To get a token listed on a centralised exchange, you apply to the exchange. It then decides whether to admit the token, using its own review and, more and more often, rules set by a regulator. Under EU law since 30 December 2024, a regulated trading platform must check a token's suitability before admitting it, looking at its technology, any link to fraud, and the track record of the team. A white paper must also have been published where the law requires one. The UK published its final admission and disclosure rules on 30 June 2026, and its new regime is expected to take effect on 25 October 2027. In Hong Kong, a token offered to retail investors still needs a 12-month track record. Exchanges set their fees, timelines and commercial terms themselves, in private, and they do not publish them in a standard form.

What "listing" means
A centralised exchange holds its users' assets and runs an order book that matches buyers and sellers. Listing a token means the exchange opens one or more trading pairs for it. Listing is never automatic. In the regulated markets below, the venue has to run a documented admission process, and the venue answers for that decision.
The usual sequence:
- The project submits an application with documents.
- The exchange runs due diligence on the token, the issuer and the team.
- The exchange's admission function approves the token, rejects it or asks for changes.
- Technical integration is finished and the trading pair opens.
What the regulators require
European Union: MiCA
The Markets in Crypto-Assets Regulation (Regulation (EU) 2023/1114) sets the main rules. Its provisions on crypto-asset service providers and on crypto-assets other than asset-referenced and e-money tokens have applied since 30 December 2024. Firms that were already operating under national law could keep going under a transitional period. That period ended across the EU on 1 July 2026, and some member states ended it sooner. ESMA said in a statement on 17 April 2026 that any service provider without authorisation should have carried out its wind-down plan by that date.
Article 5 (admission to trading). A person seeking admission to trading of a crypto-asset other than an asset-referenced or e-money token must be a legal person. They must draw up a crypto-asset white paper, notify it and publish it, and meet the conduct duties in Article 14. A platform operator can admit a token on its own initiative. If no white paper has been published where one is required, the operator must then meet those requirements itself. Article 5(3) lets the applicant and the operator agree in writing that the operator takes on some or all of these duties, as long as the applicant supplies the information needed.
Article 76 (operating a trading platform). The platform's operating rules must, among other things:
- set approval processes, including customer due diligence in proportion to the money-laundering or terrorist-financing risk
- define any categories of crypto-assets that are not admitted
- set out the policies, procedures and any fees for admission
- set conditions for a token to stay admitted, including liquidity thresholds and periodic disclosure
- set the conditions for suspending trading
The rules must state that a token "is not to be admitted to trading where no corresponding crypto-asset white paper has been published", in cases where the regulation requires one.
Before admission, the operator "shall assess the suitability of the crypto-asset concerned". That assessment covers in particular "the reliability of the technical solutions used", "the potential association to illicit or fraudulent activities", and "the experience, track record and reputation of the issuer" and its development team.
Article 76(3) bars tokens with an inbuilt anonymisation function "unless the holders of those crypto-assets and their transaction history can be identified" by the platform operator.
United Kingdom: FCA admissions and disclosures regime
On 30 June 2026 the Financial Conduct Authority published PS26/9, its final rules on admissions and disclosures (A&D) and on market abuse in cryptoassets (MARC). These rules sit mainly in the CRYPTO 3 and CRYPTO 4 sourcebooks. The FCA's authorisation gateway opened on 30 September 2026. Firms that want to keep operating in the UK should apply by 28 February 2027, and the regime is expected to come into force on 25 October 2027.
Time left until 28 February 2027 · end of day UTC
What matters for a project seeking a listing:
- Responsibility for the qualifying cryptoasset disclosure document (QCDD), and for any supplementary disclosure document, stays with the identified responsible persons. Existing or overseas disclosure material can be reused.
- The final rules dropped a proposed exception. That exception would have allowed a token to be admitted without a QCDD if it was fungible with an asset already admitted on the same platform.
- Platforms serving retail clients must carry out due diligence, publish admission criteria, assess before admission whether a token would harm retail investors, and manage conflicts of interest.
- All UK qualifying cryptoasset trading platforms must prevent, detect and disrupt market abuse. Large platforms, measured by revenue, also have duties to monitor on-chain activity and share information.
- The FCA said it would consult in September 2026 on deferral arrangements for cryptoassets already in circulation.
Hong Kong: SFC rules for licensed trading platforms
Under the Securities and Futures Commission's Guidelines for Virtual Asset Trading Platform Operators (June 2023):
- A platform must do all reasonable due diligence before it admits any token, and must keep checking afterwards that the token still meets its admission criteria.
- Admission decisions go through a token admission and review committee. Its members include senior management responsible for the key business line, compliance, risk management and IT. The committee reports to the board at least monthly and records its decisions and the reasons for them.
- Tokens based on smart contracts need a smart contract audit. The platform can rely on an audit by an independent assessor that a third party engaged, but only if it can show that doing so is reasonable.
- A non-security token must have a track record of at least 12 months.
In circulars dated 3 November 2025, the SFC narrowed that last rule. The 12-month requirement no longer applies to assets offered only to professional investors, but it still applies to retail offerings. Stablecoins issued by issuers licensed by the HKMA are exempt from it for both groups. Platforms must say which professional-only tokens lack a 12-month record and must strengthen the risk disclosures for them.
What reviewers look for
The regulatory tests above amount to a practical checklist. A project that can show each item with documents is in a stronger position anywhere:
- A legal entity. MiCA requires the person seeking admission to be a legal person.
- A disclosure document. That means a MiCA white paper in the EU, or a QCDD in the UK from 2027.
- Technical soundness. Have the contracts independently audited. Hong Kong requires this outright, and MiCA requires the platform to assess how reliable the technology is.
- An identifiable team with a record. MiCA names the issuer's and developers' "experience, track record and reputation".
- No link to fraud. Platforms must consider "potential association to illicit or fraudulent activities".
- Real trading activity. EU platforms must set liquidity thresholds for a token to stay admitted, and UK platforms must monitor for market abuse.
- No built-in anonymisation, unless holders and transaction history can still be identified. This is an EU rule.
Clear tokenomics also help: who holds the supply, and when it unlocks. The legal texts above do not list tokenomics as a statutory test, but reviewers assessing fraud risk and suitability will look at concentrated holdings. Our guides to locked liquidity and rug pulls explain the warning signs they screen for.
Which listing rules apply to your token?
Pick the market whose users you need first, then answer the questions to see the admission rules the article describes for that case.
Which market's users do you need first?
- European Union → next question
- United Kingdom → UK: the FCA regime is expected from 25 October 2027
- Hong Kong → next question
Has a crypto-asset white paper been published for the token, in a case where MiCA requires one?
- Yes, it has been published → EU: the platform still runs a suitability check
- No, not yet → EU: no white paper means no admission
Is the token a stablecoin issued by an issuer licensed by the HKMA?
Will the token be offered to retail investors, or only to professional investors?
- Retail investors → Hong Kong retail: 12-month track record required
- Professional investors only → Hong Kong professional-only: no 12-month requirement
Since 30 December 2024 the platform must assess the token before admission: the reliability of its technology, any potential association to illicit or fraudulent activities, and the experience, track record and reputation of the issuer and its team. The person seeking admission must be a legal person, and tokens with inbuilt anonymisation are barred unless holders and transaction history can be identified.
The platform's rules must state that a token is not admitted where a required white paper has not been published. If the operator admits a token on its own initiative, it must meet those requirements itself, and under Article 5(3) the applicant and operator can agree in writing that the operator takes on some or all of these duties.
PS26/9 was published on 30 June 2026. A qualifying cryptoasset disclosure document (QCDD) is needed, with no exception for tokens fungible with an asset already admitted on the same platform. Platforms serving retail clients must do due diligence, publish admission criteria and assess before admission whether a token would harm retail investors.
Stablecoins issued by HKMA-licensed issuers are exempt from the 12-month requirement for both retail and professional investors. The platform still runs due diligence through its token admission and review committee, and a smart-contract token needs a smart contract audit.
A non-security token offered to retail investors must have a track record of at least 12 months. The platform's token admission and review committee decides, and a smart-contract token needs a smart contract audit.
Since the SFC circulars of 3 November 2025, the 12-month requirement no longer applies to assets offered only to professional investors. Platforms must say which of these tokens lack a 12-month record and strengthen the risk disclosures for them. Due diligence and a smart contract audit for smart-contract tokens still apply.
This covers only the EU, UK and Hong Kong rules described in the article: it does not cover private exchange fees, timelines or practice, or other jurisdictions, and it is not legal advice.
The biggest red flag: manufactured volume
Projects are tempted to make a token look more traded than it is. US enforcement shows where that leads. On 9 October 2024 the US Attorney's Office for the District of Massachusetts announced charges against 18 individuals and entities in "Operation Token Mirrors". They included leaders of four crypto companies and four firms described as market makers. Prosecutors allege that company leaders made false statements about their tokens and paid market makers to carry out wash trades, which created the appearance of trading activity, attracted investors and allowed the defendants to sell at inflated prices.
To gather evidence, the FBI created its own token and company, NexFundAI. Three market makers and their employees are charged with wash trading, or conspiring to wash trade, on NexFundAI's behalf. A fourth firm, its CEO and two directors face charges over a similar scheme. More than $25 million in cryptocurrency was seized, and trading bots linked to wash trades in about 60 cryptocurrencies were shut down. The SEC filed parallel civil complaints. These are allegations, and the defendants are presumed innocent unless proven guilty.
Any market-making contract should therefore be written to provide genuine two-sided liquidity, not volume. Platforms in the EU and UK now have legal duties to detect volume of that kind.
Fees, timelines and "exchange tiers"
Commercial terms are private. Exchanges negotiate listing fees, marketing commitments, deposits and timelines with each project. Under MiCA, an EU platform's operating rules must set out its admission policies and any fees, so an EU applicant can start by reading them. "Tier 1/2/3" is industry shorthand, not a regulatory category. We could not verify the cost and timeline ranges often quoted for each tier against any primary source, so this guide does not repeat them.
A sensible order of work
- Choose the markets whose users you need, and read the rules there: MiCA in the EU, the FCA regime in the UK from 2027, the SFC guidelines in Hong Kong.
- Set up the legal entity and get an independent audit of the contracts.
- Prepare the disclosure document each market requires, or agree in writing with the platform who will prepare it.
- Collect evidence on the team, the product, supply distribution and genuine usage.
- Read each target platform's published admission rules before you apply.
- Choose liquidity providers carefully and keep records that show the trading was genuine.
Limitations: this guide covers only the EU, UK and Hong Kong rules. It does not cover private exchange practice, which is not published, or other jurisdictions, and it is not legal advice.