A security token offering (STO), an ICO, and an IPO are three ways to raise capital that are easy to confuse and very different in practice. An STO sells a regulated security token under an exemption - a real investment with legal rights. An ICO sold unregulated utility tokens, often with no asset or protection behind them. An IPO is a full public listing of company shares. The key split is regulation and what the buyer actually gets.

What each one is

An STO is a primary issuance of a security in token form, done under a securities exemption like Reg D. Buyers receive an enforceable claim - equity, debt, or a share of an asset.

An ICO sold tokens that were pitched as "utility," frequently with no real backing. An IPO registers and lists company shares for the general public on an exchange, with full disclosure and the highest cost and scrutiny of the three.

Regulation and investor protection

This is the real dividing line. An STO is regulated: disclosures, eligibility rules, and legal recourse apply. An IPO is the most heavily regulated of all. An ICO was largely unregulated, which is precisely why so many ended in losses and enforcement.

For an issuer, the lesson is that the STO path gives investors protection and you legitimacy. Trying to run an ICO-style raise on a security today simply invites enforcement.

Cost, speed, and audience

An ICO was cheap and fast because it skipped compliance - an advantage that proved illusory once regulators acted. An IPO is slow and expensive but reaches the entire public market. An STO sits between: more cost and process than an ICO, far less than an IPO, reaching qualified investors under its exemption.

Choose based on your audience and budget. Most private asset raises fit the STO middle ground, not the public-market extreme.

Which applies to you

If you are tokenizing a real asset or raising from investors, you are almost certainly doing an STO - a regulated securities offering - whatever you call it publicly. An IPO suits large companies going fully public; an ICO is not a viable path for a security.

The practical takeaway: build for the STO rules from day one. Investors judge the token side of this in security vs utility tokens for investors.

The numbers behind the split

History makes the contrast vivid. The 2017-18 ICO boom raised well over $20 billion globally, almost all without registration - and the reckoning followed: the SEC's 2017 DAO Report put the industry on notice, and cases against Telegram (which returned about $1.2 billion to investors and paid a penalty) and Kik established that selling these tokens was selling securities. The "cheap and fast" advantage evaporated into litigation.

STOs emerged as the compliant answer. Early examples - tZERO's own token, Blockchain Capital's fund token, and INX, which ran an SEC-registered token IPO in 2021 - showed the model working under real rules. An IPO sits at the far end: underwriting fees commonly run around 7% of the raise, plus millions in legal, audit, and listing costs and months of SEC review, which is why it suits only large companies.

The takeaway for an issuer is unchanged: an STO is not a loophole-free ICO, it is a securities offering done properly. Price in the compliance from the start, because the alternative - skipping it and hoping - is the exact path that produced a decade of enforcement.

Where to go next

• Next: tokenization vs REIT for sponsors.
• The investor's view: security vs utility tokens for investors.
• Glossary: security token.

Sources: U.S. SEC (sec.gov), as of 2026.