Document type: Guide Practice area: Corporate — Securities Jurisdiction: United States (federal and state) Last reviewed: 5 September 2026
Who this is for
Two audiences with different problems: a company planning to create and distribute a digital asset, and a company planning to list, custody, or trade assets other people created.
Our examples are Palisade Protocol, a 55-person company in Denver building a decentralized compute network and planning a token, and Ravenspur Exchange, a 180-person trading venue and custodian. Palisade's general counsel is Nkem Vasilenko-Duarte; Ravenspur's is Solomon Achterberg-Reyes.
The single most important structural point in this guide is the order of the work. Companies routinely spend two years on the securities analysis and then discover the money transmission problem. Do it the other way around.
Step 1 — Determine money transmission status, first
Why first. It applies more broadly than the securities analysis. It carries criminal exposure under 18 U.S.C. § 1960, which reaches conducting an unlicensed money transmitting business including one that fails to register federally or operates without a required state license. And state licensing is a project measured in eighteen months and millions of dollars, so a company that discovers the requirement at launch has already lost.
The federal analysis. The Bank Secrecy Act, 31 U.S.C. § 5311 and following, reaches financial institutions, defined in 31 U.S.C. § 5312 to include money services businesses. A business that accepts and transmits value substituting for currency is generally a money transmitter. If so: register with FinCEN, and build an anti-money-laundering program meeting 31 U.S.C. § 5318 — designated compliance officer, written policies and procedures, training, independent testing, customer identification, recordkeeping, and suspicious activity reporting.
Ask the questions that actually decide it:
- Do we ever hold customer funds or assets, even momentarily?
- Do we move value between persons?
- Do we convert between assets, or between an asset and fiat?
- Do we control keys that can move someone else's assets?
- Do we operate any custodial wallet, escrow, or settlement function?
A yes to any of these starts the analysis. A pure software publisher that never holds or moves customer value is in a different position from a company that does — but the distinction has to be real in the architecture, not just in the marketing.
The state analysis. Most states license money transmitters, with their own definitions, thresholds, net worth requirements, surety bonds, permissible investment rules, and examinations. Several have digital-asset-specific frameworks. There is no preemption. Map the states where customers are, get the licensing plan and timeline, and decide whether to restrict availability while licenses are pending.
Palisade's answer was that it does not custody or transmit — the protocol is non-custodial and the company never touches user assets. Vasilenko-Duarte documented that conclusion with an architecture description signed off by engineering, because the answer depends on facts that a product change could alter.
Ravenspur's answer was yes, comprehensively, and the licensing project became the company's largest compliance workstream.
Step 2 — Set the entity and treasury structure
Decide who does what before the token exists.
The operating company develops software and employs people. A foundation or separate entity is often used to hold and distribute tokens and to fund ecosystem development. Whether that separation is respected depends entirely on whether it is real: independent directors, its own budget and staff, its own decision-making, arm's-length agreements with the operating company. A foundation that is a wholly controlled affiliate with the founder as sole director is a subsidiary with a different letterhead.
Watch the Investment Company Act. An entity whose assets consist substantially of tokens that are themselves securities can meet the definition of investment company under 15 U.S.C. § 80a-3. Treasury entities and foundations holding diversified token portfolios need this analyzed, not assumed away.
Watch adviser status. A person advising others about securities for compensation is an investment adviser under 15 U.S.C. § 80b-2. Some token fund and treasury management arrangements fall inside this without anyone intending it.
Design treasury policy now. What proportion of supply the company and foundation hold, on what vesting, subject to what sale restrictions, with what disclosure. Treasury sales into the market are transactions, and each one requires the same analysis as the original distribution. A company that has not written a treasury sale policy will make ad hoc sales under cash pressure, and those sales will be the most difficult facts in any later proceeding.
Set up governance. Who approves token transactions, who approves communications, who approves listings, and what gets escalated. Name people.
Step 3 — Run the transaction-by-transaction securities analysis
Not "is our token a security." For each transaction we will participate in, what are we selling, to whom, on what representations, and what are they relying on us to do?
List the transactions. For Palisade: the institutional raise; a distribution to node operators who contribute compute; treasury sales; exchange listings; secondary trading; and use of the token to pay for compute on the network.
Apply the Howey elements to each: an investment of money, in a common enterprise, with a reasonable expectation of profits, derived from the efforts of others. Remember that United Housing Foundation, Inc. v. Forman, 421 U.S. 837 (1975) turns the profits element on what actually motivated purchasers, and that SEC v. Edwards, 540 U.S. 389 (2004) forecloses the argument that a fixed return is not a profit.
Run the notes analysis separately where the arrangement is functionally a loan, a yield product, or an interest-bearing account. Reves v. Ernst & Young, 494 U.S. 56 (1990) applies a family-resemblance test with a presumption that a note is a security.
Do not stop at the securities question. For each transaction also ask: money transmission; commodity-side exposure, remembering that 7 U.S.C. § 9 gives the CFTC antifraud and anti-manipulation authority over spot markets; state blue sky; tax characterization; sanctions.
Write it down. The memorandum is covered in Step 10, and it is the most valuable document the project will produce.
Step 4 — Choose the distribution structure
If the sale is a securities transaction — and the initial fundraise almost always is — pick an exemption and comply with it properly.
Rule 506(b) permits a private placement without general solicitation, to accredited investors and up to 35 sophisticated non-accredited investors. No public marketing, no conference announcements, no tweets about the raise.
Rule 506(c) permits general solicitation but requires verification of accredited status. Self-certification is not verification. Use a third-party verification service and keep the records.
Either way: file the Form D notice, make the state notice filings, and impose transfer restrictions that actually work in the token's transfer mechanism where possible.
Understand what you are selling. A simple agreement for future tokens is a security. The tokens delivered under it are delivered pursuant to that security, and the resale analysis follows them.
Then design the non-sale distributions. Tokens delivered for services — running nodes, providing compute, contributing storage — have much better facts, because the recipient contributed effort rather than money and plausibly wants to use the network. Airdrops to people who did nothing are a weaker version of the same argument and have their own tax consequences for recipients.
And design the resale problem out, or accept it. Securities sold in a private placement are restricted, and listing them on a public venue is a resale requiring registration or an exemption. This is where token projects most reliably lose the thread. Options: extend lockups until an exemption is available; stage the network launch so genuine use precedes liquidity; restrict which venues the token trades on; or register. What is not an option is treating fungibility and on-chain transferability as though they dissolved the restriction.
Step 5 — Write disclosure for a hostile reader
The whitepaper is a disclosure document. Treat it as one. It is a statement in connection with the purchase or sale of the asset, and if the asset is a security it is actionable under Section 10(b) and Rule 10b-5. Even where it is not, FTC Act § 5 and state consumer protection statutes reach deceptive claims, and the CFTC's authority under 7 U.S.C. § 9 reaches fraud in spot commodity markets.
What has to be accurate, because these are the claims that get tested:
- Token supply and issuance schedule. Total supply, allocations to founders, company, foundation, investors, ecosystem, and public. Vesting for each. What can change the schedule and who decides.
- What the token does. Present tense for what exists; future tense clearly labeled for what does not.
- Governance and control. Who can change the protocol, who holds upgrade or admin keys, what emergency powers exist.
- Funds raised and use of proceeds.
- Team and their holdings.
- Risk factors, written properly rather than as a formality — technical, regulatory, market, key-person, competitive, and the risk that the regulatory characterization is wrong.
What to remove. Price projections. Return language. Comparisons to other assets' performance. "Investment" framing. Claims of listings not yet agreed. Claims about supply mechanics — burns, buybacks, deflationary design — that the company cannot control or that function as returns.
And write the private placement memorandum separately for the securities offering. The whitepaper is a technical and product document; the offering document is a risk document. Companies that use one document for both produce something that is inadequate as disclosure and misleading as marketing.
Step 6 — Adopt the communications policy
This is the highest-leverage, lowest-cost step in the entire guide, and it is the one companies resist hardest.
Public communications are the largest category of adverse evidence in every enforcement action in this sector. Every statement about roadmap, listings, partnerships, burns, buybacks, supply, or price is evidence that the market looks to the company's efforts — which is the Howey element most likely to determine the outcome.
The policy:
- Nobody discusses price. Not the founders, not the community manager, not an engineer in a Discord channel. No price commentary, no price targets, no "we think this is undervalued," no retweets of price analysis.
- No listing announcements before they are agreed and no speculation about them.
- No return, yield, or investment framing anywhere.
- Roadmap statements are labeled as plans, dated, and qualified, and someone tracks whether they came true.
- One approval path for anything public, including social posts, AMAs, podcasts, and conference talks.
- The policy applies to founders. It exists because of founders.
- Train the community team, who generate the most volume and have the least training.
- Archive everything. You will need to know what was said, and so will everyone else.
Palisade's founders lost real marketing momentum to this policy and Vasilenko-Duarte's assessment was that it was the cheapest protection available. A single founder tweet about price can carry more weight in an enforcement analysis than a hundred pages of legal memoranda.
Step 7 — Build the operational compliance stack
Sanctions screening. Blocking obligations reach transactions with sanctioned persons, jurisdictions, and specifically designated wallet addresses. Screen counterparties and addresses, block and reject correctly, and report. The prohibition operates on strict liability principles; intent is not a defense.
Customer identification, where you have customers, at the standard the money transmission analysis requires.
Transaction monitoring and suspicious activity reporting, if you are a money services business.
Geographic restrictions. Decide which jurisdictions you serve, implement the restriction technically rather than by attestation, and document it.
Tax and reporting. Digital assets are property for federal income tax purposes: every disposition is a realization event, payments in tokens are barter transactions valued at fair market value, and token grants to service providers raise compensation timing questions. Broker reporting obligations for digital asset transactions are evolving; confirm the current requirements. Give recipients of distributions accurate information.
Records. Every distribution, every treasury transaction, every listing decision, every communication approval, every version of the analysis.
Step 8 — Launch, and then keep the analysis alive
Before launch, run a readiness review covering: money transmission position confirmed and licenses in place or availability restricted; securities analysis complete and current; exemption complied with and filings made; disclosure documents final and reviewed; communications policy adopted and trained; sanctions and identification controls live; treasury policy approved; governance and approvals documented; and an incident plan for the day something goes wrong.
Then diarize the review. The analysis is a snapshot of facts that change: the token distribution changes as vesting occurs, control changes as governance evolves, use changes as the network matures, and the company's communications accumulate. Update the memorandum at least annually and on any material change — a governance change, a new product, a listing, a significant treasury transaction, a change in who controls upgrades.
A three-year-old memorandum describing a network that no longer exists is worse than none, because it documents a conclusion the company can no longer support and shows that nobody looked again.
Step 9 — The intermediary track: build a listing committee that is a legal control
For Ravenspur and every venue like it, listing decisions are the central legal risk, because each one is a decision about whether the firm is trading securities.
Make the committee a real body. Standing membership including legal and compliance, a quorum, minutes, and a named approver for each decision.
Require a written analysis per asset, not a summary. It should cover: the asset's original distribution and whether it was a securities offering; the current state of decentralization across development, governance, upgrade authority, token concentration, and economics; the issuer's public communications; whether there is an identifiable promoter; commodity-side characterization; money transmission implications; sanctions exposure; and market integrity factors including liquidity, concentration of holdings, and known manipulation.
Document the load-bearing facts and the monitoring plan. What would change the conclusion, who watches for it, and how often.
Set delisting triggers in advance, in writing: a regulatory action against the issuer, a material change in control or governance, a failure of the monitoring criteria, a loss of liquidity, or an integrity event. Triggers agreed before an asset is listed are triggers that can actually be pulled; triggers debated after a delisting would cost revenue are not.
Re-review on a schedule, not only on news.
And keep the record. The listing file is what a regulator will ask for, and it is what distinguishes a firm that made a considered judgment from one that listed whatever had volume.
Step 10 — The intermediary track: design custody so customers are owners
The three questions are whose assets, where are the keys, and what happens on insolvency. Get consistent answers across three documents written by three different teams.
The customer terms of service. Do they say the customer retains ownership, that assets are held for the customer's benefit, that the firm has no right to use, lend, pledge, or rehypothecate, and that assets are segregated from the firm's own? Or do they contain a grant of rights that converts the customer into a creditor? Read the actual current version, not the one counsel drafted three amendments ago.
The operational reality. Are customer assets actually segregated on-chain and in the books? Who holds keys, under what controls, with what quorum? Is there commingling in fact, even where the terms prohibit it? Is there an omnibus wallet, and can individual entitlements be reconstructed from records?
The accounting and disclosure treatment. How are customer assets presented, and does that presentation match the legal analysis?
Reconcile them. Ravenspur's three documents disagreed. Reconciling took four months and changed the terms in two material respects — and it is the work that determines, if the firm ever fails, whether customers get their assets back or file claims.
Then prove it. Reserve attestations, proof-of-reserves reporting, independent examination, and an internal reconciliation cadence. A claim of full backing that cannot be demonstrated is a disclosure exposure under FTC Act § 5 and, where securities are involved, under Rule 10b-5.
And analyze the yield product separately, if you have one. Paying customers a return on deposited assets is a note or an investment contract on almost any reading — Reves supplies the framework and Edwards forecloses the fixed-rate argument. Most firms that ran the analysis honestly discontinued the retail version.
Step 11 — Write the memorandum
The deliverable that ties the whole project together.
Structure it by transaction, with a section for each, not by asset.
State the facts relied on with specificity. Not "the network is decentralized" but the number of independent contributors, who controls the repository and upgrade keys, the distribution of supply, who funds development, what proportion of activity is genuine third-party use, and what the company has said publicly.
Identify the load-bearing facts and state what would change the conclusion.
Address the adverse facts and the adverse authority. A memorandum that omits the founder's tweet is marketing. The tweet will be found.
Cover all the regimes: securities, money transmission and Bank Secrecy Act, commodity-side including § 9, state licensing and blue sky, investment company and adviser status, tax, sanctions, consumer protection.
Date it. Update it. Version it.
Write it for a hostile reader — the enforcement lawyer. A memorandum written to that standard also satisfies the acquirer's diligence team, the listing committee at the venue you want, and the board.
Step 5A — Selecting counsel and scoping the work
A brief practical note, because getting this wrong is expensive in a specific way.
You need more than one specialty. Securities counsel who has done token work. Money transmission and Bank Secrecy Act counsel, which is a different practice and frequently a different firm. Tax counsel who has handled digital asset characterization. Sanctions counsel. For an intermediary, add custody and insolvency counsel. A single generalist covering all of this will produce a memorandum that is confident where it should be careful.
Scope the money transmission work first and separately, per Step 1, with its own budget and its own timeline. It is not a subsection of the securities memorandum.
Insist on a written product. Verbal comfort is worth nothing in an enforcement posture and cannot be produced in diligence. If counsel will not write it down, that is information about the strength of the position.
Ask for the adverse view. A memorandum that reaches the conclusion the client wanted, with no discussion of the contrary authority or the difficult facts, has not done the work. Ask explicitly: what is the government's best argument, and what facts would we least like to explain?
Budget realistically. For a token launch with a proper multi-transaction analysis, real disclosure documents, and an exemption executed correctly, legal costs in the mid-six figures are ordinary. For an intermediary adding licensing, custody reconciliation, and a listing framework, higher. Companies that budget a fraction of this end up with a two-page opinion letter that answers the malformed question.
And keep the privilege discipline. The analysis is legal advice; the marketing is not. Do not paste sections of the memorandum into a whitepaper, do not circulate drafts to the community, and do not let the conclusion become a public claim — "our counsel confirmed the token is not a security" is a sentence that waives what it invokes and overstates what any memorandum can say.
Step 6A — Airdrops, incentives, and the distributions that look free
Distributions without a purchase price look like the safe option and frequently are not.
A true gift to strangers is a weak Howey case. There is no investment of money, and the first element is hard to satisfy. Distributions with no conditions, no registration, no task, and no reciprocal value are the cleanest version.
But most "airdrops" are not that. Recipients are asked to connect a wallet, complete tasks, hold another asset, provide liquidity, refer users, or maintain activity over a period. Each of those is arguably a contribution of value to the promoter, which puts the investment element back in play. And the purpose of these programs is nearly always to create a market and a holder base that expects the company to make the network valuable — which supplies the expectation-of-profits and efforts-of-others elements comfortably.
Ask three questions about any distribution:
What did the recipient give up? Money, effort, data, a lockup, forgone alternatives, or nothing at all.
What were they told to expect? A functioning network they will use, or an asset that will appreciate. Program marketing is the evidence, and "farm this for the upcoming token" is not a consumption story.
Who are they relying on? If the answer is the company, the analysis is the same as for a sale.
Then the practical consequences.
Tax. Recipients generally have income on receipt at fair market value, and many will not know it. A program that hands unsophisticated recipients a tax liability they did not anticipate creates a real problem for the company's relationship with its own community. Provide information; do not provide tax advice.
Sanctions and geography. A distribution is a transfer of value. Screen. Exclude restricted jurisdictions technically, not by clicking a box.
Securities law does not disappear because nobody paid. Howey asks about the transaction as a whole, and a program engineered to build a speculative holder base is analyzed on what it is, not on the absence of an invoice.
And distributions for genuine contributed services — running a node, providing compute or storage, operating infrastructure — remain the strongest facts available to a project. Recipients contributed effort, receive an asset they can use in the network they are helping to run, and have a plausible consumption motive. Build the distribution around that where the network permits it.
Step 7A — The treasury sale policy, which nobody writes until it is too late
A company holding a large share of its own token will eventually sell some. Those sales are transactions, each requiring the same analysis as the original distribution, and they are made under cash pressure by people who are not thinking about that.
Write the policy before the token exists.
Who approves. A named committee, with legal represented, and a quorum. Not the chief executive alone, and not the treasurer alone.
What triggers a sale. Operating runway below a stated threshold; a budgeted ecosystem grant; a defined liquidity provision program. Sales for any other reason go to the board.
Volume and pacing limits. A maximum percentage of trailing average daily volume, a maximum per period, and a rule against selling into a thin market. Concentration and pacing are what turn a treasury sale into a market impact story.
Blackouts. No sales in the window before a material announcement — a listing, a governance change, a partnership, a security incident disclosure, a funding round. This is the rule that most closely resembles the securities compliance a public company would run, and it exists for the same reason.
Method. Over-the-counter with a lockup on the buyer, on-venue with pacing limits, or a scheduled program adopted in advance and executed mechanically. A pre-adopted, non-discretionary program is meaningfully better than discretionary sales, for the same reasons it is in equity markets.
Disclosure. Whether, when, and how treasury movements are disclosed. Silence combined with visible on-chain movement is worse than disclosure, because the community reconstructs the transaction anyway and concludes it was concealed.
Records. Every sale: date, amount, counterparty, method, approver, and the trigger relied on.
And the same discipline for insiders. A personal trading policy covering founders, employees, advisers, and their affiliates: disclosure of holdings, blackout periods, pre-clearance, and a prohibition on trading on non-public information about listings, protocol changes, partnerships, or incidents. Insider trading in this sector has been charged under both securities and wire fraud theories, and the company's own exposure turns on whether it had a policy and enforced it.
Step 8A — How Palisade and Ravenspur actually sequenced it
Palisade Protocol — fourteen months from decision to launch.
Months 1–2. Money transmission analysis first, documented with an architecture description signed off by engineering. Answer: non-custodial, not a transmitter — conditional on the architecture staying non-custodial, which became a standing engineering constraint rather than a legal opinion filed away.
Months 2–4. Entity structure. Operating company and an independent foundation with two outside directors, its own budget, and an arm's-length services agreement. The Investment Company Act analysis for the foundation's treasury holdings was run and documented.
Months 3–6. The transaction-by-transaction analysis. Six transactions, six sections. The institutional raise came back clearly as a securities offering, which the founders had not expected and which changed the fundraise.
Months 5–8. The raise, restructured as a Rule 506(b) private placement to accredited investors with real risk disclosure, transfer restrictions, a Form D filing, and state notices.
Month 6. Communications policy adopted. The founders lost momentum and complained about it for a year. Vasilenko-Duarte's view is that it was the best money the company never spent.
Months 8–13. Network build, node operator distribution designed around contributed compute rather than contributed money, sanctions screening, geographic restrictions implemented technically.
Month 14. Launch, after a readiness review that caught two gaps — an unrestricted treasury sale path and a Discord channel outside the communications approval flow.
Ravenspur Exchange — the intermediary's twenty-two months.
Months 1–18. Money transmission licensing, running the whole time. FinCEN registration in month one; state licensing state by state, with availability restricted where licenses were pending. The largest, slowest, most expensive workstream, and the one that determined the company's launch map.
Months 2–6. Custody reconciliation. Terms of service, operational reality, and accounting treatment compared line by line. They disagreed. Two material terms changed; segregation was rebuilt; the insolvency analysis was written by counsel who had actually litigated one.
Months 4–8. Listing committee stood up: standing membership, written analysis per asset, named approvers, monitoring plans, and delisting triggers agreed before any asset was listed.
Month 9. Yield product analyzed under Reves and Edwards, and discontinued for retail.
Months 10–22. Anti-money-laundering program build and independent test, sanctions screening, banking relationships (declined twice before the program was mature enough), insurance, and reserve attestation engagement.
The common lesson. Both companies' longest pole was not the securities analysis everyone talks about. It was money transmission for Ravenspur and entity-plus-disclosure discipline for Palisade. Sequence the work by duration and by criminal exposure, not by how interesting the question is.
Step 9A — When something goes wrong
Every company in this sector eventually handles one of five events. Decide the response now.
A regulatory inquiry. A subpoena, a request for information, an examination notice. Engage counsel the same day. Suspend routine deletion and issue a litigation hold immediately — in this sector the hold has to cover chat platforms, Discord, Telegram, and personal devices used for company business, which is where the discovery problems live. Do not respond substantively before scoping. Do not let engineers or community managers answer regulator questions informally. And produce the token analysis memorandum early: a company that thought about the questions before acting is in a materially different position from one that did not.
A security incident. Keys compromised, funds moved, a contract exploited. Have an incident plan with a named commander, a technical response path, a communications path, and a legal path. The decisions that will matter later are made in the first six hours: whether to pause the protocol if you can, what to say publicly, whether to contact law enforcement, and whether to attempt recovery. Preserve evidence. Write the timeline as it happens.
An operational failure. A failed redemption, a halted withdrawal, a depeg. The instinct is to say nothing until it is fixed. That instinct is wrong and it is the single largest source of fraud exposure in this sector, because silence during a run becomes, in retrospect, a misrepresentation by omission. Say what is true, say what you do not know, and say when you will update.
A counterparty failure. A custodian, a venue, a lending counterparty, or a banking partner fails. Know your exposure to each in advance and be able to state it in an hour, not a week.
An employee or founder problem. Trading on non-public information about listings or protocol changes; undisclosed token holdings; sales outside the treasury policy. Have a personal trading policy, require disclosure of holdings, and enforce it. Insider trading in digital assets has been prosecuted under both securities and wire fraud theories, and the company's exposure runs to whether it had controls.
Across all five: the response is judged against the controls that existed beforehand. Write the plans while nothing is happening.
Step 10A — Vendor, banking, and insurance realities
The legal analysis is necessary and not sufficient. Several practical dependencies decide whether a project can operate at all, and they take longer than founders expect.
Banking. A digital asset business needs banking relationships, and obtaining them is a diligence process in which the bank's compliance function evaluates the company's compliance function. What the bank will ask for: the money transmission analysis and licenses, the anti-money-laundering program and its independent test, the sanctions screening design, the customer identification procedures, the flow of funds, the source-of-funds analysis for the treasury, and the resumes of the compliance staff. Start banking conversations six to nine months before you need the account, and understand that a thin compliance program is the reason applications are declined.
Payment and fiat on-ramps. Same diligence, plus the card network rules and processor policies that apply to this sector.
Insurance. Directors and officers coverage for digital asset businesses is available, expensive, and heavily conditioned. Crime and specie coverage for custodied assets is a specialist market with its own control requirements — key management standards, quorum requirements, cold storage ratios. Expect the insurer's requirements to drive operational design, and get them early enough that the design accommodates them.
Auditors. Attestation and audit for this sector is a small market. Proof-of-reserves and reserve attestations require an engagement scoped to a standard, and the standard matters: an "attestation" that is a management assertion with an accountant's cover page is not what customers understand it to be. Say precisely what was examined, by whom, and to what standard.
Exchange listing diligence. If you want your asset listed, a venue's listing committee will run the analysis in Step 9 on you. Prepare the package: the token analysis memorandum, distribution and vesting schedules, governance and upgrade authority documentation, the communications archive, and audit reports for the code. A project that can hand this over is listed faster and on better terms.
And build the relationships before the crisis. Every dependency in this list is much harder to establish under pressure — after a regulatory contact, an incident, or a market event — than in an ordinary quarter.
Step 11A — Stablecoins, if that is what you are building
A stablecoin issuer runs every step above plus a set of questions specific to the promise it is making.
Say exactly what the promise is. Fiat-backed and redeemable at par? Over-collateralized by other digital assets? Maintained algorithmically? These are three different products with three different legal analyses, and issuers describe them interchangeably.
For a reserve-backed coin, answer the reserve questions in writing:
- What are the reserves invested in? Cash, deposits, short-dated government obligations, commercial paper, other. Concentration and duration.
- Where are they held, at which institutions, in whose name?
- Are they segregated and bankruptcy-remote from the issuer's own estate, and by what mechanism — a trust, a special purpose entity, a state trust charter?
- Who has a claim, in what priority, and what happens if reserves fall short?
- Is redemption a legal right or a discretionary practice? Under what terms, on what timeline, subject to what minimums and fees, and can it be suspended?
- What attestation or audit supports the backing claim, at what frequency, by whom, and against what standard?
Every representation about backing is a disclosure exposure, reachable by FTC Act § 5 and, if the instrument is a security, by Rule 10b-5. "Fully backed" that turns out to mean "backed by a portfolio including illiquid assets" is the recurring failure mode.
Money transmission is near-certain. Issuing and redeeming a payment instrument sits close to the core of the definition. Do this analysis first, per Step 1.
Yield changes everything. A stablecoin that pays holders a return has moved into Reves and Howey territory: the return comes from somewhere, and holders are relying on the issuer's management of whatever generates it. Edwards forecloses the fixed-rate argument.
And check the current statutory landscape rather than a description written earlier. Federal payment stablecoin legislation has been the subject of sustained attention, and a framework that imposes issuer licensing, reserve composition, and redemption requirements changes the analysis materially. Confirm where the law stands before advising.
Step 12 — Run the program after launch
Quarterly: treasury transactions reviewed against policy; communications audit; distribution and vesting reconciliation; sanctions screening effectiveness; listing file reviews for intermediaries.
Annually: memorandum refreshed; decentralization facts re-measured; money transmission and licensing footprint re-checked against where customers actually are; independent testing of the anti-money-laundering program; policy training.
On event: any governance change, any change in upgrade authority, any new product, any new listing, any material treasury sale, any regulatory contact, any litigation.
And keep one person accountable. Not "legal and product jointly." A named owner who can stop a launch, block a communication, and pull a listing. In this sector the gap between a company that has that person and one that does not is visible from outside within about six months.
Related documents
- Digital Assets and Securities Regulation: Howey, Custody, Exchanges, and Stablecoins
- Digital Asset Compliance Checklist: A Practical Checklist
- Digital Asset Toolkit: Token Analyses, Custody Terms, and Disclosure Language
- Cryptocurrency and Digital Asset Regulation in the United States
- Securities Compliance for Startups: Regulation D, Rule 506, Blue Sky, and Form D
- Anti-Money Laundering and the Bank Secrecy Act: KYC, SARs, and Beneficial Ownership Reporting
This guide is general information, not legal advice, and does not create an attorney-client relationship.