In US financial regulation, a security is an investment where you put money into a common enterprise expecting profits from the efforts of others (the Howey Test). A commodity is a fungible asset traded on its own merits (like gold or wheat). This distinction determines which regulator oversees a crypto asset: SEC for securities, CFTC for commodities. Bitcoin is generally considered a commodity. Most other tokens exist in a gray zone.
What Is a Security vs. a Commodity (The Structural Legal Distinction)?
3 min read
The short version
Securities are other people will make this valuable for you investments (stocks, bonds). Commodities are the thing itself has market value assets (gold, oil). If you buy a token because a team promised to build something that makes it go up, that sounds like a security. If you buy Bitcoin because it just exists as a decentralized asset with no team promising returns, that sounds more like a commodity. The classification determines who regulates it and what rules apply.
How It Works
The Howey Test (from SEC v. W.J. Howey Co., 1946): an asset is a security if there is (1) an investment of money, (2) in a common enterprise, (3) with an expectation of profits, (4) derived primarily from the efforts of others. For crypto: if a token was sold to fund development by a team that buyers expect to create value, it likely meets Howey. Bitcoin likely does not meet point 4 (no identifiable team whose efforts drive value). Ethereum's status has been debated; the SEC has not formally classified it as a security (as of 2024). Implications: securities must be registered with the SEC or qualify for an exemption. Selling unregistered securities carries massive penalties. This is why the SEC has sued multiple crypto projects (Ripple/XRP, LBRY, various ICOs). Commodities face lighter regulation (CFTC oversight for derivatives, less restriction on spot trading). The classification fight shapes the entire US crypto industry.
Applying the Howey Test to a hypothetical token launch
Team launches BuildToken with a $50M token sale. Pitch: We are building a decentralized storage network. Buy BUILD tokens now. When we launch in 2 years, these tokens will be needed to use the network and their value will increase. Howey analysis: (1) Investment of money: yes, $50M raised. (2) Common enterprise: yes, all buyers invest in the same project. (3) Expectation of profits: yes, pitch explicitly says value will increase. (4) Efforts of others: yes, the team is building the network that supposedly creates token value. Result: likely a security under Howey. Compare: someone buys Bitcoin on an exchange. No team sold it to them with promises. No common enterprise tied to a specific company. Bitcoin exists independently of any promoter. Result: likely not a security.
What People Get Wrong
Calling something a utility token avoids securities law
Labels do not determine legal classification; economic substance does. Calling a token utility while selling it based on expected price appreciation from team efforts does not change the Howey analysis. The SEC explicitly stated that the utility label is irrelevant to classification.
If it is decentralized, it is not a security
Sufficient decentralization MAY remove a token from securities classification (the SEC has hinted this is why Ethereum was not charged). But decentralized is not a bright line. The degree, timing (when did it become sufficiently decentralized?), and nature of decentralization all matter. A token can start as a security (during fundraising) and potentially transition to a non-security (once sufficiently decentralized).
This only matters for US projects
Securities laws exist in every major jurisdiction (EU, UK, Singapore, Japan) with different but often similar tests. MiCA in the EU creates its own classification framework. Projects operating globally face multiple regulatory regimes simultaneously.
Keep Reading
Sources & Further Reading
- SEC Digital Assets
SEC official resources on digital asset regulation
- CFTC Digital Assets
CFTC guidance on crypto commodities and derivatives
Questions People Also Ask
- Is XRP a security?
- In July 2023, a US court ruled that XRP sales on exchanges to retail buyers were NOT securities transactions, but that institutional sales (direct to investors with expectations of profit) WERE. The ruling is partially appealed. The classification is not binary: the same token can be a security in one context and not in another.
- Is Ethereum a security?
- As of 2024, the SEC has not formally classified ETH as a security. The approval of spot ETH ETFs in 2024 suggests the SEC implicitly treats ETH as a commodity (the SEC would not approve a securities ETF through the commodity-ETF pathway). But no definitive ruling or statement has settled this conclusively.
- Does classification affect me as a user?
- Directly: if a token is classified as a security, exchanges may delist it (reducing your ability to trade), issuers may face penalties (affecting token value), and regulatory uncertainty creates market risk. Indirectly: the broader regulatory framework determines what products and services are available to you in your jurisdiction.