The idea sounds compelling: issue a token, back it with equity in a portfolio of startups, let people trade it. A liquid venture portfolio, tokenised, on a blockchain. It's the kind of thing that sounds like the future when you describe it at a pitch event. It's also, in regulatory terms, a security — and ignoring that distinction is one of the fastest routes to an enforcement action.
What makes something a security
The specifics vary by jurisdiction, but the principle is consistent: if someone invests money into a common enterprise and expects profits from the efforts of others, they're buying a security. A token whose value is tied to the performance of startup equity held by an incubator meets every part of that test.
Calling it a 'utility token' or a 'community token' doesn't change what it is. Regulators look at economic substance, not labels.
Why this matters in the UAE
The UAE has one of the most developed virtual-asset frameworks in the region. VARA in Dubai, the ADGM's FSRA in Abu Dhabi, and the SCA at federal level all have views on tokens, and none of them treat an equity-backed token as a simple utility. Issuing one without the correct licence, disclosure and investor protections is a sanctionable activity.
The compliant route
The good news is that a compliant path exists. It looks like this:
- Wrap the equity portfolio in a regulated fund or SPV in ADGM or DIFC
- Issue tokens representing units or shares in that vehicle — a security token offering
- Do it under the appropriate licence (VARA, FSRA, or DFSA depending on where the entity sits)
- With proper disclosure documents, KYC/AML, and — typically — accredited-investor gating
- Token value is then genuinely and defensibly linked to the NAV of the underlying equity
This is slower and more expensive than a 'coin launch'. It's also the only version that doesn't eventually require a lawyer for the wrong reasons.
Two tokens, kept apart
If you want a token used inside the ecosystem — for rewards, event access, community status — that's a different thing entirely. A closed-loop utility token or points system has far simpler requirements because no one is buying it as an investment.
The mistake is conflating the two. A community points token and an equity-backed security token can coexist, but they must be structurally and legally separate.
Ambition and compliance, in that order. Not because the rules are the point, but because a token that gets shut down helps nobody.