Token classification is one of the highest-stakes legal questions a digital-asset business faces. Whether a token is a security, an e-money instrument, an asset-referenced token, or a genuine utility instrument determines which regulatory regime applies, which disclosures are required, and whether a product launch is lawful at all. A utility token legal opinion for institutional clients provides that determination in writing – from counsel who has examined the rights the token actually confers, not the name printed on the whitepaper.
Mis-classifying a token can convert a product launch into an unregistered securities offering. That risk is not hypothetical: regulators across the EU, the United States, the UAE and the United Kingdom have each taken enforcement action against issuers who labelled instruments as utility tokens while the underlying rights pointed firmly toward the investment end of the spectrum. The opinion our practice produces is the document your board, your exchange listing partners, and your institutional investors need before capital is committed.
The sections below set out the regulatory basis for classification, the analytical process we apply, the common structural mistakes that generate legal exposure, the cross-border dimension every issuer must address, and a decision matrix to help you match your token profile to the right instrument and process.
What Is a Utility Token Legal Opinion – and Why Does It Matter to Institutional Clients?
A utility token legal opinion is a formal written legal analysis that applies the relevant regulatory classification tests to a specific token and concludes whether the instrument falls within a regulated category – such as a security, an e-money token, or an asset-referenced token – or sits outside those categories as a genuine utility instrument. For institutional clients, the opinion is not a comfort letter: it is a diligence deliverable, a board resolution annexure, and a gatekeeping document for exchange listings, banking relationships, and institutional investment mandates.
Under MiCA – the EU's Markets in Crypto-Assets Regulation, supervised by ESMA and national competent authorities – tokens are classified into three primary categories: asset-referenced tokens (ARTs), e-money tokens (EMTs), and other crypto-assets (which include utility tokens). Each category carries a distinct set of issuer obligations, whitepaper requirements, and authorisation conditions. A token that falls into the ART or EMT category requires issuer authorisation from the relevant national competent authority. A token that qualifies as an "other crypto-asset" still requires a compliant whitepaper and notification, but the regulatory burden is materially lighter. Getting the category wrong in either direction creates legal exposure.
In the United States, the SEC applies the Howey test (an investment of money in a common enterprise with an expectation of profits from the efforts of others) as the principal classification framework. The CFTC maintains concurrent jurisdiction over commodity tokens, and FinCEN's money-services framework applies to tokens that function as a medium of exchange. In our cross-border practice, we regularly advise issuers who believe their token escapes US securities analysis because it is structured or issued offshore – a conclusion that is frequently incorrect once the facts are examined against the full Howey framework and the SEC's guidance on digital-asset economic realities.
In Dubai, the Virtual Assets Regulatory Authority (VARA) operates an activity-based licensing regime that affects how a token is marketed, distributed, and managed within the Emirate. The ADGM's Financial Services Regulatory Authority (FSRA) applies its own recognised virtual assets framework within the Abu Dhabi Global Market free zone. A utility token that is freely tradeable on a platform subject to VARA oversight may require advisory or exchange activity licensing regardless of the token's classification. The opinion must account for all of these layers simultaneously.
The Classification Test: Why Substance Controls Over Label
Regulatory classification turns on the rights a token actually confers, not the label applied in the marketing document. This is the principle that governs analysis under MiCA, under the SEC's digital-asset guidance, under the UK FCA's cryptoasset framework, and under every leading jurisdiction's approach to token classification. A token whose whitepaper describes it as a utility instrument but whose economic structure creates an expectation of profit from the issuer's managerial efforts will be analysed as a security by the relevant authority.
A common assumption we encounter from issuers is that placing a "utility label" on a whitepaper settles the legal classification. It does not. The ESMA guidance under MiCA expressly requires national competent authorities to look through the label to the substance of the rights conferred. The SEC's framework for digital-asset analysis is built entirely on this principle. Regulators across the UAE, Singapore, and Hong Kong apply the same reasoning. The opinion we produce is therefore not a label-validation exercise – it is a rights-analysis exercise.
The substantive tests we apply across jurisdictions include: whether the token creates a right to profits or revenue sharing; whether the holder depends on the issuer's managerial effort for the token's utility to materialise; whether the token is marketed to investors on the basis of value appreciation; whether the token is fungible, transferable, and liquid in a way that resembles a tradeable security; and whether the whitepaper's economic narrative frames the token as an investment. Each factor is weighted differently under different frameworks, which is why a single-jurisdiction opinion is rarely sufficient for an institutional-grade product launch.
Token classification logic under MiCA explicitly provides that the substance of rights, not the issuer's marketing terminology, determines the applicable regulatory category. We assess each engagement against that principle from the first day of instruction.
How Do We Produce a Utility Token Legal Opinion?
The process is structured in four stages: intake and document review, classification analysis, opinion drafting, and a final sign-off review that addresses any structural changes needed before the opinion can be issued without material qualifications.
At intake, we collect the token's technical documentation (smart contract architecture, token distribution schedule, vesting and lockup terms), the commercial documents (whitepaper draft, pitch materials, investor communications), the corporate structure (issuer entity, jurisdictions of incorporation, target user and investor geographies), and any prior legal work product. The quality of the intake package directly affects the timeline. In our practice, incomplete intake is the single most common cause of opinion delays on institutional mandates.
Classification analysis applies the tests outlined above across each relevant jurisdiction. For an EU-targeting issuer, MiCA analysis is primary, but we also run the FCA analysis (given the UK's parallel regime), the SEC Howey analysis (given the near-impossibility of fully excluding US persons from a token's secondary market), and, where applicable, the VARA or MAS framework. The cross-border mapping produces a classification grid: each jurisdiction, the applicable test, the conclusion, and the degree of residual risk.
Opinion drafting follows a structured format. The opinion states the scope of the engagement, the documents reviewed, the assumptions on which the analysis rests, and the conclusions on classification. Where classification is clear – the token is plainly a utility instrument under all relevant tests – the opinion says so directly. Where risk exists at the margins, the opinion identifies the risk, quantifies it as best the law allows, and recommends structural modifications that reduce it. The opinion is not a guarantee of regulatory outcome, and no responsible counsel offers one.
The final stage is a structural review call with the issuer's team. This is where we address any modifications recommended in the draft – changes to vesting schedules, marketing language, distribution mechanics, or corporate structure – and confirm whether those modifications have been implemented before the final opinion is issued. Institutional clients proceeding to a listing, a fund raise, or a regulated exchange partnership typically require the final opinion to be clean, meaning free of unresolved structural caveats.
For a scoped assessment of your token's classification posture, contact OBOLUS at info@oboluslaw.com. The process above describes the standard path. Your facts – the entity, the user base, the rights structure, the target exchanges – change the analysis. Map your options.
What Are the Common Structural Mistakes That Generate Legal Exposure?
The most expensive mistakes in utility token structuring are rarely obvious at the time they are made. They accumulate in the documentation layer and surface when an exchange's legal team, an institutional investor's counsel, or a regulator reviews the full package. We identify four categories of mistake with regularity across the mandates we advise on.
The first is the profit-sharing wrapper. Issuers who structure token holder benefits as a share of protocol revenue, a fee rebate proportional to supply held, or a buyback-and-burn mechanism that explicitly tracks issuer performance have introduced economic features that push the token toward the investment end of the spectrum under every major classification framework. The utility narrative in the whitepaper does not remove that exposure.
The second is marketing language that emphasises appreciation. Pitch decks, social media campaigns, and even whitepaper sections that describe the token's "value growth potential", reference comparator token price performance, or project future demand as a function of platform adoption create a documented investor-expectation narrative. That narrative is cited by the SEC and, increasingly, by ESMA in classification analyses. Issuers who do not audit their full marketing corpus before issuing an opinion often discover that the opinion needs to be qualified against the marketing record.
The third is the premature secondary-market design. Tokens whose documentation provides for immediate listing on third-party trading platforms, with no lock-up, no use-case prerequisite, and no functional constraint on transfer, have the economic profile of a security even if the rights structure is clean. The timeline from issuance to liquidity is a material classification factor.
The fourth is the corporate-structure mismatch. Issuers who domicile the token-issuing entity in a jurisdiction with a light regulatory touch – the BVI, the Cayman Islands – but market the token to users and investors in the EU, the UK, or the United States have not solved their classification problem; they have created a multi-jurisdictional enforcement risk on top of it. The issuing entity's domicile does not determine which regulatory framework applies to the token's offer and sale. ESMA, the FCA, and the SEC each apply their frameworks on the basis of where the offer is directed, not where the issuer is incorporated.
What Does the Cross-Border Dimension Add to Token Classification?
A utility token issued by an entity in one jurisdiction and marketed to users in ten others faces the classification law of every jurisdiction where the offer reaches a meaningful audience. In our cross-border practice, we routinely map the overlap between the issuer's primary jurisdiction and the user geographies – and the picture is almost always more complex than the issuer's counsel has modelled.
The MiCA passporting mechanism – under which a CASP (crypto-asset service provider) authorised in one EU member state may passport across the EU and EEA – creates an important path for EU-targeting issuers. But passporting covers the service provider's activities, not the token's classification. An issuer whose token is classified as an ART or EMT under MiCA must obtain issuer authorisation from the national competent authority in its home member state, regardless of the number of jurisdictions in which it operates. That authorisation process sits alongside, not instead of, the classification opinion.
Singapore's Monetary Authority of Singapore (MAS) and Hong Kong's Securities and Futures Commission (SFC) each apply their own classification frameworks. The MAS's Payment Services Act creates a Digital Payment Token category that captures tokens functioning as a medium of exchange. The SFC applies a securities-type analysis to tokens whose characteristics resemble those of collective investment scheme units or structured products. An issuer targeting Asian institutional capital alongside European institutional capital needs classification analysis in both the MAS and SFC frameworks, not a single-jurisdiction opinion dressed up as a global clearance.
Allied counsel in the relevant jurisdiction are engaged for analysis under local law in markets where OBOLUS is not the instructed lead, ensuring that the classification grid is built on qualified local analysis rather than extrapolated general principles. This is a structural feature of how we deliver multi-jurisdictional opinions on institutional mandates, not an optional addition.
The cross-border dimension also affects the whitepaper regime. Under MiCA, issuers of "other crypto-assets" must notify the relevant national competent authority before the whitepaper is published. The whitepaper must contain prescribed disclosures and must be accurate at the time of publication. Issuers who simultaneously publish a MiCA-compliant whitepaper and market the token in the US under an exemption from Securities Act registration face the practical challenge of ensuring that their MiCA-mandated disclosure language does not inadvertently satisfy elements of the Howey test. In our experience, this conflict is routinely missed by issuers relying on siloed single-jurisdiction counsel.
Decision Matrix: Matching Token Profiles to Opinion Scope
Not all utility token legal opinions are the same engagement. The scope and complexity of the analysis depend on the token's rights structure, the issuer's target geographies, and the purpose for which the opinion is required. The matrix below describes three common profiles we encounter in institutional mandates.
Profile A – Clean utility instrument, single-geography EU issuer. The token confers access to a defined product or service, contains no profit-sharing or value-appreciation mechanics, is issued by an EU-domiciled entity targeting EU users, and is presented to the national competent authority under the MiCA "other crypto-assets" whitepaper notification regime. The opinion scope is MiCA-primary with a secondary FCA analysis to manage residual UK exposure. Timeline from full intake to final opinion is typically a matter of weeks, assuming the documentation package is complete and no structural modifications are required. Key risk: marketing language audit – a clean rights structure is often compromised by a whitepaper narrative that emphasises token value growth.
Profile B – Token with profit-adjacent features, multi-geography offer. The token's economic structure includes a buyback mechanism, a fee-sharing rebate, or a staking yield linked to issuer revenues. The offer targets institutional investors in the EU, the UK, and Singapore, with secondary market access from day one. This profile requires a full multi-jurisdiction analysis: MiCA ART/EMT risk assessment, FCA cryptoasset classification, MAS Digital Payment Token analysis, and a Howey analysis to assess the degree to which US persons can be meaningfully excluded. The opinion is likely to carry structural qualifications unless and until the profit-adjacent features are restructured. Timeline is longer, reflecting both the additional analytical layers and the structural modification process.
Profile C – Token issued by a regulated entity seeking exchange listing. The issuer holds a VARA licence or an ADGM FSRA authorisation and wishes to list the token on a regulated exchange. The exchange's listing requirements mandate a third-party classification opinion. The analytical framework here overlaps the VARA rulebook, the FSRA recognised virtual-assets framework, and the listing rules of the relevant venue. The opinion is produced to the exchange's legal team as a named third-party addressee. Timeline is exchange-driven, but the analytical work is comparable to Profile A in depth. Key risk: VARA and ADGM FSRA treat overlapping activities differently – an activity that is permissioned under VARA may require a separate authorisation under FSRA if the token is marketed into the ADGM free zone.
If your token profile does not fit neatly into these categories, write to OBOLUS at info@oboluslaw.com. Institutional mandates with unusual structures are precisely where early engagement with counsel produces the most value. A prior application that stalled, or a banking relationship that closed unexpectedly, often traces to a structural issue in the classification layer. Map your options.
How Should Airdrops and Token Distribution Events Be Structured Legally?
Airdrop mechanics are a frequent source of misclassification risk, and the legal structure of a distribution event is directly relevant to the classification opinion. An airdrop is not automatically a gift or a promotional event from a regulatory standpoint; the structure of the distribution, the conditions attached to receipt, and the relationship between the distributed tokens and the issuer's business all bear on classification.
Under MiCA, an offer of crypto-assets to the public generally triggers the whitepaper notification requirement. ESMA guidance specifically addresses airdrops: distributions that are entirely free and unconditional may fall outside the "offer to the public" definition, but distributions that require the recipient to perform a task, hold a prior token position, or participate in an activity that benefits the issuer are treated differently. The "task condition" analysis is nuanced, and the line between a promotional airdrop and a regulated public offer is not always clear from the face of the distribution mechanics.
In the US, the SEC has consistently treated token distributions that build a network, attract users, or generate promotional activity as potentially constituting a securities offering if the token satisfies the Howey analysis. The mechanism of distribution – airdrop versus public sale – does not change the underlying economic reality. An airdrop of a token that satisfies Howey is a distribution of an unregistered security, regardless of whether consideration was paid.
In our practice, we advise issuers to subject airdrop mechanics to the same classification analysis as the token's primary distribution. The opinion should address the airdrop structure explicitly if the issuer intends to use airdrops as a distribution or marketing channel. Failing to do so creates a gap in the opinion's coverage that institutional investors and exchange listing teams will identify immediately.
A practical step often overlooked: the airdrop's geographic scope must be defined in writing before execution. Issuers who airdrop tokens globally and then seek to exclude US persons after the fact have already created the securities-law exposure they sought to avoid. Geographic restrictions need to be built into the smart contract or the distribution platform's KYC layer at the outset, and the classification opinion should confirm that those restrictions are technically and legally adequate for the jurisdictions where exclusion is required.
A Common Assumption: The Whitepaper Settles Classification
A common assumption among first-time institutional issuers is that a carefully drafted whitepaper that describes the token as a utility instrument, and that avoids the language of investment returns or dividends, is sufficient to establish the token's legal classification. It is not.
The whitepaper is one input into the classification analysis. It is not the analysis itself. Regulators – and the lawyers advising institutional investors, exchanges, and banks who review a token before committing capital or services – look at the full package: the smart contract code, the tokenomics model, the vesting schedule, the capitalization table for the issuer entity, the pitch materials distributed to early investors, and the public communications of the founding team. A whitepaper that says "utility token" next to a tokenomics model that shows a buyback-and-burn schedule funded by issuer revenues and a founding team that holds thirty percent of supply with a two-year cliff is not going to produce a clean classification opinion, regardless of how carefully the whitepaper's language has been curated.
In one recent engagement, a token issuer approached us after a tier-one exchange rejected their listing application on classification grounds. The whitepaper had been prepared with care; the language was precise and the utility mechanics were described clearly. The exchange's legal team had nonetheless declined the listing because the pitch deck distributed to seed investors – a document that had not been reviewed alongside the whitepaper in the prior legal work – framed the token as an appreciating asset and referenced the issuer's revenue model as a driver of token value. We reviewed the full document corpus, identified the exposure, and advised on the structural and documentary modifications required to bring the package into alignment. The classification was eventually supportable, but the path required more work than the issuer had anticipated when they assumed the whitepaper was sufficient.
That experience is not unusual. It is the practical consequence of treating token classification as a drafting exercise rather than an analytical one. The opinion we produce is a conclusion reached by analysis, not a label applied by drafting.
Related at OBOLUS
- Token Offerings and Securities Practice – the full regulatory and advisory scope of our token practice
- Token Legal Classification: The Disputes Angle – how classification errors surface in enforcement and recovery proceedings
- Utility Token Legal Opinion for Regulated Entities – classification opinions scoped for licensed VASPs and CASPs
FAQ
Is my token a security?
Whether a token is a security depends on the rights it confers and the jurisdiction in which it is offered, not the label attached to it. In the US, the SEC applies the Howey test; in the EU, MiCA's classification framework distinguishes ARTs, EMTs, and other crypto-assets; the FCA, MAS, and SFC each apply their own frameworks. A formal classification opinion – examining the full document corpus against each applicable test – is the only legally defensible answer to this question for an institutional issuer.
Do I need a MiCA whitepaper?
Under MiCA, issuers offering crypto-assets to the public in the EU generally must publish a compliant whitepaper and notify the relevant national competent authority before the offer opens. ART and EMT issuers face additional authorisation requirements. Certain exemptions exist – offers below a defined volume threshold, purely private offers, and genuinely unconditional airdrops may fall outside the whitepaper obligation – but the applicability of any exemption must be assessed against the specific facts of the offer, not assumed from the structure.
How should an airdrop be structured legally?
The legal structure of an airdrop depends on whether the distribution constitutes a regulated public offer under the applicable frameworks. Unconditional distributions to existing token holders may fall outside the MiCA whitepaper requirement; distributions conditional on task completion or network participation are treated more cautiously. In every case, the airdrop's geographic scope must be defined before execution, with technical restrictions on US persons where the underlying token raises Howey concerns. The classification opinion should address the airdrop mechanics explicitly, not treat them as a separate matter.
About OBOLUS
OBOLUS is an independent digital-asset law boutique acting only for businesses. Digital assets are the entirety of our practice. We advise exchanges, custodians, token issuers, and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking, and compliance structures that sit around them. We assess classification against the substance of rights, not the marketing label. To discuss your token structure, contact info@oboluslaw.com or reach us at t.me/oboluslaw.
By Roman Levitt, Technology and DeFi Counsel – advising institutional token issuers on cross-border classification, whitepaper structuring, and the technology-law interface across the major digital-asset frameworks.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.