A token issuer planning a capital raise in South Africa quickly discovers that the "utility versus security" debate carries real regulatory weight. The Financial Sector Conduct Authority (FSCA) has designated certain crypto assets as financial products, bringing them inside the financial-services licensing regime. Whether your token falls inside or outside that perimeter determines the structure of your offer, your disclosure obligations, the intermediaries you can use, and the remedies available to investors if something goes wrong.
Structuring a security token offering (STO) in South Africa means working across the Financial Markets Act, the Financial Advisory and Intermediary Services Act, and the FSCA's crypto-asset framework simultaneously – and often across more than one jurisdiction, because the issuer entity, the investor base, and the banking layer rarely all sit in one place.
This page maps the legal regime, the structuring process, the cross-border interactions, and the decision points an issuer must resolve before launching.
Why token classification is the first decision you make
Token classification under South African law is determined by the substance of the rights the token confers, not by the label in the whitepaper. The FSCA's determination brought crypto assets within the definition of a financial product under the Financial Advisory and Intermediary Services Act. That step means any person providing advice or intermediary services in relation to a crypto-asset financial product must hold – or operate through – a financial-services provider (FSP) licence with the appropriate crypto-asset category.
The analysis starts with the economic reality. A token that gives its holder a claim on future revenue, a share in profits, or rights analogous to equity or debt is almost certainly a security under South African law regardless of how the documentation frames it. A token that gives access to a product or platform with no expectation of profit and no governance rights sits on the other side of the line – but the middle ground is wide, and regulators on three continents have shown they do not accept branding as a substitute for substance.
In our cross-border practice we see the classification question complicated most often by three features: staking rewards that create an income-like return, governance tokens that carry material economic rights, and hybrid structures where a utility token is also used as a unit of account in a secondary market. Each feature shifts the analysis and, where South Africa is involved, must be stress-tested against the FSCA's evolving guidance as well as the securities laws of any jurisdiction where the token will be sold.
The FSCA's crypto-asset financial-product designation applies to the offering activity, not merely to the asset itself. An issuer domiciled offshore but targeting South African investors must engage with this regime just as directly as a Johannesburg-headquartered company.What regulatory regime governs an STO in South Africa?
South Africa does not yet operate a single bespoke securities-token statute. Instead, the STO sits at the intersection of several overlapping regimes. The Financial Markets Act governs securities and the infrastructure through which they are traded; the Financial Advisory and Intermediary Services Act governs the FSP licensing obligation; and the FSCA's crypto-asset framework – which has been in active development since the FSCA's 2022 determination – adds a layer specific to crypto assets that are financial products.
An STO in South Africa therefore requires the issuer to work through at least two regulatory tracks simultaneously. First, the token must be classified; if it is a security, the offer must comply with the prospectus and disclosure regime under the Companies Act unless an exemption applies. Second, anyone giving investment advice on, or intermediating the purchase of, the token must be an appropriately licensed FSP.
The South African Reserve Bank (SARB) retains oversight of the foreign-exchange dimension. Cross-border capital flows connected to an STO – particularly where offshore investors subscribe in foreign currency – engage the Exchange Control Regulations. This is a live concern for any issuer whose investor base is not exclusively domestic.
The FSCA has signalled a risk-based supervisory approach: it focuses enforcement energy on products that carry investor-protection risk. A well-structured STO with proper disclosure, a licensed distribution chain, and auditable KYC/AML controls is far better positioned than one that relies on jurisdictional gaps or labelling strategies. We regularly advise issuers on building that compliance architecture before they go to market.
How is an STO structured under South African law?
Structuring an STO in South Africa is a sequential process: classification analysis, entity and offering structure, documentation, the distribution chain, and post-issuance compliance – and each step has dependencies on the one before it.
Step 1 – Classification analysis. The issuer commences with a formal classification memorandum. The memorandum maps every right the token confers against the statutory definitions in the relevant financial-services legislation, the FSCA's published guidance on crypto assets, and the applicable securities-law concepts. This is not a marketing exercise. It is a legal opinion that must survive regulatory scrutiny and, in a worst case, court examination. The memo must also consider every jurisdiction where the token will be offered – South African classification does not shield an issuer from, say, the Securities and Futures Commission in Hong Kong or the FCA in the United Kingdom.
Step 2 – Entity and offering structure. The choice of issuer entity affects tax treatment, investor rights, the extent of regulatory oversight, and – critically – the practicalities of banking. A South African company issuing directly faces different exchange-control obligations than a special-purpose vehicle issued offshore with a South African trading presence. The decision often turns on where the token will be listed, where primary investors are located, and whether the issuer intends to seek a secondary-market listing on a licensed exchange.
Step 3 – Documentation. A security token offering requires, at minimum, a token instrument document (the legal terms governing the token), an investor disclosure document equivalent in function to a prospectus or information memorandum, AML/KYC procedures, and – if the offering extends into the EU – consideration of whether a MiCA whitepaper is required. Smart-contract code must be audited and the audit results disclosed.
Step 4 – Distribution chain licensing. Every intermediary in the chain – advisers, placement agents, exchange operators – must be assessed for FSP licence status in South Africa and equivalent licensing requirements in each target jurisdiction. An unlicensed intermediary in the chain is not a technicality; it is a structural defect that can render subscription agreements voidable.
Step 5 – Post-issuance compliance. Ongoing obligations include periodic investor reporting, AML transaction monitoring, secondary-market surveillance obligations if the token is listed, and – under the Travel Rule obligations that South Africa is progressively implementing in line with FATF Recommendation 15 – the passing of originator and beneficiary data with transfers above the applicable threshold.
CTA #1: The structuring path above describes the standard sequence. Your facts – the specific rights the token confers, your investor profile, the jurisdictions involved – change the analysis at every step. Map your options with our team before you commit to a structure.
How does an STO interact with cross-border tax, banking, and MiCA?
Few South African STOs operate in a single-jurisdiction environment, and the cross-border layer is where deals most often stall. Three intersections dominate in our practice: tax treatment, banking access, and the reach of the EU's MiCA regime.
Tax. South African tax law treats tokens as assets for capital-gains and income-tax purposes; the specific treatment of issuance proceeds, subsequent transfers, and staking or dividend-equivalent distributions depends on the token's legal characterisation. An issuer structured offshore but with South African residents as a primary investor class faces potential source and residence tax exposure. Pre-issuance tax advice – integrating South African Revenue Service guidance with the rules of any offshore issuer domicile – is not optional; it shapes the economic return to investors and the issuer's own tax position.
Banking. Banking is the operational chokepoint for many STOs. South African commercial banks have adopted conservative postures toward crypto-asset businesses, and an issuer raising capital through a token sale may find that subscription proceeds are difficult to process without a well-documented compliance file and a banking partner prepared in advance. Issuers using offshore entities must additionally navigate SARB exchange-control requirements when moving proceeds back into South Africa. We have seen STOs effectively stranded by banking failures that were foreseeable and avoidable with earlier structuring work.
MiCA. If the offering extends to investors in EU member states, the MiCA regime applies independently of South African law. Under MiCA, a token that meets the definition of an asset-referenced token (ART) or an e-money token (EMT) requires issuer authorisation in the EU; a token outside those categories may still require a whitepaper filed with the relevant national competent authority. The EU/South Africa interaction is increasingly common as issuer teams are internationally distributed and investor communities are global. An STO structure that is clean under South African law but ignores MiCA creates a compliance gap that ESMA and national regulators have shown they will pursue.
FATF Travel Rule. South Africa has been implementing the FATF Travel Rule – the obligation to pass originator and beneficiary data with virtual-asset transfers – through its progressive revision of the Financial Intelligence Centre Act framework. Issuers whose tokens are traded on exchanges must account for Travel Rule compliance in the exchange agreements and the token's technical architecture.
What are the most common structuring mistakes in South African STOs?
Mis-classifying the token is the most consequential mistake an issuer can make. Converting a product launch into an unregistered securities offering – even inadvertently – exposes the issuer, its directors, and every intermediary in the distribution chain to civil and regulatory liability. We assess classification against the substance of rights, not the marketing label.
The second most common mistake is deferring the distribution chain analysis. Issuers often identify placement agents and advisory platforms that lack the FSP authorisation required to intermediate in a regulated financial product. By the time the defect is discovered, the investor pipeline has been built on a structurally compromised foundation.
A third recurring error is treating the technical audit as a back-office function rather than a legal disclosure item. Investors in an STO are relying on the token's code functioning as documented. If the audit surfaces material risks and those risks are not disclosed in the investor documentation, the issuer faces potential securities-fraud exposure under South African law.
Finally, many issuers underestimate the timeline. A properly structured STO – including classification analysis, documentation, legal opinions in multiple jurisdictions, banking setup, and distribution chain diligence – takes longer to prepare than an unregistered offering. The investment is in defensibility, not delay.
Micro-matter: In a recent matter, a technology company sought to raise growth capital through a tokenised revenue-share instrument. The initial structure was documented as a utility token. On classification analysis we identified that the revenue-share mechanism created rights equivalent to a profit participation in securities law terms. We restructured the offering with a compliant investor disclosure document, revised the distribution chain to route through a licensed intermediary, and addressed the SARB exchange-control requirements before subscription opened. The offering proceeded without regulatory challenge.
A common assumption: the utility label settles the classification
A common assumption among first-time token issuers is that labelling a token "utility" in the whitepaper insulates the offering from securities-law scrutiny. It does not. Regulators worldwide – including the FSCA – apply a substance-over-form analysis: the question is what rights the token actually confers, not what the whitepaper calls it.
A governance token that carries voting rights and economic entitlements may be a security. A token that entitles holders to a proportional share of platform revenues is almost certainly a security. A token that grants access to a service and nothing more may not be – but the "access" must be genuine. If the primary reason a rational person holds the token is the expectation of price appreciation driven by the efforts of others, the Howey-analogue analysis (and its South African equivalent) points toward securities treatment.
The practical consequence is that the classification memorandum must do real legal work. It is not a marketing document with legal formatting. Counsel producing it must engage with the specific rights, the economic reality, and the regulatory posture of every jurisdiction where the token will be sold.
Which structure is right for your profile?
Profile A – South African issuer, domestic investor focus. The natural structure is a South African company issuing directly under the Companies Act offering-exemption framework, with an FSP-licensed placement agent and documentation compliant with FSCA guidance. Timeline from engagement to issuance is a matter of months and depends heavily on the complexity of the classification analysis and the pace of banking setup. The primary risk is an evolving FSCA regulatory posture that may impose additional requirements as the crypto-asset framework matures.
Profile B – Offshore issuer, South African investors as part of a global round. An offshore special-purpose vehicle – commonly in a jurisdiction with an established digital-asset framework such as the BVI, Cayman Islands, or the ADGM in Abu Dhabi – structures the offer, with South African investor access managed through SARB exchange-control compliance and a South African FSP-licensed representative. MiCA obligations are assessed separately if EU investors participate. Timeline is longer and the structuring cost is higher, but the structure provides more flexibility for a multi-jurisdiction raise and a potential secondary-market listing on an international exchange.
Profile C – Global STO with South African listing ambition. The most complex profile: the issuer wants the token admitted to trading on a South African licensed exchange post-issuance. This requires the exchange's own listing criteria to be met, secondary-market compliance obligations to be built into the token structure from day one, and ongoing reporting obligations to be embedded in the investor documentation. Counsel in this profile must work across the issuer structure, the exchange's requirements, and the FSCA's market-conduct rules simultaneously.
CTA #2: If a prior structuring attempt stalled – whether at the classification stage, the banking stage, or at exchange access – a second read can surface the structural reason and the route forward. Map your options with our team.
Self-assessment checklist before engaging counsel
Before a first legal engagement, the issuer should be able to answer the following questions clearly. If any answer is uncertain, that uncertainty is itself a structuring risk.
- What specific rights does the token confer? List them in economic and legal terms, not marketing terms.
- In which jurisdictions will the token be offered to investors?
- What is the issuer entity, and in which jurisdiction is it domiciled?
- Have you identified the FSP-licensed intermediaries that will form the distribution chain?
- Has the smart contract been audited, and is the audit report available for disclosure?
- Have you engaged a banking partner and confirmed it will process subscription proceeds?
- If EU investors will participate, has MiCA applicability been assessed?
- Have you received preliminary tax advice in both the issuer jurisdiction and South Africa?
A "no" or "not yet" on any of these items identifies a work stream that needs to be resolved before the offering opens.
Related at OBOLUS
- Token Offerings & Securities practice – end-to-end legal support for token issuers across all major structures and jurisdictions
- Token issuance and offering rules in Switzerland – FINMA's token taxonomy and the Swiss offering regime compared
- Staking service legal framework in Hong Kong – SFC licensing and the regulatory treatment of staking as a financial service
FAQ
Is my token a security?
The answer turns on the substance of the rights the token confers, not its label. Under South African law – and in most flagship jurisdictions – a token that gives holders an economic entitlement linked to the efforts of the issuer or a third party is analysed against the securities-law definitions in the applicable financial-services legislation. Classification requires a formal legal memorandum that examines the token's rights against statutory definitions across every jurisdiction where the token will be sold.
Do I need a MiCA whitepaper?
If the token will be offered to investors in EU member states, MiCA may apply independently of South African law. Whether a whitepaper is required depends on the token's classification under MiCA – as an asset-referenced token, an e-money token, or a general crypto asset – and the size and structure of the offering. A number of exemptions exist, but each has conditions that must be met and documented before relying on them.
How should an airdrop be structured legally?
An airdrop is not automatically exempt from securities law. If the distributed tokens confer investment-type rights, the airdrop may constitute an offer of securities even without a cash subscription. The structure must consider: the rights the airdropped token carries, whether recipients are pre-screened, whether marketing materials create an expectation of return, and the applicable rules in every jurisdiction where recipients are located. A legal opinion scoped to the airdrop's specific facts is the minimum advisable step before launch.
OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance that sit around them. We assess token classification against the substance of rights, not the marketing label – and we advise clients whose structures cross multiple regulatory perimeters simultaneously. Digital assets are the whole of our practice. To discuss your situation, contact info@oboluslaw.com.
By Roman Levitt, Technology & DeFi Counsel – specialising in token classification, smart-contract legal architecture and cross-border digital-asset offering structures.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.