Most teams approaching a token offer in the EU assume the MiCA white paper is one document with one process. It is not. There are three token types under MiCA — and each carries a different white-paper regime, a different reviewer, and a different gate before you may publish and offer to the public.
For a plain utility token you draft the white paper, notify your NCA, and self-publish — no prior approval. For an e-money token (EMT) you must already be an authorised issuer and you notify the white paper to your NCA. For an asset-referenced token (ART) the white paper needs prior approval before you can offer at all.
Get the regime wrong and the offer is unlawful — and the white-paper liability sits with the management body of the issuer. This guide is the White Paper Content Map: the nine mandatory parts mapped to MiCA Annexes I–III, the notification-versus-approval rule per token type, and the publication gate that decides when you may go live.
Three Token Types, Three White-Paper Regimes
The Markets in Crypto-Assets Regulation¹[1] divides every in-scope crypto-asset into three legal categories, and the category determines everything that follows. A token that is not an EMT or an ART falls into the catch-all third category — "other" crypto-assets, in practice the utility-token bucket.
An asset-referenced token (ART) references a basket of values — multiple currencies, commodities, or other crypto-assets — to maintain a stable value. Its white-paper regime is the strictest: prior approval by the NCA before any offer, governed by MiCA Title III and Annex II.
An e-money token (EMT) references a single official currency — a euro or dollar stablecoin is the archetype. The issuer must already be an authorised credit institution or e-money institution, and the white paper is notified to the NCA under MiCA Title IV and Annex III — no separate white-paper approval, because the authorisation already sits upstream.
A utility token — "other" crypto-asset under MiCA Title II and Annex I — has the lightest gate: no prior approval, only notification to the NCA. You draft, notify, and may then publish and offer. The trade-off is that the full content and liability burden still applies — a self-published document is not a lighter document.
The White Paper Content Map — Nine Mandatory Parts
Whatever the token type, MiCA Annex I²[2] sets the spine. The white paper has nine mandatory parts, labelled A through I in the Annex, plus a mandatory summary and a series of mandatory statements on the cover. ARTs and EMTs follow the same logic with the extra disclosures of Annex II and Annex III bolted on.
The nine parts in order: (A) the issuer or offeror; (B) the offeror or trading-platform operator where different; (C) the operator of the trading platform; (D) the crypto-asset project; (E) the offer to the public; (F) the rights and obligations attached to the crypto-asset; (G) the underlying technology; (H) the risk factors; and (I) the principal adverse impacts on climate and the environment.
Two cross-cutting rules govern every part. First, the white paper must be fair, clear and not misleading and must not omit information material to assessing the crypto-asset. Second, it must carry a machine-readable summary in non-technical language and a clear warning that it has not been reviewed or approved by any competent authority where that is the case.
The one-line summary: nine mandatory parts (A–I) from Annex I form the spine for every token; ARTs add Annex II, EMTs add Annex III; and a plain-language, machine-readable summary plus the mandatory cover statements sit on top of all of them.
Part A–C: Issuer, Offeror, Trading-Platform Operator
The first three parts answer one question the reader and the NCA care about most: who is responsible. Part A identifies the issuer or offeror — legal name, form, registered address, the date of incorporation, and the identity of the members of the management body.
Part B addresses the offeror where it is a different person from the issuer — common where a foundation issues the token but a separate operating company runs the offer. Part C covers the operator of the trading platform where the white paper is drawn up by that operator because the token is being admitted to trading rather than offered by its issuer.
The practitioner point: MiCA allows a token to be admitted to trading without the issuer ever drafting a white paper, in which case the trading-platform operator must produce one. Parts A–C exist so that the document always names a responsible party, whoever that turns out to be — and that named party inherits the liability in Part 12 of this guide.
Part D–E: The Crypto-Asset Project and the Offer to the Public
Part D — the crypto-asset project — is where the substance of what you are building goes. It covers the project's purpose, the milestones and timeline, the use of proceeds, and the planned application of any funds raised. This is the part most often written like a pitch deck and most often flagged by an NCA for being promotional rather than disclosure-grade.
Part E — the offer to the public — covers the mechanics: whether this is a public offer or an admission to trading, the total number of crypto-assets to be offered, the issue price or method of determining it, the subscription terms, the target jurisdictions, and the time-limited nature of the offer.
Part E is also where the right of withdrawal disclosure lives for retail holders. If the offer has a subscription period, you must describe the 14-day withdrawal window under Article 13 — covered in detail at the publication gate below — because the offer terms and the withdrawal right are read together by the reviewer.
Part F: Rights and Obligations Attached to the Crypto-Asset
Part F is the legal heart of the document. It must set out every right and obligation attached to the crypto-asset — what the holder can do with it, what they are entitled to, and what the issuer is and is not promising. For a utility token this is typically access to a good or service and nothing more.
The disclosure has to be precise about what the token is not. If it confers no claim on the issuer, no redemption right, no profit share, and no governance vote, say so plainly. Silence here is the fastest route to a holder later asserting an implied right the issuer never intended to grant — and to the document being judged misleading by omission.
Part F also captures transferability and any restrictions, the conditions for any modification of holder rights, and — where relevant — the procedure for any redemption or buy-back. For an ART or EMT this part is materially longer, because the redemption right is the core consumer protection of those regimes.
Part G: Underlying Technology
Part G covers the technology behind the crypto-asset: the distributed ledger or protocol used, the consensus mechanism where one exists, the protocols and technical standards applied, and the audit of the underlying smart-contract code where the token relies on one.
The reviewer is not assessing whether the technology is good — they are assessing whether it is accurately and completely disclosed. The most common defect is a Part G that describes an idealised architecture rather than what is actually deployed at the date of publication. Disclose the real, current state, and flag any planned changes as forward-looking.
Part H: Risk Factors
Part H must disclose the material risk factors across four broad axes: risks specific to the offer itself, risks tied to the issuer, risks inherent to the crypto-asset, and risks in the underlying technology.
MiCA expects risk factors to be specific to the token, not generic boilerplate. A copy-pasted list of "crypto is volatile" warnings will be marked down; the reviewer wants the concrete failure modes of this project — key-person dependency, liquidity, smart-contract exploit risk, the consequences if a milestone is missed.
Critically, Part H is the part the civil liability regime bites on hardest. A risk that materialises and was not disclosed — or was disclosed in a way that was incomplete, unfair, or misleading — is the textbook basis for a holder claim under Article 15. Treat Part H as the document's insurance policy, not its disclaimer.
Part I: Sustainability and Principal Adverse Impacts on Climate
Part I is the part teams most often forget exists. MiCA requires every white paper to disclose the principal adverse impacts on the climate and the environment of the consensus mechanism used to issue the crypto-asset, with the detail set by ESMA's technical standards³[3].
The ESMA MiCA implementation work⁴[4] specifies the mandatory sustainability indicators — energy consumption, energy mix, greenhouse-gas emissions, and related metrics — and the presentation format they must take. A token on a low-energy proof-of-stake chain still has to disclose; "negligible" is not a substitute for the prescribed indicators.
The sustainability indicators must also be published on the issuer's website and kept current, not frozen at the date of the white paper. Treat Part I as an ongoing disclosure, not a one-off paragraph.
Utility Token vs EMT vs ART — The White-Paper Regime
For ARTs and significant EMTs the European Banking Authority⁵[5] shares the supervisory picture with ESMA and the NCAs. The table below maps the regime that actually applies to each token type — the reviewer, the gate, and where the liability lands.
White-paper regime by token type — gate, reviewer, timing, and liability under MiCA.
| Dimension | Utility token (Title II) | EMT (Title IV) | ART (Title III) |
|---|---|---|---|
| Annex | Annex I | Annex I + Annex III | Annex I + Annex II |
| Gate before offer | Notification only | Notification (issuer already authorised) | Prior approval of white paper |
| Who reviews | NCA receives notification | NCA of the authorised issuer | NCA grants approval; EBA for significant ARTs |
| Issuer status needed | Legal person / offeror | Credit institution or EMI | Authorised ART issuer or credit institution |
| Timing to publish | After notification, no approval wait | On/after authorisation + notification | Only after white-paper approval |
| Liability | Management body (Art. 15) | Management body of issuer | Management body of issuer |
The Publication Gate: When You May Actually Publish
For a utility token, the gate is the notification to the NCA. You notify the white paper at least a set number of working days before publication; once notified, you may publish and offer. There is no approval to wait for, but the NCA retains the power to require changes or suspend the offer afterwards.
For an ART, the gate is hard: no offer to the public and no admission to trading until the NCA has approved both the authorisation and the white paper. Publishing an ART white paper before approval is itself a breach. The EMT gate sits in between — the white paper is notified, but the upstream EMI or credit-institution authorisation is the real bottleneck.
Then the marketing-communications rule under Article 7⁶[6] applies to everything you say about the offer. Marketing must be fair, clear and not misleading, clearly identifiable as marketing, consistent with the white paper, and must state that a white paper exists with a link to it. You cannot market the offer before the white paper is published.
Finally, the right of withdrawal under Article 13 gives retail holders who buy directly from the issuer or offeror a 14-calendar-day cooling-off period from agreement, with a full refund and no charge. It does not apply where the token is already admitted to trading. The withdrawal right has to be disclosed in the white paper and operable in your offer flow from day one.
White Paper vs Prospectus — What Overlaps, What Is Exempt
A recurring question: is a MiCA white paper just a crypto prospectus? No — and the distinction is jurisdictional, not stylistic. If a token qualifies as a financial instrument under MiFID II, it falls outside MiCA and into the Prospectus Regulation instead. The white paper exists precisely for crypto-assets that are not transferable securities.
The table below maps the two regimes against each other — the approval model, the exemptions, and the overlap — so you can place your token in the right regime before drafting a single page.
MiCA white paper vs a securities prospectus (Prospectus Regulation / MiFID II) — scope, approval, and exemptions.
| Dimension | MiCA white paper | Securities prospectus |
|---|---|---|
| Applies to | Crypto-assets not financial instruments | Transferable securities / MiFID II instruments |
| Prior approval | ART only; utility/EMT notify | Generally requires NCA approval |
| Key exemption | Free / small offers, <150 persons, qualified-investor only | Small offers, qualified investors, listing thresholds |
| Liability anchor | Issuer management body (Art. 15) | Persons responsible for the prospectus |
| Withdrawal right | 14 days, retail, Art. 13 | Withdrawal on supplement, per regime |
| Overlap risk | Token wrongly classed as a security | Security wrongly treated as a crypto-asset |
MiCA also carries its own offer exemptions for utility tokens: a white paper is not required where the offer is free, made to fewer than 150 persons per Member State, solely to qualified investors, or below the small-offer threshold. These mirror the prospectus exemptions but are not identical — confirm the exact MiCA threshold rather than assuming the prospectus carve-out carries over.
Liability for the White Paper — Article 15
MiCA Article 15 sets the civil liability regime for the white paper. Where the document is not complete, fair, clear, or not misleading, a holder who suffers loss as a result can claim damages from the offeror or person seeking admission to trading and the members of its management body.
Two features make this sharper than founders expect. First, the liability cannot be excluded or limited by a disclaimer — a clause purporting to do so has no legal effect. Second, the summary carries its own liability where, read with the rest of the white paper, it is misleading, inaccurate, or inconsistent.
The practical consequence: the named directors of the issuer have personal exposure to claims arising from the document they signed off. That is why the risk-factor section, the technology disclosure, and the rights section deserve legal scrutiny disproportionate to their page count — they are where a misstatement converts into a director liability.
Frequently Asked Questions
Do I need a white paper for a utility token?
Generally yes. A public offer of a utility token in the EU requires a MiCA-compliant white paper drawn up to Annex I and notified to your NCA. You do not need prior approval — but you do need the document. The narrow exceptions are free offers, offers to fewer than 150 persons per Member State, offers solely to qualified investors, or offers below the small-offer threshold.
Who approves a MiCA white paper?
It depends on the token type. A utility-token white paper is not approved — it is notified to the NCA. An ART white paper requires prior NCA approval before any offer, with the EBA involved for significant ARTs. An EMT white paper is notified by an already-authorised issuer, because the authorisation sits upstream of the document.
What's the difference between a white paper and a prospectus?
A white paper governs crypto-assets that are not financial instruments and sits under MiCA. A prospectus governs transferable securities and sits under the Prospectus Regulation and MiFID II. If your token is a security, MiCA does not apply and you need a prospectus instead. The biggest risk is misclassification — a token wrongly treated as a crypto-asset when it is actually a security, or vice versa.
Can I market before the white paper is published?
No. Under MiCA Article 7, marketing communications must be consistent with the white paper and must reference it — which is impossible before it exists and is published. Pre-launch teasers, waitlists, and influencer campaigns that run before publication are a common and avoidable Article 7 breach. Marketing should go live with, or after, the white paper.
Who is liable if the white paper is misleading?
Under Article 15, the offeror and the members of its management body are civilly liable to a holder who suffers loss from an incomplete, unfair, or misleading white paper. The liability cannot be excluded by a disclaimer, and the summary carries its own separate liability where it misleads when read with the full document.
Get the Regime Right Before You Draft a Page
Drafting a MiCA white paper? Finconduit builds the Annex-compliant document, runs the NCA notification or approval, and handles the marketing-communication rules. Book a free white-paper scoping call.
Book AssessmentMiCA Compliance Guide for CASPs: how the white-paper obligation fits inside the wider authorisation and conduct regime.
Issuing an EMT under MiCA Title III: the upstream authorisation that makes the EMT white-paper notification possible.
Issuing an ART under MiCA Title III: the prior-approval pathway that the ART white paper has to clear before any offer.
CASP Transitional Period Calendar: the deadlines that frame when a white paper must be in place to keep offering.
The white paper is not a marketing artefact you bolt on at the end — it is the legal instrument that makes your offer lawful and the document your directors are personally liable for. Classify the token first, map the nine parts to the right Annex, clear the publication gate in the right order, and the marketing follows safely behind. Get the regime right before you draft a page — every other mistake is recoverable; a misclassified, unlawfully-offered token is not.
Footnotes & Citations
Compliance & regulatory advisory
Bespoke MiCA, AML, PSD2, GDPR, DORA programmes. No templates.
OpenToolMiCA Token Classifier
Decision tree ending at EMT, ART, utility, MiFID II, or out-of-scope.
OpenAssessmentFree regulatory bankability assessment
Pre-engagement scorecard with three priority remediation moves. Free.
OpenContinue with related resources
- Operational Frameworks13 min read
The MiCA Market Abuse Regime: Insider Dealing, Manipulation, and Disclosure Obligations for Crypto
MiCA Title VI is the crypto market-abuse regime: insider dealing, manipulation, disclosure and the STOR duty. The obligations and what enforcement looks like.
Read - MiCA & Licensing16 min read
Anatomy of a MiCA Class 3 Supervisory Inspection (2026)
The inspection-readiness map — a phase-by-phase anatomy of what supervisors actually ask during a MiCA Class 3 inspection, with evidence-pack expectations at each phase.
Read - Banking Relationships33 min read
Virtual IBAN Issuance for Non-EU VASPs: The Chain of Liability (2026)
Non-EU VASPs increasingly want to offer their end-customers EU-rail IBANs as a customer-facing product. The architecture relies on an EU sponsor bank and a BaaS aggregator that hold the regulated function. The structural question — and the inspection question — is the chain of liability when an end-customer of a Georgian VASP holds funds in an IBAN issued via a German sponsor bank through a Lithuanian aggregator. Three jurisdictions, three regulators, one customer. This article maps the chain.
Read - Banking Relationships44 min read
The Non-EU VASP Banking Stack: Operating, Issuing, Customer-Facing (2026)
Non-EU VASPs operating from Georgia, Armenia, Cayman, BVI, Seychelles cannot passport into the EEA — yet they routinely need EU/USD payment rails to serve their customers. The architecture that works in 2026 is a three-layer stack with explicit perimeter separation: operating bank for the VASP itself, issuing partner for IBAN/card products, customer-facing safeguarding wrapper. Each layer has its own diligence cycle, sponsor-bank requirements, and supervisory exposure.
Read