Initial Coin Offering (ICO)

An initial coin offering, or ICO, is a sale of newly generated crypto assets by the person or project that created them, in exchange for money or other crypto assets, to fund the development of a network or application. The SEC's investor bulletin on the subject describes the pattern: promoters "may tell purchasers that the capital raised from the sales will be used to fund development of a digital platform, software, or other projects and that the virtual tokens or coins may be used to access the platform, use the software, or otherwise participate in the project". The name is a deliberate echo of the initial public offering, and the echo is where most of the confusion comes from.

The comparison is worth making precisely once. Both are primary sales, so the money raised funds the issuer rather than paying an earlier holder, though an IPO can also include shares sold by existing shareholders alongside the company's own. There the similarity ends: an IPO is a registered offering of a security, underwritten, with an audited prospectus and continuing reporting obligations, and the initial public offering page covers it. An ICO carries none of those by default. Whether it carries any of them depends on whether what was sold was a security, and if so whether the offering was registered or fitted an exemption, which is a question about the facts of the sale rather than about the technology used to settle it.

Where the law starts. In July 2017 the Commission published a report of investigation on an unincorporated organization called The DAO, which had sold tokens to raise a pool of assets that would be used to fund projects, with holders standing "to share in the anticipated earnings from these projects as a return on their investment". The Commission "determined that DAO Tokens are securities under the Securities Act of 1933 and the Securities Exchange Act of 1934", applying the Howey test, and stressed "that those who offer and sell securities in the U.S. are required to comply with federal securities laws, regardless of whether those securities are purchased with virtual currencies or distributed with blockchain technology". It also, and this is usually left out, "determined not to pursue an enforcement action in this matter based on the conduct and activities known to the Commission at this time". The report was published as guidance rather than as a case.

What followed is described by the Commission itself in its 2026 interpretation: "In the years following publication of The DAO Report, the Commission applied the Howey test, mostly in the context of enforcement actions, to determine whether crypto assets were offered and sold as investment contracts and therefore as securities." The release adds that "Some Commissioners and other commentators expressed concerns about the Commission's approach to crypto assets during this period" and that "Some described that approach as 'regulation by enforcement'". That phrase is worth attributing carefully: the release reports it as a criticism made of the Commission, not as the Commission's own description of what it did.

Where the law stands now. The operative document is the interpretation the SEC issued in March 2026, which the CFTC joined, and two things about its status matter. It "supersedes the Commission staff's Framework for 'Investment Contract' Analysis of Digital Assets (Apr. 3, 2019)", so that 2019 framework, which a great deal of older commentary is built on, is no longer the reference. And it "does not supersede or replace the Howey test, which is binding legal precedent"; it states the Commission's views on how parts of that test apply. The crypto token page sets out the five categories the interpretation uses and is the place to start on classification.

On offerings specifically, the interpretation supplies the analysis directly. A non-security crypto asset "becomes subject to an investment contract when an issuer offers it by inducing an investment of money in a common enterprise with representations or promises to undertake essential managerial efforts from which a purchaser would reasonably expect to derive profits". It then names the ICO as one of two delivery patterns: "In an offering involving immediate delivery, such as through an 'initial coin offering', the issuer agrees to deliver newly generated non-security crypto assets immediately to investors in exchange for their investment", against delayed delivery "such as through a 'simple agreement for future tokens'". In either case, "the sale of the non-security crypto assets occurs at the time of entry into the agreement with the investors", at which point they become subject to an investment contract "regardless of when they are delivered". So the promises made in the marketing, and when they were made, do the work; the delivery schedule does not.

The interpretation also explains how such an asset can stop being subject to the investment contract, which is the part that makes the analysis time-dependent rather than permanent. Where the issuer has fulfilled the essential managerial efforts it represented it would undertake, "the issuer is no longer offering or selling an investment contract and the investment contract itself ceases to exist". The same is true where a purchaser would no longer reasonably expect the issuer to be able to fulfill them, for example where the issuer "effectively 'abandons' the development of a crypto system". One consequence a reader should hold onto: the status of the same token can differ between its original sale and a later trade.

What is proposed and not law. In August 2026 the Commission proposed Regulation Crypto Assets, "new rules to create a tailored offering regime for certain investment contracts involving crypto assets". As proposed it would create two exemptions from the registration requirement of Securities Act section 5: a "startup exemption" permitting offerings of up to $5 million over a four-year period, and a "fundraising exemption" permitting up to $75 million in each 12-month period. Both would require principles-based narrative disclosure, the fundraising exemption would add financial statements and ongoing reporting, and the proposal also includes a conditional safe harbor from the term investment contract. Issuers relying on either "would remain subject to the antifraud and antimanipulation provisions". None of that is in force, the figures are proposal figures rather than current limits, and a proposal can be changed or dropped.

The buyer's position, in the regulator's own words. The SEC's investor bulletin sets out what to establish before participating, and it reads as a list of things an ICO does not automatically supply. Ask "whether the virtual tokens or coins are securities and whether the persons selling them registered the offering with the SEC", and check EDGAR if the answer is yes. Ask "what your money will be used for and what rights the virtual coin or token provides to you", noting that a promoter "should have a clear business plan that you can read and that you understand". Ask "specifically about how and when you can get your money back", including whether there is any right to a refund and any limit on resale. Note that secondary trading may happen on venues that "may not be registered securities exchanges or alternative trading systems regulated under the federal securities laws", so "you may not have the same protections that would apply in the case of stocks listed on an exchange". And note the bulletin's blunt point about recovery: "Investing in an ICO may limit your recovery in the event of fraud or theft. While you may have rights under the federal securities laws, your ability to recover may be significantly limited." The bulletin lists why, and the reasons are structural rather than about anyone's good faith: tracing money is harder without banks in the chain, participants span jurisdictions, there is no central authority holding user information, and crypto in an encrypted wallet is difficult for law enforcement to freeze or secure.

A final point of substance rather than of law. What an ICO buyer is usually buying is a promise about software that does not exist yet, priced by the promise. The DAO Report records how that can go wrong even when everyone is sincere: after the tokens were sold "but before The DAO was able to commence funding projects, an attacker used a flaw in The DAO's code to steal approximately one-third of The DAO's assets". The bulletin's own advice on that front is to ask "whether the blockchain is open and public, whether the code has been published, and whether there has been an independent cybersecurity audit", and the limits of an audit are covered on the smart contract page.

The sequence is short and almost always the same. A project publishes a description of what it intends to build, usually called a whitepaper, which the Commission describes as "a document that describes the technical aspects of a crypto asset project along with other relevant details". It announces terms: how many units will exist, how many are for sale, at what price, over what window, and what the proceeds will fund. Buyers send money or crypto and receive units, immediately in an ICO or at a later date under an agreement for future delivery. The project then does or does not build what it described, and the units may or may not trade on a secondary venue.

A hypothetical, with round numbers. A project offers 10 million units at $0.25 each, so a full subscription raises 10,000,000 times $0.25, or $2.5 million, which goes to the issuer. A buyer who puts in $1,000 receives $1,000 divided by $0.25, or 4,000 units. Notice what that buyer has and has not acquired. They have 4,000 units of an asset whose usefulness depends on software the issuer has promised to write. They have no share of the issuer's company, no claim on its assets and no vote, unless the offering documents happen to grant one. Whether they can get the $1,000 back, sell the units, or compel the issuer to do anything is answered by those documents and by whether the sale was a securities offering, not by the size of the raise.

The practical checks follow from the above and are all pre-purchase. Establish whether the offering is registered, and if the seller says it is exempt, establish which exemption and whether you satisfy its conditions, because most exemptions have income or net-worth tests, which the accredited investor page explains. Read what rights the unit carries. Establish whether the units can be resold and where. And treat the promises about future development as the thing being priced, because under the current interpretation those promises are also what determine whether the asset was sold subject to an investment contract in the first place.

Pros

• An ICO lets a project raise money from the public without an underwriter, a listing or a venture round, which is why the mechanism exists.
• Because it is a primary sale, the proceeds fund the work rather than paying an exiting holder.
• Buyers can participate in early-stage funding that private-offering rules would otherwise reserve for accredited investors, and the units are often transferable much sooner than early-stage equity would be.

Cons

• The asset's usefulness usually depends on software that does not exist yet, so the buyer is pricing a promise.
• There is no automatic disclosure regime. Unless the offering is registered, nothing requires audited financials, a described use of proceeds, or continuing reports.
• A unit typically conveys no ownership of the issuer, no claim on its assets and no governance rights other than whatever the documents grant.
• The SEC's own bulletin warns that recovery in the event of fraud or theft "may be significantly limited", and gives structural reasons rather than circumstantial ones.
• Secondary venues may not be registered exchanges or alternative trading systems, so the protections that attach to a listed stock may not be present.