A token issuer preparing a public offering discovers, weeks before launch, that the "utility" label printed across its whitepaper may not settle anything in a courtroom. Regulators in multiple jurisdictions are asking the same question: what rights does this token actually confer? A legal opinion commissioned at the structuring stage answers that question before a regulator or a claimant does. This analysis explains why the disputes angle – the question of how a token classification argument holds up under adversarial scrutiny – is the dimension that most pre-launch opinions underweight, and what a well-constructed opinion must address to be defensible.
A utility token legal opinion is a formal written analysis from qualified counsel concluding whether a digital asset constitutes a regulated instrument – a security, an e-money token, or an asset-referenced token – under the applicable legal regime. The opinion's value in a dispute context is specific: it is evidence of good-faith reliance on professional advice, a material factor in regulatory proceedings, enforcement actions and civil claims. Token classification turns on substance – the rights conferred, the economic reality of the arrangement, the expectations a reasonable holder would form – not on the label the issuer chooses. A whitepaper calling a token "utility" does not make it so.
This analysis maps the classification debate, the forums where it plays out, the cross-border complexity operators face and the structure a defensible opinion must have.
What token classification actually decides
Token classification determines which regulatory regime applies and, when things go wrong, which legal theories a claimant or regulator can advance. Get it wrong and a product launch becomes an unregistered securities offering. The stakes are asymmetric: the cost of a rigorous classification opinion at the outset is modest against the cost of enforcement proceedings, rescission claims or a forced delisting after launch.
The core classification question is whether the rights attached to a token resemble those of an investment contract, a debt instrument, an e-money claim or a pure access right. Substance-over-label analysis is the governing principle across every major jurisdiction: regulators and courts assess what the token actually does, not what the issuer calls it. In the United States, the SEC applies an economic-reality test derived from longstanding federal securities law. Under MiCA, the European Securities and Markets Authority (ESMA) and national competent authorities assess whether a crypto-asset falls into the asset-referenced token (ART), e-money token (EMT) or "other crypto-asset" category, each carrying different obligations.
The classification outcome is not static. A token that begins as a genuine access right can drift toward security-like characteristics if secondary-market trading dominates primary use, if the issuer makes profit-sharing representations, or if governance rights begin to resemble equity. Operators we advise routinely discover that conduct after launch – marketing statements, treasury management decisions, buyback programs – has complicated a classification that looked clean on day one.
Why a utility label does not settle the legal question
A common assumption in the market is that inserting a utility description into a whitepaper resolves classification. It does not. The legal analysis examines what the token delivers in practice, not what the issuer describes it as delivering in marketing materials. Courts and regulators have repeatedly declined to be bound by issuer characterization.
The misclassification risk is highest when three conditions overlap: the token was sold before the utility was operational; purchasers were told the token would appreciate in value; and the issuer retained significant control over the protocol's development. Each condition independently narrows the utility argument. All three together present a fact pattern that is difficult to defend under almost any regime.
In our cross-border practice, we have seen issuers rely on a short-form classification memo – sometimes a letter running to two or three pages – that addressed only the issuer's home jurisdiction and said nothing about the jurisdictions where tokens were sold or where secondary trading occurred. When a regulatory inquiry arrived from a different jurisdiction months later, the opinion offered no protection because it had never addressed the applicable law of the forum in question. A defensible opinion addresses the regulator most likely to act, not the regulator most convenient to address.
CTA #1 – The classification analysis above describes the standard inquiry. Your token's specific rights, sale mechanics and user base shift the analysis materially. Map your options with an OBOLUS assessment before launch.
How disputes test token classification
Token classification arguments become litigation arguments when an enforcement action, a private civil claim or an insolvency proceeding puts the issuer's legal position under adversarial pressure. The disputes context is distinct from the regulatory-compliance context because the standard is adversarial: a claimant's counsel will present the most aggressive characterization of the token; the issuer's legal opinion must be capable of withstanding that pressure.
In England and Wales, courts have treated digital assets as property for the purposes of injunctive relief since AA v Persons Unknown [2019]. This means proprietary claims can follow tokens across the chain. Where an issuer has sold tokens that a claimant later characterizes as unregistered securities, the claim may include rescission, damages and disgorgement. A pre-launch opinion that addressed classification rigorously and in writing is evidence that the issuer acted on the basis of legal advice – a factor relevant to good faith and, in some regimes, to whether a safe harbor applies.
In the DIFC Courts, the courts have demonstrated willingness to grant worldwide freezing orders in support of proceedings in other jurisdictions. Token classification affects which causes of action are available: a security claim travels with a different procedural toolkit than a contract claim or a fraud claim. The CFAAR (Crypto Fraud and Asset Recovery) network, launched in London in September 2021, has created a community of practice around exactly these cross-border recovery scenarios, and the sophistication of claimant-side legal arguments has increased significantly since its formation.
Singapore courts have granted proprietary injunctions over crypto assets. Hong Kong's SFC has pursued enforcement against platforms trading tokens it characterized as securities. In each forum, the question of whether a token is a security or a utility instrument is not decided by the issuer's whitepaper; it is decided by the court or regulator applying the law of that forum to the economic reality of the arrangement.
What cross-border complexity does to classification risk
A token sold to users in thirty jurisdictions is simultaneously subject to thirty classification analyses, each conducted under a different legal regime. This is the structural reality of a public token offering, and it is the dimension that most single-jurisdiction opinions fail to address. An opinion from counsel in jurisdiction A that concludes the token is not a security under regime A does not tell you whether it is a security under regime B, where most of your purchasers are located.
The EU's MiCA regime introduced a passporting mechanism for CASP (Crypto-Asset Service Provider) authorisation: an entity authorised in one member state may passport across the EU and EEA. The same regime imposes whitepaper obligations on issuers of "other crypto-assets" – a category that would include most tokens marketed as utility instruments. The interaction between whitepaper obligations and token classification is direct: a whitepaper that does not accurately characterize the rights of token holders creates both a regulatory liability and a civil liability, because purchasers who relied on the whitepaper can point to it as a misrepresentation.
In the United States, the jurisdictional reach of the SEC has extended beyond US-based issuers to non-US issuers who sold tokens to US purchasers, whether intentionally or as a result of inadequate geographic restriction. FinCEN's money-services-business framework adds a separate layer: a token sale that involves the exchange of value may engage money-transmission licensing requirements independent of securities law. NYDFS's BitLicense regime applies to any entity conducting virtual-currency business activity involving New York residents.
For an operator sitting between, say, a European entity and a US user base, the legal question turns on which regulator will move first, what theory that regulator will advance and whether the issuer's pre-launch opinion addressed that scenario. In our practice, cross-border token mandates regularly involve coordinating with allied counsel in the relevant jurisdiction to ensure that the classification analysis is not limited to the entity's home forum.
Anatomy of a defensible utility token opinion
A defensible utility token legal opinion has a defined structure: it identifies the applicable legal regime or regimes, applies the correct classification test to the specific rights attached to the token, addresses the issuer's conduct and the likely economic expectations of purchasers, and arrives at a conclusion that the author is prepared to stand behind in an adversarial proceeding. An opinion that stops at "this does not appear to be a security" without reasoning through the classification criteria is not defensible – it is a conclusion without a foundation.
The opinion should address at minimum: the nature of the rights attached to the token (access, governance, economic participation); the state of the underlying product at the time of sale; the marketing materials and any profit representations; the tokenomics – supply, distribution, lock-ups, buyback mechanisms; the jurisdictions into which tokens were sold; and the secondary-market conditions the issuer anticipates or has facilitated. Each of these elements is a variable a regulator or claimant's counsel will examine.
Under MiCA, the whitepaper is a regulated disclosure document. A legal opinion that concludes a token is an "other crypto-asset" under that regime must be consistent with the whitepaper's content; inconsistency between the two is itself a problem. Under the applicable VASP provisions in jurisdictions such as Singapore (under the Payment Services Act regime administered by MAS), the ADGM FSRA framework in Abu Dhabi, or the VARA regime in Dubai, the classification of a token as a security, a payment token or a capital-markets product triggers different licensing and compliance obligations. The opinion must track each relevant regime.
One practical test we apply: would the opinion still support the issuer's position if a claimant's expert read it and identified every gap? An opinion that survives that stress test is doing its job.
The securities law debate: contrasting positions
The securities-law debate over token classification has produced genuinely contrasting legal positions, and those contrasts persist across jurisdictions. Understanding the competing arguments is essential to structuring a token offering that can withstand challenge from either direction.
The pro-utility position holds that a token conferring a defined right to access a product or service – and nothing more – is categorically different from a security. The argument draws on the classical distinction between an investment contract (where the purchaser expects a return from the efforts of others) and a consumer transaction (where the purchaser acquires a good or service). A token that is immediately useful on a live product, priced at the cost of the service it provides and not marketed as an investment, presents the strongest version of this argument.
The pro-securities position holds that most public token sales resemble investment contracts in economic substance because: the underlying product is rarely fully operational at launch; the token price tracks market sentiment rather than the cost of the service; purchasers in liquid secondary markets are almost universally speculating on price appreciation; and the issuer's ongoing development efforts are the primary driver of value. Regulators, particularly the SEC, have advanced this position vigorously and have prevailed in a series of enforcement actions against token issuers who relied on the utility characterization.
The MiCA framework introduces a third register. The ART and EMT categories carry authorisation requirements regardless of how the issuer characterizes the token. A token that does not qualify as either – falling into the "other crypto-asset" residual category – is still subject to whitepaper obligations and consumer-protection rules. The framework does not use the word "security" in the same way that US federal securities law does; a token that is not a MiCA ART or EMT may still be a transferable security under the Markets in Financial Instruments Directive (MiFID II), depending on its structure. The two frameworks are not fully aligned, and the interaction requires analysis.
We have seen mandates where counsel in two jurisdictions, applying their respective national implementations of securities law, reached opposite conclusions on the same token. That outcome is not exceptional; it reflects the genuine state of the law across borders. A token issuer who addresses only one side of the debate in its legal opinion is holding an incomplete hand.
Micro-matter: cross-border classification dispute
In a recent matter, a token issuer based in a common-law offshore jurisdiction had launched a governance token on the basis of a short-form utility opinion addressing only its home forum. Secondary trading grew rapidly, attracting users across several major jurisdictions. A regulatory authority in a major market opened an inquiry characterizing the token as an unregistered security and focusing on marketing statements made at launch that referenced the issuer's future development roadmap as a driver of value. We were engaged after the inquiry had opened. We conducted a multi-jurisdictional classification analysis, identified the specific representations in the launch materials that created the most acute exposure, and worked with the issuer to develop a legal position addressing the applicable classification tests under each relevant regime. The engagement also involved coordinating with allied counsel in the inquiry jurisdiction. The matter progressed toward a structured resolution that preserved the issuer's ability to continue operating. The lesson we drew from the file: a jurisdiction-limited opinion is not merely incomplete – it can actively mislead an issuer about the extent of its exposure.
Decision matrix: which approach fits which operator profile
Not every token issuer faces the same classification risk. The appropriate scope of a legal opinion, and the urgency of commissioning one, depends on the operator's profile. The following matrix describes four distinct situations and the approach each calls for.
Profile A – Early-stage protocol, token not yet issued: The operator is at the white-label or structuring stage. A full classification opinion at this point provides the maximum benefit because the token's rights, tokenomics and distribution mechanics can still be adjusted in response to counsel's analysis. The indicative scope covers classification under the primary target jurisdiction and at least one major secondary market jurisdiction. The key risk is that the structuring conversation happens too late – after the token's economic rights have been fixed in smart contract code that is difficult to amend.
Profile B – Token issued in a single jurisdiction, secondary trading emerging: The operator has a home-jurisdiction opinion but secondary markets are drawing users from multiple other jurisdictions. The priority is a gap analysis – mapping which additional jurisdictions require separate classification review based on the geographic distribution of secondary-market participants. Under the MiCA framework, even a non-EU issuer whose tokens trade on EU-based platforms may trigger whitepaper-compliance obligations. The key risk is the assumption that an existing opinion provides ongoing protection as the distribution picture changes.
Profile C – Token already trading globally, no formal opinion: The operator has been operating without a classification opinion and is either approaching a new funding round, seeking exchange listings that require legal documentation, or has received a regulatory inquiry. A retrospective classification analysis is more complex than a prospective one: counsel must assess not only the token's structure but the issuer's conduct from launch to the present. The key risk is that conduct evidence – marketing statements, treasury operations, community communications – has created a fact pattern that is harder to defend than the underlying token structure.
Profile D – Inbound operator from a non-regulated market seeking EU or UK access: The operator has a token that may not have been subject to any classification analysis in its home jurisdiction. Accessing EU-regulated venues or UK-registered platforms requires a classification opinion that addresses MiCA and, where applicable, the FCA's regulatory regime. The key risk is assuming that a non-EU token structure is exempt from MiCA obligations when the token is offered or traded in the EU.
CTA #2 – If a regulatory inquiry has already opened or a prior opinion did not address your full distribution footprint, a second read can surface the structural gap and the route to resolution. Map your options with OBOLUS.
Airdrops, governance tokens and the limits of standard opinion templates
Standard utility-token opinion templates are not adequate for governance tokens or airdrop distributions, and using them for those structures creates a specific category of risk. Governance tokens – which confer voting rights over protocol parameters, treasury allocations or upgrade decisions – carry economic characteristics that the standard utility-access analysis does not address. A governance token that also entitles holders to a share of protocol fees is, in substance, closer to an equity instrument than to an access right, regardless of how the whitepaper describes it.
Airdrops add a distinct complication. An airdrop is a gratuitous distribution of tokens to wallet addresses that meet certain criteria. The absence of consideration does not eliminate the classification question: the recipient still holds a token that may be a security, and the distributor has still made a "distribution" for securities-law purposes in certain jurisdictions. The Travel Rule – the obligation under FATF Recommendation 15 to pass originator and beneficiary data with a transfer – applies to airdrop distributions in some implementations, adding a compliance layer that is separate from classification. In the United States, the SEC has stated that the absence of payment does not take a distribution outside securities law; what matters is the economic substance of what was received.
MiCA's treatment of airdrops is nuanced. A free distribution of tokens to existing holders of another token may qualify for an exemption from whitepaper requirements, but the conditions of that exemption are specific. An airdrop designed to circumvent the whitepaper requirement – structured to appear gratuitous while serving the economic function of a token sale – is unlikely to benefit from the exemption.
Operators we advise on token generation events routinely ask us to address the airdrop mechanism specifically, rather than relying on general utility-classification analysis. The answer in each case depends on the specific structure: who receives tokens, on what basis, whether there is a lock-up period, and what rights attach immediately on receipt.
Objection handler: common assumptions that create risk
A common assumption in this market is that a utility label on a whitepaper settles the legal classification. It does not, and relying on that assumption has produced a predictable pattern of enforcement actions across multiple jurisdictions. The legal classification is determined by the applicable law of each relevant forum applied to the economic reality of the arrangement – an analysis that is independent of anything the issuer says about its own product.
A second assumption is that obtaining an opinion from counsel in one jurisdiction provides protection in all jurisdictions where the token trades. It does not. An opinion addresses the law of the jurisdiction the opinion author identified as applicable. It says nothing about any other jurisdiction unless it explicitly addresses that jurisdiction's law. Token distribution is inherently cross-border; the opinion architecture must reflect that.
A third assumption is that once obtained, an opinion remains current indefinitely. A legal opinion is a point-in-time analysis. Changes in the issuer's conduct, changes in the regulatory regime – MiCA's entry into force is one example – or significant changes in how the token is used in practice can all render an earlier opinion unreliable. Operators who obtained utility opinions under prior regulatory regimes should treat those opinions as requiring review rather than as ongoing protection.
We assess classification against the substance of rights, not the marketing label. That is the only analysis that holds up when a regulator or a claimant's counsel examines the position.
Related at OBOLUS
- Token Offerings & Securities practice – full-service counsel for token issuers, from structuring to post-launch compliance.
- Utility token legal opinion in Luxembourg – jurisdiction-specific classification analysis under the Luxembourg MiCA implementation.
- EMI onboarding for VASPs in the United Kingdom – FCA-registered electronic money institution access for digital-asset businesses.
FAQ
Is my token a security?
Whether a token is a security depends on the law of each jurisdiction where it is offered or traded, applied to the economic reality of the rights it confers – not on how the issuer describes it. In the United States, the SEC applies an economic-reality test. Under MiCA, ESMA and national competent authorities assess whether the token is an ART, EMT or "other crypto-asset," while separately, MiFID II may apply to transferable securities. A multi-jurisdictional classification opinion from qualified counsel is the only reliable way to assess the position before launch or when a regulatory inquiry arrives.
Do I need a MiCA whitepaper?
Under MiCA, an issuer of "other crypto-assets" – the residual category covering most tokens marketed as utility instruments – is generally required to publish a whitepaper that meets specific disclosure standards before offering the token to the public in the EU or EEA. Exemptions exist, including for free distributions meeting defined conditions and for offerings limited to qualified investors. Whether your specific offering falls within an exemption requires legal analysis of both the MiCA text and the applicable ESMA guidance. A CASP passporting the token's distribution into the EU also carries whitepaper compliance obligations.
How should an airdrop be structured legally?
An airdrop's legal structure must address at minimum: the classification of the token being distributed, the jurisdiction of recipients, whether the distribution triggers securities-law obligations in recipient jurisdictions, and whether the Travel Rule applies to the transfer. The absence of monetary consideration does not eliminate classification risk: regulators, including the SEC, assess the economic substance of what recipients receive. Under MiCA, a free distribution may qualify for a whitepaper exemption, but the conditions are specific and the exemption cannot be relied upon without a prior legal analysis of the structure.
OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance that sit around those mandates. We assess classification against the substance of rights, not the marketing label. We structure licensing, banking and tax as one mandate rather than three disconnected workstreams. Digital assets are the whole of our practice. To discuss your token classification question, contact info@oboluslaw.com.
By Roman Levitt, Technology & DeFi Counsel – advising token issuers, protocol developers and digital-asset businesses on classification, structuring and cross-border regulatory risk.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.