Executive Briefing
Every US security token offering begins with a fundamental legal choice: which exemption from registration under the Securities Act of 1933 will govern the offering? This is not a technical question — it is a business strategy question with long-term consequences for investor eligibility, secondary market liquidity, resale restrictions, and state regulatory compliance. The wrong choice creates distribution constraints that cannot be easily undone after tokens are issued. This analysis maps the available pathways, their constraints, and the decision framework that competent token counsel applies when structuring US digital asset offerings.
The Foundational Framework: Why Registration Exemptions Matter
The Securities Act of 1933 requires that all offers and sales of securities either be registered with the SEC (a process requiring extensive disclosure, SEC review, and public prospectus) or qualify for a registration exemption. Registration is time-consuming (4-6+ months for initial reviews), expensive ($500,000-$2M+ in legal, accounting, and underwriting costs), and operationally demanding (ongoing reporting, SOX compliance, quarterly filings).
For most security token issuers — particularly startup projects, alternative fund managers, and real estate developers — registered offerings are impractical. The exemption framework is therefore not a workaround to securities law but the designed pathway for most capital formation in the United States. Understanding which exemption applies determines the entire structure of a token offering.
Security tokens are, definitively, securities. The Howey Test — investment of money in a common enterprise with expectation of profit from others’ efforts — applies to the economic substance of the instrument, not its technical form. Tokens that represent equity interests, debt obligations, fund shares, or real estate ownership interests are securities. The exemption analysis begins from this premise.
Regulation D: The Dominant Pathway
Regulation D provides safe harbor exemptions from Securities Act registration. Three rules within Reg D are relevant for token issuers: Rule 504, Rule 506(b), and Rule 506(c).
Rule 504 permits offerings up to $10 million in a 12-month period. It allows general solicitation in some circumstances and does not restrict investor eligibility to accredited investors. However, Rule 504 does not preempt state Blue Sky securities laws — issuers must qualify the offering in each state where securities are sold. For token offerings distributed nationally, 50-state Blue Sky compliance is operationally prohibitive. Rule 504 is rarely used for security token offerings.
Rule 506(b) is the historical workhorse of private placements. It permits unlimited offering amounts, preempts state Blue Sky laws (a major practical advantage), and allows sales to up to 35 sophisticated non-accredited investors in addition to unlimited accredited investors. The critical restriction: no general solicitation. The issuer may not publicly advertise the offering or use marketing channels to attract investors who have no pre-existing relationship with the issuer. For token projects that want to market their offering publicly — on websites, at conferences, through social media — 506(b) is not available.
Rule 506(c) solves the general solicitation problem. Adopted in 2013 under the JOBS Act, 506(c) permits general solicitation of the offering — unrestricted public marketing — provided that all actual purchasers are accredited investors and the issuer takes reasonable steps to verify accredited investor status. Verification cannot rely solely on investor self-certification; issuers must collect documentation (tax returns, bank statements, third-party verification letters from licensed attorneys or CPAs) confirming accredited investor status.
The 506(c) verification requirement is the primary operational burden. It adds $150-$500 per investor in verification costs and creates document management obligations. For large rounds with many small investors, verification cost and friction can be prohibitive. For institutional rounds where all investors are funds, family offices, or other sophisticated entities, verification is straightforward.
Regulation A+: The Retail Gateway
Regulation A+, amended in 2015 under the JOBS Act and expanded again in 2021, provides a middle path between full SEC registration and Reg D private placements. It permits offerings to retail (non-accredited) investors without full registration, subject to SEC review and ongoing reporting requirements.
Tier 1 permits offerings up to $20 million in a 12-month period. Tier 1 offerings are reviewed by SEC staff (but not subject to a full registration review process) and do not preempt state Blue Sky laws. State coordination is required. Tier 1 is rarely used because the lack of Blue Sky preemption creates the same 50-state compliance burden as Rule 504.
Tier 2 permits offerings up to $75 million in a 12-month period (expanded from $20M originally). Tier 2 offerings must include audited financial statements, an SEC-reviewed offering circular, and ongoing annual and semi-annual reports filed on EDGAR. Critically, Tier 2 preempts state Blue Sky laws for non-issuer dealer transactions — meaning the offering can be sold nationally without state-by-state registration.
Non-accredited investors in Tier 2 offerings face investment limits: the greater of 10% of their annual income or net worth (excluding primary residence) per 12-month period across all Tier 2 offerings. Accredited investors have no investment limit.
For token issuers, Reg A+ Tier 2 is the only straightforward pathway to retail investors without full SEC registration. The trade-offs are material: SEC review of the offering circular takes 6-9 months in practice (sometimes longer for novel structures), ongoing EDGAR reporting is required, and audited financials must be produced annually. These requirements are appropriate for established businesses with operating history but burdensome for early-stage projects.
Regulation Crowdfunding: The Small Offering Option
Regulation CF (Crowdfunding) permits offerings up to $5 million in a 12-month period to unlimited investors, including non-accredited investors, through SEC-registered funding portals. Investors face investment limits based on income/net worth. The maximum individual investment is $2,500 for those with limited income and net worth, scaling to $124,000 for higher-income investors.
Regulation CF is appropriate for community-oriented token projects raising small amounts from large numbers of supporters. The $5M cap makes it unsuitable for most institutional token offerings. The requirement to use a registered funding portal (Republic, Wefunder, StartEngine are the major ones) adds platform fees but provides investor verification and EDGAR filing infrastructure.
For real estate token projects, community investment platforms, and small-scale local tokenization efforts, Reg CF provides a workable structure. For institutional asset tokenization, it is too restrictive.
Holding Period and Resale Restrictions
Securities sold under Reg D exemptions are “restricted securities” subject to resale limitations under Rule 144. The standard holding period before restricted securities can be resold publicly is six months (for reporting companies) or 12 months (for non-reporting companies). Most security token issuers are non-reporting companies, meaning their token holders face a 12-month lock-up before secondary sales are permissible.
This 12-month restriction is a major liquidity constraint for secondary token markets. Tokens sold in Reg D offerings cannot trade on public exchanges or open secondary markets for 12 months post-purchase. After 12 months, Rule 144 permits resale subject to volume limitations and manner-of-sale requirements.
The Alternative Trading System (ATS) pathway — where platforms like Securitize Markets, tZERO, and MERJ operate regulated secondary markets — provides a legal venue for secondary trading of restricted securities between accredited investors during the lock-up period, under separate exemptions. This is the primary secondary market mechanism for security tokens during the 12-month restriction window.
Reg A+ securities are not restricted in the same way. Tier 2 Reg A+ shares are freely tradeable immediately after issuance — a significant liquidity advantage for retail-accessible token offerings.
EDGAR Filing Requirements
All three major exemption pathways require SEC filings, though the requirements vary significantly:
Reg D requires a Form D filing with the SEC within 15 days of the first sale of securities. Form D is a brief notice filing — not a disclosure document — that identifies the issuer, the type of offering, the amount raised, and the exemption claimed. There is no SEC review of Form D; it is an administrative notice. State Blue Sky filings (Form D or state equivalents) may be required in states where investors are located.
Reg A+ requires a full offering circular (similar to a prospectus) filed on Form 1-A. The SEC reviews the offering circular and issues comment letters requiring responses and revisions — a process that typically takes 3-5 rounds of comments. After qualification, ongoing annual reports (Form 1-K), semi-annual reports (Form 1-SA), and current reports (Form 1-U) are required.
Reg CF requires offering documents on the funding portal and a Form C filing with the SEC. Ongoing reporting (Form C-AR annual reports, Form C-U updates) is required.
Integration Doctrine Risk
A critical trap for token issuers running sequential or simultaneous offerings is the integration doctrine. The SEC integrates (treats as a single offering) multiple sales of securities that are part of the same plan of financing and involve the same class of securities. If integrated, an offering that relied on multiple exemptions loses its exemption protection.
Safe harbor rules protect against integration in most circumstances when offerings are separated by more than 30 days (for certain exemptions) or six months (for others). But complex token projects — particularly those combining a Reg D primary offering with a subsequent Reg A+ offering — require careful structuring to avoid integration risk. Competent securities counsel is not optional.
Exhibit: US Token Offering Exemption Comparison
| Feature | Reg D 506(b) | Reg D 506(c) | Reg A+ Tier 2 | Reg CF |
|---|---|---|---|---|
| Maximum Raise | Unlimited | Unlimited | $75M / 12 months | $5M / 12 months |
| Investor Eligibility | Accredited + 35 sophisticated | Accredited only | Anyone (with limits) | Anyone (with limits) |
| General Solicitation | Prohibited | Permitted | Permitted | Via portal only |
| Blue Sky Preemption | Yes | Yes | Yes (Tier 2) | No |
| SEC Review | No (Form D notice) | No (Form D notice) | Yes (6-9 months) | Limited |
| Resale Restrictions | 12 months | 12 months | None | 12 months |
| Ongoing Reporting | None | None | Annual + Semi-annual | Annual |
| Audited Financials | Not required | Not required | Required | Required (>$1.07M raise) |
| Cost (legal + compliance) | $75K-$250K | $100K-$300K | $300K-$800K | $50K-$150K |
| Best For | Institutional / private | Institutional / marketed | Retail access | Small community raises |
State Blue Sky Compliance
The preemption of state Blue Sky laws by Reg D 506(b) and (c) and Reg A+ Tier 2 is one of the most practically important features of these exemptions. Without preemption, issuers would need to register or qualify the offering in every state where investors are located — a process that can take months per state and cost tens of thousands of dollars in state filing fees and legal costs.
Preemption does not eliminate all state obligations. States retain anti-fraud jurisdiction and can bring enforcement actions against fraudulent token offerings regardless of federal exemption status. States also require Form D notice filings and filing fees (typically $100-$500 per state) within specific deadlines. Failure to file state Form D notices is a technical violation that, while not affecting the federal exemption, can create state enforcement exposure.
New York represents a unique complication. New York’s Martin Act is the most expansive state securities law in the United States, and New York’s Attorney General has historically taken aggressive positions on digital asset offerings. The Martin Act covers “fraudulent practices” broadly defined — effectively giving the NYAG enforcement jurisdiction over any investment opportunity sold to New York investors, regardless of federal exemption status.
Practical Decision Framework for Token Issuers
The exemption selection decision reduces to four questions:
1. Who are your target investors? If retail (non-accredited) investors are a core part of the capital formation strategy, Reg A+ Tier 2 is the only viable pathway. If institutional investors and accredited individuals are sufficient, Reg D is faster and cheaper.
2. Do you need to publicly market the offering? Public marketing (website, social media, conference presentations, general advertising) requires 506(c) or Reg A+. Private placements to known investors are available under 506(b).
3. What is your timeline? Reg D offerings can close in weeks. Reg A+ offerings require 6-9 months of SEC review before the first dollar is raised. For projects with urgent capital needs, Reg D is the practical answer.
4. What are your secondary market plans? Reg A+ securities are immediately resaleable, creating superior secondary market liquidity. Reg D securities face 12-month holding periods — ATS trading provides a secondary market but only among accredited investors. If broad secondary liquidity is critical to your offering’s value proposition, Reg A+ is worth the time investment.
Most institutional security token offerings in 2026 will use Reg D 506(c) for primary issuance, with ATS secondary market access through Securitize Markets, tZERO, or similar platforms. Reg A+ remains underutilized in the tokenization space — an opportunity for issuers willing to invest in the longer preparation timeline to reach retail investors directly.