What Is a Security Token in Crypto and Securities Law?

A security token is a digital asset recorded on a blockchain that represents ownership in a regulated financial instrument, such as a share of stock, a bond, or an interest in real estate. The Securities and Exchange Commission has been direct on the point: the format of a security does not change how the law applies. A stock recorded on a blockchain carries the same registration requirements, disclosure obligations, and investor protections as one recorded in a traditional book-entry system.¹ What tokenization changes is the infrastructure underneath, which can automate compliance checks, allow fractional ownership, and open secondary trading in assets that used to be difficult to sell.

How the Law Decides Something Is a Security Token

A security token is any financial instrument that meets the legal definition of a “security” under the Securities Act of 1933 and the Securities Exchange Act of 1934, but happens to be represented as a crypto asset with its ownership record kept on a blockchain.¹ The token acts as a digital investment contract. It can grant its holder dividends, profit-sharing, or governance votes, and a smart contract inside the token can automate compliance, restricting transfers to pre-approved wallets and distributing payments without manual processing.

The legal classification turns on the Howey Test, the standard the Supreme Court set in its 1946 decision in SEC v. W.J. Howey Co. A transaction qualifies as an investment contract if it involves an investment of money in a common enterprise where the investor expects profits derived primarily from the efforts of others.² When a token sale meets those criteria, the token is a security and the issuer must either register the offering with the SEC or fit within an exemption. The test looks at economic reality, not labels. Calling a token a “utility token” or a “protocol token” does not shield it from securities regulation if the substance matches the Howey factors.

Security Tokens vs. Utility and Payment Tokens

The digital asset world sorts into three broad categories, and the differences decide which laws apply and what rights the holder actually gets.

A security token represents an investment. The holder puts in capital expecting a financial return through dividends, interest, or price appreciation. These tokens fall squarely under federal securities law and must satisfy a registration or exemption requirement.³

A utility token grants access to a product or service on a specific network. Holding one is closer to buying a software license than making an investment, and the holder has no claim on the issuer’s profits or assets. Plenty of tokens marketed as “utility” tokens have still been found to be securities because their buyers were really investing in an early-stage project and expecting the token to appreciate.

A payment token functions as a medium of exchange or a store of value. U.S. regulators have generally treated these more like commodities or currencies than securities, though enforcement depends on the facts of a given case.

The lines between categories are not always clean. A token can look like a utility token on paper and still trigger the Howey Test if the issuer markets it as an investment opportunity. Economic reality controls, not the issuer’s chosen label.

What Kinds of Assets Get Tokenized

Tokenization works across a wide range of asset classes, and the most activity has been in markets that historically suffer from illiquidity and high transaction costs.

Equity. Shares in a private company can be issued as tokens, with holders receiving proportional voting rights and dividend entitlements. The smart contract enforces shareholder limits and transfer restrictions automatically.

Debt. Corporate bonds, promissory notes, and commercial loans can be represented as tokens. Interest payments distribute programmatically on a set schedule. A commercial loan tokenized and sold to multiple investors lets the originator offload risk faster than traditional syndication would allow.

Real estate. Ownership in commercial buildings or residential properties can be split into fractionalized tokens. Breaking a $10 million property into 10,000 tokens at $1,000 each lowers the entry point dramatically. Whether non-accredited investors can participate depends entirely on which regulatory exemption the issuer uses.

Fund interests. Private equity and venture capital fund interests are among the hardest traditional assets to sell before the fund’s term ends. Tokenizing limited partnership interests creates the possibility of secondary trading, giving investors an exit option that did not previously exist. Possibility is the operative word. Actual liquidity depends on buyer demand, which remains thin for most tokenized funds.

Who Can Actually Buy Them

Full SEC registration is expensive, so most security token offerings rely on one of three exemption frameworks, and each one shapes who is allowed to invest.⁴

Regulation D

Regulation D is the most common route.⁵ Under Rule 506(b), an issuer can raise an unlimited amount but cannot advertise publicly. It may sell to an unlimited number of accredited investors plus up to 35 non-accredited purchasers, though each non-accredited buyer must be financially sophisticated enough to evaluate the risks.⁶ Most issuers limit their offerings to accredited investors only, because bringing in non-accredited buyers triggers additional disclosure requirements.

Under Rule 506(c), the issuer can advertise and publicly solicit investors, but every purchaser must be an accredited investor and the issuer must take reasonable steps to verify that status. Acceptable verification includes reviewing tax returns or bank statements, or obtaining written confirmation from a registered broker-dealer or investment adviser.⁶ A Form D notice must be filed with the SEC within 15 days after the first sale of securities in the offering.⁷

Regulation A+

Regulation A+ lets an issuer sell to the general public, including non-accredited investors, without an IPO-style registration. Tier 1 allows offerings of up to $20 million in a 12-month period, and Tier 2 allows up to $75 million.⁸ The tradeoff is real. Tier 2 offerings require audited financial statements and ongoing annual reporting that Regulation D does not. Non-accredited investors in a Tier 2 offering can invest no more than 10% of the greater of their annual income or net worth.

Regulation S

Regulation S is a safe harbor for offerings made entirely outside the United States. The offering must be an offshore transaction with no marketing directed at U.S. buyers.⁹ A distribution compliance period applies during which the tokens cannot flow back to U.S. persons. For equity securities of non-reporting issuers, that period runs one year.

Who Qualifies as Accredited

Because most security token offerings use Regulation D, the accredited investor definition determines who actually gets to participate. A natural person qualifies as accredited by meeting any of these thresholds:¹⁰

Individual or joint net worth exceeding $1 million, excluding the value of a primary residence. Mortgage debt up to the home’s fair market value is also excluded, but any mortgage balance above the home’s value counts as a liability.
Individual income exceeding $200,000 in each of the two most recent years, or joint income with a spouse or spousal equivalent exceeding $300,000, with a reasonable expectation of hitting the same level in the current year.
An active Series 7, Series 65, or Series 82 license, regardless of income or net worth.

Spousal equivalents, defined as cohabitants in a relationship generally equivalent to a spouse, may combine their finances to meet either threshold. Entities such as family offices with at least $5 million in assets under management can also qualify.¹⁰

Resale and Secondary Trading Are Not Automatic

One of the biggest misconceptions about security tokens is that blockchain-based ownership creates a liquid market. It does not. Securities purchased under Regulation D carry restricted status. They cannot be resold without either registering the resale or qualifying for another exemption.¹¹ The issuer must take reasonable care to make sure purchasers are not buying with intent to resell immediately, including placing a restrictive legend on the token and obtaining written acknowledgment from each buyer that the securities are unregistered.

Under Rule 144, restricted securities generally become eligible for public resale after a one-year holding period for non-reporting issuers, or six months for reporting issuers, provided certain conditions are met. For security tokens, the smart contract can enforce this lockup automatically by blocking transfers until the holding period expires.

When tokens do become eligible for resale, secondary trading happens on regulated Alternative Trading Systems. An ATS must register as a broker-dealer and comply with Regulation ATS, which governs how these platforms operate within the national market system.¹² Trading volume on most security token ATSs remains low compared with traditional exchanges. Do not assume you can exit a position quickly just because the asset is tokenized.

Tax Treatment for Holders

The IRS treats digital assets, including security tokens, as property for federal income tax purposes. Selling, exchanging, or otherwise disposing of a security token triggers a capital gain or loss, the same way selling a stock does.¹³ Tokens held for more than one year qualify for long-term capital gains rates. Tokens held one year or less are taxed at ordinary income rates. Dividends or interest payments received through the smart contract are taxable as ordinary income in the year received.

Form 1099-DA Reporting

Starting with 2025 transactions, custodial brokers that hold digital assets must report customer sales and exchanges to the IRS on Form 1099-DA and send a copy to the taxpayer. Brokers were required to send these forms by February 17, 2026 for 2025 transactions.¹⁴ For 2025 transactions, most forms will not include cost basis information, so investors need to calculate their own basis to determine gains or losses. Broker cost basis reporting begins with 2026 transactions.

You must report all gains and losses whether or not you receive a Form 1099-DA. Transactions on non-U.S. exchanges, decentralized platforms, or through noncustodial wallets may not generate a form, but the tax obligation stands.¹⁴

The Wash Sale Question

The federal wash sale rule disallows a tax loss if a taxpayer sells a security at a loss and buys a “substantially identical” security within 30 days before or after the sale.¹⁵ The rule applies to “stock or securities” by its statutory terms. Because security tokens are, by definition, securities, the wash sale rule should logically apply to them, even though the IRS has not issued specific guidance addressing this intersection. That is a meaningful distinction from ordinary cryptocurrency, which the IRS classifies as property rather than a security, placing most spot crypto transactions outside the wash sale rule’s scope for now. If you sell a security token at a loss and repurchase within the 61-day window, treat the loss as disallowed to be safe.

Risks Worth Knowing Before Buying

Thin secondary market liquidity. This is where the hype most often collides with reality. The technology allows secondary trading on regulated ATSs, but actual buyer demand for most tokenized assets is thin. A token that represents a fractional interest in a single commercial building will not trade with the volume or price discovery of a publicly listed REIT.

Smart contract risk. The compliance logic embedded in a security token’s smart contract is only as reliable as its code. Bugs, vulnerabilities, or poorly designed upgrade mechanisms can freeze assets or allow unauthorized transfers. Auditing reduces this risk. It does not eliminate it.

Platform dependency. Security tokens are issued on specific blockchain networks through specific platforms. If a platform shuts down, changes its technology stack, or loses its regulatory status, token holders can face real disruption. The underlying legal rights still exist in the paperwork, but exercising them without a functioning platform can be slow and expensive.

Custody complexity. Broker-dealers that hold customer security tokens must comply with the same custody rule that applies to traditional securities under Rule 15c3-3 of the Securities Exchange Act.¹⁶ Firms must maintain written policies to protect private keys and have plans for blockchain-specific events like hard forks, 51% attacks, and network malfunctions. Institutional-grade custody infrastructure for tokenized securities is still maturing.

Evolving regulation. The SEC’s framework for digital asset securities has been developing quickly. The agency has issued multiple statements clarifying how existing rules apply, but detailed rulemaking is ongoing. Compliance requirements will shift as regulators refine their approach, and any offering you look at today may face different rules tomorrow.

The idea that tokenization eliminates intermediaries is overstated. Blockchain replaces some back-office functions and can shorten settlement times, but the regulatory framework still relies on qualified custodians, broker-dealers, and transfer agents. What tokenization changes is how those roles are executed, not whether they exist.

1
U.S. Securities and Exchange Commission. Statement on Tokenized Securities
2
Justia U.S. Supreme Court Center. SEC v. W.J. Howey Co., 328 U.S. 293 (1946)
3
U.S. Securities and Exchange Commission. Offerings and Registrations of Securities in the Crypto Asset Markets
4
Investor.gov. Registration Under the Securities Act of 1933
5
eCFR. 17 CFR 230.500 – Use of Regulation D
6
eCFR. 17 CFR 230.506 – Exemption for Limited Offers and Sales Without Regard to Dollar Amount of Offering
7
U.S. Securities and Exchange Commission. Filing a Form D Notice
8
U.S. Securities and Exchange Commission. Regulation A
9
eCFR. 17 CFR 230.903 – Offers or Sales of Securities by the Issuer
10
eCFR. 17 CFR 230.501 – Definitions and Terms Used in Regulation D
11
eCFR. 17 CFR Part 230 – Regulation D
12
eCFR. 17 CFR 242.301 – Requirements for Alternative Trading Systems
13
Internal Revenue Service. Frequently Asked Questions on Virtual Currency Transactions
14
Internal Revenue Service. Reminders for Taxpayers About Digital Assets
15
eCFR. 26 CFR 1.1091-1 – Losses From Wash Sales of Stock or Securities
16
U.S. Securities and Exchange Commission. Statement on the Custody of Crypto Asset Securities by Broker-Dealers