A non-fungible token, or NFT, is a unique digital identifier recorded on a blockchain that verifies ownership of a specific digital item. Unlike a Bitcoin or a dollar, which is interchangeable with any other, each non-fungible token carries distinct data that sets it apart from every other token in existence. That uniqueness is what lets NFTs represent one-of-a-kind items like digital art, collectibles, or music, and it’s also what makes the legal, tax, and security questions around them so different from anything else you might buy online.
How the Technology Works
An NFT lives on a blockchain, a distributed ledger synchronized across a global network of computers. Every transaction on the ledger is transparent and tamper-resistant. When someone mints or transfers a token, a smart contract, which is a self-executing program stored on the blockchain, handles the operation automatically according to pre-written rules.
The word “fungible” just means interchangeable. Any dollar bill is as good as any other. A non-fungible token is the opposite: it carries specific data that makes it impossible to swap for a direct equivalent.
Where the File Actually Lives
One of the most misunderstood aspects of NFTs is that the token itself usually does not contain the image, video, or music file. The token on the blockchain is a small record pointing to media stored somewhere else, either on a decentralized file network like IPFS or on a traditional centralized server. If that server goes offline or the IPFS pinning service stops hosting the file, the token still exists but the media it references can become inaccessible. The NFT becomes a pointer to nothing.
A small number of projects store their media directly on the blockchain, which eliminates this dependency but costs significantly more in transaction fees. Before buying any NFT, check where the underlying media is hosted. A project using centralized servers introduces a risk that fully on-chain or IPFS-pinned projects avoid.
What You Actually Own When You Buy One
Buying an NFT does not mean you own the copyright to the underlying artwork. Under federal law, a copyright transfer is only valid when it is in writing and signed by the rights holder.1Office of the Law Revision Counsel. United States Code Title 17 – 204 The original creator retains the exclusive rights to reproduce, distribute, and create derivative works from their copyrighted material unless they specifically sign those rights away.2Office of the Law Revision Counsel. United States Code Title 17 – 106
Most NFT purchases grant the buyer a limited, non-exclusive license, typically the right to display the image for personal, non-commercial use. That means you cannot print the artwork on merchandise, use it in advertising, or sublicense it to others without the creator’s explicit permission. The specific license terms are usually spelled out in the marketplace’s terms of service or embedded in documentation linked to the smart contract. Read those terms before you buy. Owning the NFT and owning the art are two very different things, and most buyers hold only the former.
A related concern arises when NFTs feature a real person’s face, voice, or other recognizable traits. The right of publicity, governed by state law, protects individuals from unauthorized commercial use of their identity. If someone mints an NFT using your likeness without permission, enforcement is complicated by blockchain’s anonymity and the fact that tokens, once minted, cannot be deleted from the ledger. Courts have begun exploring remedies like “burning” infringing tokens by sending them to an unusable address, but the law here is still developing.
When an NFT Might Be Treated as a Security
Federal regulators look at whether an NFT functions as an investment contract. The test comes from the 1946 Supreme Court case SEC v. W.J. Howey Co., which established four elements: an investment of money, in a common enterprise, with an expectation of profits, derived primarily from the efforts of others.3Justia. SEC v. W.J. Howey Co. – 328 U.S. 293 (1946) “Investment contract” is included in the statutory definition of a security under federal law.4Office of the Law Revision Counsel. United States Code Title 15 – 77b
An NFT you buy as art for personal enjoyment is unlikely to trigger the Howey test. But fractionalized NFTs, where multiple investors buy shares of a single token, or projects that heavily market future profits and roadmap milestones start to look like investment contracts. If an NFT crosses that line, it must be registered before being offered or sold, and failure to register can expose the issuer to enforcement action.5Office of the Law Revision Counsel. United States Code Title 15 – 77e
The regulatory picture has shifted. The SEC issued Wells notices to several NFT platforms and then closed those investigations in 2025 without bringing charges. That does not mean the Howey framework no longer applies. It means the agency is being selective about which projects it pursues. Any project that pools investor money and promises returns based on the team’s efforts remains at risk.
Taxes on NFT Transactions
The IRS classifies NFTs as digital assets, treated as property for federal tax purposes. The same rules that apply to selling stock or real estate apply here: you owe tax on the difference between what you paid, your cost basis, and what you received when you sold.6Internal Revenue Service. Frequently Asked Questions on Digital Asset Transactions
Short-Term Versus Long-Term Rates
Hold an NFT for one year or less before selling, and the profit is a short-term capital gain taxed at your ordinary income tax rate. Hold it for more than a year, and the gain qualifies for the lower long-term capital gains rates of 0%, 15%, or 20%, depending on your taxable income and filing status.
There is one important wrinkle. The IRS uses a “look-through” analysis to decide whether an NFT qualifies as a collectible. If the underlying asset linked to the NFT is something like a work of art, a gem, or an antique, categories already defined as collectibles in the tax code, the NFT itself is treated as a collectible, and the maximum long-term capital gains rate jumps to 28% instead of the usual 20% cap.7Internal Revenue Service. Notice 2023-27 – Treatment of Certain Nonfungible Tokens as Collectibles Most digital art NFTs will likely fall into this category, so sellers who held for over a year should plan for the possibility of the higher rate.
Cost Basis and Fees
Your cost basis includes the purchase price plus any transaction fees you paid to acquire the token. Gas fees, commissions, and transfer taxes paid at the time of purchase all get added to basis, which reduces your taxable gain when you later sell. Transaction costs at the time of sale reduce your gross proceeds.6Internal Revenue Service. Frequently Asked Questions on Digital Asset Transactions Keep records of every fee. If you paid with cryptocurrency rather than dollars, the exchange itself is a taxable event: you’re disposing of the crypto at its fair market value and receiving the NFT at that same value as your new basis.
Reporting on Your Return
Every federal tax return now includes a digital asset question. Form 1040 asks whether you received, sold, exchanged, or otherwise disposed of any digital asset during the tax year. You must answer “Yes” or “No”; leaving it blank is not an option.8Internal Revenue Service. Digital Assets
Starting with sales in 2026, brokers and NFT marketplaces must report transactions on Form 1099-DA. For NFTs specifically, a broker using the optional reporting method for “specified NFTs” is not required to report the sale at all if the customer’s total NFT proceeds for the year are $600 or less.9Internal Revenue Service. Instructions for Form 1099-DA (2026) Above that threshold, the marketplace will report your gross proceeds to the IRS. Whether or not you receive a 1099-DA, you are responsible for reporting all gains and losses on your return.
Wallets and Keeping Your Assets Safe
To buy, sell, or hold an NFT, you need a digital wallet. Software wallets like MetaMask for Ethereum or Phantom for Solana run as browser extensions or mobile apps and connect directly to NFT platforms. These “hot wallets” are convenient because they’re always online, but that constant internet connection also makes them more vulnerable to phishing attacks and malicious smart contracts.
When you create a wallet, it generates a seed phrase, a sequence of 12 to 24 words that serves as the master recovery key. If you lose this phrase, there is no customer support line to call. Your assets are gone permanently. Write it down on paper and store it somewhere physically secure. Never enter it into a website, and never share it with anyone for any reason. Any message asking for your seed phrase is a scam.
Hardware Wallets and Cold Storage
For significant holdings, a hardware wallet offers substantially better security. These are physical devices, similar in size to a USB drive, that store your private keys offline. Because the keys never touch the internet, remote hackers cannot access them. Hardware wallets still carry some risk if you use them to sign a malicious smart contract, so verify every transaction before approving it.
Cold storage takes this further. A cold wallet is completely disconnected from the internet and never interacts with smart contracts or Web3 applications. That makes it the most secure option for long-term storage of high-value NFTs or cryptocurrency, but it also means you cannot use it to buy or sell directly. Most active traders keep a small amount in a hot wallet for transactions and move their valuable holdings into cold storage.
Burner Wallets
When minting from an unfamiliar project or connecting to a new platform, consider using a burner wallet, a temporary wallet funded with only enough cryptocurrency to cover the specific transaction. If the project turns out to be malicious and gains access to the wallet, your exposure is limited to whatever small amount you deposited.
Creator Royalties on Secondary Sales
One of the original selling points of NFTs for artists was that creators could earn a percentage every time their work resold. The technical mechanism is EIP-2981, an Ethereum standard that embeds a royalty function into the smart contract. When a marketplace calls the royaltyInfo() function during a sale, it receives the creator’s wallet address and the royalty amount owed based on the sale price.10Ethereum Improvement Proposals. EIP-2981 – NFT Royalty Standard
The catch is that EIP-2981 only signals royalty information. It does not force the marketplace to actually pay it. Major platforms have made creator royalties optional in recent years. OpenSea, the largest NFT marketplace, stopped enforcing mandatory creator fees in 2023 and fully transitioned to optional royalties by early 2024. Other platforms followed. Creators should not count on royalty income from secondary sales unless they’ve verified that the specific marketplace still honors those payments.
Common Scams
The NFT space attracts fraud at a level that makes other investment markets look tame. Knowing the most common schemes is the best defense.
Rug Pulls
A rug pull happens when project creators collect money during the minting phase, then abandon the project without delivering any of the promised features. Buyers are left holding tokens for a project that no longer exists. Federal prosecutors have brought wire fraud and money laundering charges against rug pull operators, with defendants facing up to five years in federal prison.11U.S. Immigration and Customs Enforcement. 2 Charged With NFT Money Laundering, Rug Pull of Digital Blockchains Red flags include anonymous teams with no verifiable track record, aggressive marketing focused on price appreciation rather than the actual product, and roadmaps that sound more like investment prospectuses than creative projects.
Phishing and Fake Marketplaces
Scammers create imitation marketplace websites with URLs that differ from the real site by one or two characters. They spread links through unsolicited emails, social media messages, and fake giveaway announcements. If you enter your wallet credentials or approve a transaction on one of these sites, you hand over control of your assets. Always navigate directly to marketplace URLs rather than clicking links in messages, and double-check the address bar before connecting your wallet.
Malicious Airdrops
Free tokens appearing in your wallet uninvited are not gifts. Attackers send NFTs whose smart contracts contain hidden permissions. If you interact with the token, trying to sell it, transfer it, or even view its details on certain platforms, the contract can execute code that drains your wallet. Ignore any NFT you did not intentionally acquire. Do not click on it, do not try to sell it, and do not send it anywhere.
Before You Buy
Verify the creator’s identity through their official website and social media profiles. Look for verification badges on the marketplace. Check the project’s transaction history for signs of wash trading, the same wallets buying and selling to each other to inflate volume. Compare prices against official listings; a price dramatically below market is almost always a trap. Use two-factor authentication on every account connected to your wallet, and keep your seed phrase offline and out of any digital format.