The Howey Test, derived from a 1946 Supreme Court case, is the primary framework used in the United States to determine whether an asset is a security. An investment contract (and therefore a security) exists when there is an investment of money in a common enterprise with an expectation of profits derived primarily from the efforts of others. Applying this test to crypto tokens is far from straightforward.
Bitcoin is widely accepted as not a security. It has no central issuer, no team deriving profits, and no expectation of profit based on a specific team effort. The SEC has explicitly stated that Bitcoin is a commodity. Ethereum has a more nuanced classification, with the SEC initially suggesting it might be a commodity but more recently leaving the question ambiguous, though the approval of spot Ethereum ETFs strongly suggests commodity status.
Many other tokens more clearly resemble securities under the Howey Test. Tokens sold through ICOs to fund a development team, with promises of future utility or returns, check most of the Howey boxes. The SEC has taken enforcement action against numerous token issuers on this basis, arguing that the tokens were unregistered securities offerings. The Ripple (XRP) case became a landmark, with the court ruling that institutional sales of XRP were securities transactions but programmatic sales on exchanges were not.
The classification matters for practical reasons. If a token is a security, it can only be legally traded on registered securities exchanges or alternative trading systems. Most crypto exchanges are not registered as securities exchanges. This means that trading an unregistered security on a regular crypto exchange is technically illegal for both the exchange and the trader, though enforcement has been uneven.
The safe harbor proposals, like those advocated by former SEC Commissioner Hester Peirce, would give token projects a grace period (typically 3 years) to achieve sufficient decentralization before securities regulations apply. The logic is that a token that starts centralized (with a development team and investors) might evolve into a sufficiently decentralized network that no longer meets the Howey Test criteria. The practical challenge is defining what sufficient decentralization means.
International approaches differ significantly. Switzerland uses a token classification system that distinguishes payment tokens, utility tokens, and asset tokens, with different regulations for each. Singapore takes a similar functional approach. These frameworks provide more clarity than the US approach, where the same token might be classified differently depending on which regulator is evaluating it.
DeFi governance tokens present particularly interesting classification questions. If a governance token gives holders voting rights over a protocol and a share of protocol revenue, it starts looking like equity in a traditional company. If it only grants voting rights without economic participation, it might avoid securities classification. The specific design of the governance and revenue-sharing mechanisms directly affects the regulatory treatment.
NFTs generally are not considered securities when they represent digital art or collectibles. But NFTs structured as fractional ownership of real assets, or NFTs sold with promises of future value based on the issuer efforts, can cross the line into securities territory. The SEC has taken enforcement action against NFT projects that it viewed as disguised securities offerings.
For traders, the practical implication is to be aware of the regulatory status of the tokens you trade. Tokens that are clearly not securities (BTC, ETH) can be traded freely on any platform. Tokens with ambiguous or negative regulatory status carry additional risk, including the possibility that exchanges might delist them in response to regulatory pressure. This regulatory risk is a real factor that should be considered alongside technical and fundamental analysis.