Token classification determines everything from fundraising strategy to exchange listings and regulatory obligations. This guide covers the security token vs. utility token distinction, the Howey Test, and classification frameworks across the US, EU, Singapore, and Switzerland.
Token classification is the single most consequential legal determination a Web3 project makes, because it dictates which regulations apply to your token sale, ongoing trading, holder rights, and service provider obligations across every jurisdiction where the token is available. In the simplest terms, tokens are classified into three primary categories: security tokens that represent investment contracts and fall under securities law, utility tokens that provide access to a product or service and face lighter regulation, and payment tokens (or exchange tokens) that function as a medium of exchange and are subject to money transmission and payment services rules. However, the reality is far more nuanced — the same token can be classified differently across jurisdictions, a utility token can become a security if marketed incorrectly, and hybrid tokens that exhibit characteristics of multiple categories create ongoing compliance challenges.
As of 2026, approximately have undergone formal classification analysis before launch, up from just 23% in 2021, according to data from Chainalysis. This guide provides the frameworks, tests, and practical decision trees you need to classify your token correctly and structure your accordingly.
Token classification determines everything from fundraising strategy to exchange listings and regulatory obligations. This guide covers the security token vs. utility token distinction, the Howey Test, and classification frameworks across the US, EU, Singapore, and Switzerland.
Token classification is the single most consequential legal determination a Web3 project makes, because it dictates which regulations apply to your token sale, ongoing trading, holder rights, and service provider obligations across every jurisdiction where the token is available. In the simplest terms, tokens are classified into three primary categories: security tokens that represent investment contracts and fall under securities law, utility tokens that provide access to a product or service and face lighter regulation, and payment tokens (or exchange tokens) that function as a medium of exchange and are subject to money transmission and payment services rules. However, the reality is far more nuanced — the same token can be classified differently across jurisdictions, a utility token can become a security if marketed incorrectly, and hybrid tokens that exhibit characteristics of multiple categories create ongoing compliance challenges.
As of 2026, approximately have undergone formal classification analysis before launch, up from just 23% in 2021, according to data from Chainalysis. This guide provides the frameworks, tests, and practical decision trees you need to classify your token correctly and structure your accordingly.
A security token represents an investment in an external enterprise, giving holders rights to profits, dividends, revenue shares, governance over treasury assets, or ownership stakes. Security tokens are subject to the full weight of securities regulation, including:
•Registration requirements — Must be registered with relevant regulators (SEC in the US, prospectus under EU Prospectus Regulation) or qualify for an exemption
•Investor accreditation — Often restricted to accredited or qualified investors
•Exchange restrictions — Can only trade on regulated securities exchanges or alternative trading systems (ATS)
•Ongoing disclosure — Issuers must provide regular financial reporting
•Transfer restrictions — May include lock-up periods, transfer agent requirements, and KYC on secondary transfers
Examples of security tokens:
•Tokenized equity (shares represented on-chain)
•Revenue-sharing tokens
•Tokenized real estate investment trusts (REITs)
•Tokens with explicit profit-sharing mechanisms
•Tokens sold primarily as investment opportunities
The security token market reached approximately $15 billion in total value locked across platforms like Securitize, Polymath, and tZERO by the end of 2025, according to Security Token Advisors.
Utility Tokens
A utility token provides access to a specific product, service, or functionality within a blockchain ecosystem. When properly structured and distributed, utility tokens face lighter regulatory requirements because they are not considered investment contracts.
Key characteristics of a genuine utility token:
•Provides actual, current functionality (not just future promises)
•The network or platform is operational at the time of distribution
•Token demand is driven by usage, not speculation
•Marketing emphasizes utility, not investment returns
•Token holders do not receive profits, dividends, or revenue shares
Examples of utility tokens:
•Filecoin (FIL) — pays for decentralized file storage
•Chainlink (LINK) — pays oracle node operators for data feeds
•Basic Attention Token (BAT) — used within the Brave browser advertising ecosystem
•Helium (HNT) — rewards for providing wireless coverage and data transfer fees
Important caveat: A token labeled "utility" does not automatically escape securities classification. Regulators look at substance over form — how the token is sold, marketed, and what reasonable purchasers expect matters more than what the issuer calls it.
Payment Tokens (Exchange Tokens)
Payment tokens are designed to function as a medium of exchange, store of value, or unit of account. They do not provide access to a specific platform and do not represent investment contracts.
Regulatory treatment varies significantly:
•United States: Generally not securities, but subject to money transmission laws (FinCEN), state money transmitter licensing, and Bank Secrecy Act compliance
•European Union: Under MiCA, payment tokens classified as e-money tokens (EMTs) face strict regulation including 1:1 reserve backing
•United Kingdom: "Exchange tokens" like Bitcoin are not regulated as financial instruments but are subject to AML requirements
•Japan: "Crypto-assets" under the Payment Services Act require registration
Examples:
•Bitcoin (BTC)
•Litecoin (LTC)
•Stablecoins (USDC, USDT, DAI) — though stablecoins increasingly face specific regulation
The Howey Test: The US Framework
The Howey Test is the foundational framework for determining whether a token is a security under US federal law. Derived from the 1946 Supreme Court case SEC v. W.J. Howey Co., it establishes that an instrument is an "investment contract" (and therefore a security) if it involves:
•An investment of money — The purchaser pays money or other valuable consideration
•In a common enterprise — The fortunes of investors are tied together or to the efforts of the promoter
•With a reasonable expectation of profits — The purchaser expects to profit from the investment
•Derived from the efforts of others — The expected profits come primarily from the managerial efforts of the issuer or a third party
Applying the Howey Test to Crypto Tokens
Howey Prong
How It Applies to Tokens
What Regulators Look At
Investment of money
Any value exchanged for tokens (fiat, ETH, BTC, time)
Token sale structure, price paid, consideration type
Common enterprise
All token holders share in project success/failure
Pool of funds, shared outcomes, horizontal commonality
Expectation of profits
Purchasers expect token value to appreciate
Marketing materials, social media, price discussions
Efforts of others
Core team drives value through development
Degree of decentralization, reliance on founding team
The fourth prong — "efforts of others" — is where most token classification battles are fought. The more a project is decentralized and community-driven, the stronger the argument that token value is not derived from a single team's efforts.
The SEC's Framework for Digital Assets (2019)
In April 2019, the SEC's Strategic Hub for Innovation and Financial Technology published a framework expanding on the Howey Test for digital assets. Key factors include:
Factors suggesting a security:
•An identifiable active participant (AP) whose efforts are essential to the token's value
•Token is marketed with emphasis on future value or returns
•Proceeds are used to develop the network
•Token is offered broadly rather than to likely users
•Token has limited current functionality
•Trading on secondary markets is emphasized
Factors suggesting NOT a security:
•The network is fully functional at the time of token distribution
•Tokens are designed and marketed for consumptive use
•Token value correlates with usage, not speculation
•Token holders can immediately use the token for its intended purpose
•Tokens are distributed in amounts consistent with usage, not investment
The Hinman Speech and "Sufficient Decentralization"
In June 2018, then-SEC Director William Hinman suggested that a token could initially be offered as a security but later cease to be one if the network becomes "sufficiently decentralized." This concept — while not formal SEC policy — has been influential:
"If the network on which the token or coin is to function is sufficiently decentralized — where purchasers would no longer reasonably expect a person or group to carry out essential managerial or entrepreneurial efforts — the assets may not represent an investment contract."
This has led to the concept of progressive decentralization, where projects:
•Raise initial capital under securities exemptions (e.g., Regulation D, Regulation S)
•Build the network and develop the technology
•Gradually decentralize governance and operations
•Argue that the token is no longer a security once sufficiently decentralized
However, the SEC has not formally endorsed this pathway, and projects relying on it should do so with qualified legal counsel.
The EU Framework Under MiCA
The EU takes a fundamentally different approach through MiCA regulation. Rather than applying a single test like Howey, MiCA creates distinct regulatory categories:
MiCA Category
Definition
Closest US Equivalent
Key Requirements
Asset-Referenced Token (ART)
Stable value referencing multiple assets
No direct equivalent
EBA authorization, reserves
E-Money Token (EMT)
Single fiat currency reference
State-regulated stablecoin
E-money license, 1:1 backing
Other Crypto-Asset
Everything else not a financial instrument
Utility token (if not a security)
White paper notification
Financial Instrument
Qualifies under MiFID II
Security
Full securities regulation
Critical distinction: MiCA only applies to tokens that are NOT financial instruments under MiFID II. If a token qualifies as a transferable security, structured deposit, or unit in a collective investment scheme, EU securities regulation applies instead of MiCA.
The MiFID II classification test looks at whether the token:
•Represents ownership of an entity
•Confers a claim against the issuer equivalent to a bond
•Represents a right to acquire a transferable security
•Represents a unit in a collective investment undertaking
The Swiss FINMA Framework
Switzerland's FINMA ICO Guidelines (updated 2019) provide one of the clearest token classification frameworks globally:
FINMA Category
Description
Regulatory Treatment
Payment Token
Accepted as means of payment or value transfer
Anti-money laundering regulation
Utility Token
Provides digital access to an application or service
Generally not securities (if functional at issuance)
Asset Token
Represents assets such as debt, equity, or claims
Securities regulation applies
Hybrid Token
Combines characteristics of multiple categories
Subject to all applicable regulations cumulatively
Switzerland's framework is notable for its explicit recognition of hybrid tokens and its relatively clear safe harbor for genuine utility tokens. This has made Switzerland a popular incorporation jurisdiction for token projects, particularly through the canton of Zug (Crypto Valley).
The Singapore MAS Framework
The Monetary Authority of Singapore (MAS) classifies tokens under the Payment Services Act 2019 and the Securities and Futures Act:
•Digital Payment Tokens (DPTs): Tokens used as a medium of exchange, subject to licensing under the Payment Services Act. Examples: BTC, ETH.
•Capital Markets Products (CMPs): Tokens that are securities, units in collective investment schemes, or derivatives. Subject to the Securities and Futures Act.
•E-money: Digitally stored monetary value. Subject to the Payment Services Act.
•Utility tokens with no capital markets features: Generally not regulated, though AML requirements may apply.
MAS has been pragmatic in its approach, providing project-specific guidance through its regulatory sandbox and direct consultations.
Classification Decision Framework
Use this step-by-step process to guide your token classification analysis:
Step 1: Does the token represent a traditional financial instrument?
If the token represents equity, debt, derivatives, or units in a fund, it is almost certainly a security/financial instrument globally. Full securities regulation applies. Consult legal partners specialized in securities law.
Step 2: Is the token designed as a medium of exchange?
If yes, it is likely a payment token. Key regulatory concerns: money transmission licensing, AML/KYC, and (in the EU) potential EMT classification under MiCA.
Step 3: Does the token provide genuine utility?
If the token grants access to a product, service, or platform that is currently functional:
•US: Analyze under Howey Test — focus on marketing, buyer expectations, and degree of decentralization
•EU: Likely "other crypto-asset" under MiCA if not a financial instrument
•Switzerland: Utility token with lighter regulation
•Singapore: Generally unregulated if no capital markets features
Step 4: How was the token distributed?
The distribution method matters enormously:
Distribution Method
Classification Risk
Notes
ICO/IDO to public
High security risk (US)
Broad marketing to speculators increases Howey risk
Private sale to investors
Likely security
Use Reg D/Reg S exemptions, SAFT agreements
Airdrop to users
Lower risk
But must be genuinely free (no purchase required)
Mining/staking rewards
Generally not securities
Created through protocol participation
Platform usage rewards
Lower risk
Earned through consumptive use
Employee grants
May be securities
But exemptions available under Rule 701
Step 5: How is the token marketed?
Marketing is where many projects go wrong. Even a legitimately structured utility token can be reclassified as a security based on how it is promoted:
Safe marketing language:
•"Use tokens to access platform features"
•"Tokens are required to participate in the network"
•"Earn tokens by contributing to the ecosystem"
Dangerous marketing language:
•"Token value is expected to increase"
•"Early buyers will benefit from future growth"
•"Limited supply means great investment potential"
•"Our team will drive token appreciation"
The SAFT Framework and Its Evolution
The Simple Agreement for Future Tokens (SAFT) was designed to allow projects to raise funds legally by selling investment contracts (securities) to accredited investors, with tokens delivered once the network is functional and the tokens qualify as utility tokens.
SAFT structure:
•Project sells SAFTs to accredited investors under Regulation D (private placement exemption)
•Proceeds fund network development
•Once the network launches, SAFTs convert into tokens
•The delivered tokens (now functional utility tokens) are argued to not be securities
Criticism and current status:
•The SEC has never formally endorsed the SAFT framework
•Several SAFT issuers have faced enforcement actions (e.g., Telegram/TON)
•The "transformation thesis" (token starts as security, becomes utility) remains legally untested in favorable precedent
•Modified approaches like the SAFTE (Simple Agreement for Future Tokens or Equity) provide equity fallback
Governance tokens present one of the most challenging classification problems. Tokens that grant voting rights over a protocol's parameters, treasury, or upgrade path can exhibit characteristics of both utility tokens (they have a function: governance) and security tokens (holders may expect financial returns from treasury management).
Arguments for governance tokens being securities:
•Holders expect the protocol to generate fees that accrue value to the token
•Governance rights over a treasury are analogous to shareholder rights
•Token buybacks or fee distribution create clear profit expectations
•Marketing often emphasizes token value appreciation
Arguments against:
•Governance is a functional utility (voting, proposing, delegating)
•No centralized entity is creating profit for holders
•Value comes from decentralized community decisions, not a management team
•Many governance tokens have been operating for years without SEC action
Practical guidance:
•Minimize revenue-sharing or buyback mechanisms that look like dividends
•Emphasize the governance function in all communications
•Ensure governance is genuinely decentralized, not controlled by the founding team
•Consider progressive decentralization with clear milestones
•Review your tokenomics with legal advisors before launch
NFTs and Token Classification
Non-fungible tokens generally fall outside traditional token classification frameworks because they represent unique items rather than fungible financial instruments. However, certain NFT structures raise classification concerns:
NFT Type
Classification Risk
Rationale
Art/Collectible (1-of-1)
Low
Unique item, no common enterprise
PFP collection (10K)
Low-Medium
Large collections may look fungible
Fractional NFTs
High
Pooled investment in an asset
Revenue-sharing NFTs
High
Investment contract characteristics
NFTs with staking yields
Medium-High
Expectation of profits from efforts of others
Gaming utility NFTs
Low
Consumptive use within a game
The SEC has signaled interest in fractionalized NFTs and NFT projects marketed as investments. The landmark Impact Theory settlement (August 2023) established that NFTs promoted as investments can be classified as securities.
Cross-Jurisdictional Classification Comparison
Token Feature
United States
European Union (MiCA)
Switzerland (FINMA)
Singapore (MAS)
United Kingdom (FCA)
Pure utility token
Not a security if Howey not met
"Other crypto-asset"
Utility token
Not regulated
Generally unregulated
Equity token
Security (Securities Act)
Financial instrument (MiFID II)
Asset token
Capital markets product
Security
Stablecoin (USD-backed)
State money transmission + potential security
E-Money Token
Payment token
Digital payment token
E-money or stablecoin regime
Governance token
Gray area (case-by-case)
Depends on features
Hybrid analysis
Depends on features
Case-by-case
Revenue-share token
Likely security
Likely financial instrument
Asset token
Likely CMP
Likely security
Airdropped token
Lower risk if genuinely free
White paper may still be required
Depends on function
Generally not regulated
Depends on features
Practical Steps for Token Issuers
1. Engage Legal Counsel Early
Token classification should be determined before tokenomics are finalized, not after. The classification drives your entire go-to-market strategy, fundraising structure, exchange listing approach, and market making arrangements.
Create a formal legal memo documenting your token's classification analysis under each relevant jurisdiction. This memo should:
•Apply the Howey Test (US) or equivalent framework
•Analyze the token under MiCA categories (EU)
•Consider additional jurisdictions where you will distribute
•Include marketing guidelines to maintain classification
3. Design Tokenomics for Compliance
Structure your tokenomics to support your desired classification:
•If targeting utility classification: ensure the token has genuine, current utility
•If accepting security classification: plan for compliant issuance under available exemptions
•Avoid features that create ambiguity (revenue sharing in a "utility" token)
4. Choose Your Jurisdiction Strategically
Your incorporation jurisdiction should align with your token classification strategy. Projects seeking clear utility token treatment often incorporate in Switzerland or Singapore, while those accepting security token classification may prefer the US (for access to capital markets) or EU (for MiCA certainty).
5. Monitor Regulatory Developments
Token classification is evolving rapidly. Subscribe to regulatory updates through The Signal's intelligence hub and maintain ongoing relationships with legal counsel.
Frequently Asked Questions
What is the difference between a security token and a utility token?
A security token represents an investment contract where holders expect profits from others' efforts, while a utility token provides access to a product or service. The classification determines regulatory obligations: security tokens face strict securities laws including registration and disclosure requirements, while utility tokens face lighter regulation. The key test in the US is whether the Howey Test criteria are met.
How does the Howey Test apply to crypto tokens?
The Howey Test determines if a token is a security by evaluating four criteria: investment of money, in a common enterprise, with expectation of profits, derived from others' efforts. Regulators examine how tokens are sold and marketed, not just their technical function. Marketing tokens as investments or emphasizing price appreciation increases the likelihood of security classification.
Can a utility token become a security token?
Yes, and vice versa. A token initially sold as a security (via SAFT or Reg D offering) may later be argued to be a utility token once the network is fully decentralized. Conversely, a utility token can be reclassified as a security if it is marketed as an investment or if the network becomes overly centralized. The SEC has suggested that sufficient decentralization may cause a token to no longer meet the Howey Test.
Are governance tokens securities?
Governance tokens occupy a legal gray area. They have genuine utility (voting on protocol decisions) but often carry expectations of financial returns. Tokens with revenue-sharing mechanisms, treasury governance, or buyback programs face higher security classification risk. Projects should minimize investment-like features and ensure governance is genuinely decentralized.
How are stablecoins classified under different frameworks?
In the US, stablecoins are generally treated as money transmission instruments subject to state and federal money transmission laws. Under EU MiCA, single-currency stablecoins are E-Money Tokens requiring e-money institution authorization, while multi-asset stablecoins are Asset-Referenced Tokens. In Switzerland, they are payment tokens subject to AML regulation.
What happens if I misclassify my token?
Misclassification can result in SEC enforcement actions (US), unregistered securities offerings charges, investor lawsuits, exchange delistings, and criminal penalties in some jurisdictions. The SEC has brought over 100 enforcement actions related to unregistered token offerings since 2017, with penalties ranging from hundreds of thousands to billions of dollars.
Does token classification affect exchange listings?
Absolutely. Tokens classified as securities can only trade on regulated securities exchanges, dramatically limiting their market access. Most major crypto exchanges (Binance, Coinbase) will not list tokens with security classification risk. Proper classification analysis is often required as part of the exchange listing process.
How do I get my token classified?
Engage specialized crypto legal counsel to conduct a formal classification analysis. This typically costs $10,000-$50,000 depending on complexity and jurisdictions covered. Some jurisdictions (Singapore, Switzerland) offer regulatory sandbox consultations where you can discuss classification directly with regulators.
A security token represents an investment in an external enterprise, giving holders rights to profits, dividends, revenue shares, governance over treasury assets, or ownership stakes. Security tokens are subject to the full weight of securities regulation, including:
•Registration requirements — Must be registered with relevant regulators (SEC in the US, prospectus under EU Prospectus Regulation) or qualify for an exemption
•Investor accreditation — Often restricted to accredited or qualified investors
•Exchange restrictions — Can only trade on regulated securities exchanges or alternative trading systems (ATS)
•Ongoing disclosure — Issuers must provide regular financial reporting
•Transfer restrictions — May include lock-up periods, transfer agent requirements, and KYC on secondary transfers
Examples of security tokens:
•Tokenized equity (shares represented on-chain)
•Revenue-sharing tokens
•Tokenized real estate investment trusts (REITs)
•Tokens with explicit profit-sharing mechanisms
•Tokens sold primarily as investment opportunities
The security token market reached approximately $15 billion in total value locked across platforms like Securitize, Polymath, and tZERO by the end of 2025, according to Security Token Advisors.
Utility Tokens
A utility token provides access to a specific product, service, or functionality within a blockchain ecosystem. When properly structured and distributed, utility tokens face lighter regulatory requirements because they are not considered investment contracts.
Key characteristics of a genuine utility token:
•Provides actual, current functionality (not just future promises)
•The network or platform is operational at the time of distribution
•Token demand is driven by usage, not speculation
•Marketing emphasizes utility, not investment returns
•Token holders do not receive profits, dividends, or revenue shares
Examples of utility tokens:
•Filecoin (FIL) — pays for decentralized file storage
•Chainlink (LINK) — pays oracle node operators for data feeds
•Basic Attention Token (BAT) — used within the Brave browser advertising ecosystem
•Helium (HNT) — rewards for providing wireless coverage and data transfer fees
Important caveat: A token labeled "utility" does not automatically escape securities classification. Regulators look at substance over form — how the token is sold, marketed, and what reasonable purchasers expect matters more than what the issuer calls it.
Payment Tokens (Exchange Tokens)
Payment tokens are designed to function as a medium of exchange, store of value, or unit of account. They do not provide access to a specific platform and do not represent investment contracts.
Regulatory treatment varies significantly:
•United States: Generally not securities, but subject to money transmission laws (FinCEN), state money transmitter licensing, and Bank Secrecy Act compliance
•European Union: Under MiCA, payment tokens classified as e-money tokens (EMTs) face strict regulation including 1:1 reserve backing
•United Kingdom: "Exchange tokens" like Bitcoin are not regulated as financial instruments but are subject to AML requirements
•Japan: "Crypto-assets" under the Payment Services Act require registration
Examples:
•Bitcoin (BTC)
•Litecoin (LTC)
•Stablecoins (USDC, USDT, DAI) — though stablecoins increasingly face specific regulation
The Howey Test: The US Framework
The Howey Test is the foundational framework for determining whether a token is a security under US federal law. Derived from the 1946 Supreme Court case SEC v. W.J. Howey Co., it establishes that an instrument is an "investment contract" (and therefore a security) if it involves:
•An investment of money — The purchaser pays money or other valuable consideration
•In a common enterprise — The fortunes of investors are tied together or to the efforts of the promoter
•With a reasonable expectation of profits — The purchaser expects to profit from the investment
•Derived from the efforts of others — The expected profits come primarily from the managerial efforts of the issuer or a third party
Applying the Howey Test to Crypto Tokens
Howey Prong
How It Applies to Tokens
What Regulators Look At
Investment of money
Any value exchanged for tokens (fiat, ETH, BTC, time)
Token sale structure, price paid, consideration type
Common enterprise
All token holders share in project success/failure
Pool of funds, shared outcomes, horizontal commonality
Expectation of profits
Purchasers expect token value to appreciate
Marketing materials, social media, price discussions
Efforts of others
Core team drives value through development
Degree of decentralization, reliance on founding team
The fourth prong — "efforts of others" — is where most token classification battles are fought. The more a project is decentralized and community-driven, the stronger the argument that token value is not derived from a single team's efforts.
The SEC's Framework for Digital Assets (2019)
In April 2019, the SEC's Strategic Hub for Innovation and Financial Technology published a framework expanding on the Howey Test for digital assets. Key factors include:
Factors suggesting a security:
•An identifiable active participant (AP) whose efforts are essential to the token's value
•Token is marketed with emphasis on future value or returns
•Proceeds are used to develop the network
•Token is offered broadly rather than to likely users
•Token has limited current functionality
•Trading on secondary markets is emphasized
Factors suggesting NOT a security:
•The network is fully functional at the time of token distribution
•Tokens are designed and marketed for consumptive use
•Token value correlates with usage, not speculation
•Token holders can immediately use the token for its intended purpose
•Tokens are distributed in amounts consistent with usage, not investment
The Hinman Speech and "Sufficient Decentralization"
In June 2018, then-SEC Director William Hinman suggested that a token could initially be offered as a security but later cease to be one if the network becomes "sufficiently decentralized." This concept — while not formal SEC policy — has been influential:
"If the network on which the token or coin is to function is sufficiently decentralized — where purchasers would no longer reasonably expect a person or group to carry out essential managerial or entrepreneurial efforts — the assets may not represent an investment contract."
This has led to the concept of progressive decentralization, where projects:
•Raise initial capital under securities exemptions (e.g., Regulation D, Regulation S)
•Build the network and develop the technology
•Gradually decentralize governance and operations
•Argue that the token is no longer a security once sufficiently decentralized
However, the SEC has not formally endorsed this pathway, and projects relying on it should do so with qualified legal counsel.
The EU Framework Under MiCA
The EU takes a fundamentally different approach through MiCA regulation. Rather than applying a single test like Howey, MiCA creates distinct regulatory categories:
MiCA Category
Definition
Closest US Equivalent
Key Requirements
Asset-Referenced Token (ART)
Stable value referencing multiple assets
No direct equivalent
EBA authorization, reserves
E-Money Token (EMT)
Single fiat currency reference
State-regulated stablecoin
E-money license, 1:1 backing
Other Crypto-Asset
Everything else not a financial instrument
Utility token (if not a security)
White paper notification
Financial Instrument
Qualifies under MiFID II
Security
Full securities regulation
Critical distinction: MiCA only applies to tokens that are NOT financial instruments under MiFID II. If a token qualifies as a transferable security, structured deposit, or unit in a collective investment scheme, EU securities regulation applies instead of MiCA.
The MiFID II classification test looks at whether the token:
•Represents ownership of an entity
•Confers a claim against the issuer equivalent to a bond
•Represents a right to acquire a transferable security
•Represents a unit in a collective investment undertaking
The Swiss FINMA Framework
Switzerland's FINMA ICO Guidelines (updated 2019) provide one of the clearest token classification frameworks globally:
FINMA Category
Description
Regulatory Treatment
Payment Token
Accepted as means of payment or value transfer
Anti-money laundering regulation
Utility Token
Provides digital access to an application or service
Generally not securities (if functional at issuance)
Asset Token
Represents assets such as debt, equity, or claims
Securities regulation applies
Hybrid Token
Combines characteristics of multiple categories
Subject to all applicable regulations cumulatively
Switzerland's framework is notable for its explicit recognition of hybrid tokens and its relatively clear safe harbor for genuine utility tokens. This has made Switzerland a popular incorporation jurisdiction for token projects, particularly through the canton of Zug (Crypto Valley).
The Singapore MAS Framework
The Monetary Authority of Singapore (MAS) classifies tokens under the Payment Services Act 2019 and the Securities and Futures Act:
•Digital Payment Tokens (DPTs): Tokens used as a medium of exchange, subject to licensing under the Payment Services Act. Examples: BTC, ETH.
•Capital Markets Products (CMPs): Tokens that are securities, units in collective investment schemes, or derivatives. Subject to the Securities and Futures Act.
•E-money: Digitally stored monetary value. Subject to the Payment Services Act.
•Utility tokens with no capital markets features: Generally not regulated, though AML requirements may apply.
MAS has been pragmatic in its approach, providing project-specific guidance through its regulatory sandbox and direct consultations.
Classification Decision Framework
Use this step-by-step process to guide your token classification analysis:
Step 1: Does the token represent a traditional financial instrument?
If the token represents equity, debt, derivatives, or units in a fund, it is almost certainly a security/financial instrument globally. Full securities regulation applies. Consult legal partners specialized in securities law.
Step 2: Is the token designed as a medium of exchange?
If yes, it is likely a payment token. Key regulatory concerns: money transmission licensing, AML/KYC, and (in the EU) potential EMT classification under MiCA.
Step 3: Does the token provide genuine utility?
If the token grants access to a product, service, or platform that is currently functional:
•US: Analyze under Howey Test — focus on marketing, buyer expectations, and degree of decentralization
•EU: Likely "other crypto-asset" under MiCA if not a financial instrument
•Switzerland: Utility token with lighter regulation
•Singapore: Generally unregulated if no capital markets features
Step 4: How was the token distributed?
The distribution method matters enormously:
Distribution Method
Classification Risk
Notes
ICO/IDO to public
High security risk (US)
Broad marketing to speculators increases Howey risk
Private sale to investors
Likely security
Use Reg D/Reg S exemptions, SAFT agreements
Airdrop to users
Lower risk
But must be genuinely free (no purchase required)
Mining/staking rewards
Generally not securities
Created through protocol participation
Platform usage rewards
Lower risk
Earned through consumptive use
Employee grants
May be securities
But exemptions available under Rule 701
Step 5: How is the token marketed?
Marketing is where many projects go wrong. Even a legitimately structured utility token can be reclassified as a security based on how it is promoted:
Safe marketing language:
•"Use tokens to access platform features"
•"Tokens are required to participate in the network"
•"Earn tokens by contributing to the ecosystem"
Dangerous marketing language:
•"Token value is expected to increase"
•"Early buyers will benefit from future growth"
•"Limited supply means great investment potential"
•"Our team will drive token appreciation"
The SAFT Framework and Its Evolution
The Simple Agreement for Future Tokens (SAFT) was designed to allow projects to raise funds legally by selling investment contracts (securities) to accredited investors, with tokens delivered once the network is functional and the tokens qualify as utility tokens.
SAFT structure:
•Project sells SAFTs to accredited investors under Regulation D (private placement exemption)
•Proceeds fund network development
•Once the network launches, SAFTs convert into tokens
•The delivered tokens (now functional utility tokens) are argued to not be securities
Criticism and current status:
•The SEC has never formally endorsed the SAFT framework
•Several SAFT issuers have faced enforcement actions (e.g., Telegram/TON)
•The "transformation thesis" (token starts as security, becomes utility) remains legally untested in favorable precedent
•Modified approaches like the SAFTE (Simple Agreement for Future Tokens or Equity) provide equity fallback
Governance tokens present one of the most challenging classification problems. Tokens that grant voting rights over a protocol's parameters, treasury, or upgrade path can exhibit characteristics of both utility tokens (they have a function: governance) and security tokens (holders may expect financial returns from treasury management).
Arguments for governance tokens being securities:
•Holders expect the protocol to generate fees that accrue value to the token
•Governance rights over a treasury are analogous to shareholder rights
•Token buybacks or fee distribution create clear profit expectations
•Marketing often emphasizes token value appreciation
Arguments against:
•Governance is a functional utility (voting, proposing, delegating)
•No centralized entity is creating profit for holders
•Value comes from decentralized community decisions, not a management team
•Many governance tokens have been operating for years without SEC action
Practical guidance:
•Minimize revenue-sharing or buyback mechanisms that look like dividends
•Emphasize the governance function in all communications
•Ensure governance is genuinely decentralized, not controlled by the founding team
•Consider progressive decentralization with clear milestones
•Review your tokenomics with legal advisors before launch
NFTs and Token Classification
Non-fungible tokens generally fall outside traditional token classification frameworks because they represent unique items rather than fungible financial instruments. However, certain NFT structures raise classification concerns:
NFT Type
Classification Risk
Rationale
Art/Collectible (1-of-1)
Low
Unique item, no common enterprise
PFP collection (10K)
Low-Medium
Large collections may look fungible
Fractional NFTs
High
Pooled investment in an asset
Revenue-sharing NFTs
High
Investment contract characteristics
NFTs with staking yields
Medium-High
Expectation of profits from efforts of others
Gaming utility NFTs
Low
Consumptive use within a game
The SEC has signaled interest in fractionalized NFTs and NFT projects marketed as investments. The landmark Impact Theory settlement (August 2023) established that NFTs promoted as investments can be classified as securities.
Cross-Jurisdictional Classification Comparison
Token Feature
United States
European Union (MiCA)
Switzerland (FINMA)
Singapore (MAS)
United Kingdom (FCA)
Pure utility token
Not a security if Howey not met
"Other crypto-asset"
Utility token
Not regulated
Generally unregulated
Equity token
Security (Securities Act)
Financial instrument (MiFID II)
Asset token
Capital markets product
Security
Stablecoin (USD-backed)
State money transmission + potential security
E-Money Token
Payment token
Digital payment token
E-money or stablecoin regime
Governance token
Gray area (case-by-case)
Depends on features
Hybrid analysis
Depends on features
Case-by-case
Revenue-share token
Likely security
Likely financial instrument
Asset token
Likely CMP
Likely security
Airdropped token
Lower risk if genuinely free
White paper may still be required
Depends on function
Generally not regulated
Depends on features
Practical Steps for Token Issuers
1. Engage Legal Counsel Early
Token classification should be determined before tokenomics are finalized, not after. The classification drives your entire go-to-market strategy, fundraising structure, exchange listing approach, and market making arrangements.
Create a formal legal memo documenting your token's classification analysis under each relevant jurisdiction. This memo should:
•Apply the Howey Test (US) or equivalent framework
•Analyze the token under MiCA categories (EU)
•Consider additional jurisdictions where you will distribute
•Include marketing guidelines to maintain classification
3. Design Tokenomics for Compliance
Structure your tokenomics to support your desired classification:
•If targeting utility classification: ensure the token has genuine, current utility
•If accepting security classification: plan for compliant issuance under available exemptions
•Avoid features that create ambiguity (revenue sharing in a "utility" token)
4. Choose Your Jurisdiction Strategically
Your incorporation jurisdiction should align with your token classification strategy. Projects seeking clear utility token treatment often incorporate in Switzerland or Singapore, while those accepting security token classification may prefer the US (for access to capital markets) or EU (for MiCA certainty).
5. Monitor Regulatory Developments
Token classification is evolving rapidly. Subscribe to regulatory updates through The Signal's intelligence hub and maintain ongoing relationships with legal counsel.
Frequently Asked Questions
What is the difference between a security token and a utility token?
A security token represents an investment contract where holders expect profits from others' efforts, while a utility token provides access to a product or service. The classification determines regulatory obligations: security tokens face strict securities laws including registration and disclosure requirements, while utility tokens face lighter regulation. The key test in the US is whether the Howey Test criteria are met.
How does the Howey Test apply to crypto tokens?
The Howey Test determines if a token is a security by evaluating four criteria: investment of money, in a common enterprise, with expectation of profits, derived from others' efforts. Regulators examine how tokens are sold and marketed, not just their technical function. Marketing tokens as investments or emphasizing price appreciation increases the likelihood of security classification.
Can a utility token become a security token?
Yes, and vice versa. A token initially sold as a security (via SAFT or Reg D offering) may later be argued to be a utility token once the network is fully decentralized. Conversely, a utility token can be reclassified as a security if it is marketed as an investment or if the network becomes overly centralized. The SEC has suggested that sufficient decentralization may cause a token to no longer meet the Howey Test.
Are governance tokens securities?
Governance tokens occupy a legal gray area. They have genuine utility (voting on protocol decisions) but often carry expectations of financial returns. Tokens with revenue-sharing mechanisms, treasury governance, or buyback programs face higher security classification risk. Projects should minimize investment-like features and ensure governance is genuinely decentralized.
How are stablecoins classified under different frameworks?
In the US, stablecoins are generally treated as money transmission instruments subject to state and federal money transmission laws. Under EU MiCA, single-currency stablecoins are E-Money Tokens requiring e-money institution authorization, while multi-asset stablecoins are Asset-Referenced Tokens. In Switzerland, they are payment tokens subject to AML regulation.
What happens if I misclassify my token?
Misclassification can result in SEC enforcement actions (US), unregistered securities offerings charges, investor lawsuits, exchange delistings, and criminal penalties in some jurisdictions. The SEC has brought over 100 enforcement actions related to unregistered token offerings since 2017, with penalties ranging from hundreds of thousands to billions of dollars.
Does token classification affect exchange listings?
Absolutely. Tokens classified as securities can only trade on regulated securities exchanges, dramatically limiting their market access. Most major crypto exchanges (Binance, Coinbase) will not list tokens with security classification risk. Proper classification analysis is often required as part of the exchange listing process.
How do I get my token classified?
Engage specialized crypto legal counsel to conduct a formal classification analysis. This typically costs $10,000-$50,000 depending on complexity and jurisdictions covered. Some jurisdictions (Singapore, Switzerland) offer regulatory sandbox consultations where you can discuss classification directly with regulators.
