ESMA has put digital innovation on its EU-wide supervision list for 2027, with the first work focused on how supervised financial firms use artificial intelligence and tokenisation.
| What you need to know |
|---|
| ESMA will make digital innovation an EU-wide supervisory priority from 2027. |
| The first workstream focuses on supervised firms using AI and tokenisation. |
| The signal is about coordinated oversight, not a new token rule. |
| Crypto firms should map AI use, tokenisation controls and external dependencies. |
A priority, not a new rule
The update matters because it changes where supervisors are asked to look. ESMA said on 23 September that digital innovation will become a Union Strategic Supervisory Priority, or USSP, from 2027. Its first focus will be the use of AI and tokenisation by supervised entities.
That is different from announcing another regulation. A USSP is a coordination tool for supervisors. It tells national authorities where to direct attention, data requests and common supervisory practices when the same risks appear across several markets.
What supervisors will test
ESMA linked the new priority to investor protection, financial stability and orderly markets. For crypto and tokenisation desks, the practical message is that product design will not be the only question. Governance, model controls, client-facing processes and operational dependencies can all become part of the same review when AI or tokenised instruments are involved.
Cointelegraph also highlighted the supervisory angle, noting that the work is expected to push national regulators toward a more common approach. That point is important for firms operating across several EU countries: the risk is less about a sudden ban and more about uneven local expectations narrowing over time.
Why tokenisation belongs in the crypto queue
Tokenisation has moved from pilots to market plumbing. Bonds, funds and settlement experiments increasingly use crypto-style infrastructure without always looking like consumer crypto products. ESMA’s signal places that activity closer to mainstream market supervision, especially where tokenised instruments meet automated processes or AI-supported client tools.
For exchanges, brokers, custodians and issuers, the safer reading is preparation. The 2027 start date gives firms time to map where AI is used, document tokenisation controls and check whether cross-border operations can survive more consistent questions from national supervisors.
The near-term takeaway
The announcement does not rewrite MiCA and it does not make tokenisation illegal or suspect. It does say that the next phase of European oversight is becoming more operational. After the licensing wave, supervisors want a clearer view of how new technology behaves inside regulated firms.
That puts AI and tokenisation in the same queue as cyber resilience: not because every use case is dangerous, but because the failures can spread quickly when models, platforms and market infrastructure become shared dependencies.
Frequently asked questions
Does this create a new EU crypto rule?
No. ESMA is setting a supervisory priority for 2027. It guides supervisory attention rather than creating a separate law.
Why does it matter for tokenisation projects?
Tokenised products can sit inside regulated markets, custody chains and client processes. ESMA is telling supervisors to watch how those systems are controlled.
What should firms do before 2027?
They should map AI use, tokenisation workflows, governance controls and external dependencies before supervisors start asking more consistent questions.
