Tokenisation Ownership Is the FCA's Next Test

Tokenisation ownership is where a fast transfer meets an old, stubborn question: what do you actually own? On 23 September, the UK's Financial Conduct Authority said it intends to consult on safeguarding rules for relevant tokenised investment assets. Its reason was blunt. A new way to hold or transfer an asset cannot leave its owner in doubt. That is a more useful test than another demonstration of a bond moving across a ledger.

A token can travel in seconds. The legal claim attached to it may have to survive a failed custodian, a disputed transfer or an insolvent intermediary. Those are very different clocks. If the person receiving the token cannot say what right they received and who must honour it, the speed is decoration.

A wallet balance is not a title deed

Consider a bond represented on a distributed ledger. A wallet may display a balance and a transaction history. Neither, by itself, tells you whether the holder owns the security directly, has a beneficial interest held through a custodian, or merely has a contractual claim to someone else's version of the bond. The answer comes from the instrument's terms, the register, the custody chain and the law that applies. The screen is evidence of a record. It is not automatically the whole legal story.

This distinction gets lost when a product is described as "backed by" an asset. Backed how? Can the holder demand delivery or redemption? Is the asset segregated? Who keeps the authoritative record when a wallet, registry and custodian disagree? A token can be technically transferable and commercially useless as collateral if the receiving institution cannot rely on the rights behind it. That last point is an inference, not a claim that every tokenised security has this defect.

The FCA and Bank of England received 123 responses to their wholesale tokenisation call for input. In the detailed feedback statement, respondents strongly supported clear, enforceable ownership rights where the way ownership is recorded or transferred changes. Many expected custodians, registrars and central securities depositories to remain important in proving ownership and handling settlement and insolvency. That is hardly a vote for deleting the institutions and hoping a private key will do their job.

Safeguarding is the missing operating manual

The interesting part of the FCA's September speech is the commitment to consult, not the performance of confidence. The regulator has not published the new safeguarding rules yet. Its feedback statement says it plans to consult in the first half of 2027 on relevant specified investment cryptoassets, or RSICs. It also says firms will be assessed under the existing CASS 6 custody rules for now. A planned consultation is not an approved regime, and it should not be sold as one.

The choice under discussion is practical. The FCA's feedback statement says most respondents favoured starting with CASS 6, the framework for traditional investment custody, then adding targeted measures for blockchain-specific risks such as private-key management. It also records a different possible reference point, CASS 17, designed for cryptoasset safeguarding. The FCA did not announce a final choice between those approaches in the speech.

A private key can authorise a transfer, but control of a key is not an answer to every custody question. Who may sign on behalf of an institution? What happens if the key is compromised? How do client positions reconcile with the underlying security register? If a custodian fails, how will someone identify and return the client's property? These are questions a buyer, lender or clearing house has to ask before treating the token as dependable inventory. A clever wallet interface cannot answer them for the legal system.

For builders, that changes the order of work. Write down the chain of title before polishing the transfer animation. Document who is responsible for each record and which record controls when they diverge. Spell out the insolvency route. Then test the transaction flow against the answers. The work sounds less glamorous than issuing a token. It is also the work that lets another institution accept one.

A live sandbox does not remove the ownership test

There is genuine movement beyond PowerPoint. The Bank of England's Digital Securities Sandbox dashboard lists ClearToken CSD Limited as having passed Gate 2 on 18 September. Gate 2 permits live activity under sandbox arrangements; Gate 1 alone does not. That is progress on operating market infrastructure, within conditions and restrictions. It is not a declaration that every token structure now has clear ownership or that every custody model has passed the same test.

The Bank's Gate 2 guidance shows what sits behind that permission. Its review looks at breaches of firm-specific limits, cyber contagion, significant asset losses and disorderly wind-down. Asset segregation appears under the loss risk. The regulator also says a firm may submit an application before its proposed cash-leg solution is final, but it cannot make a Gate 2 decision without enough clarity on that solution. Live rails require answers about failure, not just throughput.

There is a useful tension here. The industry wants to get beyond pilot fatigue, a complaint the FCA recorded in its feedback. But the legal and operational details that make production possible take time to settle. The answer is not to stay forever in a sandbox. It is to distinguish a live, bounded permission from a market-wide rulebook, and to be precise about which risks a particular permission addresses.

This also explains why the settlement bottleneck we wrote about earlier has not vanished. A trade may need a dependable cash leg, a final transfer of securities and an ownership record everyone recognises. Speeding one leg while leaving the others arguable creates a fast dispute. The UK is working through those pieces in parallel. Nobody should read the Gate 2 notice or the safeguarding speech as a universal all-clear.

The diligence questions before the next sale

If someone offers a tokenised bond, fund interest or other investment asset, ask for the terms that connect the token to the underlying right. Then ask who maintains the authoritative register, whether the holder has direct or intermediated ownership, how positions are reconciled and what happens on the failure of the issuer, custodian or platform. Ask which law governs the claim. If the token is meant to move as collateral, ask the receiving party whether it will actually accept it and on what conditions.

That is not a generic anti-tokenisation argument. A clearer ownership chain could make the technology genuinely useful. The FCA's feedback says respondents saw the strongest near-term opportunity in post-trade, particularly moving collateral more efficiently. But collateral only moves efficiently if the receiving side trusts what arrives. Legal rights, safeguarding and interoperability are part of the product, not the paperwork attached afterward.

The FCA and the Bank of England say a joint roadmap with target dates is due later in 2026. The safeguarding consultation is planned for the first half of 2027. Those are the next documents to read before claiming the question has been resolved. Until then, the sharpest test of a token is ordinary and uncomfortable: when the system breaks, who owns the asset, and who can prove it?

For the weekly digest on the decisions behind AI, tokenisation and capital, subscribe by email at Brawlers Guide. One considered read for the next round, without the noise.