A plain-language guide to significant federal crypto regulatory action.

WHO: Who issued this, and who is affected?

The SEC and CFTC jointly issued this release as a binding interpretation and guidance document, the first coordinated federal action under “Project Crypto,” the joint SEC-CFTC initiative launched January 2026.

It directly affects any firm or individual that issues, advises on, trades, custodies, or offers products related to crypto assets:

Commodity Trading Advisors (CTAs)
Commodity Pool Operators (CPOs)
Registered Investment Advisers (RIAs)
Broker-Dealers (BDs)
Crypto asset issuers, custodians, staking service providers, and individual market participants

WHAT: What does the release do?

The release establishes a five-category taxonomy for classifying crypto assets and provides definitive guidance on which activities constitute securities transactions, and which do not. Even a non-security digital commodity can become subject to an investment contract (a security) if the issuer makes representations or promises of essential managerial effort. When the issuer fulfills or publicly abandons those promises, the investment contract ceases, but prior liability for registration failures and fraud remains.

Asset category & examples	Security status
Digital commodities BTC, ETH, SOL, XRP, AVAX, ADA, DOGE, LTC, DOT, LINK, XLM, SHIB, HBAR, XTZ, BCH and others	NOT a security (itself)
Digital collectibles NFTs, meme coins, art, gaming items, fan tokens (e.g. CryptoPunks, WIF, Chromie Squiggles)	NOT a security (itself)
Digital tools Credentials, memberships, tickets, soul-bound tokens (e.g. ENS domains, NFT conference tickets)	NOT a security (itself)
Stablecoins GENIUS Act payment stablecoins → excluded by statute. Others: fact-specific analysis required.	DEPENDS on facts
Digital securities (tokenized) On-chain representations of stocks, bonds, and other traditional financial instruments	ALWAYS a security

The release also confirms that Protocol Mining, Protocol Staking (all covered forms), Wrapping, and most Airdrops do NOT constitute securities transactions requiring registration, provided specific conditions are met.

Key Rule

A non-security crypto asset can still become subject to an investment contract (a security) if the issuer makes representations or promises of essential managerial effort. When those promises are fulfilled or abandoned, the security treatment ends, but prior liability for registration failures and fraud remains.

WHEN: Key effective and compliance dates

EFFECTIVE NOW Interpretation effective Upon Federal Register publication (~March 2026). Enforcement posture changes immediately. Supersedes all prior SEC staff crypto guidance.	IMMEDIATE ACTION Compliance review required Asset classification audits, staking arrangement reviews, and disclosure updates should begin now. Enforcement is live.
WITHIN 30–60 DAYS Disclosure & program updates Form ADV, Disclosure Documents, offering materials, and custodial arrangements should be revised to reflect the new taxonomy.	EST. BY JAN 18, 2027 GENIUS Act stablecoin exclusion Payment stablecoins issued by a permitted issuer are statutorily excluded from the definition of “security.” Interim staff position applies now. Final date depends on when regulators issue implementing rules (earlier of 18 months from enactment or 120 days after final rules).

WHERE: Where does this apply?

This release applies to any market participant operating in U.S. crypto asset markets, regardless of whether their primary business is crypto-native or traditional finance.

It governs primary offerings (ICOs, SAFTs, token launches), secondary market trading, staking services, custody arrangements, fund operations, investment advice, and broker-dealer activities. It applies to both on-chain and off-chain transactions. Foreign firms serving U.S. investors or markets are also within scope.

The CFTC guidance confirms that any non-security crypto asset (other than GENIUS Act payment stablecoins) could meet the definition of “commodity” under the Commodity Exchange Act, broadening CFTC jurisdiction over digital commodities.

WHY: Why was this issued?

Industry participants, courts, and commissioners had long criticized the SEC’s prior approach to crypto as “regulation by enforcement,” pursuing actions without clear rules, chilling legitimate innovation and pushing activity offshore.

The release is the culmination of the SEC’s Crypto Task Force (est. January 2025), over 300 public submissions, a series of roundtables, and Project Crypto, a joint SEC-CFTC initiative directed by the President’s Working Group on Digital Asset Markets to bring blockchain innovation within clear U.S. regulatory lines.

Its stated goals are to reduce legal uncertainty, lower compliance costs, spur capital formation and competition, and keep crypto innovation in the United States.

HOW: How should your firm respond?

#	Action	Timeline
1	Asset classification audit Map every crypto asset in your portfolios, products, or platforms against the five-category framework.	Immediate
2	Investment contract review Identify any assets subject to active issuer promises of essential managerial effort — those remain securities regardless of category.	Immediate
3	Staking & custody arrangements Confirm all staking, liquid staking, and custodial arrangements comply with safe harbor conditions. Guaranteed returns or discretionary decisions by custodians fall outside the safe harbor.	30 days
4	Disclosure & documentation Revise Form ADV, Disclosure Documents, offering materials, and client/investor agreements to reflect updated classifications and risks.	30 days
5	Digital securities compliance Any tokenized stock, bond, or instrument in client accounts or fund portfolios carries full securities obligations — custody, recordkeeping, registration or exemption.	30 days
6	Historical transaction review Assess past transactions for registration failures or misclassifications under prior guidance. Anti-fraud liability survives even after an investment contract ceases to exist.	60 days
7	Ongoing monitoring program Establish a process to track when crypto assets separate from investment contracts as issuers fulfill or abandon development promises — this changes regulatory treatment in real time.	Ongoing

How CRC Can Help

Compliance Risk Concepts (CRC) provides practical, senior-led compliance consulting to financial services firms navigating complex regulatory change. Our team combines deep regulatory expertise with hands-on implementation experience across the CTA, CPO, RIA, and broker-dealer landscapes.

Rule Impact Assessment Gap analysis of your current crypto asset classification practices, disclosures, and program controls against the new five-category framework and safe harbor conditions.	Program Design & Enhancement Build or enhance your crypto compliance program: policies, procedures, classification methodologies, and investment contract monitoring frameworks.
Disclosure & Documentation Drafting and revision of Form ADV, Disclosure Documents, offering materials, staking agreements, and client-facing disclosures to reflect the updated regulatory landscape.	Staking & Custody Review Detailed review of staking, liquid staking, wrapping, and custodial arrangements against the release’s safe harbor conditions — with actionable remediation guidance.
Ongoing Monitoring & Training Establishment of ongoing investment contract separation monitoring, regulatory change tracking, and staff training tailored to your firm’s crypto asset exposure.	Exam & Enforcement Preparedness Pre-examination readiness reviews, mock exams, and response support for firms navigating the SEC’s or CFTC’s updated enforcement posture following this release.