Security Token

A security token is a digital token recorded on a blockchain that is, or represents, a security: a share in a company, a bond, a unit in a fund, a share of profits or another investment instrument. Because it is a security, its sale, trading, custody and record-keeping fall under securities law, whatever technology carries it. Issuers use security tokens to raise money, to issue debt and fund units on shared ledgers, and to make ownership of private assets easier to transfer.

Security tokens are distinguished from utility tokens, which give access to a product, and from payment tokens such as stablecoins. The line is legal rather than technical: two tokens built with the same code can fall on different sides. The sale of security tokens to raise funds is covered in security token offerings (STOs), and the broader process of putting assets on a ledger in tokenization.

A share certificate used to be a piece of paper in a drawer; later it became a line in a broker's computer. A security token is the same promise written into a shared digital record that many parties can read and update under agreed rules.

Changing the paper does not change the promise. If you buy a slice of a building's rent or a company's profits, you are an investor, and the investor-protection rules that apply to ordinary shares still apply. The token may make the slice easier to hand on or split, but the seller still has to be licensed and the buyer still has rights.

Each jurisdiction uses its own test:

• United States. A token is a security if it fits a listed instrument (stock, note, bond) or is an "investment contract" under the Howey test: money invested in a common enterprise with an expectation of profits from others' efforts. The SEC regulates offers and trading.
• European Union. A token that qualifies as a "financial instrument" under MiFID II is regulated as such; MiCA expressly excludes these, so security tokens sit under existing securities law rather than the crypto-asset regime.
• United Kingdom. Tokens that are "specified investments" are regulated by the FCA as securities; others may be e-money or unregulated tokens.
• Elsewhere. Switzerland's DLT Act of 2021 created ledger-based securities in civil law, and regulators in Singapore, Hong Kong and the Gulf financial centres apply their securities rules to tokens with similar features.

Security tokens fall into a few practical models. In January 2026 SEC staff set out a similar classification in a statement on tokenized securities:

• Issuer-sponsored (native) tokens. The issuer, or its transfer agent, records ownership directly on the blockchain, so the token is the security itself. Tokenized fund units, such as a tokenized money market fund, usually follow this model.
• Custodial (wrapped) tokens. A third party holds the underlying share or bond and issues tokens that represent an entitlement to it. The holder's rights depend on the custodian's terms and solvency.
• Synthetic tokens. A third party issues a token that tracks the price of a security without holding it. It gives no shareholder rights and adds counterparty risk; in the US some may be security-based swaps with their own sales restrictions.

Underlying assets range from company equity and private credit to real estate and Treasury bills, overlapping with real-world assets (RWA) and tokenized funds.

Unlike most crypto tokens, security tokens are usually permissioned. They follow a token standard such as ERC-3643 or ERC-1400 that checks a holder's identity and eligibility before any transfer, so only investors who passed KYC and meet resale rules (for example, accredited-investor limits or lock-up periods) can receive them. The issuer or agent can also freeze, recover or reissue tokens to comply with court orders or correct errors, which ordinary tokens on a permissionless blockchain cannot do.

Trading needs regulated venues. In the US that means registered broker-dealers and alternative trading systems; in the EU the DLT Pilot Regime, applied since 23 March 2023, lets authorised operators run DLT-based trading and settlement systems with temporary exemptions from some rules. The UK opened a Digital Securities Sandbox in January 2024. Settlement can be against tokenized cash such as a tokenized deposit or a stablecoin, giving near-instant delivery-versus-payment instead of the usual cycle described in capital market settlements.

• Claimed benefits. Faster settlement, round-the-clock transfer, smaller minimum investments through fractional units, automatic corporate actions coded in a smart contract, and a single shared record instead of many reconciled ones.
• Thin liquidity. Many security tokens trade rarely; transfer restrictions and few venues limit secondary markets.
• Legal certainty. Whether the blockchain record is the legal register depends on national law, and insolvency treatment of custodial tokens is untested in many places.
• Technology and custody risk. Lost keys, contract bugs and operator failures need recovery procedures; institutional holders generally rely on regulated crypto custody.
• Mislabelling. Projects have called tokens "utility" or "governance" to avoid securities rules; regulators look at the economic reality, a question discussed under governance token.

Security tokens can be pledged as collateral like other securities, which links them to on-chain crypto lending markets that increasingly accept tokenized Treasury funds.

• ESMA: DLT Pilot Regime
• SEC staff: Statement on Tokenized Securities (January 2026)