SEC & CFTC Say Most Crypto Is Not a Security: What It Means for Investors

Summary

The SEC and CFTC have released landmark joint guidance stating that most cryptocurrencies are not securities, marking a major shift in U.S. crypto regulation. The update introduces a formal token classification system, clarifies rules around staking and mining, and signals a more innovation-friendly regulatory approach after years of uncertainty.

Sec Cftc Seals

In March 2026, the Securities and Exchange Commission (SEC) and Commodity Futures Trading Commission (CFTC) released joint guidance stating that the majority of digital assets fall outside traditional securities laws. The new 68-page document is one of the most significant regulatory developments in crypto history, and for everyday investors, it changes the landscape in a meaningful way.

For over a decade, the U.S. crypto industry operated without clear rules. Companies built products, raised capital, and served millions of customers while regulators debated whether the assets they were dealing with were securities, commodities, or something else entirely. That ambiguity is now being addressed head-on.

What the Guidance Covers

The guidance introduces a formal token taxonomy that classifies digital assets into four categories:

Digital commodities - assets like Bitcoin and Ethereum whose value is tied to the operation of a blockchain network
Stablecoins - digital assets pegged to a stable value, like the U.S. dollar
Digital collectibles - NFTs and assets representing rights to trading cards, current events, and similar items
Digital tools - utility-based tokens used to access a product or service

Each of these categories falls outside the definition of a security under federal law.

The guidance also confirms that mining and staking are not securities transactions, a question that has lingered for years and created compliance headaches for platforms and investors alike. It also clarifies the specific conditions under which a crypto asset could become subject to securities law, giving the industry a clearer framework to work within.

How the Howey Test Still Applies

The SEC continues to rely on the Howey Test, a standard derived from a 1946 Supreme Court case, to determine whether an asset qualifies as a security. Under this test, a crypto asset may be considered a security if (1) it involves an investment of money; (2) into a common enterprise; (3) with the expectation of profits (4) driven by the efforts of others.

This means that even a utility token could fall under securities law if it's marketed with profit expectations tied to a centralized team. A token that gives users access to a platform is generally not a security. A token that is sold to investors with promises of returns based on the work of a founding team is a different story.

The new guidance doesn't eliminate securities regulation in crypto. It clarifies where the boundaries are, and that distinction matters for everyone from retail investors to institutional fund managers trying to assess risk.

Why This Is a Major Shift

For years, the SEC operated on the assumption that most cryptocurrencies were securities and regulated through enforcement actions rather than rulemaking. Coinbase, Binance, Ripple, and Kraken were all sued. Smaller companies received Wells notices and faced the choice of settling or fighting multi-year legal battles. Companies struggled to comply with rules that were never clearly defined, and many chose to move operations offshore rather than navigate the uncertainty.

That approach is now officially changing. SEC Chair Paul Atkins said at the DC Blockchain Summit: "We're not the 'securities and everything commission' anymore." The goal, he said, is to "draw clear lines in clear terms", a direct contrast to the enforcement-first philosophy that defined the previous administration.

The CFTC's involvement reinforces the significance of the shift. When two major regulatory agencies align on definitions and publish joint guidance, it carries more weight than either agency acting alone. Both agencies are now working from the same playbook, reducing the jurisdictional confusion that has plagued the industry for over a decade and giving market participants a single, coherent framework to reference.

What It Means for Investors

For investors, this guidance introduces a level of clarity that has been largely absent from the U.S. crypto market. With clearer definitions around what is and isn't a security, the risk of unexpected regulatory action decreases, particularly for widely held assets like Bitcoin and Ethereum, which are now explicitly categorized as digital commodities.

This could also accelerate institutional adoption. Large financial institutions have historically been cautious about entering crypto markets due to regulatory uncertainty. Compliance teams couldn't get comfortable with assets that didn't have a clear legal classification. A more defined framework removes one of the biggest barriers to entry, and may open the door for broader institutional participation — including integration into retirement-focused and long-term investment strategies.

For retail investors, the practical impact is simpler: the assets you're already holding or considering have a clearer legal standing than they did a week ago. That doesn't mean all risk disappears, but it does mean the regulatory ground is more stable.

Certain tokens will still be classified as securities depending on how they are structured and marketed. Enforcement around fraud, misleading disclosures, and unregistered offerings remains firmly in place. Investors should still do their research and understand what they're buying.

A Turning Point for U.S. Crypto Regulation

balance beam with gavel and crypto tokens on desk

This guidance is part of a broader shift in how the U.S. approaches digital assets — away from reactive enforcement and toward structured, principle-based regulation. It also doesn't exist in isolation. Congress is still working through the CLARITY Act, which would codify many of these distinctions into law. The GENIUS Act, which addressed stablecoin regulation, passed last year. Piece by piece, the regulatory picture is coming together.

Different types of digital assets now have different regulatory treatment. That's a meaningful change from the one-size-fits-all approach that defined the last decade — and a signal that the U.S. is getting serious about building a framework that can support the long-term growth of the industry.

Open an Account at iTrustCapital

If you're not paying attention, don't be the last to know. The markets have been moving and our clients have been watching this space closely.

A Premium Custody Account or Crypto IRA at iTrustCapital lets you buy and sell Bitcoin, Ethereum, XRP, and dozens of other digital assets.

Click here to open an account today.

*Some taxes may apply.

Here are the FAQs:

Frequently Asked Questions

What is a token taxonomy and why does it matter?

A token taxonomy is a formal classification system that sorts digital assets into defined legal categories. Before this guidance, there was no official framework for determining what type of asset a given cryptocurrency was. Now, assets are categorized as digital commodities, stablecoins, digital collectibles, or digital tools, and each category has a clear regulatory treatment. That definition determines which agency oversees it, what rules apply, and how it can legally be bought, sold, and held.

What makes a digital asset a commodity versus a security?

Under the new guidance, a digital asset is a commodity if its value is intrinsically linked to the operation of a blockchain network and driven by supply and demand, not by the efforts of a centralized team. Bitcoin and Ethereum are the clearest examples. A security, by contrast, involves an investment into a common enterprise where profits are expected from someone else's work. The line between the two comes down to how the asset is structured and how it's marketed.

Does this guidance apply to all cryptocurrencies?

Not automatically. The guidance establishes a framework, but individual assets still need to meet the criteria for each category. Tokens that are promoted with profit expectations tied to a founding team could still be classified as securities regardless of how they're labeled. The guidance gives the industry clear standards to evaluate against, it doesn't grant blanket protection to every token in existence.

Does this change how staking and mining are treated?

Yes. The guidance explicitly confirms that mining and staking are not securities transactions. This has been a gray area for years, with some regulators arguing that staking rewards could constitute investment returns subject to securities law. That argument is now off the table under this framework.

Disclaimer

This article is for informational purposes only and is not intended to constitute investment advice in any way or constitute an offer to buy or sell any cryptocurrency, digital asset or securityor to participate in any investment strategy.

iTrustCapital is a fintech software platform for alternative assets. iTrustCapital is not an exchange, funding portal, custodian, trust company, licensed broker, dealer, broker-dealer, investment advisor, investment manager, or adviser in the United States or elsewhere. iTrustCapital is not affiliated with and does not endorse any particular digital asset, precious metal or investment strategy.

Investing in any digital asset or cryptocurrency (including meme coins) carries significant risks due to their speculative and highly volatile nature. Staking involves considerable risk. Past performance is not an indication of future results. No investment is completely risk-free, and every investment carries the potential for losing some or all of the principal amount invested. Cryptocurrency is not legal tender backed by the United States government, nor is it subject to Federal Deposit Insurance Corporation (“FDIC”) insurance or protections. Digital asset (Cryptocurrency) deposits held with institutional storage providers are never FDIC insured and may lose value. Clients do not receive a choice of custody partner.

Investors assume the risk of all purchase and sale decisions. iTrustCapital makes no guarantee or representation regarding investors’ ability to profit from any transaction or the tax implications of any transaction. iTrustCapital does not provide legal, investment or tax advice. Conduct your own research and consult with a qualified legal, investment, or tax professional to assess your own risk tolerance prior to investing.

iTrustCapital makes no representation or warranty as to the accuracy or completeness of this information and does not have any liability for any representations (expressed or implied) or omissions from the information contained herein. iTrustCapital disclaims any and all liability to any party for any direct, indirect, implied, punitive, special, incidental or other consequential damages arising directly or indirectly from any use of this information, which is provided as is, without warranties.