SEC Crypto Asset FAQs, September 25, 2026: All Nine Answers, Explained

Executive Summary

On September 25, 2026 the staff of the SEC's Division of Corporation Finance published nine frequently asked questions on how it reads the Commission's crypto asset Interpretive Release of March 17, 2026. The FAQs are short, and each one closes a specific question the release left open: whose definition of "functional" counts, how staking receipt tokens are classified, what makes an instrument a "receipt", when marketing becomes a promise, whether a successor can inherit an issuer's promises, what post-launch work is allowed, whether statements about a decentralized system can create a new investment contract, how buybacks are treated, and when a trading platform is a promoter.

This article publishes the full text of all nine questions and answers and both footnotes, exactly as issued, with an explanation under each and a practical reading for issuers. The FAQs are staff views. They have no legal force and do not change the law. They do, however, show how the Division that reviews registration statements will read your documents and your marketing.

The practical line through all nine answers is the same: the word "functional" now carries most of the weight. Before a crypto system is functional, promises, buybacks and marketing can create or extend an investment contract. After it is functional, the same activity largely does not. For issuers of tokenized securities, nothing changes: a security remains a security whether it is recorded onchain or off.

Key Takeaways

• The SEC's Division of Corporation Finance issued nine FAQs on September 25, 2026 on the Commission's crypto asset Interpretive Release (Release No. 33-11412) of March 17, 2026.
• The FAQs are staff views: not a rule, regulation or Commission statement, with no legal force and no new obligations.
• An issuer sets its own thresholds for "functionality" and "decentralization" in its promises; the Commission's definitions are used only to classify crypto assets (FAQ 1.1).
• A buyback of a non-security crypto asset on a functional system is not a promise of essential managerial efforts; on a non-functional system it can be one, if presented as yield or return (FAQ 2.5).
• Maintaining, improving and funding development of a functional system is not essential managerial effort (FAQ 2.3).
• A successor that assumes the issuer's promises keeps the investment contract alive (FAQ 2.2).
• A true "receipt" requires that the custodian cannot lend, pledge, rehypothecate or otherwise use the deposited asset (FAQ 1.3).
• Tokenized securities are untouched: a digital security is a security regardless of format.

What was published, by whom, and what it is worth

The document is titled Frequently Asked Questions on the Application of the Federal Securities Laws to Certain Types of Crypto Assets and Certain Transactions Involving Crypto Assets. It was issued on September 25, 2026 and is published on the SEC's website by the Division of Corporation Finance, the Division that reviews issuer disclosure and registration statements.

Its legal status is stated in its first paragraph, and it matters:

The answers to these frequently asked questions (FAQs) represent the views of the staff of the Division of Corporation Finance. They are not a rule, regulation or statement of the Securities and Exchange Commission. The Commission has neither approved nor disapproved their content. Like all staff guidance, these FAQs have no legal force or effect, do not alter or amend applicable law, and do not create any new or additional obligations for any person.

In practice, staff FAQs are the working manual of the people who comment on filings. They are not a safe harbor, and a court is not bound by them, but a structure that contradicts them should expect questions.

Terms not defined in the FAQs carry the meaning given in the Commission's Interpretive Release of March 17, 2026, so the FAQs cannot be read without it.

Background: the March 2026 Interpretive Release

On March 17, 2026 the Commission issued an interpretation of the definition of "security" as applied to crypto assets (Release Nos. 33-11412 and 34-105020, file S7-2026-09, effective March 23, 2026). The CFTC joined it, stating that it will administer the Commodity Exchange Act consistently with the interpretation. According to the SEC's fact sheet, the release does three things: it sets a token taxonomy, it explains how a non-security crypto asset becomes subject to an investment contract and how it stops being subject to one, and it addresses protocol mining, protocol staking, wrapping and airdrops.

The taxonomy has five categories:

Two definitions from the release decide most of what follows. A crypto system is "functional" if its native crypto asset can be used on the system in accordance with the system's programmatic utility. A crypto system is "decentralized" if it functions and operates autonomously with no person, entity or group having operational, economic or voting control of it.

The release also explains that a non-security crypto asset can be sold subject to an investment contract, when the issuer induces an investment of money with representations or promises of essential managerial efforts from which purchasers reasonably expect profit. The asset itself is not a security; the investment contract is. That contract ends when the issuer fulfills its promises, or when it publicly and unambiguously abandons them, although liability for misstatements survives.

One more document sits in the background. On August 18, 2026 the Commission proposed Regulation Crypto Assets (Release No. 33-11434, published at 91 FR 54510 on August 21, 2026), and FAQ 2.3 quotes it directly.

The FAQs in full, with explanations

The text of each question and answer below is reproduced verbatim from the SEC staff's publication of September 25, 2026. The explanation under each is Stobox Research's reading and is not legal advice.

Group 1: Classification of crypto assets (Section III of the Interpretive Release)

FAQ 1.1: Whose definition of "functional" and "decentralized" counts?

Question 1.1: For purposes of the Interpretive Release, the Commission provided certain definitions of the terms "functional" and "decentralized." However, with respect to whether an issuer has fulfilled its representations or promises to engage in essential managerial efforts, the Interpretive Release states that "…whether the issuer has achieved functionality would be based on how the issuer defined or otherwise described functionality, not a general market conception of what constitutes functionality" and "…whether the issuer has achieved decentralization would be based on how the issuer defined or otherwise described decentralization, not a general market conception of what constitutes decentralization." How do the definitions of "functional" and "decentralized" in the Interpretive Release relate to how an issuer may define or otherwise describe "functionality" and "decentralization" as part of its representations or promises in marketing and promoting an investment contract?

Answer: Those definitions are not relevant to whether an issuer has fulfilled its representations or promises because each issuer determines the thresholds that must be met to achieve functionality and/or decentralization for purposes of its representations or promises. However, those definitions are relevant to how the Commission classifies crypto assets as set forth in Section III of the Interpretive Release.

What it means. The words "functional" and "decentralized" now do two separate jobs. The Commission's definitions decide which category an asset falls into, for example whether it can be a digital commodity. The issuer's own definitions, the ones in its white paper, roadmap and marketing, decide whether the issuer has kept its promises and whether the investment contract has ended.

For issuers. Your documents set your finish line. If a white paper promises "full decentralization" with a vague meaning, the investment contract may never end because the finish line is never reached. Define functionality and decentralization in your own documents in concrete, testable terms, and keep the definition consistent everywhere it appears.

FAQ 1.2: How are staking receipt tokens classified?

Question 1.2: How are Staking Receipt Tokens classified for purposes of Section III of the Interpretive Release?

Answer: Under the circumstances described in the Interpretive Release, a Staking Receipt Token that is a receipt for a digital commodity that is not subject to an investment contract is itself a digital tool because it is a receipt that serves a practical function of evidencing the holder's ownership of the underlying digital commodity. However, a Staking Receipt Token also may be classified as a digital commodity if it is issued by a protocol-based Liquid Staking Provider. In these cases, the Staking Receipt Token is intrinsically linked to and derives its value from the programmatic operation of a crypto system that is functional, as well as supply and demand dynamics.[1]

What it means. A liquid staking token that evidences ownership of a staked digital commodity is, in the staff's reading, a digital tool, because its function is to prove ownership. If the token is issued by a protocol-based liquid staking provider rather than a company, it may also be a digital commodity. Either way it is not a security, under the circumstances the release describes: the underlying asset must itself be a digital commodity not subject to an investment contract.

For issuers. The classification follows the underlying asset. A receipt for something that is still subject to an investment contract does not get this treatment. Footnote 1, reproduced below, adds that the receipt must not create the right to rewards or set their amount; it only evidences ownership.

FAQ 1.3: What makes an instrument a "receipt"?

Question 1.3: The Interpretive Release addresses Staking Receipt Tokens and Redeemable Wrapped Tokens and characterizes them as "receipts." What distinguishes a "receipt" from other financial instruments?

Answer: A "receipt" in this context is an instrument certifying that a stated amount of an asset has been deposited with a depository or custodian issuing the receipt and evidencing the depositor's ownership of such deposited asset. A receipt does not change any of the rights, obligations, or benefits of the deposited asset, and does not provide the holder with any additional financial incentives or benefits. A receipt is distinguished from other financial instruments in that it does not transfer ownership or control of the deposited asset to the receipt issuer, such that the issuer cannot transfer, lend, pledge, rehypothecate, or otherwise use the deposited asset for any reason, or subject the asset to claims by third parties.

What it means. This is the most operational answer of the nine. A receipt has four properties: it certifies a stated deposit, it evidences the depositor's ownership, it adds no rights or incentives, and the custodian gets no ownership or control. The last test is strict: the custodian cannot transfer, lend, pledge or rehypothecate the asset "for any reason", and the asset cannot be exposed to third-party claims.

For issuers. This test reaches beyond staking. Any token that stands for an asset held by a custodian, whether a wrapped token or a token over custodied commodities, now has a clear checklist. If the custody agreement allows lending, pledging or any use of the deposited asset, the instrument is not a "receipt" in this sense and needs its own analysis. The custody contract, not the token contract, decides the answer. Read it before you describe your token as a receipt.

Group 2: Crypto assets subject to an investment contract (Section IV of the Interpretive Release)

FAQ 2.1: When does marketing become a promise?

Question 2.1: The Interpretive Release states that "…representations or promises are more likely to create reasonable expectations of profit when they are explicit and unambiguous as to the essential managerial efforts to be undertaken by the issuer, contain sufficient details demonstrating the issuer's ability to implement the proposed project, and explain how the issuer's efforts will produce the profits that purchasers reasonably expect." When do promotional and marketing communications constitute representations or promises to engage in essential managerial efforts?

Answer: When promotional and marketing communications constitute representations or promises to engage in essential managerial efforts depends on the facts and circumstances. However, promoting a crypto system's current utility and capabilities likely would not, without more, constitute representations or promises to engage in essential managerial efforts. Similarly, promoting a crypto system's potential utility, features, and capabilities with indefinite aspirational statements likely would not, without more, constitute representations or promises to engage in essential managerial efforts if such promotional activities contain nothing promoting the potential for profit.

What it means. The staff draws two lines. Talking about what a system does today is generally safe. Talking about what it might do tomorrow is also generally safe, if the statements are indefinite and aspirational and contain nothing about the potential for profit. The phrase "without more" is doing work: add a price target, a return, or a promise that the team's work will lift the token, and the analysis changes.

For issuers. Marketing review is now a securities question, not a brand question. Separate product copy from anything that touches price, returns or appreciation. Keep roadmap language indefinite unless you are prepared to treat it as a promise. Review social posts, AMAs and community channels, not just the website: the release treats the source and the medium of a statement as part of the analysis.

FAQ 2.2: Can a successor take over the promises and end the investment contract?

Question 2.2: Section IV.B.2. of the Interpretive Release addresses certain circumstances where a non-security crypto asset that was offered and sold subject to an investment contract would no longer be subject to an investment contract if a purchaser would not reasonably expect the issuer to be able to fulfill or to continue to engage in the essential managerial efforts it represented or promised it would undertake. Does the non-security crypto asset separate from and cease to be subject to the associated investment contract where the representations or promises are assumed by another party?

Answer: No, separation would not occur where another party assumes the issuer's representations or promises to undertake essential managerial efforts, whether affirmatively or by operation of law.

What it means. The release allows an investment contract to end when the issuer publicly abandons its promises. This answer closes the obvious workaround: if a foundation, an acquirer, a DAO entity or anyone else takes over the promises, the contract continues. "By operation of law" covers mergers and similar successions, not only voluntary assumption.

For issuers. A handover to a foundation or a restructuring does not reset the securities analysis. If the promised work continues under a new name, the investment contract continues with it. Plan exits and restructurings with that in mind.

FAQ 2.3: What work is allowed after the system is functional?

Question 2.3: Software is often in a constant state of development because of ongoing maintenance and upgrades. In addition, a functional crypto system may require network effects to grow. After a crypto system is functional, what activities can the issuer and other market participants engage in with respect to the crypto system that would not constitute essential managerial efforts?

Answer: The Commission has recently expressed the view that, once a crypto system is functional, services to secure, maintain, improve, or enhance such a system or its functionality, or to facilitate network effects, whether through sponsoring or funding development projects or other similar activities, would not involve essential managerial efforts. As a result, any representations or promises by the issuer to provide or continue to provide (or arrange for the provision of) such services after the crypto system is functional would not satisfy the Howey test. See Regulation Crypto Assets, Release No. 33-11434 (Aug. 18, 2026), pg. 56 [91 FR 54510, 54525 (Aug. 21, 2026)].[2]

What it means. This is the answer most of the market was waiting for. Once a system is functional, securing it, maintaining it, improving it, funding developers and building network effects is not essential managerial effort, and promises to keep doing that work do not satisfy the Howey test. The staff grounds this in the Commission's own view in the August 2026 Regulation Crypto Assets proposal, and footnote 2 ties it to the release's definition of "functional".

For issuers. The order of events matters more than ever. Before functionality, development promises can form an investment contract. After functionality, the same work generally does not. Document the moment your system became functional against your own definition (FAQ 1.1) and the release's definition, with evidence.

FAQ 2.4: Can statements about a system with no central party create a new investment contract?

Question 2.4: Where a functional crypto system has no central party, are statements made by the issuer capable of creating a new investment contract to which the native crypto asset is subject?

Answer: Once a functional crypto system has no central party, statements made by the issuer relating to the functional crypto system likely would not create a new investment contract because neither the issuer nor any other person has control of the functional crypto system that would allow them to take any action which would affect the failure or success of the crypto system.

What it means. The reasoning is about control. If nobody controls a functional system, nobody can do the managerial work that an investment contract needs, so an issuer's later statements likely cannot create a new one. Note both conditions: the system must be functional and have no central party.

For issuers. This protects only systems that are genuinely out of anyone's control. A team that keeps admin keys, upgrade rights or voting control does not fit the description, and its statements remain capable of creating promises.

FAQ 2.5: Does a token buyback create an investment contract?

Question 2.5: Issuers of non-security crypto assets may conduct buyback programs for several reasons, including treasury management, supply reduction, protocol-funded burns, and rebalancing. Does an issuer's announcement of a non-security crypto asset buyback program constitute a representation or promise to undertake essential managerial efforts?

Answer: Where a crypto system is functional, an issuer's announcement of a non-security crypto asset buyback program would not constitute a representation or promise to undertake essential managerial efforts. Where a crypto system is not functional, however, such an announcement could constitute a representation or promise to undertake essential managerial efforts if the issuer presents the buyback as creating yield or return for token holders.

What it means. On a functional system, announcing a buyback, whether for treasury management, supply reduction, burns or rebalancing, is not a promise of managerial effort. On a system that is not yet functional, it can be, specifically if the buyback is presented as creating yield or return for holders.

For issuers. Two variables decide the answer: the state of the system and the framing of the announcement. The safest sequence is buybacks after functionality, described in operational terms (treasury, supply, rebalancing) rather than as returns to holders. Remember that FAQ 2.5 speaks only to the investment contract question; market manipulation and disclosure rules still apply to any buyback.

FAQ 2.6: Is a trading platform a promoter?

Question 2.6: The Interpretive Release indicates that the term "issuer" includes "affiliates and agents of the issuer or a promoter." Would a trading platform that offers a secondary market for a crypto asset be considered a promoter for purposes of determining whether an investment contract is being offered?

Answer: A trading platform that offers a secondary market for a crypto asset would only be considered a promoter if the trading platform met the definition of "promoter" as defined in Securities Act Rule 405.

What it means. Listing a token does not by itself make a platform part of the "issuer" whose statements can form an investment contract. The test is the ordinary one in Securities Act Rule 405: a promoter is a person who takes the initiative in founding and organizing the issuer's business, or who receives 10 percent or more of a class of the issuer's securities, or of the proceeds from their sale, in connection with that founding and organizing.

For issuers and platforms. A platform that helped found the project, or that took a 10 percent allocation in connection with its founding, is in a different position from one that simply lists the asset. Platform agreements and token allocations to venues should be reviewed with this definition in mind.

The two footnotes, verbatim

[1] A Staking Receipt Token typically does not have intrinsic economic properties or rights as it merely evidences the holder's ownership of the underlying digital commodity and does not provide the holder with any other rights or obligations. While the holder of a Staking Receipt Token is entitled to rewards accruing with respect to the underlying digital commodity, the Staking Receipt Token itself does not create that entitlement or guarantee, generate, or otherwise set or fix the amount of the rewards. See Section V.B.4. of the Interpretive Release.

[2] The interpretation included in the Regulation Crypto Assets proposing release and referenced in this answer is based on the crypto system being "functional." For purposes of that interpretation, the term "functional" has the meaning ascribed to such term in Section III of the Interpretive Release.

The nine answers on one page

What the FAQs do not change: tokenized securities

Most of the attention on these FAQs will go to utility tokens, staking and buybacks. For owners of real-world assets and companies raising capital through tokenization, the more important sentence is in the release itself, and the FAQs leave it untouched:

A security is a security regardless of whether it is issued, or otherwise represented, offchain or onchain.

The release defines a digital security, "commonly known as a 'tokenized' security", as an enumerated security formatted as or represented by a crypto asset, with the ownership record maintained wholly or partly onchain. It separates securities tokenized by or for their issuer from securities tokenized by unaffiliated third parties, and it warns that a third-party token may give its holder materially different rights from the underlying security. A digital security that also provides non-financial benefits does not stop being a security.

For a tokenized share, bond, fund interest or real estate interest, the analysis is the one it has always been: registration under the Securities Act or an exemption, transfer restrictions that match the exemption, a holder register that can be reconciled, and disclosure that tells investors exactly what rights the token carries. The FAQs do not open a path around that, and an issuer should be suspicious of any structure that claims they do.

A practical checklist for issuers

1. Define "functional" and "decentralized" yourself. Write concrete, testable definitions into your offering and marketing documents, and use them consistently (FAQ 1.1).
2. Record the day you became functional. Keep evidence that your native asset can be used on the system as its programmatic utility describes. After that date, much of your ongoing work falls outside essential managerial efforts (FAQ 2.3).
3. Separate product copy from profit language. Describe what the system does. Keep roadmap statements indefinite, and keep price, yield and return out of promotional material (FAQ 2.1).
4. Sequence buybacks. Run them after functionality and describe them as treasury, supply or rebalancing operations, not as returns to holders (FAQ 2.5).
5. Read your custody agreement before you call a token a receipt. Any right of the custodian to lend, pledge, rehypothecate or use the asset takes the instrument out of the "receipt" category (FAQ 1.3).
6. Plan successions knowing promises travel. A foundation or acquirer that takes over the promised work carries the investment contract with it (FAQ 2.2).
7. Check venue relationships against Rule 405. A platform involved in founding the project, or holding a 10 percent allocation from it, is a different analysis (FAQ 2.6).
8. If your token is a security, treat it as one. A tokenized security needs registration or an exemption, whatever the FAQs say about other assets.
9. Validate with counsel. These are staff views, and every conclusion above depends on facts. Confirm the structure with qualified US securities counsel before you rely on it.

Where Stobox fits

Stobox has built tokenization infrastructure since 2018 and has structured and supported more than $305M in assets for 100+ clients across 20+ jurisdictions. In 2025 Stobox took part in the SEC Crypto Task Force roundtable on tokenization. We work on the securities side of the line these FAQs draw: companies and asset owners tokenizing equity, debt and real assets as digital securities.

What the FAQs make clear for everyone else is already how regulated tokenization works. The answer depends on what your own documents say, what your custody contracts allow, and what you can prove about the state of your system on a given date. Those are record questions, and that is the work our products are built for:

• Stobox Tokenization Framework. Eight phases and forty-eight steps from an unstructured company to a live tokenized security, including the token economics, issuing framework and legal documentation phases where the questions in these FAQs are settled.
• Stobox Intelligence. One canonical, verifiable record of your company, so the definitions, dates and facts an investor, a regulator or an AI reads are the same ones you would give.
• Stobox Compass. Issuance of permissioned tokenized securities with compliance enforced by the asset itself, non-custodial, with an onchain registry.
• Stobox MCP. A source-linked tokenization knowledge service for Claude, ChatGPT and other models, so an AI answering a question about your asset quotes a page instead of inventing one.

If you are deciding how these FAQs apply to your asset, start with the free readiness score: twenty-five questions, about eight minutes, no account. To talk through a structure, contact a Stobox specialist. For the longer history of how US regulators arrived here, see our history of SEC enforcement against crypto, and for the US offering routes, the US tokenization guide.

This article reproduces SEC staff guidance, which is a work of the US government, and adds Stobox Research commentary. It is information, not legal, tax or investment advice. Validate any structure with qualified counsel in the relevant jurisdiction.

Sources

• SEC Division of Corporation Finance, Frequently Asked Questions on the Application of the Federal Securities Laws to Certain Types of Crypto Assets and Certain Transactions Involving Crypto Assets, issued September 25, 2026.
• SEC, Application of the Federal Securities Laws to Certain Types of Crypto Assets and Certain Transactions Involving Crypto Assets, Release Nos. 33-11412 and 34-105020, March 17, 2026 (full release, PDF).
• SEC, Fact sheet on Release No. 33-11412.
• SEC, Press release 2026-30: SEC clarifies application of federal securities laws to crypto assets, March 17, 2026.
• SEC, Regulation Crypto Assets, Release No. 33-11434, August 18, 2026, 91 FR 54510 (August 21, 2026), as cited in FAQ 2.3.
• 17 CFR 230.405, Securities Act Rule 405, definition of "promoter".