A security token represents an investment - a stake in an asset or enterprise you expect to profit from - and is regulated under securities law. A utility token is meant to provide access to a product or service, not a financial return, and sits outside securities regulation when it genuinely works that way. The distinction decides everything that matters to you as a holder: your legal rights, the protections you get, who can buy and resell, and which rules apply. Most RWAs are securities, because they pay a return from someone else's effort - and labeling a token "utility" does not change that if the economics say otherwise.

The core distinction

A security is about investment and profit; a utility is about use and access. If you buy a token expecting it to appreciate or pay income generated by others, that is the hallmark of a security. If you buy it only to use a service - like paying for access on a network - and not for a return, it can be a utility token.

The test US regulators apply is the Howey test: put simply, if you invest money in a common enterprise expecting profit from others' efforts, it is a security, whatever it is called.

Why most RWAs are securities

A tokenized building, Treasury, or loan pays you a return produced by a sponsor managing the asset. That is the textbook definition of an investment contract, so these tokens are security tokens and the SEC treats them accordingly.

This is not a drawback - it is the source of your protections. Being a security means disclosure, eligibility rules, and an enforceable claim. The genuinely-utility category is much smaller than crypto marketing implies, and a token sold to raise capital with promises of returns is a security no matter what the whitepaper calls it.

What the difference means for you

The practical consequences are large. A security token comes with investor protections, identity verification to buy, and transfer restrictions limiting resale to eligible holders - more rules, but more recourse. A true utility token typically has none of those: you can often buy and move it freely, but you also lack the protections and the enforceable financial claim.

So the label tells you what to expect. For an RWA, "security" is the reassuring answer - it means the thing behaves like a regulated investment. A supposed RWA marketed as a "utility" token to dodge the rules is a warning sign, not a feature.

Don't be misled by naming

Issuers sometimes call a token "utility," "governance," or "reward" to suggest it escapes securities law. Regulators look through the name to the economic reality. If holders put in money expecting profit from the issuer's work, it is a security regardless of the label - and an issuer who gets this wrong exposes both themselves and their investors. As a buyer, judge the economics, not the vocabulary. The deeper legal reasoning is in why these are securities.

Where to go next

• Next: tokenized T-bills vs money market funds.
• The legal basis: why these are securities.
• Glossary: security token.

Sources: U.S. SEC (sec.gov); SEC v. W.J. Howey Co., as of 2026.