Token sale agreement drafting in Panama sits at the intersection of a permissive civil-law tradition and the hard edges of cross-border securities law. A founder who treats Panama as a simple escape hatch from US or EU regulatory oversight is taking a risk that can convert a product launch into an unregistered securities offering – carrying liability that follows the issuer wherever the entity is incorporated, not where the buyers sit. The agreement itself is the first line of defence: it determines how the token is classified, what rights purchasers hold, and whether the instrument looks like a contract for investment or a commercial transaction for a digital good. Panama has no bespoke virtual-asset licensing regime equivalent to MiCA or VARA, which means the document architecture and the jurisdictional logic of the sale agreement carry more legal weight than in a supervised hub. This page maps the drafting process, the cross-border risk matrix, and the decision points that matter before a token offering goes live.
Why Panama Is Used – and Where It Falls Short
Panama's civil-law regime has no dedicated crypto-asset statute, which is both its appeal and its structural limitation for token issuers. The absence of a bespoke framework means Panama does not impose a local licensing obligation on a token sale directed entirely at foreign purchasers – an attribute that makes it attractive as an offshore issuance vehicle. The downside is the mirror image of that flexibility: no regulatory safe harbour, no approved-whitepaper mechanism, and no passporting equivalent to the MiCA CASP authorisation that an EU-based issuer can obtain through ESMA and the relevant national competent authority. In our practice, we have seen founders assume that Panama incorporation coupled with a utility label resolves classification. It does not.
The operative question is always where the buyers are, not where the company is. A Panama entity selling tokens to US persons may engage the SEC and FinCEN simultaneously. Sales into the EU can trigger MiCA whitepaper obligations for certain token types regardless of the issuer's domicile. Sales to UK persons bring FCA financial-promotion rules into the picture. The sale agreement must account for each of these vectors – through geographic restrictions, purchaser representations, and a clear articulation of the rights being sold.
How Token Classification Shapes the Agreement
Classification is the threshold question, and the answer drives every material term in a token sale agreement. Under established regulatory principle – endorsed by the SEC, by ESMA under MiCA, and by MAS under the Payment Services Act – substance governs over label. A token that confers a right to profit, to governance participation with economic consequence, or to a share in the proceeds of an enterprise will attract securities analysis regardless of whether the whitepaper calls it a "utility token." A common assumption is that stamping "utility" on a whitepaper settles the legal classification. It does not. Regulators assess the actual rights conferred, the reasonable expectations of purchasers, and the economic reality of the instrument.
In a Panama-domiciled issuance, the drafter must conduct that analysis first and build the agreement outward from the conclusion. If the token is a pure exchange medium – redeemable only for services on a live, functional network with no speculative premium – the agreement can be structured as a commercial contract. If the token has any investment-return characteristic, the agreement must include robust geographic restrictions targeting jurisdictions with bright-line securities tests, enhanced purchaser-qualification representations, and a clear statement that purchasers are not relying on the managerial efforts of the issuer for return. We assess classification against the substance of rights, not the marketing label – and that assessment precedes document drafting, not after it.
Token classification under MiCA distinguishes among asset-referenced tokens (ARTs), e-money tokens (EMTs), and "other" crypto-assets, each carrying different whitepaper and authorisation obligations.What a Well-Drafted Token Sale Agreement Covers
A compliant token sale agreement for a Panama-incorporated issuer is a multi-jurisdictional instrument, not a Panama-law contract with a few geographic disclaimers tacked on. The core components break down as follows.
Purchase mechanics and token delivery. The agreement defines the purchase price, the accepted consideration (fiat, stablecoin or native-chain asset), the delivery mechanism (smart-contract or custodial), and the vesting or lock-up schedule if any. Vesting terms that condition delivery on the issuer's continued operation can themselves look like an investment contract; they need careful drafting.
Rights and restrictions. Every right the token confers – governance, fee discount, access, redemption – is enumerated. Equally important is what is expressly excluded: no right to dividends, no right to the issuer's assets on winding-up, no expectation of profit from the issuer's efforts. These exclusions are substantive, not boilerplate; they track the classification analysis.
Representations and warranties. Purchaser-side reps cover eligibility (not a US person, not in a restricted jurisdiction, not a sanctioned party), sophistication if relevant, and reliance only on the agreement's terms and the published whitepaper. Issuer-side reps cover due incorporation, authority to issue, and – critically – the accuracy of the whitepaper at the date of sale.
Geographic restrictions and legends. The agreement must carve out at minimum the US (absent a Regulation D or Regulation S exemption structure), likely the UK absent an FCA financial-promotion exemption, and any jurisdiction in which the token would constitute a regulated instrument without a licence. The restriction has to be operationalised – through KYC/AML checks at purchase, IP-based access controls, and smart-contract whitelists – not stated only on paper.
Governing law and dispute resolution. Panama law is a defensible choice for a purely Panama-incorporated issuer selling to non-restricted purchasers with no EU or UK nexus. Where EU or UK purchasers are permitted, a neutral arbitration seat with solid enforcement credentials – Singapore, London, or a DIFC arbitral seat – often makes more sense than Panamanian courts, which have limited precedent in digital-asset disputes.
The Travel Rule obligation under FATF Recommendation 15 applies to any jurisdiction-supervised VASP that processes the sale proceeds, regardless of where the issuer is incorporated.The process above describes the standard drafting path. Your facts – the token's economic structure, the target purchaser base, the banking rails you intend to use – change the analysis materially. For a scoped review of your token architecture, contact OBOLUS at info@oboluslaw.com.
Do You Need a Whitepaper – and What Must It Say?
Whether a whitepaper is legally required depends on the token type and the target audience, not on the issuer's preference. Under MiCA, issuers of ARTs and EMTs require prior authorisation from a national competent authority; issuers of "other" crypto-assets must publish a whitepaper that meets ESMA content standards before any offer to the public in the EU. A Panama issuer targeting EU retail purchasers cannot sidestep this obligation by claiming foreign domicile. MiCA's reach is determined by where the offer is made, not where the offeror sits.
For US-directed sales, the SEC's framework requires either registration or an exemption. A whitepaper that reads as a prospectus – forward-looking statements about token appreciation, descriptions of the team's efforts driving value – reinforces a securities characterisation. US-directed token-sale whitepapers are frequently drafted to comply with Regulation D (accredited investors, no general solicitation) or Regulation S (offshore, US persons excluded) exemption mechanics, with the agreement itself incorporating those exemption conditions.
A Panama-domiciled issuer with no EU or US sales can still benefit from a well-drafted whitepaper. It documents the issuer's good faith at the point of sale, supports the classification analysis, and is increasingly expected by the institutional counterparties – exchanges, custodians, banking partners – that the issuer will need post-launch. In our cross-border practice, we regularly advise issuers that a well-crafted whitepaper is not only a compliance document; it is the first piece of due diligence a serious exchange listing manager will read.
Cross-Border Interaction: Banking, Tax, and AML
A Panama token issuer collecting sale proceeds – whether in stablecoin, ether or fiat – faces a banking question that is distinct from the legal one. Panama's banking sector has historically been cautious about crypto-related account relationships, and global correspondent banks apply their own risk appetite to Panamanian entities with digital-asset activity. The practical result is that many Panama-incorporated token issuers hold proceeds accounts offshore: in Singapore, in an EU member state with a licensed VASP infrastructure, or in jurisdictions such as the AIFC in Kazakhstan where AFSA-supervised entities can access crypto-compatible banking.
Tax treatment of token sale proceeds in Panama depends on the source-of-income principle: Panama taxes only income derived from Panamanian-source activities. A token sale conducted entirely outside Panama, with foreign purchasers and foreign distribution infrastructure, is generally not taxable in Panama under that territorial principle – but this analysis must be done jurisdiction-by-jurisdiction and documented, not assumed. Issuers should also consider the tax treatment in the purchaser's jurisdiction, particularly where tokens may be classified as securities and the proceeds as capital gains or income.
AML obligations attach regardless of Panama's regulatory posture. If the issuer uses a supervised payment service provider or exchange to collect and distribute proceeds, that intermediary is subject to its own jurisdiction's AML regime – including the Travel Rule (the obligation to pass originator and beneficiary data with a transfer) as applied by FATF Recommendation 15. The token sale agreement should align with the AML/KYC procedures the issuer is operating and should anticipate the data demands the banking and exchange intermediaries will place on the transaction.
A Token Sale Structured Across Two Jurisdictions
Earlier this year, we advised a technology company incorporated in Panama that had developed a protocol-level access token and intended to conduct a private sale to institutional and professional purchasers in Asia-Pacific and Europe. The existing draft agreement used a generic utility framing and contained no geographic restriction mechanism beyond a contractual representation. On classification analysis, the token's fee-sharing mechanism conferred an economic right that would likely constitute a regulated instrument under MAS's Payment Services Act for Singapore-resident purchasers and potentially fall within the scope of MiCA's "other" crypto-asset category for EU purchasers. We restructured the purchaser eligibility framework, introduced a professional-investor carve-in for Singapore under the applicable MAS exemption, required a compliant whitepaper for the EU-directed tranche, and aligned the governing law and arbitration seat with the primary purchaser base. The private sale proceeded on a revised timeline without the geographic compliance exposure the original draft carried.
Decision Matrix: Which Issuance Profile Needs What
The right agreement architecture depends on three variables: the token's economic character, the target purchaser geography, and the issuer's post-sale plans (listing, banking, further fundraising).
Profile A – Pure-utility token, no EU or US purchasers, institutional buyers only. The agreement is a commercial contract governed by Panama or a neutral civil-law system. The whitepaper is commercially advisable but not mandated by law. AML controls attach through the banking and custody intermediaries. Timeline from instruction to signed, executable agreement: typically a matter of weeks depending on complexity and the quality of the underlying token design documentation.
Profile B – Token with investment characteristics, mixed purchaser base including EU and Asia-Pacific. The agreement requires a dual-tranche structure: an EU tranche with MiCA-compliant whitepaper mechanics and a professional-investor or exemption-based non-EU tranche. Geographic restriction must be operationalised through KYC workflow, not stated only on paper. Governing law and arbitration in a neutral forum with strong enforcement credentials. Timeline is longer – several months from initial classification analysis to a finalised, compliant suite – because the whitepaper review cycle and the exemption-mapping exercise run in parallel with drafting.
Profile C – Token with possible securities classification, US persons not excluded at structuring. This is the highest-risk profile. The agreement must incorporate Regulation D or Regulation S mechanics before any sale occurs. A Panama domicile does not immunise the issuer from SEC jurisdiction if US persons participate. Legal review of the offering structure is non-negotiable before any marketing begins. Timeline is driven by the US exemption process, which requires its own counsel and filing mechanics.
What Goes Wrong – and When to Engage Counsel
The most common structural error is sequencing: founders draft the agreement after the token economics are locked, rather than as part of the same design process. Classification analysis should precede token architecture finalisation, because the economic rights the token confers determine the legal form of the transaction. A last-minute legal review that identifies a securities characteristic in a token whose smart contract has already been deployed creates a problem with no clean solution.
The second error is treating geographic restrictions as boilerplate. A restriction that says "not for US persons" in the agreement but allows a US IP address to complete a KYC flow and purchase tokens is not a restriction – it is a record of the issuer's awareness that US persons were participating. Enforcement of the restriction requires operational alignment between the legal document, the KYC platform, and the smart-contract access controls.
The third error is ignoring the post-sale lifecycle. A token agreement that does not address secondary-market listing, token upgrades, issuer insolvency mechanics, or the treatment of unsold supply leaves gaps that become disputes. We have seen matters arise from exactly these gaps – not because the initial sale was defective, but because the agreement treated the sale as the end of the legal relationship rather than the beginning of it.
Counsel should be engaged before any public communication about the offering – including social-media announcements, investor decks, and Discord communications – because those communications can constitute an offer in the relevant jurisdiction's law before a single agreement is signed.
If a prior token-sale structure stalled or an exchange declined the token on compliance grounds, the structural reason can often be identified and remediated. Write to OBOLUS at info@oboluslaw.com or message us at t.me/oboluslaw to discuss the position.
Related at OBOLUS
- Token Offerings & Securities practice – the full scope of our token classification, structuring and legal opinion work for issuers
- Airdrop legal structuring in Australia under AUSTRAC – how token distributions are treated under the Australian AML regime and what issuers need to do
- DeFi protocol legal structuring for regulated entities – on-chain governance, liability allocation and regulatory exposure for protocol operators
FAQ
Is my token a security?
No label – utility, governance, access – determines the answer. The analysis turns on substance: what rights does the token actually confer, do purchasers expect a profit from the issuer's efforts, and would a regulator in the relevant purchaser jurisdiction apply a securities test? The SEC's functional test, MiCA's ART/EMT/other taxonomy, and MAS's Payment Services Act framework each apply their own criteria. Classification must be assessed against each jurisdiction where the token will be offered or traded, not only where the issuer is incorporated.
Do I need a MiCA whitepaper?
If your token constitutes an ART or EMT under MiCA, prior authorisation from a national competent authority is required before any public offer in the EU, and a whitepaper is part of that process. For "other" crypto-assets, a compliant whitepaper must be published and notified to the relevant NCA before the offer opens. A Panama-incorporated issuer targeting EU retail purchasers cannot avoid these obligations: MiCA's reach is determined by where the offer is directed, not where the issuer sits. Professional and institutional-only offerings within defined thresholds may qualify for an exemption – the specific conditions should be confirmed against current legislation.
How should an airdrop be structured legally?
An airdrop – a distribution of tokens without direct monetary consideration – is not automatically outside securities or AML regulation. Regulators may treat a "free" distribution as part of a broader offering scheme, particularly where recipients are required to perform actions (social promotion, referrals) that have economic value. The agreement structure, the KYC obligations, and the geographic restrictions should mirror those applied to the primary sale. In jurisdictions such as Australia under AUSTRAC, airdrop recipients may trigger VASP reporting obligations on the distributing entity. Structure the airdrop as a legal instrument from the outset, not as a marketing event.
OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance structures that surround them. Digital assets are the whole of our practice. We assess token classification against the substance of rights, not the marketing label – and we advise issuers from the design stage, before the first public communication about an offering. To discuss your token structure, contact info@oboluslaw.com.
By Roman Levitt, Technology & DeFi Counsel – specialises in token structuring, on-chain governance documentation, and the cross-border securities analysis of digital-asset instruments for protocol operators and issuers.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.