A security token offering, or STO, is a label used for raising capital through tokens that represent or are sold as securities. An initial coin offering, or ICO, describes a distribution method, not a legal exemption. The decisive question is what rights and economic arrangement the token creates under the law that applies to the offer.
Technology does not decide whether an asset is a security
The code layer is discussed separately in our smart-contract programming guide. A token can represent equity, debt, a share of revenue, a fund interest or another regulated instrument. It can also provide access to software or function as a payment asset. Names such as “utility,” “governance” or “security token” are not conclusive. Regulators examine the rights, promises, distribution and economic reality.
In its 2017 DAO report, the US Securities and Exchange Commission concluded that particular DAO tokens were securities. The SEC’s announcement stressed that securities laws can apply regardless of whether an offer uses blockchain technology or accepts cryptocurrency.
STO and ICO: the practical distinction
| Question | STO | ICO |
|---|---|---|
| What does the label imply? | The issuer intends to treat the token as a regulated security. | The issuer is conducting an initial token sale; legal status remains fact-specific. |
| Investor eligibility | May be limited by registration, exemption and jurisdiction. | Can be public or restricted, but broad access does not remove securities obligations. |
| Disclosure | Typically follows a securities offering document and continuing duties where required. | Often uses a white paper, whose legal standard and review can vary substantially. |
| Transfers | May require identity checks, transfer restrictions and approved venues. | May be freely transferable technically, subject to law and platform rules. |
| Holder rights | Should map to defined financial or governance rights and enforceable documents. | Range from product access to no meaningful claim; the label alone says little. |
Tokenized security is the clearer modern term
“STO” is associated with the 2018–2019 fundraising cycle. Current policy discussions more often refer to tokenized securities or digital securities. In January 2026, SEC divisions described a tokenized security as a security represented by a crypto asset whose ownership record is maintained in whole or part through crypto networks. Tokenization changes the record or transfer mechanism; it does not remove the instrument’s underlying legal character.
The European Union draws a perimeter too
MiCA establishes rules for crypto-assets not already covered by other EU financial-services law. Crypto-assets that qualify as financial instruments, including transferable securities, remain within that existing framework rather than becoming ordinary MiCA tokens. ESMA publishes the current MiCA materials and registers, but a white paper’s appearance in a register is not the same as regulatory approval.
Due diligence before participating
- Identify the issuing legal entity and the law governing holder rights.
- Determine whether the offer is registered, exempt or outside a particular jurisdiction—and verify the filing.
- Read the instrument terms, not only the token white paper.
- Check transfer restrictions, custody model and permitted trading venues.
- Understand voting, distributions, redemption, seniority and insolvency treatment.
- Confirm who maintains the shareholder or holder record if on-chain and legal records diverge.
A compliant structure can still be a poor investment, illiquid or technically fragile. Regulation addresses disclosure and market conduct; it does not guarantee value. Legal analysis must be specific to the asset, transaction and jurisdiction.
