A token issuer expanding from a private round into a public sale quickly discovers that the document governing that sale does more than record commercial terms. It determines regulatory classification, allocates securities-law risk across jurisdictions, fixes the tax event, and sets the basis on which any future dispute will be litigated. Get the agreement wrong and a product launch can become an unregistered securities offering – triggering regulatory action in multiple markets simultaneously.
Token sale agreement drafting is, at its core, a classification exercise before it is a contracts exercise. The structure of the agreement – what rights it confers, when those rights vest, how consideration flows – is the primary evidence a regulator or court will use to determine whether the token is a security, an asset-referenced token, an e-money token, or a utility instrument. No marketing label, including the word "utility" in a whitepaper, changes that analysis. This page works through the structuring decisions that determine the legal character of a sale, the cross-border complications that follow, and the drafting choices that manage or compound those risks.
Why Classification Precedes Drafting
The first decision in any token sale is what the token is – and that decision cannot be delegated to the marketing team or resolved by a whitepaper label. Regulators across the major digital-asset hubs apply a substance-over-label standard: the rights conferred by the token, not the name given to it, determine its legal character. Under MiCA (the EU's Markets in Crypto-Assets Regulation), a token is classified by examining whether it references an asset, functions as e-money, or falls into the residual "other crypto-asset" category – each triggering a distinct regulatory path. ESMA and the national competent authorities have been explicit that issuer intent cannot override the functional analysis.
In practice, classification drives every downstream structuring decision. A token that resembles a security under the applicable securities laws of the United States – analyzed under the economic-substance test applied by the SEC and CFTC – requires an exemption from registration or a structural firewall that excludes US persons from the sale. A token that meets the definition of an asset-referenced token under MiCA requires issuer authorization before the whitepaper can be published and the sale can proceed. A token that qualifies as a payment instrument in Singapore falls under the Monetary Authority of Singapore's Payment Services Act licensing regime. Classification is not a branding decision. It is a legal predicate.
In our practice, we begin every token sale engagement with a written classification analysis before any agreement is drafted. The analysis maps the token's rights – economic, governance, redemption, profit-sharing – against the relevant tests in each target jurisdiction. That analysis then becomes the structural brief for the agreement itself.
For a scoped classification analysis of your token before drafting begins, contact OBOLUS at info@oboluslaw.com. The process above describes the standard path. Your token's specific rights profile and your intended distribution geography change the analysis materially. Map your options
The Anatomy of a Token Sale Agreement
A well-structured token sale agreement contains several interlocking elements, each of which carries independent regulatory significance. The agreement is not simply a contract for the future delivery of tokens; it is a record of the commercial and legal relationship between issuer and purchaser that regulators, tax authorities, and courts will examine in detail.
The first element is the consideration structure. The agreement must specify whether the purchaser is paying for a present delivery of tokens, a right to receive tokens at a future date (a SAFT – Simple Agreement for Future Tokens – structure), or a contingent entitlement. Each has different tax treatment, different securities-law implications, and different accounting consequences. A SAFT structure, popular in earlier market cycles, has attracted significant regulatory scrutiny because the deferred delivery element can look like an investment contract under US law regardless of what the delivered token will eventually do.
The second element is the rights granted. The agreement must specify, with precision, what the token confers. Voting rights, profit distributions, revenue shares, redemption rights, and access rights all point in different regulatory directions. A token that carries any economic return tied to the issuer's efforts is a strong candidate for securities classification in multiple jurisdictions.
The third element is the transfer restriction schedule. Lock-ups, vesting schedules, and transferability restrictions affect both classification and tax. A long vesting schedule can shift the tax event; a permanent transfer restriction can reduce secondary-market liquidity risk but may also signal that the token is designed to avoid exchange-listing scrutiny.
The fourth element is the jurisdiction and governing law clause. This is where the cross-border complexity lands. Issuers frequently choose a governing law that appears favorable – BVI, Cayman, Swiss – but the agreement will still be examined under the laws of each jurisdiction in which purchasers are located. Governing law does not sever securities-law analysis from the purchaser's home jurisdiction.
How Does the Cross-Border Dimension Affect Drafting?
A token sale agreement governing a global distribution must account for the securities, tax, and AML laws of every jurisdiction in which purchasers reside – and that set of laws rarely overlaps cleanly. The cross-border dimension is not an afterthought; it is the primary structural challenge.
The most direct mechanism for managing cross-border exposure is a well-drafted eligibility and exclusion schedule. The agreement specifies which persons may participate, with representations from each purchaser about their jurisdiction of residence, accredited or professional investor status where required, and absence of US-person status if the issuer is not relying on a registered offering. These representations are supported by a KYC/AML process that the agreement references by protocol, not by a separate document that can become detached.
The EU dimension is now layered on top of that geographic management through MiCA. An issuer targeting EU purchasers must publish a compliant whitepaper notified to the relevant national competent authority. The token sale agreement and the whitepaper must be consistent: a right described in the agreement but absent from the whitepaper creates an immediate inconsistency that regulators and purchasers can exploit. In our cross-border practice, we draft the whitepaper and the agreement in parallel, reconciling them at each revision, rather than treating the whitepaper as a marketing document independent of the legal agreement.
For issuers with a meaningful presence in the Gulf, the VARA regime in Dubai applies if the issuer or its key personnel are located in mainland Dubai. The ADGM/FSRA regime in Abu Dhabi applies to activities within that free zone. Both regimes have specific requirements around the form and content of sale documentation. An agreement that complies with MiCA passporting requirements may still require supplemental disclosure for Gulf purchasers or entity-level authorization in the UAE. Singapore's MAS adds a further layer for Southeast Asian distribution.
The practical consequence is that a single-jurisdiction token sale agreement – governed by the law of a single offshore hub with no geographic-specific annexes – is structurally inadequate for any issuer with genuine cross-border distribution ambitions. It protects neither the issuer nor the purchaser.
What Is the Securities Law Risk in a Token Sale?
Securities classification is the most consequential risk in token sale structuring, and it operates simultaneously across multiple jurisdictions for any global offering. The risk is asymmetric: a token that is correctly classified as a utility instrument in the EU may still constitute a security under US, Singapore, or Swiss law, depending on how the rights and economic expectations are constructed.
In the United States, the SEC and CFTC have each claimed jurisdiction over categories of digital assets. The SEC's position, broadly applied, treats tokens with investment expectations tied to the efforts of a common enterprise as securities under the economic-substance test developed in US securities law. The FinCEN layer adds AML/BSA obligations for money-service-business activities. A token issuer that does not exclude US persons and does not register or qualify for a recognized exemption operates outside the law in the world's largest capital market.
In Switzerland, FINMA applies a three-category analysis: payment tokens, utility tokens, and asset tokens. Asset tokens and hybrid instruments that combine utility with economic return face securities regulation. The token sale agreement is a primary input into that analysis.
In Hong Kong, the SFC's VASP licensing regime and its guidance on tokenized instruments require that any token with investment characteristics be treated as a securities product, with corresponding licensing and prospectus requirements. The SFC has been active in enforcement against operators who structured around these requirements through label changes rather than substantive redesign.
In our practice, the securities risk map is a living document attached to each token sale engagement. It updates as the distribution list evolves and as the token's features are refined. A change to the governance rights section of the whitepaper, for example, can materially shift the securities analysis in two or three jurisdictions simultaneously.
In a recent structuring matter, a token issuer approached us with a draft SAFT agreement and a whitepaper that described the token as a pure utility instrument. The rights schedule in the draft agreement, however, included a revenue-share mechanism tied to platform performance. That mechanism triggered securities-law analysis in the EU, Switzerland, and Singapore. We restructured the rights schedule, removed the revenue-share element, and added a jurisdiction-specific purchaser eligibility matrix. The agreement was re-executed and the sale proceeded without securities-law intervention.
Decision Matrix: Which Structure Fits Which Profile?
Token sale structures are not interchangeable. The optimal structure turns on the issuer's entity location, the token's rights profile, the geographic distribution, and the timeline to utility.
Profile A is the pre-launch issuer with a working product concept but no deployed token. This issuer is typically incorporated in the BVI or Cayman Islands, with a development entity in the EU or Singapore. The appropriate structure is likely a SAFT or a conditional token purchase agreement with a long delivery window, excluding US persons unless a registered exemption is available. The governing law should match the entity's domicile, with jurisdiction-specific eligibility schedules for EU (MiCA-aligned), Singapore (MAS DPT rules), and UK (FCA financial promotion) purchasers. The indicative timeline from instruction to agreement execution runs from several weeks to a few months depending on the complexity of the rights schedule and the number of target jurisdictions. The key risk is that the deferred-delivery structure is scrutinized as a security in the purchaser's jurisdiction even if the delivered token will be utility-only.
Profile B is the post-launch issuer with a deployed, functional token seeking to monetize a secondary sale or a strategic round. The token is already live; classification has been partially crystallized by the issuer's prior conduct and public statements. The appropriate structure is a direct token purchase agreement with immediate delivery, disciplined geographic restrictions, and an express waiver of any expectation of profit from the issuer's efforts. Governing law is typically the issuer's domicile jurisdiction. The timeline to execution is shorter – weeks rather than months – but the due diligence on the issuer's prior representations is more intensive. The key risk is that prior marketing materials, social media posts, or earlier agreements have already set an expectation of investment return that the new agreement cannot unwind.
Profile C is the DeFi protocol raising through a DAO governance token sale. The entity question is more complex: who is the issuer when there is no legal entity? The agreement may be between the foundation (a Swiss or Cayman foundation is common) and the purchaser. The governance token structure must be carefully drawn to avoid conferring profit rights or voting control over a profit-making enterprise, both of which drive securities analysis. The FINMA and ESMA guidance on decentralized governance is still developing. This profile requires the longest timeline and the most conservative approach to rights conferral.
If you need to pressure-test your token sale structure before committing to a distribution strategy, write to info@oboluslaw.com. If a prior draft has already been circulated, a second read can identify the structural reason it attracted regulatory scrutiny and the route to a compliant revision. Map your options
Tax and the Token Sale Agreement
The token sale agreement fixes the tax event for both the issuer and the purchaser, and the tax consequences across jurisdictions are frequently inconsistent with each other. This is one of the least-managed risks in token sale structuring.
For the issuer, the primary questions are when proceeds are recognized as income, whether the token delivery constitutes a supply of goods or services for indirect tax purposes, and how the issuer's own token inventory is treated on its balance sheet. These answers vary materially by jurisdiction. An issuer incorporated in the EU will face MiCA-driven disclosure requirements that interact with IFRS or local GAAP accounting rules. An issuer in Singapore operates under IRAS guidance on the tax treatment of digital tokens, which distinguishes between utility tokens and security tokens for income and GST purposes. An issuer in Switzerland is subject to FINMA guidance and Swiss tax authority practice notes.
For the purchaser, the token purchase price is typically the cost basis for any future gain. The agreement must record that price clearly and in the denomination in which it was paid – fiat, ETH, BTC, or stablecoins. Purchasers paying in cryptocurrency face a deemed disposal of the payment asset at the time of payment in most jurisdictions, creating a taxable gain or loss on the payment itself. The agreement should address the valuation date for that deemed disposal explicitly.
Airdrop mechanics deserve particular attention. An airdrop is typically treated as ordinary income in the hands of the recipient at the fair market value of the tokens received. An agreement that provides for an airdrop to existing holders must account for this income event. Structuring an airdrop as a "promotional" distribution rather than a contractual entitlement may affect the tax characterization but will not eliminate it in most major jurisdictions.
The VAT/GST question is unresolved in many markets. Under EU VAT rules, the supply of tokens that function as a means of payment is generally exempt, but tokens with investment or utility characteristics may be taxable. MiCA's classification system does not map cleanly onto the EU VAT Directive, creating a gap that issuers and their advisers must manage on a case-by-case basis. We have seen issuers discover this gap only after the sale has closed, resulting in unexpected VAT liability on the aggregate proceeds.
What Does a MiCA-Compliant Whitepaper Require?
A MiCA-compliant whitepaper is a mandatory disclosure document for issuers distributing crypto-assets to the public within the EU/EEA, and its content requirements interact directly with the token sale agreement. The whitepaper is not simply a marketing document; it is a legal disclosure with liability consequences if it is misleading, incomplete, or inconsistent with the terms of the sale.
The whitepaper must describe the issuer, the project, the rights attached to the token, the risks, and the use of proceeds. It must be notified to the national competent authority in the member state where the issuer seeks authorization – unless the token is an asset-referenced token or e-money token, in which case authorization is required before the whitepaper can be published at all. An asset-referenced token (ART) is a token that purports to maintain a stable value by reference to multiple assets or currencies. An e-money token (EMT) is a token that purports to maintain a stable value by reference to a single fiat currency.
The interaction between the whitepaper and the sale agreement is critical. The whitepaper describes the rights; the sale agreement confers them. If the sale agreement grants a right not described in the whitepaper – or describes a mechanism differently – the issuer faces both regulatory liability (for the inconsistent whitepaper) and contractual liability (for misrepresentation in the sale agreement). ESMA has signaled that it will scrutinize this consistency in its supervisory work.
Operators we advise routinely ask whether a whitepaper published under a prior framework – the Maltese VFA regime or an earlier EU self-regulatory standard, for example – remains adequate under MiCA. The answer is almost always no. MiCA's specific content requirements, its format rules, and its liability regime are more demanding than prior national frameworks. An issuer relying on a pre-MiCA whitepaper for a new distribution is exposed.
Common Drafting Mistakes and How They Compound
Certain drafting mistakes appear with consistency across the token sale agreements we review in a due diligence or dispute context, and they tend to compound rather than exist in isolation.
The first is a mismatch between the whitepaper rights description and the agreement rights schedule. When the whitepaper describes governance rights as advisory and non-binding but the agreement grants actual voting power over the protocol treasury, the issuer has a false statement in a regulated disclosure document. This is not a minor inconsistency; it is potential liability to every purchaser and to the regulator.
The second is an ambiguous consideration clause. Agreements that accept ETH as payment without specifying the ETH/USD reference rate and the valuation date create a disputed consideration amount the moment the token price or the ETH price moves significantly between signature and delivery. We have seen this become the subject of purchaser claims in secondary markets.
The third is a governing law clause disconnected from the enforcement reality. An agreement governed by BVI law with a BVI arbitration clause is commercially reasonable for a BVI-incorporated issuer. But if the issuer's personnel, servers, and banking relationships are all in the EU, the practical enforcement of that clause is more complex, and EU consumer protection law may overlay it regardless. Governing law is a starting point for the conflict-of-laws analysis, not a firewall against all other jurisdictions.
The fourth – and most consequential – is a failure to update the agreement as the token's features evolve during development. Tokens change. Governance mechanisms are added; revenue-share features are introduced to attract investors; staking rewards are introduced that create ongoing income obligations. Each change resets the classification and tax analysis. We have seen issuers go to market with a sale agreement that accurately described the token at draft stage but had not been updated to reflect three months of product development. The resulting mismatch between the contractual description and the actual delivered token was the basis for purchaser claims in two separate matters.
Airdrop Structuring: The Overlooked Legal Layer
An airdrop – the distribution of tokens to a defined set of recipients without direct payment – is not legally neutral. Each of the three primary legal questions that applies to a token sale applies equally to an airdrop: classification, securities law, and tax. Issuers frequently treat airdrops as marketing events rather than legal events, and that characterization creates risk.
On classification, an airdrop of governance tokens with meaningful economic or voting rights is subject to the same MiCA and securities-law analysis as a sold token. The absence of consideration from the recipient does not change the rights conferred, and those rights are what regulators examine. Under ESMA's guidance, a public offer of crypto-assets does not require the payment of consideration to be regulated; distribution to a broad public at zero cost can still trigger whitepaper obligations depending on the token's characteristics.
On securities law, the SEC's position has been that an airdrop to existing holders of another token may constitute a securities distribution if the recipient's reasonable expectation is of future investment value tied to the issuer's efforts. The absence of a sale price does not eliminate that expectation; it merely changes the mechanics of the distribution.
On tax, as noted above, airdrops are generally treated as ordinary income in the hands of recipients in most major jurisdictions, valued at the fair market value of the tokens at the time of receipt. An issuer planning a large airdrop must consider whether it is inadvertently triggering income tax events for thousands of recipients in jurisdictions where it has no presence and no ability to withhold or report.
The structuring solution for an airdrop is a legally reviewed distribution protocol that specifies the eligibility criteria, the consideration structure (or its absence), the geographic restrictions, and the tax disclosure obligations. This is not a marketing brief; it is a legal instrument that should be drafted with the same care as a sale agreement.
Related at OBOLUS
- Token Offerings & Securities practice – full-scope legal support for token issuers across all major markets
- Token sale agreement drafting in Poland – jurisdiction-specific analysis under the MiCA transition for Polish-based issuers
- VARA licence application in the Czech Republic – licensing pathway and structuring considerations for Czech-market operators
A Common Assumption: Utility Labels Settle Classification
A common assumption among token issuers is that labeling a token "utility" in the whitepaper, the sale agreement, and the company's public communications resolves the classification question in their favor. It does not. Regulators in every major jurisdiction have been explicit: classification turns on the rights conferred by the instrument, not the name given to it by the issuer.
The ESMA guidance under MiCA, the FINMA token taxonomy, and the SEC's economic-substance analysis all start from the same premise: look at what the token does, not what the issuer calls it. A token that grants its holders a right to a share of platform revenue, a governance vote over treasury disbursements, or a redemption right against a reserve is not a utility token merely because the word "utility" appears seventeen times in the whitepaper.
The practical consequence is that issuers who rely on the utility label without a formal classification analysis carry an undisclosed legal risk that travels with the agreement into every purchaser's jurisdiction. When that risk surfaces – in an enforcement action, in purchaser litigation, or in a due diligence process during a secondary-market transaction – the utility label becomes evidence of an issuer's failure to perform the required legal analysis, not of its good faith.
We assess classification against the substance of rights. That analysis is documented, jurisdiction-specific, and updated each time the token's features change. It is the foundation of any token sale agreement we draft.
About OBOLUS
OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise exchanges, custodians, token issuers, and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking, and compliance structures that sit around them. Digital assets are the whole of our practice – not a division of a generalist firm. We assess token classification against the substance of rights, not the marketing label, and we draft token sale agreements that account for the multi-jurisdiction reality of any meaningful distribution. Our disputes team coordinates freezing relief and on-chain tracing across leading common-law forums where recovery is required. To discuss your token sale structure or classification questions, contact info@oboluslaw.com or message us at t.me/oboluslaw.
FAQ
Is my token a security?
Whether a token constitutes a security depends on the rights it confers and the jurisdiction in question, not on any label in the whitepaper. In the United States, the SEC applies an economic-substance test examining investment expectation and reliance on a common enterprise. Under MiCA, ESMA and the national competent authorities examine whether the token meets the definition of an asset-referenced token, an e-money token, or a transferable security under EU law. A formal written classification analysis, updated as the token's features evolve, is the minimum required before any distribution.
Do I need a MiCA whitepaper?
An issuer offering crypto-assets to the public within the EU/EEA generally must publish a MiCA-compliant whitepaper notified to the relevant national competent authority. Asset-referenced tokens and e-money tokens require issuer authorization before the whitepaper can be published. Certain exemptions apply – for example, offers limited to qualified investors or below a defined distribution threshold – but the applicability of any exemption must be confirmed against the specific facts of the offering. Relying on a whitepaper prepared under a prior national framework does not satisfy MiCA's requirements for a new distribution.
How should an airdrop be structured legally?
An airdrop requires the same legal analysis as a paid token distribution: classification of the token, a securities-law assessment for each target jurisdiction, and a tax analysis for recipient income events. A legally compliant airdrop includes an eligibility protocol with geographic restrictions, a documented rationale for the distribution that distinguishes it from a public offer where possible, and a disclosure to recipients regarding the likely tax treatment in their jurisdiction. In most major markets, recipients must recognize the fair market value of airdropped tokens as ordinary income at the time of receipt.
By Lydia Brennan, Tax & Structuring Analyst – specializing in cross-border tax structuring and agreement architecture for token issuers and digital-asset funds.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.