Your token is a security if it passes the Howey test - and for most tokenized assets, it does. The test asks four questions: is there an investment of money, in a common enterprise, with an expectation of profit, derived from the efforts of others? If the answer is yes to all four, you are issuing a security token and must follow securities law. As an issuer, assuming the test passes is the safe default.

Why this is the first question

Everything downstream - which exemption you need, who can invest, how you market - depends on whether your token is a security. Get it wrong by assuming it is not, and you can face SEC enforcement, investor rescission, and penalties.

So issuers start here, not as a formality but as the decision that shapes the whole offering. When in doubt, treat it as a security.

The four prongs, applied to your token

Walk a typical tokenized deal through the test. Investors pay money or stablecoins for the token (investment of money). Their funds are pooled in your SPV (common enterprise). They expect income or appreciation (expectation of profit). And that return depends on you sourcing and managing the asset (efforts of others).

Four for four - which is why income-producing RWAs are almost always securities.

The prong that usually decides it

The "efforts of others" prong is where most tokens cannot escape. If holders are passive and you drive the value - managing the property, collecting rent, running the fund - the return comes from your efforts, and the token is a security.

A token only sidesteps this if holders are not relying on a central party's work, which is rare for an RWA with an active sponsor. Decentralization claims on paper do not change the economic reality.

When a token might not be a security

Some tokens genuinely fall outside the test. A true utility token bought only to use a service, not for profit, can fail the "expectation of profit" prong. A pure payment instrument may too. But these are narrow, contested cases.

If you are tokenizing an income-producing asset to raise capital, you are not in this category. Do not design your offering hoping to argue your way out of the test.

What this means for you

Plan for securities law from day one. Assume the token is a security, choose an exemption, and build the compliance to match - rather than launching and hoping the test does not apply. Where your structure is genuinely borderline, that is a specific question for securities counsel on your facts, not a conclusion to reach yourself. The full legal reasoning is in the Howey test explained.

Where to go next

• Next: Reg D 506(c) for security token offerings.
• The deep version: the Howey test explained.
• Glossary: Howey test.

Sources: U.S. SEC (sec.gov); SEC v. W.J. Howey Co., as of 2026.