RWA Tokenization: How SPVs, Custody and Transfer Restrictions Work Together

Introduction: What Does an RWA Token Actually Represent?

An RWA token is a digital representation of rights connected to a real-world asset. Those rights might include shares in a company that owns a property, a debt claim against an issuer, units in a fund, or a contractual entitlement to income.

The distinction matters. Holding a token associated with a building does not automatically make you a registered owner of that building. The legal structure determines what you own, who owes you obligations, and how you can enforce your rights.

To understand how RWA tokenization works, follow three connected layers: the legal arrangement, the safeguarding of assets, and the rules governing token transfers. An SPV may connect investors to the underlying asset. Custody arrangements address how assets and keys are held. Transfer restrictions help keep ownership changes within the permitted investor base.

These layers must remain aligned throughout issuance, trading, distributions and exit. A token balance alone cannot explain the entire investment.

How RWA Tokenization Works: The Three Connected Layers

The Legal Layer: Defining Investor Rights

The legal layer establishes the instrument represented by the token. It identifies the issuer, governing law, investor rights, payment obligations and enforcement procedures. Relevant documents may include constitutional documents, subscription agreements, debt terms, trust deeds and offering materials. They should also explain the relationship between blockchain records and the legally authoritative ownership register. That register may be maintained on-chain, off-chain, or through a legally recognized combination. The Bank of England and FCA distinguish digitally native securities from tokenized representations of interests whose underlying ownership records remain off-ledger. The arrangement must specify which model applies.

The Custody Layer: Holding and Safeguarding Assets

The custody layer addresses where assets are held, who controls them, and what evidence supports investor claims. The answer depends on the asset. Securities may sit in a custody account. Physical commodities may be stored in a vault. Real estate requires valid title, property records and operational management rather than storage in a conventional custody account. Separate arrangements may govern the tokens and their private keys. Safeguarding an underlying asset and securing access to its token are different responsibilities.

The Transfer Layer: Controlling Who Can Hold and Receive Tokens

The transfer layer determines whether a proposed ownership change is permitted. It may combine investor verification, wallet registration, contractual consent, administrator review and smart contract checks. A recipient might need to satisfy eligibility requirements before receiving tokens. The practical test is whether a technically successful transfer also produces the intended legal result.

What Is an SPV in RWA Tokenization?

An SPV, or special purpose vehicle, is a legal entity established for a defined purpose. In RWA tokenization, that purpose may be acquiring an asset, holding a portfolio, or issuing an investment instrument. The SPV provides an identifiable entity through which assets, liabilities and investor rights can be organized. Its usefulness depends on its documents, governance and applicable law.

How an SPV Can Hold Assets or Issue Tokenized Instruments

An SPV can hold an asset directly and issue tokenized equity to investors. Alternatively, it can issue debt used to finance an acquisition. More complex arrangements may separate the asset owner from the token issuer. For example, an issuing entity might hold a loan to another company that owns the property. Investors should trace every step between the token and the underlying asset. Each additional entity introduces another set of obligations, payment flows and potential enforcement questions.

What Token Holders Own: Equity, Debt or Contractual Rights

The token’s label does not determine the investment’s substance.

Asset Segregation and the Limits of Bankruptcy Protection

An SPV may help separate an asset from its sponsor’s other activities. However, separate incorporation does not guarantee that investors will recover their money if a business fails.

The analysis includes whether the asset was validly transferred, whether accounts and records remain separate, what security interests exist, and whether guarantees or other obligations expose the vehicle to outside liabilities.

“Bankruptcy remote” describes a structuring objective. It does not mean bankruptcy proof. Even a properly separated SPV can become insolvent through its own borrowing, expenses, litigation or asset losses.

When a Fund, Trust or Direct Issuance May Be Used Instead

An SPV is one option rather than a universal requirement.

A fund may suit a managed portfolio. A trust may organize legal title and beneficial interests. An existing company may issue tokenized shares or bonds directly.

The appropriate structure depends on the asset, investor base, tax treatment, governance requirements and regulatory framework. Creating an extra entity is useful only when it serves a clear purpose.

How Custody Works for Tokenized Real-World Assets

Underlying Asset Custody vs. Token and Private-Key Custody

Underlying asset custody concerns the assets supporting the investment. Token custody concerns control over the digital instrument and the keys needed to transact.

An investor might hold tokens in a personal wallet while a professional custodian holds the underlying securities. Alternatively, a platform might control investor wallets while a separate SPV holds the underlying asset.

Self-custody of tokens therefore does not eliminate reliance on issuers, asset holders or service providers.

The Roles of Custodians, Administrators and Asset Servicers

These roles should be identified separately:

• Custodians safeguard assets within their contractual and regulatory mandate.
• Administrators may maintain investor records, calculate valuations and coordinate reporting.
• Asset servicers handle activities such as loan collections, property operations or income processing.
• Registrars or transfer agents may maintain ownership records and process permitted ownership changes.

One organization may perform several functions. The documents should still allocate responsibility for each function and explain how a replacement provider can take over.

Segregation, Reconciliation and Asset Verification

A sound operating model needs evidence that the assets exist, belong to the relevant structure, and support the rights issued to investors.

Reconciliation should connect asset records, liabilities, investor entitlements and token supply. For an equity structure, this includes checking that issued tokens correspond to the relevant share class. For debt, it includes matching outstanding tokens to the issuer’s debt obligations.

Verification must also address liens, pledges and other encumbrances. A document showing that an asset exists does not establish that investors have an unencumbered claim to it.

What Happens If a Custodian Fails?

The outcome depends on applicable insolvency law, account structure, legal ownership, record quality and the custody agreement.

Questions include whether assets can be identified and returned, whether a shortfall exists, whether subcustodians are involved, and how a replacement provider gains access.

Underlying assets and digital keys may require separate recovery procedures. Even when ownership is protected, access and distributions can be delayed while records are verified.

Why RWA Tokens Have Transfer Restrictions

Tokenization does not remove restrictions attached to an investment instrument. For example, the SEC explains that securities issued through private offerings may have resale limitations and may not be freely tradable. This is a US example; other jurisdictions apply their own frameworks.

Investor Eligibility, KYC and Wallet Allowlisting

An offering may limit participation to specified investor categories. Onboarding can include identity verification, beneficial ownership checks and assessment of the investor’s eligibility.

Wallet allowlisting connects an approved investor to an authorized blockchain address. It does not replace the underlying checks.

The process also needs to handle changing circumstances, including expired credentials, new wallets and changes in beneficial ownership.

Jurisdictional Restrictions and Holding Periods

An offering may restrict participation or resale based on jurisdiction. Some instruments also carry holding periods or require a permitted resale route.

These conditions are specific to the instrument and transaction. There is no single holding period that applies to every RWA token.

The relevant analysis can include the seller, buyer, offering exemption, transaction location and applicable resale rules.

Ownership Limits and Offering-Specific Rules

Additional conditions may include maximum holdings, limits on investor numbers, minimum transfer amounts or requirements for issuer consent.

Where a rule applies to a person’s aggregate holdings, checking each wallet independently may be insufficient. An investor using multiple addresses should not be able to bypass an ownership limit simply by splitting tokens across wallets.

How Smart Contracts Enforce Transfer Conditions

Smart contracts can reject transfers when programmed conditions are not met. They may check an approved recipient registry, frozen balances or offering-specific limits.

ERC-3643 provides interfaces for identity-based eligibility and compliance checks. Its specification distinguishes recipient verification from broader transfer-rule checks. It also provides administrative functions, including recovery, freezing and forced transfers. The treatment of these functions differs from ordinary transfers, making privileged access an important review point.

Code can enforce configured conditions. It cannot independently determine whether legal advice is correct or external identity information remains accurate.

How SPVs, Custody and Transfer Restrictions Work Together

Asset Acquisition and Legal Structuring

The process starts by defining the investment rights and establishing how the asset will be acquired or financed.

Before issuance, the structure should identify the asset owner, issuer, relevant accounts, service providers and enforcement arrangements. Any conditions that must be satisfied before investor funds are released should be explicit.

Investor Onboarding and Token Issuance

Investors complete the required checks and sign subscription documents. Approved wallets are linked to their records.

Issuance then follows the agreed closing process: funds are received or committed, legal interests are created, and tokens are allocated. The sequence needs controls against issuing unsupported interests or accepting funds without completing the corresponding allocation.

Secondary Transfers and Ownership Record Updates

A secondary transfer requires more than finding a buyer. The buyer must qualify, the transaction must be permitted, and the ownership records must reflect the completed transfer.

Where a separate register is authoritative, the workflow should define when legal ownership changes and how failed or delayed updates are resolved. It should also coordinate payment with delivery.

Income Distributions and Corporate Actions

Income follows the instrument’s legal terms. It may depend on operating expenses, debt service, reserves, fees and distribution approvals.

The administrator identifies eligible holders at the relevant record date and applies the distribution rules. Payment may occur through bank transfers or supported digital settlement assets.

Voting, amendments, refinancing and other corporate actions require the same connection between legal authority and the tokenholder record.

Redemption, Token Burning and Cash Settlement

Redemption is available only where the instrument’s terms provide it. A property-backed investment may offer an exit after an asset sale rather than continuous redemption.

The process should coordinate valuation, approval, payment and token cancellation. Burning a token does not itself transfer cash or settle an obligation.

The terms should explain when the investor’s rights end and what happens if payment fails after tokens have been locked or cancelled.

Example: A Tokenized Real Estate SPV from Issuance to Exit

Consider a hypothetical SPV that acquires a rental property for $2 million. To keep the example simple, assume no acquisition debt and that transaction costs and reserves are funded separately.

The SPV issues 20,000 tokens at $100 each. Each token represents one share in a single class with equal economic rights. All shares in that class are represented by those tokens.

An investor purchases 200 tokens for $20,000 and holds 1% of the class. The investor owns shares in the SPV; the SPV holds title to the property.

The lifecycle works as follows:

1. Acquisition: The SPV completes the purchase, with title and transaction records verified.
2. Issuance: Investors complete onboarding, subscribe for shares and receive tokens in approved wallets.
3. Operations: A property manager collects rent and pays operating costs.
4. Distributions: If $100,000 is available and approved for distribution to the class, the investor’s allocation is $1,000 before investor-specific taxes or deductions.
5. Secondary sale: The investor can transfer shares only through a permitted process to an eligible buyer, with the required ownership records updated.
6. Exit: The SPV sells the property, pays outstanding liabilities and expenses, and distributes the residual proceeds according to its documents. Tokens are cancelled as the corresponding interests are extinguished.

Neither the original $100 token price nor a later property valuation guarantees the investor’s exit proceeds. The result depends on actual cash flows, liabilities and sale terms.

What Can Go Wrong Between the Legal and On-Chain Layers?

Token Transfers That Do Not Update the Authoritative Register

A blockchain may show one holder while the legally authoritative register shows another.

That mismatch can create disputes over distributions, voting and subsequent transfers. The structure needs clear rules for transaction effectiveness, reconciliation and corrections.

Missing, Encumbered or Incorrectly Reported Assets

Tokens can continue circulating even when supporting information is incomplete or wrong.

An asset may be subject to undisclosed security interests, cash may have been withdrawn, or a receivable may have deteriorated. Publishing a token supply or a hash of a report does not establish asset ownership, recoverability or value.

Lost Keys, Frozen Wallets and Administrative Controls

Lost keys can prevent an investor from moving tokens. Recovery procedures may restore access, but they need reliable identity verification and a legal basis.

Administrative powers introduce another dependency: whoever can freeze, recover, mint or forcibly transfer tokens can materially affect investors. Review who holds those permissions, how actions are approved, and how errors or compromised credentials are handled.

Restricted Transfers and Limited Exit Options

Permission to transfer does not ensure an executable sale. An investor still needs an eligible buyer, an acceptable price and a functioning settlement process.

The SEC’s investor guidance highlights that private placements can be highly illiquid and may need to be held indefinitely. Tokenized instruments issued through comparable private structures should be evaluated with that possibility in mind.

What to Check Before Investing in or Launching an RWA Token

The review should follow the complete chain from investor rights to asset ownership and exit.

‍

Can records and operations move to replacement providers?

For issuers, these questions should be answered before selecting a token standard. The technology should implement the legal and operational design.

The BIS similarly emphasizes that potential efficiency gains from tokenization depend on sound governance and risk management.

Frequently Asked Questions

Conclusion Evaluating the Entire RWA Structure

RWA tokenization works through a connection between enforceable rights, identifiable assets and controlled ownership transfers.

An SPV can organize the investment. Custody arrangements can safeguard assets and keys. Transfer controls can implement conditions on who may receive tokens. Their value depends on how consistently they operate together.

Before evaluating the token, establish what the holder owns, where the assets sit, which records govern ownership and how the investment ends. Those answers reveal the substance of the RWA structure.

‍