Token issuers working across more than one jurisdiction face a deceptively simple question the moment a dispute arises: what, exactly, is this token? The answer determines whether the governing regime is securities law, e-money regulation, commodity rules, or something else entirely. Get it wrong in the drafting room and the error surfaces, with compounded consequences, in a courtroom or a regulator's enforcement notice. Token legal classification – the analysis of a digital asset's legal character by reference to the rights it confers, not the label applied to it – is the single most consequential legal judgment in a token offering. This analysis examines how classification decisions play out when they are stress-tested in disputes and regulatory proceedings, across the jurisdictions where enforcement is likeliest and the stakes are highest.
Why Token Classification Is a Disputes Question, Not Just a Compliance Box
Classification errors do not stay in the structuring file. They migrate into enforcement actions, private litigation and cross-border asset-recovery proceedings. A token sold as a utility instrument that a regulator later characterises as a security carries the full weight of an unregistered offering: rescission exposure, disgorgement, civil liability to purchasers and, in some jurisdictions, criminal referral. The gap between a thoughtful classification opinion and a post-hoc regulatory finding can represent many multiples of the original legal spend.
In our cross-border practice, we regularly advise issuers who built their whitepaper around a utility framing without rigorously stress-testing that framing against the substance-over-label doctrines applied by regulators in the United States, the European Union and Singapore. The result is not academic. When a token holder brings a claim – or when a regulator commences an investigation – the classification analysis is reconstructed from contemporaneous evidence: the token's economic design, the marketing materials, the secondary-market dynamics and the degree to which purchasers expected profit derived from the issuer's efforts.
The practical point is this: classification is a litigation-risk assessment, not simply a product-design decision. Every issuer considering a token offering (a public or private distribution of digital tokens to investors or users) should build the classification analysis as though a court will review it. That discipline, applied early, is materially cheaper than the alternative.
The process above describes the standard analytical path. Your facts – the entity's domicile, the user base, the secondary-market mechanics, the tokenomic design – alter the classification outcome in ways that a generic utility label cannot cure. For a scoped assessment of your token's legal character before the offering launches, contact OBOLUS at info@oboluslaw.com.
What Makes a Token a Security? The Multi-Jurisdictional Divergence
No single global test determines whether a token is a security – and the divergence between the leading regimes is where cross-border issuers most frequently miscalculate. The United States applies an economic-substance test derived from decades of securities case law: the question is whether there is an investment of money in a common enterprise with an expectation of profits from the efforts of others. The SEC has applied this analysis consistently to a wide range of token structures, regardless of the utility label applied by the issuer.
Under MiCA (the EU's Markets in Crypto-Assets Regulation, now the primary regime across the EU/EEA), tokens that qualify as financial instruments under existing EU financial law are explicitly carved out. ESMA and national competent authorities assess that question by reference to the rights conferred: does the token grant economic rights equivalent to a transferable security? If yes, MiCA does not apply and the relevant financial-instruments regime does. If no, the token falls within MiCA's own categories – asset-referenced token, e-money token, or "other" crypto-asset – each with its own whitepaper and authorisation obligations. The practical consequence is that an issuer confident of MiCA compliance may simultaneously be running an unregistered securities offering under US law if it permits US-person participation.
Singapore's approach under the Payment Services Act and the Securities and Futures Act is similarly substance-oriented: MAS assesses whether a token constitutes a capital markets product, with particular attention to profit expectations and issuer-dependency. Hong Kong's SFC has articulated a comparable position under its VASP licensing regime, focusing on whether a token is a "security" as defined under the applicable securities ordinance.
The critical divergence arises at the margin cases: tokens that carry partial governance rights, tokens linked to revenue-sharing, and tokens where the utility function is nascent at launch but the marketing materials emphasized appreciation. In those cases, the same token may be classified differently in each jurisdiction where purchasers are located. That asymmetry creates the litigation surface.
The "Utility Label" Myth: Why a Whitepaper Declaration Is Not a Legal Opinion
A common assumption in the market is that labeling a token "utility" in a whitepaper – and restricting it from profit expectations in the offering documents – resolves the classification question. It does not. Regulators in the major enforcement jurisdictions have consistently treated the substance of the token's economic design as determinative, not the issuer's stated intent or the label applied.
The relevant analysis examines what the token actually does, and what rights it actually confers, at the time of sale. If purchasers at the time of the offering had a reasonable expectation of appreciation based on the issuer's efforts – because the platform was not yet operational, because secondary-market liquidity was actively promoted, or because token economics were structured to reward early adopters – the utility label provides no legal insulation. This is not a theoretical concern. We have seen token structures where the whitepaper classification was internally consistent and well-documented, but the marketing materials, the Discord community communications and the token-sale dynamics collectively told a different story to the regulator reviewing the same file.
The whitepaper itself is a regulated document under MiCA for tokens that fall within its scope: the regime prescribes content requirements, liability standards for misleading statements, and a notification or approval process that varies by token category. A whitepaper drafted for marketing purposes, rather than as a regulated disclosure, exposes the issuer to MiCA liability in addition to any securities-law exposure.
The discipline we apply in classification work is to reconstruct the analysis from the purchaser's perspective, not the issuer's. What information did purchasers receive? What did secondary-market conditions communicate? What did the tokenomic design incentivize? That reconstruction, done before launch, converts a classification opinion into a defensible legal position. Done after a dispute arises, it forms the basis of the issuer's defense – or the claimant's case.
How Does Token Classification Affect the Recovery Analysis in Disputes?
Classification determines the legal theory available to a claimant – and therefore the remedies, the forum and the burden of proof. A token characterized as a security in a fraud or misrepresentation claim triggers a different set of remedies than a token characterized as property or as a commodity. The distinction matters enormously when structuring a recovery strategy.
In England and Wales – the most active common-law forum for digital-asset recovery – courts have established that crypto assets can constitute property capable of being the subject of a worldwide freezing order (an injunction freezing a defendant's assets globally) and of Norwich Pharmacal and Bankers Trust disclosure orders (orders compelling exchanges or custodians to identify wrongdoers and disclose account information). The landmark decision in AA v Persons Unknown [2019] established this as registry-level authority. The classification of the token as property is, in the English courts' approach, largely settled. The harder question is whether the token is also a regulated instrument – because if it is, additional statutory remedies and regulatory referral mechanisms become available.
In the DIFC Courts (Dubai), the Techteryx v Aria Commodities DMCC [2025] matter and the Trafigura v Gupta [2025] proceedings have demonstrated that the DIFC Courts will grant worldwide freezing orders in support of foreign proceedings involving digital assets. The classification of the underlying asset as a financial instrument, a commodity or a simple property interest affects which track of DIFC jurisdiction and which enforcement mechanisms apply.
The practical implication: before commencing recovery proceedings, a claimant's legal team should undertake a classification analysis as a preliminary step. It shapes the jurisdiction selection, the interim relief strategy and the theory of liability that will carry the case to a recoverable outcome. In our disputes practice, this analysis runs in parallel with the on-chain forensics – because the classification question and the tracing question are answered on the same evidentiary base.
Airdrops, Staking Rewards and Hybrid Tokens: Where Classification Gets Harder
Airdrops – distributions of tokens to wallet addresses without direct payment from recipients – generate a classification question that is frequently underestimated. In some jurisdictions, an airdrop that delivers tokens with profit expectations to a large population of recipients may constitute a public offering, triggering disclosure and registration obligations even in the absence of a subscription price. The absence of monetary consideration from the recipient does not, in most jurisdictions, remove the offering from the regulatory perimeter if the distributing entity derives value from the distribution – through token-price appreciation, network-effect growth or marketing exposure.
Staking rewards present a related challenge. A token that grants staking rights – where holders lock tokens to receive additional tokens as a yield – may be characterized as conferring an interest in a collective investment scheme if the yield is generated by the issuer's operational activities rather than the holder's own work. The analysis turns on the same substance-over-label principles: what rights does the holder actually receive, and are those rights economically equivalent to a regulated instrument?
Hybrid tokens – instruments that combine utility access rights with governance votes and economic participation (revenue share or buyback mechanics) – are the most litigation-prone category. Each element may individually be defensible. The combination, however, may aggregate into a financial instrument under the applicable regime. ESMA's ongoing guidance under MiCA addresses some of these hybrid structures, but the analysis remains fact-specific and jurisdiction-dependent.
In our practice, we regularly advise founders who designed a hybrid token without stress-testing the combined rights against the securities and e-money analyses in each relevant jurisdiction. The correction at the drafting stage is a structural redesign. The correction at the dispute stage is a litigation defense – materially more expensive and with an uncertain outcome.
If a prior structuring decision is now attracting regulatory scrutiny or a purchaser claim, a second read of the classification analysis can surface the structural issue and map the available response. Write to us at info@oboluslaw.com to initiate a confidential review.
The Cross-Border Enforcement Surface: Where Classification Risk Concentrates
For an issuer domiciled in one jurisdiction, structured through an entity in a second, with token purchasers in a third and banking relationships in a fourth, the enforcement surface is not one regulator – it is several, operating on different timelines and with different cooperation arrangements. The classification that satisfied counsel in the domicile jurisdiction may trigger enforcement attention in the purchasers' jurisdiction. That attention, once commenced, generates documentary demands, potential account freezes and, in the most serious cases, cross-border asset recovery proceedings.
The United States presents the most acute extraterritorial exposure for cross-border issuers. The SEC's long-arm jurisdiction extends to offerings that involve US-person purchasers, regardless of the issuer's domicile or the offering's nominal legal home. An issuer that ran a token offering without excluding US persons – or that excluded them nominally but permitted participation through common technical workarounds – carries residual securities-law exposure that does not dissipate with time in the way that commercial claims sometimes do.
The EU's MiCA regime, now operative, creates a passport-based architecture: a CASP authorisation obtained in one member state permits services across the EU/EEA. But MiCA's reach does not insulate an issuer from the securities-law analysis in non-EU jurisdictions where the token was also sold. The issuer that achieves MiCA compliance should map the concurrent exposure in each other jurisdiction where purchasers are located before characterizing the classification work as complete.
Forensics are a central tool in cross-border disputes. When a token offering goes wrong – through alleged fraud, misrepresentation or misappropriation of proceeds – the on-chain record is the evidentiary core. Forensic analysis tools used by recovery practitioners (Chainalysis, TRM Labs and Elliptic are the established providers in this space) can reconstruct token flows, identify wallet clusters and connect blockchain addresses to exchange accounts subject to disclosure orders. The classification of the token determines which courts have jurisdiction over the claim; the forensics determine whether the evidence is available to prosecute it.
A Practice Illustration: Cross-Border Reclassification in a Token Dispute
In a recent matter, a technology company had launched a token designed as a platform access instrument, with a whitepaper that emphasized utility and expressly disclaimed investment characteristics. The company was domiciled in a MiCA-transition jurisdiction and had obtained a preliminary compliance opinion characterizing the token as a non-financial-instrument crypto-asset under the then-applicable national framework. Secondary-market trading in the token grew substantially in the months following launch, and marketing communications from affiliated community channels increasingly emphasized price appreciation and early-adopter returns.
A group of token purchasers brought a claim in a leading common-law forum, alleging misrepresentation in the token offering. The claimants' position was that the token, assessed by reference to the contemporaneous marketing materials and secondary-market dynamics, was in substance a financial instrument, and that the issuer had failed to comply with the relevant disclosure obligations. The issuer's initial defense rested on the whitepaper classification and the prior compliance opinion.
We were engaged to review the classification analysis for the purpose of the litigation defense. Our assessment identified that the marketing materials – principally the affiliated community communications that had not been reviewed as part of the original compliance work – materially undermined the whitepaper framing. The substance of what purchasers had been told, in aggregate, was inconsistent with the utility characterization. We restructured the defense to address the marketing-communications issue directly, worked with forensic partners to establish the on-chain provenance of the contested token transfers, and engaged allied counsel in the relevant jurisdiction to address the local securities-law dimension. The matter resolved without a contested trial judgment. The process illustrated that the classification analysis and the litigation strategy are the same inquiry, not sequential ones.
Decision Matrix: Classification Risk by Operator Profile
Not all token issuers carry the same classification risk. The analysis below maps the principal operator profiles to the instruments at issue, the enforcement timeline and the key risk in each case. This is a structural guide, not legal advice for any specific situation.
Profile A – Pre-launch issuer with a utility token design: The instrument is a proposed "other" crypto-asset under MiCA or an equivalent non-security token in other regimes. The enforcement timeline is prospective. The key risk is that the economic design, at launch or post-launch, aggregates rights that a regulator will re-characterize as a financial instrument. The mitigation is a stress-tested classification opinion that examines the token from the purchaser's perspective and reviews all contemporaneous marketing materials, not only the whitepaper.
Profile B – Post-launch issuer facing purchaser claims: The instrument is live. The enforcement timeline is compressed. The key risk is that the contemporaneous record – whitepaper, marketing materials, secondary-market communications, tokenomic design – produces a classification outcome that differs from the issuer's filed position. The response is a rapid forensic-and-legal classification review, simultaneous with an assessment of the litigation forums available to claimants.
Profile C – Token fund or secondary-market operator: The instrument is the token held or traded. The classification analysis runs both ways: is the fund holding a security (triggering fund-regulation obligations) and is the operator conducting regulated trading activity? The VARA regime in Dubai, the MAS Payment Services Act framework in Singapore and the SFC's VASP licensing regime in Hong Kong each address this operator profile with distinct licence categories. The key risk is operating across multiple regimes without a consolidated classification analysis that maps each activity to the applicable regulatory perimeter.
Profile D – DeFi protocol with a governance token: The instrument is a governance token that may also carry economic rights. This is the most ambiguous category in current enforcement practice. Regulators in the major hubs are actively developing positions on whether governance tokens constitute securities or regulated instruments. The key risk is enforcement action in a jurisdiction where the protocol's interface is accessible, regardless of the protocol's stated decentralization. The mitigation is a jurisdiction-specific analysis of each market where the interface is available, combined with a review of the governance token's actual rights against the applicable securities test.
What a Classification Opinion Should Contain to Withstand Dispute Scrutiny
A classification opinion that will hold under the scrutiny of litigation or regulatory review is a different document from one designed solely for internal compliance sign-off. The evidentiary standard in a dispute context requires the opinion to address not only the whitepaper rights but the full evidentiary record a regulator or claimant's counsel will reconstruct.
In our practice, a litigation-ready classification opinion addresses the following: the token's economic design, including the tokenomic structure and any secondary-market mechanics the issuer has facilitated or anticipated; the marketing materials in all channels, including community-managed channels where the issuer has some influence; the contemporaneous purchaser communications and the reasonable inferences a regulator or court will draw from them; the jurisdictional scope of the offering, including any jurisdiction where purchasers are located even if not targeted; and the interaction between the classification under the primary regime and the concurrent analysis under each additional jurisdiction's applicable test.
The opinion should also address the airdrop and staking mechanics, if relevant, as standalone classification questions rather than treating them as necessarily derivative of the primary token classification. As noted above, the combined-rights analysis may produce a different outcome from the analysis of any single right in isolation.
Finally, the opinion should be dated to the token's economic design at the time of the relevant offering, and reviewed at each subsequent material design change. A classification opinion that was accurate at original launch may become inaccurate if the token's rights or the platform's operational status change materially after issuance. Regulators and claimants will assess classification as of the date of sale to each relevant purchaser cohort, not as of the date of the original opinion.
Related at OBOLUS
- Token Offerings and Securities for Digital-Asset Businesses – licensing, structuring and regulatory strategy for token issuers across multiple regimes
- Stablecoin Issuance Authorisation in Canada – regulatory requirements for stablecoin issuers seeking Canadian authorisation
- How to Run a VASP Business Risk Assessment – a structured guide to mapping regulatory exposure across VASP operations
FAQ
Is my token a security?
Whether a token is a security turns on the rights it actually confers and the economic dynamics of its distribution, assessed under the applicable test in each relevant jurisdiction – not on the label the issuer applies. In the United States, the analysis focuses on whether purchasers have an expectation of profit from the issuer's efforts. Under MiCA, the question is whether the token qualifies as a financial instrument under EU financial law. Both analyses are substance-driven and require a fact-specific review of the token's design, the offering mechanics and the marketing record.
Do I need a MiCA whitepaper?
A MiCA whitepaper is required for crypto-assets that fall within MiCA's scope and are publicly offered or admitted to trading in the EU or EEA. The requirement applies by token category: asset-referenced tokens and e-money tokens carry more prescriptive content and authorisation obligations than "other" crypto-assets. Tokens that qualify as financial instruments are carved out of MiCA entirely and fall under the relevant financial-instruments regime. The starting point is determining which MiCA category – or which carve-out – applies to your token's actual economic design.
How should an airdrop be structured legally?
An airdrop should be structured with the classification analysis done first, not last. The absence of a subscription price does not remove an airdrop from the regulatory perimeter if recipients receive tokens with profit expectations or if the distributing entity derives material value from the distribution. The relevant questions are: what rights do recipients receive, do those rights aggregate into a regulated instrument in any jurisdiction where recipients are located, and does the distribution mechanics constitute a public offering under the applicable regime? Jurisdiction-specific analysis across each recipient market is essential before a broad airdrop is executed.
OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance that sit around them. Digital assets are the whole of our practice. We assess classification against the substance of rights, not the marketing label – and we work alongside forensic partners to convert on-chain evidence into court-ready disclosure applications when disputes arise. To discuss your situation, contact info@oboluslaw.com.
By Lydia Brennan, Tax and Structuring Analyst – specialising in token classification, cross-border structuring and the tax and regulatory interaction in digital-asset offerings.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.