Cyprus MiCA Token Launch 2026: When You Need a White Paper — and When You Don’t

"Do I need a white paper to launch my token?" is now a regulatory question with a precise answer. Since the Markets in Crypto-Assets Regulation became fully applicable across the EU, a token launched from Cyprus is governed by a single directly-applicable EU rulebook — and, since 1 July 2026, crypto-asset services in Cyprus may only be provided under it.Regulation (EU) 2023/1114 (MiCA)

This guide answers the white-paper question directly, then walks through what MiCA Title II actually covers, the offer exemptions, the mandatory content, how you notify the Cyprus Securities and Exchange Commission (CySEC), the withdrawal and liability rules, and how to structure and tax the issuing company. Zeno is not a law firm; it coordinates independent Cyprus Bar advocates and ICPAC-licensed accountants, and the points below are general information, not legal advice on your token.

Do I need a MiCA white paper to launch a token from Cyprus?

Yes — if you make an offer to the public of a crypto-asset (other than an asset-referenced or e-money token) in the EU, or seek its admission to a trading platform, you must draw up, notify and publish a crypto-asset white paper. But an offer that falls within one of the Article 4(2) exemptions — small investor count, small size, qualified investors only, or free — needs no white paper.

Two distinctions decide everything. First, what you are issuing: a plain utility or payment-type token sits in Title II, whereas a token pegged to assets or fiat is an asset-referenced token (ART) or e-money token (EMT) under the far stricter Titles III and IV, which require prior authorisation, not just a white paper.Regulation (EU) 2023/1114 (MiCA), Titles II–IVSecond, how you distribute it: a public offer or a trading-venue listing triggers the white-paper duty, while a genuinely private or exempt offer does not.

What does MiCA Title II actually regulate?

Title II governs offers to the public, and admissions to trading, of crypto-assets that are neither asset-referenced tokens nor e-money tokens. It sets out who may offer, the white-paper obligation, its content, the notification to the competent authority, marketing rules, a retail withdrawal right and civil liability.

The core obligation is in Article 4: a person offering such a crypto-asset to the public in the Union must be a legal person, draw up a white paper, notify it to the competent authority, publish it, and comply with the marketing-communication and honest-conduct rules.Regulation (EU) 2023/1114 (MiCA), Article 4Article 5 extends the white-paper duty to a person seeking admission of the crypto-asset to a trading platform, even where no public offer is made. Crucially, MiCA does notrequire the token itself to be licensed under Title II — that is separate from the CASP authorisation you need if you also run an exchange, custody or brokerage, covered in our CySEC licensing guide.

Which offers are exempt from the white-paper rule?

Article 4(2) exempts several offers from the white-paper duty. The most-used are: an offer to fewer than 150 persons per Member State; a total consideration in the EU not exceeding EUR 1,000,000 over 12 months; an offer addressed solely to qualified investors; and an offer made for free.

Three cautions practitioners repeat. First, the exemptions apply to the white-paperobligation only — the honest, fair and not-misleading marketing rules and the ban on misleading communications still bite on an exempt offer. Second, the EUR 1,000,000 and 150-person limits are cumulative over rolling windows and per Member State respectively, so a pan-EU raise erodes the exemption fast. Third, if you later seek admission to a trading platform, Article 5 revives the white-paper duty regardless of how the initial offer was structured.Regulation (EU) 2023/1114 (MiCA), Articles 4(2) and 5

What must a Cyprus MiCA white paper contain?

The white paper must give a fair, clear and not-misleading account of the offeror, the project and the crypto-asset: the rights and obligations attached to it, the underlying technology, the principal risks, and a prominent statement that no competent authority has approved it. It must include a summary and mandatory statements on climate and environmental impact.

Article 6 fixes the content and form: information on the offeror and any person drawing up the white paper, the crypto-asset project, the offer itself, the crypto-asset and the rights attaching to it, the underlying technology, and the risks — plus the required declarations that the white paper has not been reviewed or approved and that the crypto-asset may lose value.Regulation (EU) 2023/1114 (MiCA), Article 6The document must be drafted in a language accepted by the home Member State authority or in a language customary in international finance, and made available in machine-readable format. Getting the risk and rights sections right is where a Cyprus Bar advocate earns their fee, because the liability regime below turns on exactly these disclosures.

How do you notify CySEC and publish the white paper?

You notify the white paper to your home competent authority — CySEC for a Cyprus issuer — at least 20 working days before publication, together with an explanation of why the token is not an ART or EMT and a list of any host Member States. CySEC does not approve it in advance; the law prohibits prior approval of white papers or their marketing.

Article 8 sets the mechanics: the offeror or person seeking admission notifies the crypto-asset white paper, and any marketing communications, to the competent authority of the home Member State at least 20 working days before the publication date.Regulation (EU) 2023/1114 (MiCA), Article 8Because MiCA forbids competent authorities from requiring prior approval, this is a notification-and-transparency regime, not a prospectus-style clearance. CySEC is the designated competent authority in Cyprus and supervises issuers and CASPs alongside its established investment-firm and fund work.CySEC (competent authority for MiCA in Cyprus)Once notified and published, the white paper and any updates must remain on the offeror’s website for as long as the crypto-assets are held by the public.

What withdrawal rights and liability attach to the offer?

Retail holders who buy a crypto-asset directly from the offeror (or a distributor) get a 14-calendar-day right of withdrawal, without cost or reason, provided the asset is not yet admitted to trading. And the offeror — and its management body — are civilly liable for a white paper that is not complete, fair or clear, or that is misleading.

Article 12 gives that 14-day withdrawal window to retail purchasers where no trading-platform admission has yet occurred, which is why sequencing the offer before any listing is a deliberate design choice.Regulation (EU) 2023/1114 (MiCA), Article 12Article 13 then makes the offeror and the members of its administrative, management or supervisory body liable to a holder who suffers loss because the white-paper information was misleading, inaccurate or inconsistent — a personal-exposure point every founder-director should understand before signing.Regulation (EU) 2023/1114 (MiCA), Article 13

How should you structure the Cyprus issuing entity?

Most EU-facing projects issue through a Cyprus private company limited by shares. That gives you an EU home Member State for the CySEC notification, a legal person as MiCA requires, a 15% corporate tax rate from 2026, and access to the non-dom regime for founders relocating to Cyprus.

MiCA requires the offeror to be a legal person, so the issuing vehicle matters. A Cyprus limited company is straightforward to incorporate — see our step-by-step company registration guide— and can hold the project IP, contract with developers, and act as the named offeror on the white paper. Where the project also runs an exchange, wallet or brokerage, a separate CASP-authorised entity is usually cleaner than mixing issuance and services in one company. Founders relocating to run the project can combine the corporate structure with personal residency planning; our corporate tax guide sets out how issuance revenue is taxed at company level.

How is a Cyprus token issuer and its investors taxed?

A Cyprus issuing company pays the 15% headline corporate income tax from 1 January 2026 on its taxable profits. Cyprus has no general capital gains tax except on Cyprus immovable property, so most token disposals sit outside CGT — but systematic trading profits are taxed as income, and a specific measure taxes certain crypto disposals at a flat rate.

The corporate rate rose to 15% for tax years from 1 January 2026, aligning Cyprus with the OECD global-minimum-tax floor.Income Tax Law N.118(I)/2002 (as amended for 2026); OECD Pillar TwoFor investors, Cyprus levies no wealth, inheritance or gift tax, and gains on the sale of crypto-assets are generally outside the capital gains charge, which is confined to immovable property in Cyprus.Capital Gains Tax Law N.52/1980Where crypto activity is a trade, or where the specific flat-rate crypto measure applies, the profit is taxable — the boundary is fact-specific, so a written opinion from an ICPAC-licensed accountant is essential before you model returns.Income Tax Law N.118(I)/2002, Article 20E (crypto disposals)The whole area is set out in our complete Cyprus tax guide.

What are the most common MiCA token-launch mistakes?

The recurring errors are misclassifying the token, assuming an exemption survives a pan-EU raise, treating notification as approval, and forgetting that a later listing revives the white-paper duty and ends the withdrawal right.

• Wrong token class. A token that references assets or fiat is an ART or EMT under Titles III/IV, needing authorisation, not just a white paper. Classify before you build.
• Over-relying on the EUR 1m / 150-person limits. They are per rolling 12 months and per Member State; a genuine EU-wide public raise usually breaches them.
• Assuming CySEC clears the document. There is no prior approval; the liability sits with the offeror and its directors from day one.
• Ignoring Article 5. Structuring a private offer and then listing on a trading platform brings back the full white-paper obligation.
• Marketing before compliance. The fair, clear and not-misleading rules apply even to exempt offers, and misleading marketing is independently actionable.