Oman -- Securities Classification Regulatory Overview

Oman, through its Capital Market Authority (CMA), has established one of the most comprehensive regulatory frameworks for virtual assets in the Middle East and North Africa (MENA) region. The framework adopts a substance-over-form approach, classifying tokens based on their underlying nature and rights, rather than their technical designation alone.

Regulatory Authority

The primary regulator for virtual assets, especially those classified as securities, is the Capital Market Authority (CMA) of Oman.

Legal Framework

The cornerstone of Oman's virtual asset regulation is the Virtual Asset Regulatory Framework, implemented through CMA Decision No. E/127/2023 on the Regulation of Virtual Asset Service Providers (VASPs), issued in June 2023. This decision provides the regulatory guidelines for various virtual asset activities, including classification, licensing, and oversight.

Classification of Cryptocurrency Tokens as Securities: The Legal Test

Oman does not explicitly adopt the "Howey Test" by name, but its framework implicitly applies a functional approach and a substance-over-form analysis that mirrors the principles of securities law globally. A virtual asset is likely to be classified as a security token if it:

1. Represents an Investment Contract: The primary purpose of the token issuance is to raise capital from investors who contribute funds with the expectation of generating profit or return.
2. Confers Rights Akin to Traditional Securities: The token grants the holder rights typically associated with traditional securities, such as:
   • Ownership or equity rights in an underlying entity or project.
   • Debt claims or entitlement to repayment from an issuer.
   • Rights to share in profits, revenues, or assets of an enterprise.
   • Voting rights or other governance rights in a distributed autonomous organization (DAO) or company.
   • Entitlement to future dividends, interest, or other economic benefits derived from the efforts of others.
3. Expectation of Profit from the Efforts of Others: The token holder expects to derive profit, income, or appreciation in value primarily from the managerial or entrepreneurial efforts of the issuer or a third party, rather than from their own efforts or consumption of a product/service.
4. Transferability: The token is designed to be traded or transferred, indicating its nature as an investment instrument.

Essentially, if a token functions as an investment contract, share, debenture, or other instrument traditionally regulated under Oman's Securities Law, it will be treated as a security token. The CMA's framework distinguishes these from utility tokens (which grant access to a specific product or service) and payment tokens (used primarily as a medium of exchange). However, the CMA reserves the right to re-evaluate the classification based on evolving facts and circumstances.

Which Tokens are Considered Securities

Based on the functional test, the following types of tokens are generally considered securities in Oman:

• Equity Tokens: Tokens representing fractional ownership or shares in a company, granting rights like voting, dividends, or liquidation preferences.
• Debt Tokens: Tokens representing a loan or debt instrument, entitling the holder to interest payments and principal repayment.
• Asset-Backed Tokens: Tokens representing fractional ownership or a claim on tangible (e.g., real estate, commodities, art) or intangible assets, where the token holder's return is tied to the performance of the underlying asset.
• Revenue/Profit-Sharing Tokens: Tokens that grant holders a share of the profits or revenues generated by a project or enterprise.
• Fund Tokens: Tokens representing an interest in a collective investment scheme or fund.
• Tokens from Initial Coin Offerings (ICOs) or Security Token Offerings (STOs): If the primary purpose of the offering is capital raising, and investors expect a financial return based on the efforts of the issuer or others.

Registration/Exemption Requirements for Token Issuers

Issuers of security tokens in Oman must adhere to stringent regulatory requirements from the CMA, similar to those for traditional securities offerings:

1. CMA Approval: Prior approval from the CMA is mandatory for the issuance of security tokens.
2. Prospectus and Disclosure Requirements: Issuers must provide a comprehensive prospectus or offering document, containing detailed information about:
   • The issuer (financials, management, corporate governance).
   • The project or underlying asset.
   • The nature, rights, and risks associated with the security token.
   • Use of proceeds.
   • Audited financial statements.
   • Compliance with Anti-Money Laundering (AML) and Counter-Terrorist Financing (CFT) regulations.
3. Governance and Operational Requirements: Issuers must comply with robust corporate governance, risk management, and cybersecurity standards.
4. Regulatory Sandbox: The CMA operates a Regulatory Sandbox, which token issuers may utilize to test innovative security token offerings in a controlled environment, potentially with tailored or relaxed requirements, before full market launch.
5. Exemptions: Limited exemptions may exist for private placements to sophisticated investors or accredited investors, but these are typically on a case-by-case basis and still require notification or approval from the CMA.

Secondary Trading Rules

Secondary trading of security tokens in Oman is highly regulated to ensure market integrity and investor protection:

• Licensed VASPs Only: Security tokens can only be traded on Virtual Asset Service Providers (VASPs) that are specifically licensed and regulated by the CMA to operate a virtual asset exchange or trading platform.
• Market Integrity: Licensed exchanges must implement measures to prevent market manipulation, ensure fair and orderly trading, and provide transparent pricing.
• Investor Protection: VASPs must have robust mechanisms for safeguarding client assets, managing conflicts of interest, and handling complaints. This includes segregation of client funds and assets.
• AML/CFT Compliance: Exchanges are subject to strict AML/CFT obligations, including customer due diligence (KYC), transaction monitoring, and suspicious activity reporting.
• Real-time Reporting: VASPs are typically required to provide real-time trading data and regular reports to the CMA.

Enforcement Examples

As Oman's Virtual Asset Regulatory Framework, particularly CMA Decision No. E/127/2023, is relatively new (issued in 2023), public enforcement actions specifically targeting the misclassification or illegal issuance of security tokens are not widely publicized at this initial stage.

However, the CMA possesses broad enforcement powers under its existing laws and the new VA framework, which it can and will apply:

• Fines and Penalties: For non-compliance with licensing, disclosure, operational, or AML/CFT requirements.
• Cease and Desist Orders: To halt unauthorized virtual asset offerings or activities, including illegal STOs or operation of unlicensed exchanges.
• Revocation of Licenses: For serious breaches of regulatory requirements by licensed VASPs or issuers.
• Referral for Criminal Prosecution: In cases involving fraud, market manipulation, or severe violations of financial laws.

The CMA's focus is on proactively building a regulated and secure virtual asset ecosystem, and enforcement actions would likely target entities operating outside this framework or engaging in fraudulent activities.

Specific Legislation and Regulatory Guidance URLs

• Capital Market Authority (CMA) Official Website:

  • https://cma.gov.om/

• CMA Regulatory Frameworks / Publications (Arabic): Official documents are typically published here first. You may need to navigate or search for specific decisions.

  • https://cma.gov.om/ar/regulatory-framework

• CMA Decision No. E/127/2023 on the Regulation of Virtual Asset Service Providers: While a direct public English PDF link to the full official decision can be challenging to find immediately on the CMA's main site (as decisions are often published in Arabic first in the official gazette), it is the pivotal legal instrument governing virtual assets. Reputable legal firms and financial news outlets have published summaries and analyses of this decision in English. You would typically access the official version via the Omani Official Gazette or direct request to the CMA if needed.

  • Note: As of current knowledge, a direct, freely accessible English version of the full CMA Decision E/127/2023 on the CMA website is not consistently available. For the most accurate and up-to-date information, consulting the official Arabic text or seeking advice from local legal counsel is recommended.

This framework positions Oman as a forward-thinking jurisdiction aiming to foster innovation in the virtual asset space while ensuring robust investor protection and financial stability.