What Is a Security Token in Crypto and Securities Law?

A security token is a digital asset recorded on a blockchain that represents ownership in a regulated financial instrument, such as a share of stock, a bond, an interest in a fund, or a slice of real estate. The format is new; the law is not. The SEC has made clear that putting a security on a blockchain does not change how securities law applies to it: the same registration requirements, disclosure obligations, and investor protections that govern a traditional stock also govern its tokenized version.¹ What changes is the plumbing underneath, which can automate compliance checks, enable fractional ownership, and open the door to secondary trading in assets that were previously hard to sell.

How Federal Law Defines a Security Token

Legally, a security token is any financial instrument that meets the definition of a “security” under the Securities Act of 1933 and the Securities Exchange Act of 1934, but is issued as a crypto asset with its ownership record kept on a blockchain.¹ The token acts as a digital investment contract. It can grant its holder dividends, profit-sharing, interest, voting rights, or a claim on assets. A smart contract embedded in the token can enforce compliance rules automatically, restricting transfers to pre-approved wallets and pushing payments out on a schedule with no manual processing.

Whether a given token counts as a security comes down to the Howey Test, which the Supreme Court laid out in its 1946 decision in SEC v. W.J. Howey Co. A transaction is an investment contract, and therefore a security, if it involves an investment of money in a common enterprise where the investor expects profits derived primarily from the efforts of others.² When a token sale meets those criteria, the token is a security. The issuer must either register the offering with the SEC or fit an exemption. The test looks at economic reality, not labels. Calling something a “utility token” or a “protocol token” does not shield it from securities regulation if the substance matches Howey.

Security Tokens Compared to Utility and Payment Tokens

The digital asset world splits roughly into three categories, and the distinctions matter because they determine which laws apply and what the holder actually owns.

A security token represents an investment. The buyer puts in capital expecting a financial return, whether through dividends, interest, or appreciation. These tokens fall under federal securities law and have to comply with registration or exemption rules.³

A utility token grants access to a product or service on a specific network. Owning one is closer to holding a software license than making an investment; the holder has no claim on the issuer’s profits or assets. Many tokens marketed as utility tokens have nevertheless been found to be securities, because their buyers were really investing in an early-stage project and expecting the token to appreciate.

A payment token functions as a medium of exchange or store of value. U.S. regulators have generally treated these more like commodities or currencies than securities, though enforcement follows the specific facts.

The lines are not clean. A token can look like a utility token at launch and still trigger Howey if the issuer promotes it as an investment. Economic reality controls, not the label the issuer prefers.

What Assets Can Be Tokenized

Tokenization works across a wide range of asset classes. Most of the activity has clustered in markets that traditionally suffer from illiquidity and high transaction costs.

Equity. Shares in a private company can be issued as tokens, giving holders proportional voting rights and dividend entitlements. The smart contract enforces shareholder limits and transfer restrictions automatically, which lets a company raise from a broader pool of investors without losing control of the cap table.

Debt. Corporate bonds, promissory notes, and commercial loans can be represented as tokens. Tokenizing a commercial loan and selling it to multiple investors lets the originator offload risk faster than traditional syndication, and interest payments can be distributed programmatically on a set schedule.

Real estate. Ownership in commercial buildings or residential properties can be split into fractional tokens. Breaking a $10 million property into 10,000 tokens at $1,000 each drops the entry point dramatically. Whether non-accredited investors can actually participate, though, depends entirely on which regulatory exemption the issuer chose.

Fund interests. Private equity and venture capital fund interests are among the hardest traditional assets to exit before a fund’s term ends. Tokenizing limited partnership interests creates the possibility of secondary market trading and gives investors an exit option they previously did not have. Possibility is the operative word: actual liquidity depends on buyer demand, and demand for tokenized fund interests remains thin.

Who Can Actually Buy One

Because most security token offerings rely on a Regulation D exemption, the accredited investor definition is the practical gate. Under federal rules, a natural person qualifies as accredited by meeting any of these thresholds:⁴

Net worth over $1 million, individually or jointly, excluding the value of a primary residence. Mortgage debt up to the home’s fair market value is also excluded, but any mortgage balance above the home’s value counts as a liability.
Individual income above $200,000 in each of the two most recent years, or joint income with a spouse or spousal equivalent above $300,000, with a reasonable expectation of hitting the same level in the current year.
An active Series 7, Series 65, or Series 82 license, regardless of income or net worth.

Spousal equivalents, defined as cohabitants in a relationship generally equivalent to a spouse, may combine their finances to meet either the net worth or income threshold.⁴ Entities such as family offices with at least $5 million in assets under management can also qualify. A separate exemption path, Regulation A+, opens participation to non-accredited investors, subject to per-investor caps.

How Security Tokens Get to Market Legally

Every security token offering must either register with the SEC or qualify for an exemption. Full registration is expensive and slow, so most offerings rely on one of three exemption frameworks.⁵

Regulation D

Regulation D is by far the most common path. It exempts issuers from full SEC registration when raising capital in a private placement.⁶ Two rules do most of the work.

Under Rule 506(b), an issuer can raise an unlimited amount but cannot advertise the offering publicly. It may sell to an unlimited number of accredited investors plus up to 35 non-accredited purchasers, each of whom must be financially sophisticated enough to evaluate the risks.⁷ In practice, most issuers stick to accredited investors, because bringing in non-accredited buyers triggers extra disclosure work.

Under Rule 506(c), the issuer can advertise and publicly solicit, but every purchaser must be an accredited investor, and the issuer must take reasonable steps to verify that status. Reviewing tax returns, bank statements, or a written confirmation from a registered broker-dealer or investment adviser are accepted methods.⁷

Regulation A+

Regulation A+ lets an issuer sell to the general public, including non-accredited investors, without a full IPO-style registration. Tier 1 permits up to $20 million in a 12-month period; Tier 2 permits up to $75 million.⁸ Tier 2 requires audited financials and ongoing annual reporting that Regulation D does not. Non-accredited investors in a Tier 2 offering may invest no more than 10% of the greater of their annual income or net worth.

Regulation S

Regulation S is a safe harbor for offerings made entirely outside the United States. The transaction must be offshore, with no marketing directed at U.S. buyers.⁹ A distribution compliance period applies during which the tokens cannot flow back to U.S. persons. For equity securities of non-reporting issuers, that period runs one year.

Resale, Lockups, and the Liquidity Question

The biggest misconception about security tokens is that putting ownership on a blockchain automatically creates a liquid market. It does not. Securities purchased under Regulation D are restricted, meaning they cannot be resold without either registering the resale or fitting another exemption.¹⁰ Issuers must take reasonable care that purchasers are not buying with intent to immediately resell, including placing a restrictive legend on the token and obtaining written acknowledgment that the securities are unregistered.

Under Rule 144, restricted securities generally become eligible for public resale after a one-year holding period for non-reporting issuers, or six months for reporting issuers, if certain conditions are met. For a security token, the smart contract can enforce this lockup by blocking transfers until the holding period expires.

Once tokens become resale-eligible, secondary trading happens on regulated Alternative Trading Systems. An ATS must register as a broker-dealer and comply with Regulation ATS.¹¹ Trading volume on most security token ATSs is low compared with traditional exchanges. Owning a tokenized asset does not mean you can exit the position quickly.

Taxes on Security Tokens

The IRS treats digital assets, security tokens included, as property. Selling, exchanging, or otherwise disposing of a security token triggers a capital gain or loss, just like selling a stock.¹² Tokens held longer than a year qualify for long-term capital gains rates; anything held a year or less is taxed at ordinary income rates. Dividends or interest paid out through the smart contract are ordinary income in the year received.

Starting with 2025 transactions, custodial brokers holding digital assets must report customer sales and exchanges on Form 1099-DA and send a copy to the taxpayer. Brokers were required to send these forms by February 17, 2026 for 2025 transactions. Most 2025 forms will not include cost basis; that reporting begins with 2026 transactions. Taxpayers must report gains and losses whether or not they receive a form. Trades on non-U.S. exchanges, decentralized platforms, or through noncustodial wallets may not generate a 1099-DA, but the tax obligation stands.¹³

One point worth flagging: the federal wash sale rule disallows a tax loss when a taxpayer sells a security at a loss and buys a substantially identical security within 30 days before or after the sale.¹⁴ The rule applies to “stock or securities” by its terms. Because a security token is by definition a security, the wash sale rule should apply to it, even though the IRS has not issued specific guidance on the intersection. This is a real distinction from ordinary cryptocurrency, which the IRS classifies as property rather than a security, placing most spot crypto trades outside the wash sale rule for now. A taxpayer who sells a security token at a loss and buys it back inside the 61-day window is safer treating the loss as disallowed.

Risks and Limitations to Weigh

Security tokens are often pitched as a straightforward upgrade to traditional securities. Several real risks deserve attention before an investment.

Thin secondary markets. This is where the pitch collides with reality. The technology allows for secondary trading on regulated ATSs, but buyer demand for most tokenized assets is limited. A token representing a fractional interest in a single commercial building will not trade with the volume or price discovery of a publicly listed REIT. Anyone entering a security token position expecting stock-market-like liquidity is likely to be disappointed.

Smart contract risk. The compliance logic baked into a security token’s smart contract is only as reliable as its code. Bugs, vulnerabilities, or a poorly designed upgrade path can freeze assets or permit unauthorized transfers. Audits reduce this risk. They do not eliminate it.

Platform dependency. Security tokens live on specific blockchain networks through specific platforms. If the tokenization platform shuts down, changes its technology stack, or loses its regulatory status, holders can face disruption. The underlying legal rights still exist in the documents, but exercising them without a functioning platform can be slow and expensive.

Custody complexity. Safeguarding digital asset securities requires broker-dealers to account for threats that do not exist in traditional markets, including private key theft, network forks, and protocol-level attacks.¹⁵ Institutional-grade custody infrastructure for tokenized securities is still maturing. The idea that tokenization removes intermediaries is overstated. The blockchain replaces some back-office functions and can shorten settlement times, but qualified custodians, broker-dealers, and transfer agents still play their roles.

Evolving regulation. The SEC’s framework for digital asset securities is developing. The agency has issued multiple statements applying existing rules to tokenized securities, but detailed rulemaking continues, and issuers and investors should expect the compliance picture to keep shifting.

1
U.S. Securities and Exchange Commission. Statement on Tokenized Securities
2
Justia U.S. Supreme Court Center. SEC v. W.J. Howey Co., 328 U.S. 293 (1946)
3
U.S. Securities and Exchange Commission. Offerings and Registrations of Securities in the Crypto Asset Markets
4
eCFR. 17 CFR 230.501 – Definitions and Terms Used in Regulation D
5
Investor.gov. Registration Under the Securities Act of 1933
6
eCFR. 17 CFR 230.500 – Use of Regulation D
7
eCFR. 17 CFR 230.506 – Exemption for Limited Offers and Sales Without Regard to Dollar Amount of Offering
8
U.S. Securities and Exchange Commission. Regulation A
9
eCFR. 17 CFR 230.903 – Offers or Sales of Securities by the Issuer
10
eCFR. 17 CFR Part 230 – Regulation D
11
eCFR. 17 CFR 242.301 – Requirements for Alternative Trading Systems
12
Internal Revenue Service. Frequently Asked Questions on Virtual Currency Transactions
13
Internal Revenue Service. Reminders for Taxpayers About Digital Assets
14
eCFR. 26 CFR 1.1091-1 – Losses From Wash Sales of Stock or Securities
15
U.S. Securities and Exchange Commission. Statement on the Custody of Crypto Asset Securities by Broker-Dealers