Securities regulation for digital assets

Cryptocurrency & the SEC

Securities-regulation counsel for cryptocurrency projects, token offerings, and digital-asset securities, covering token classification, registration and exemptions, disclosure, and matters before the SEC.

Howey has four elements, and token buyers usually satisfy three by paying. The case turns on the fourth: whether the buyer's profit depends on the promoter's efforts. A token sold to fund a network that does not yet exist fails that test almost by definition, which is why the SEC staff's 2019 framework reads as a list of facts about the team rather than the code.

If the token is a security, Section 5 requires registration or an exemption, and most sales rely on Rule 506(c), Regulation A up to $75 million, or Regulation S offshore. The Exchange Act follows the holders: a security held of record by 2,000 persons, with issuer assets above $10 million, can trigger Section 12(g) registration and periodic reporting. The SEC has five years from a violation to seek a civil penalty and ten to seek disgorgement where scienter is shown. We have advised digital-asset ventures since 2014, before the category had a settled name, and we represent companies in matters before the SEC, investigations and enforcement actions included. In each of them our client is the company and the agency is across the table.

What we do

Securities-regulation counsel across the life of a digital-asset project, from the first classification call through registration, disclosure, and any matter that reaches the agency.
01

SEC securities-regulation compliance

Compliance with the federal securities laws as they apply to cryptocurrency projects and digital-asset securities, from first filing to ongoing reporting.

02

Token classification & analysis

Fact-based analysis of how a digital token is classified under the federal securities laws, given how it is structured, distributed, and used.

03

Registration-requirements guidance

Guidance on registration requirements, available exemptions, and the compliance path that fits a particular token and offering structure.

04

Exchange Act reporting & Section 12(g)

Counting holders of record and assets against the 2,000-holder and $10 million thresholds, and planning the Form 10 registration and periodic reports if a widely held token crosses them.

05

Enforcement-action defense

Representation in SEC enforcement actions and regulatory investigations involving cryptocurrency projects and digital-asset offerings.

06

SEC filing & documentation

Preparation of SEC filings and documentation, with attention to disclosure and the record an offering leaves behind.

07

Investment-adviser registration

Counsel on investment-adviser registration questions that arise for digital-asset funds, managers, and platforms.

08

Digital-asset securities compliance

Compliance frameworks for digital assets that are, or may be, securities, written so they can adapt as SEC requirements continue to develop.

What you should know

The points that decide how far the federal securities laws reach your project, and how heavily.
01

Three of four elements are satisfied by paying

Howey asks for an investment of money in a common enterprise, with profits expected from the efforts of others. Presale buyers meet the first parts by paying, so the analysis is the last: whether the token's value depends on the promoter's continued work. The staff's 2019 framework lists the facts that answer it.

02

The framework looks at the team, not the code

The April 2019 framework weighs reliance on an active participant, a network that is not yet functional at the time of sale, and proceeds spent on development or marketing. It also allows a token to stop being a security as the network decentralizes, a conclusion the project proves with governance records rather than announcements.

03

Each exemption has a number

Rule 506(c) is unlimited in amount, but every buyer is a verified accredited investor. Regulation A Tier 2 raises up to $75 million from the public after the SEC qualifies the offering statement. Regulation Crowdfunding stops at $5 million. Regulation S sells offshore and restricts resales into the United States for up to a year.

04

2,000 holders is a reporting event

Under Section 12(g) of the Exchange Act, an issuer with more than $10 million in assets whose security is held of record by 2,000 persons, or by 500 who are not accredited, must register the class and begin filing periodic reports. A token that is a security and trades widely can reach that line quickly.

05

The clock on penalties is five years

The SEC must seek civil penalties within five years of the violation under 28 U.S.C. § 2462. Since 2021 it has ten years for disgorgement where scienter is shown, and ten for injunctions and bars. A 2019 token sale therefore still has live exposure, and a tolling agreement is a negotiation, not a formality.

06

The staff's 2025 statements narrowed the field

In 2025 the SEC staff said meme coins with no promised utility are not securities, proof-of-work mining rewards are not securities offerings, and protocol staking does not by itself involve an investment contract. Each statement is staff guidance rather than a rule, and each is conditioned on facts the project has to match.

07

The Wells notice is the last chance to be heard

Before recommending charges, the staff usually sends a Wells notice describing the proposed action and inviting a written submission, which the Commissioners read before they vote. Everything said in it can be used later, so it is drafted for a judge as well, and the preservation hold has been in place since the first subpoena.

The arc of a token matter

How this work runs

From whitepaper to the agency's door.
  1. Stage 01

    Howey Before Launch

    Before a single token moves, we run the classification analysis on how the asset is structured, distributed, and used, and on how far purchasers are relying on the efforts of others. The memo written here becomes the project's spine, and every later decision cites it.

  2. Stage 02

    Choose the Path

    Registration or exemption is a design decision rather than a filing chore. We map the offering against the available exemptions and registration routes, shape investor eligibility and transfer restrictions to fit, and paper the record the choice will one day have to defend.

  3. Stage 03

    Disclosure & the Record

    The offering documents, filings, and ongoing disclosures are drafted knowing an examiner may read them years later. We build the preservation and monitoring habits that record who said what about the token, where, and when, so the project can rely on that record when it is tested.

  4. Stage 04

    Facing the Agency

    If a voluntary request or subpoena arrives, counsel steps between the company and the staff: preservation holds, productions scoped to the request, Wells-stage advocacy, and, where it serves the client, negotiated resolution. We speak for the company in front of the SEC, never for the agency.

The SEC does not read your whitepaper the way your community does, so we draft for both readers.

§ 4(a)(2)
the private-offering exemption most token sales are measured against

Frequently asked

Common questions on how the SEC reaches digital assets, and on what compliant structuring looks like.
When does a token qualify as a security under federal law?

When its sale is an investment contract under Howey: money invested in a common enterprise with an expectation of profit from the efforts of others. The SEC staff's 2019 framework translates that into facts. A token sold before its network works, with proceeds used to build it, by a team whose continued effort the buyers are counting on, is very likely a security however it is labeled. A token on a functioning network, acquired for use rather than investment, with no promoter promising to raise its value, may not be. The analysis is done on the facts at the time of each sale, and the same token can be a security in a 2021 presale and not one in a 2026 secondary trade.

Does an SEC registration requirement apply to every token offering?

Section 5 applies to every offer and sale of a security, so the real question is which exemption the offering fits. Rule 506(c) allows general solicitation if every purchaser is a verified accredited investor, with a Form D filed within 15 days of the first sale. Regulation A Tier 2 permits sales to the public up to $75 million after the SEC qualifies a Form 1-A, and carries ongoing reports. Regulation Crowdfunding caps at $5 million through a registered portal. Regulation S covers offshore sales to non-US persons with resale restrictions of up to one year. If the token is not a security, none of this applies, which is why the classification memo comes first.

What happens in an SEC enforcement matter involving a crypto project?

The SEC has increased enforcement activity against projects alleged to have fallen short of registration and disclosure requirements. We represent companies in matters before the SEC, including investigations and enforcement actions, and advise on disclosure, document preservation, and response strategy. We act for the company throughout; the agency has its own lawyers.

Why does securities-law compliance matter for legitimate crypto operations?

Because the remedies attach to the sale, not to the intent. A sale of unregistered securities gives each purchaser a rescission right under Section 12(a)(1) for one year, which means the issuer can be required to return the purchase price with interest to anyone who asks, in a falling market. The SEC can add disgorgement, penalties and an injunction. Exchanges and custodians will not list a token with an open registration question, and acquirers price it as a liability. Settling the question before the sale costs a memo. Settling it after the sale costs the sale.

What are the ongoing SEC obligations after an offering closes?

They depend on the path taken. A Regulation D issuer amends its Form D for material changes and annually while the offering continues, and its tokens stay restricted under Rule 144 for six months or a year. A Regulation A Tier 2 issuer files an annual report on Form 1-K, a semiannual report on Form 1-SA and current reports on Form 1-U. Any issuer whose security comes to be held of record by 2,000 persons while its assets exceed $10 million faces Exchange Act registration under Section 12(g), with Forms 10-K and 10-Q to follow. A project that promised decentralization also has to keep the record that shows it happening.

How can a project reduce its SEC enforcement risk?

Write the Howey memo before the sale and follow it. Choose an exemption and keep its paperwork: the verification files under Rule 506(c), the Form D within 15 days, and the Regulation S legends and resale restrictions enforced in the token contract. Review every public statement about the token against the offering documents, since a founder's post about price is a securities communication whether or not anyone meant it to be. Preserve documents from the first inquiry, and if a subpoena arrives, answer through counsel with productions scoped to the request. The SEC's cooperation framework credits self-reporting and remediation, and the credit is real, but it is available only before the staff finds the problem on its own.

Related

Neighboring digital-asset practices that often move together with SEC matters.

Initial Coin Offerings (ICOs)

Legal structuring and securities analysis for token sales and cryptocurrency fundraising.

Explore →

Regulatory Issues & Compliance

Federal and state cryptocurrency regulation, compliance programs, and risk management.

Explore →

Corporate Structure in the Crypto Space

Entity formation and structuring that can carry securities-law and regulatory obligations.

Explore →

Cryptocurrency & the IRS

Tax compliance and planning for cryptocurrency transactions, mining, and investments.

Explore →

← Back to all Digital Assets practices

Reviewed by Jonathan D. Herpy, Sr., Senior Partner · Last updated October 2026 · Educational overview · Not legal advice

Start a conversation

Bring us the token question early.

Whichever question brings you to us, classification, registration, disclosure, or a matter already before the SEC, one partner is accountable for all of it and you have that partner's direct line. Chicago, London, and Dubai work to the same standard.