that the TVTG is not part of financial‑market legislation. Acting as a control agent for instruments qualifying as transferable securities may require a financial‑intermediary licence or a supplementary authorisation beyond TVTG registration. A CASP licence under MiCAR covers crypto‑asset services but may not extend to the registrar and settlement functions of a control agent. The recommended step is to submit a detailed service description to the FMA for classification.

What operational controls must a control agent have?

• Daily (ideally real‑time) reconciliation between on‑chain and off‑chain records.
• Cold/hot wallet segregation with HSM‑backed key management.
• Documented incident‑response and disaster‑recovery plans.
• Per‑transfer AML/KYC and sanctions screening.
• Strict segregation of token‑holder assets from the control agent’s own estate.

How should settlement finality be drafted in token transfer clauses?

Settlement finality clauses should define the precise on‑chain event (e.g., a specified number of block confirmations plus control‑agent validation) that constitutes irrevocable transfer of title. The clause should make clear that legal ownership passes at that moment, and that reversal is only possible by court order or a documented error‑correction procedure. Bespoke legal drafting is strongly recommended.

Will using a control agent change insolvency treatment of token holdings?

If properly structured, token holdings maintained by a control agent should be segregated from the agent’s own assets and therefore protected in the event of the control agent’s insolvency. Token holders should retain beneficial ownership, and the contractual framework should include explicit segregation provisions, step‑in rights and transfer mechanisms to a replacement agent. Legal advice specific to the instrument type and Liechtenstein insolvency law is essential.

How long does FMA authorisation typically take, and what are common concerns?

Industry observers indicate that FMA authorisation processes for financial intermediaries and TVTG registrations typically take between three and six months from complete‑application submission, though complex multi‑regime applications may take longer. Common FMA concerns include governance adequacy, beneficial‑owner transparency, AML/CFT system robustness, IT‑security standards, conflicts of interest and outsourcing arrangements.

Conclusion: Navigating the Tokenised Securities Landscape in Liechtenstein

The 2026 EEA DLT reforms represent a meaningful evolution in how tokenised securities in Liechtenstein are classified, issued, held and transferred. The optional control‑agent model offers a streamlined alternative to traditional custodial structures, but it demands rigorous legal, operational and regulatory preparation. Firms should not underestimate the complexity of operating across overlapping regimes, the TVTG, MiCAR and the new dematerialised‑securities framework each carry distinct obligations. Those that invest early in legal classification, FMA engagement, robust contracts and operational infrastructure will be best positioned to capture the commercial advantages that DLT‑based securities issuance offers in one of Europe’s most forward‑looking jurisdictions for digital assets.

Understanding the requirements for a crypto licence and the broader regulatory framework is an essential starting point, alongside exploring how launching a crypto exchange fits within the same ecosystem.

Sources

1. Finanzmarktaufsicht Liechtenstein (FMA), TVTG / Fintech
2. Liechtenstein Finance, Tokenisation as a Key Future Driver
3. Global Legal Insights, Blockchain & Cryptocurrency Laws: Liechtenstein
4. Universität Liechtenstein, Tokenization of Assets: Security Tokens in Liechtenstein and Switzerland
5. LCX, The Liechtenstein Protocol
6. Paragraph 7, Security Token Offering Case Study