Tokenised securities are legal or economic claims—such as bonds, equities or fund units—represented and transferred using distributed-ledger technology. They are not automatically cryptocurrencies, and they still require issuers, investor rights, custody, settlement assets, market rules and operational controls. The UK Digital Securities Sandbox temporarily modifies parts of the framework so firms can operate live trading venues and digital securities depositories under limits while regulators learn what a permanent regime needs. Sixteen firms had passed Gate 1 by May 2026. On 13 July, HSBC became the first entrant to pass Gate 2 and provide live DSD services. The government’s Digital Gilt Instrument pilot, DIGIT, is planned by Q1 2027 as a digitally native, short-dated security on HSBC Orion, with an HSBC–LSEG link intended to widen access and support interoperability. The opportunity is programmable, more connected issuance and settlement. The hard problems are legal finality, the cash leg, fragmented ledgers, custody, cyber resilience, liquidity and migration from a sandbox into durable market infrastructure.
Putting a bond on a ledger changes the market workflow, not the need for a bond market. The issuer still owes principal and interest; investors still require disclosure and enforceable ownership; transactions still need cash, finality, custody and controls. Tokenisation matters when it removes reconciliation or enables new functionality across those functions, not when a database receives a fashionable label.
This guide maps the full stack: token, venue, depository, settlement asset, custody and collateral. It explains the Digital Securities Sandbox’s gates, HSBC’s July 2026 approval and the current DIGIT design. Read it beside Kurums’ digital pound and tokenised sterling guide, LSEG infrastructure analysis and UK payment-rails map.
What does the DSS permit?
It lets approved firms conduct live issuance, trading and settlement of digital securities under a temporarily modified framework, staged gates and activity limits.
What is DIGIT?
A planned short-dated, digitally native UK government instrument outside the main DMO issuance programme, intended to test DLT infrastructure by Q1 2027.
What is the hardest dependency?
A tokenised asset needs reliable settlement money, legal finality and interoperable custody. Issuance alone does not create a liquid market.
What is a tokenised security?
A tokenised security is a representation of an asset and its ownership on a distributed ledger. The underlying claim can be familiar: a government or corporate bond, share, money-market instrument or fund unit. The ledger may record issuance, holdings and transfers, and smart contracts can automate selected lifecycle events such as coupon payment instructions or eligibility checks.
Tokenisation does not determine the legal nature of the claim. A token can represent a regulated security, a deposit, a stablecoin, a commodity interest or something with no enforceable backing. Analysis must begin with rights against the issuer, governing law and the authoritative ownership record. Technology is the representation and workflow; it is not a substitute for legal substance.
How is tokenisation different from cryptocurrency?
A public cryptocurrency is generally a native digital asset whose value does not arise from a conventional bond or share. A tokenised bond is a security even if it uses similar cryptographic tools. Tokenised deposits are claims on commercial banks; stablecoins have their own reserve and redemption structures; a digital pound would be central-bank money. Those liabilities are not interchangeable.
The distinction matters for settlement and protection. Delivery of a bond token against a commercial-bank deposit token leaves the investor exposed to the issuing bank until finality. Settlement in central-bank money has a different risk profile. A stablecoin may add programmability but requires confidence in reserves, redemption and regulation. The label ‘on-chain cash’ does not answer who owes the money.
Which functions make up the new market stack?
Issuance creates the security and terms. A trading venue or bilateral process forms the transaction. A depository performs notary, maintenance and settlement functions, keeping the definitive record and moving interests. Custodians or wallet providers control assets for investors. A payment rail moves the cash leg, while reporting, identity, sanctions and tax services surround the transaction.
DLT can combine functions that are separate in conventional markets, but organisational consolidation does not remove conflicts. An operator that controls venue, settlement and custody may simplify reconciliation while gaining powerful control over access and data. The regulatory design must preserve fair markets, asset segregation, resilience and credible recovery even when the technology allows one platform to do more.
What is the Digital Securities Sandbox?
The Bank of England and FCA launched the DSS in September 2024. It allows firms to test and operate financial-market infrastructure for digital securities under a temporarily modified legal and regulatory framework. Activity after the relevant approval is live: real securities and real participants, not a simulation. The sandbox is expected to operate through December 2028 and can be extended by government.
The DSS is also a policymaking mechanism. Regulators can observe how DLT changes trading, settlement and risk, then calibrate a possible permanent regime. It is not an exemption from safety. Entrants remain subject to approval notices, rules, limits and supervision. A successful experiment may inform permanent law; an unsafe model can be restricted or fail to progress.
How do the DSS gates work?
At Gate 1 regulators assess whether a proposal is suitable for the sandbox and issue a Sandbox Approval Notice. The entrant can test and prepare but cannot yet conduct the relevant live depository activity. Gate 2 permits go-live activity under initial limits after the Bank assesses governance, financial resources, technology, cyber, operations and risk controls. Hybrid venue-depository models need both FCA and Bank approval.
Gate 3 is intended for scaling within a controlled path, with further requirements informed by live experience. Gate 4 points toward a possible permanent authorisation category outside the sandbox. Passing one gate does not guarantee the next. The staged approach contains financial-stability exposure while avoiding a cliff edge in which a workable platform reaches the sandbox end without a legal route forward.
Who has progressed—and what changed in July 2026?
The FCA and Bank said in May 2026 that 16 firms had passed the first stage, including established infrastructure groups and newer entrants. On 13 July HSBC Bank plc became the first sandbox entrant to pass Gate 2. Its approval allows live digital-securities-depository services within the permissions and limits in its Sandbox Approval Notice.
The milestone turns the DSS from a pipeline into operational market infrastructure, but it should not be overstated. One approved DSD does not create broad liquidity, universal interoperability or a mature permanent regime. The Bank’s dashboard will show Gate status and limit utilisation as activity develops. Market evaluation should follow actual issuances, investors and settlement performance.
Which assets and limits can the DSS support?
The sandbox can support equities, corporate and government bonds, money-market instruments and fund units, across sterling and foreign currencies within scope. The June 2026 guidance sets per-firm initial go-live ranges for key classes. Examples include at least £600 million of UK government debt, £900 million to £1.5 billion of sterling corporate bonds and £5 billion AUM per sterling money-market fund.
Limits are a financial-stability control, not commercial targets. They constrain the consequences while regulators learn about live systems. A DSD can request an increase where activity justifies it and aggregate sandbox capacity permits. Non-systemic or novel assets may receive specific treatment. Volume outside a firm’s approval would be a control failure even if the underlying security remained economically sound.
What is the DIGIT pilot?
DIGIT is HM Treasury’s Digital Gilt Instrument pilot. It is designed as a short-dated, digitally native UK government security issued on a platform operating inside the DSS, with on-chain settlement. The pilot sits outside the government’s main debt-management programme, so it is an infrastructure experiment rather than a replacement for conventional gilt issuance.
In February 2026 Treasury selected HSBC as platform provider, using HSBC Orion. On 16 July the government said the first transaction would take place by Q1 2027 and that it was preparing for potential further issuances subject to success. The Bank of England intends to work with Treasury on making DIGIT eligible as collateral in its market operations.
Why does the HSBC–LSEG link matter?
HSBC and London Stock Exchange Group signed a memorandum of understanding to build bilateral connectivity between their digital securities depositories. In the planned model, HSBC Orion acts as the issuer DSD while LSEG’s DSD can act on the investor side for settlement and asset servicing. The government also expects a DIGIT listing on the London Stock Exchange main market.
The design addresses a core adoption barrier. Investors should not need a separate closed wallet and operating process for every issuer platform. A depository link can broaden access and reduce fragmentation while allowing different infrastructures to compete. The difficult work lies in identity mapping, message standards, synchronized finality, corporate actions and responsibility when records disagree.
What can settle the cash leg?
A securities transfer needs payment that participants trust. DSS guidance permits forms of commercial-bank money, including tokenised deposits, where requirements are met. The June 2026 update also explains how qualifying stablecoins may be accepted as payment assets. Conventional bank-money and central-bank-money connections remain important, especially for institutions managing liquidity across old and new rails.
Each choice reallocates risk. A tokenised deposit is a claim on its bank; a stablecoin depends on its issuer and reserve framework; central-bank money offers the strongest settlement asset but may require external synchronisation. Participants need redemption, liquidity and contingency plans. If the cash token cannot move during stress, instant securities settlement can become instantly stuck.
How do delivery versus payment and synchronisation work?
Delivery versus payment links the asset and cash transfers so one occurs only if the other does, reducing principal risk. On one ledger, a smart contract may coordinate both legs. Across a DLT platform and conventional payment system, synchronisation services send coordinated instructions and confirm finality. The renewed UK RTGS service provides a foundation for richer interfaces with private infrastructure.
The Bank has committed to target a live synchronisation service for 2028. Until then, individual models must demonstrate how the cash and asset legs remain atomic or otherwise controlled. Fast processing is not the same as legal finality: rules must state exactly when a transfer is irrevocable, how failures unwind and which record prevails during a fork, outage or message mismatch.
What changes for custody and ownership?
Tokens can be held directly by investors or through custodians and nominee structures. Institutional users still need permissioning, asset segregation, key management, valuation, reporting and recovery. A private key may control technical movement without defining beneficial ownership under law. Contract and system design must align the ledger address with the person entitled to the security.
Key loss and unauthorized signing introduce operational risks unfamiliar in form but familiar in substance: assets can be made inaccessible or transferred through compromised credentials. Multi-party controls, hardware security, recovery procedures and auditable role changes are essential. Client-asset rules may need adaptation, but tokenisation does not justify mixing house and client assets or making customers bear unclear technology risk.
Could tokenisation transform collateral?
Collateral is a promising use case because institutions repeatedly identify, value, pledge, move and release high-quality assets across markets. A shared or connected ledger could reduce reconciliation, show availability and mobilise collateral more quickly. The Bank and FCA are working toward accepting tokenised equivalents of already eligible assets at central counterparties and in central-bank operations.
Faster mobility can also accelerate liquidity demands. Smart contracts may call collateral automatically when markets move, giving a firm less time to source cash or assets. Legal enforceability, haircuts, valuation and wrong-way risk remain. A tokenised asset is not automatically high-quality collateral; eligibility follows credit, liquidity and control standards, not the speed at which a token can move.
Where could the economic gains come from?
Potential gains include fewer duplicate records, faster issuance, automated lifecycle events, better intraday visibility and reduced settlement or collateral friction. Smaller issuers might access standard infrastructure more cheaply, while investors could receive near-real-time positions. Programmability can connect payment to delivery, identity or contract conditions and move controls earlier in a workflow.
Benefits must be measured end to end. A faster depository that still requires manual onboarding, off-chain tax calculation and reconciliation with several custodians may merely move cost. Running conventional and DLT systems in parallel can increase expense during transition. The business case should show fewer exceptions, lower capital or liquidity usage, shorter issuance time or genuinely broader distribution—not only transaction speed.
Why are interoperability and standards decisive?
A closed platform can work technically while failing as a market. Issuers, investors, banks and custodians need common identifiers, data models, messaging and legal recognition across ledgers and conventional systems. Cross-border activity adds time zones, currencies and foreign law. The UK’s Wholesale Financial Markets Digital Strategy therefore emphasises sector coordination and interoperability, not one national chain.
Standards also preserve exit. An issuer should be able to migrate records if a provider fails or becomes uneconomic; an investor should not be trapped by a proprietary wallet. The HSBC–LSEG link is an early test of multi-platform design. Its success will depend on live operational evidence and open interfaces, not the memorandum alone.
What are the largest risks?
Operational risks include cyber attack, key compromise, smart-contract error, consensus failure, privacy leakage and dependency on cloud or technology vendors. Market risks include fragmented liquidity and pricing across representations of the same asset. Legal risks include uncertain ownership, insolvency treatment, settlement finality and conflicting records. The cash leg adds bank, stablecoin or liquidity risk.
Governance can be the hardest layer. Code changes, emergency pauses, participant admission and transaction reversal all require accountable decision rights. Regulators must protect stability without freezing an early architecture into permanent law. The sandbox limits losses while learning, but participants should plan now for recovery, portability and an orderly exit if the platform never reaches permanent authorisation.
What should operators watch through 2027?
Track HSBC Orion’s first live DSS activity, limit utilisation and additional Gate 2 approvals. For DIGIT, watch final terms, investor eligibility, LSE listing, the HSBC–LSEG connection, settlement asset, secondary-market activity and collateral treatment. The first issuance by Q1 2027 is a milestone; recurring issuance and active holdings would be stronger evidence of market value.
Also watch the joint Bank–FCA cross-authority roadmap expected in 2026, permanent-regime legislation, tokenised-fund adoption and the 2028 synchronisation-service target. A useful scorecard is simple: legal clarity, live volume, diverse investors, interoperable custody, reliable settlement and measurable cost reduction. Tokenisation succeeds when institutions can use it without treating every transaction as a technology pilot.
Frequently Asked Questions
Are tokenised securities the same as cryptoassets?
No. A tokenised security represents rights such as a bond, share or fund unit. Cryptocurrency may be a native asset with no claim on a conventional issuer.
Is activity in the Digital Securities Sandbox real?
Yes, after Gate 2 approval it can involve live issuance, trading and settlement of real securities, subject to permissions, rules and limits.
Who was the first live DSS depository?
HSBC Bank plc passed Gate 2 on 13 July 2026, becoming the first entrant approved to provide live digital-securities-depository services.
When will DIGIT be issued?
HM Treasury said in July 2026 that the first transaction would take place by Q1 2027 on HSBC Orion, subject to the pilot’s implementation.
Is DIGIT a digital pound?
No. DIGIT is a tokenised government debt instrument. A digital pound would be a form of central-bank money; tokenised deposits are commercial-bank liabilities.
Primary Sources and Further Reading
This guide prioritises regulators, payment-system operators and company filings. Figures are the latest available at the July 2026 review date.
- Bank of England — DSS guidance, updated June 2026
- Bank of England — Digital Securities Sandbox dashboard
- FCA — Digital Securities Sandbox
- FCA and Bank of England — Joint vision for tokenisation
- HM Treasury — DIGIT pilot issuance update, July 2026
- HM Treasury — HSBC selected as DIGIT platform provider
- HM Treasury — Wholesale Financial Markets Digital Strategy
- Bank of England — Growth and regulation speech, July 2026
- Bank of England — Modernising money and markets speech
Discover more from Kurums | Business Intelligence
Subscribe to get the latest posts sent to your email.
