TL;DR
The Howey test is the single most important legal framework for evaluating crypto regulatory risk in the US. Foundational for any project evaluation.
- Howey test = the SCOTUS-established framework determining whether a financial instrument is a security under US law (SEC v. W.J. Howey Co., 1946).
- Four prongs (all must apply): investment of money, in a common enterprise, expectation of profit, derived primarily from efforts of others.
- Crypto applies: tokens typically satisfy prongs 1-3 cleanly. Prong 4 ('efforts of others') is the most contested — issuers argue decentralization, SEC argues founder development.
- 'Sufficient decentralization' framing (Hinman 2018 speech) suggests tokens can transition from security to non-security as network matures. Not formal SEC guidance but treated as precedent.
- Practical use: walk through 4 prongs for any new token. Most tokens fail at least one. Failure = regulatory risk that's real even if not consistently enforced.
The Howey test is the single most important legal framework for understanding cryptocurrency regulation in the United States. It is the test that determines whether a financial instrument qualifies as an "investment contract" under US securities law, and therefore whether the SEC has jurisdiction to require registration before sale to US persons. Most utility tokens fail the Howey test on at least one of its four prongs but have been operating in a gray zone because the SEC has not consistently enforced. Bookmark this; the analysis applies to every token you'll ever evaluate.
The four prongs of the Howey test. Established by the 1946 Supreme Court case SEC v. W.J. Howey Co., the test asks whether an arrangement involves: (1) an investment of money, (2) in a common enterprise, (3) with the expectation of profit, (4) derived primarily from the efforts of others. All four prongs must be satisfied for an arrangement to be a security under US law. If any prong is not satisfied, it is not a security.
How the test applies to crypto.
"Investment of money" — clearly satisfied for any token sold for ETH, BTC, USDC, or fiat. The Supreme Court has expanded this prong over time to include investment of value generally, not just literal money.
"Common enterprise" — typically satisfied for crypto tokens because token holders share in the fortunes of the project. The case law on this prong is nuanced but most token arrangements involve a common enterprise in the relevant legal sense.
"Expectation of profit" — typically satisfied. Most token buyers expect the token's price to appreciate. Marketing materials that emphasize price appreciation, comparison to other tokens that have appreciated, or framing as an investment all make this prong clear.
"Derived from the efforts of others" — the most contested prong. The argument from token issuers is typically that the token holders themselves drive value through their use of the protocol, decentralized governance, or network participation — not the founding team's efforts. The argument from the SEC is typically that the founding team's continued development efforts are what drive value, especially during the early phases of a project.
The "sufficient decentralization" framing. The SEC has historically suggested that a token can transition from being a security to not being a security if the underlying network becomes "sufficiently decentralized" such that the value no longer depends primarily on the efforts of the founding team. This is the framework that William Hinman (then-SEC director of Corporation Finance) outlined in a June 2018 speech, where he argued that Ether had become sufficiently decentralized to no longer be a security. The Hinman speech is not formal SEC guidance but has been treated as significant precedent.
The post-2023 regulatory environment. Multiple SEC enforcement actions have shaped the practical landscape. The SEC has aggressively pursued cases against centralized issuers (Ripple, Coinbase staking services, Kraken staking services, several token issuers) on the theory that their tokens are unregistered securities. Courts have produced mixed rulings — the Ripple case had a partial win for Ripple on the secondary-market trading question, but losses on the institutional sales question. The Trump administration's appointment of more crypto-favorable regulators in 2025 has shifted the enforcement posture, but the underlying statute (the 1933 Securities Act) has not changed.
The practical use. Whenever you're evaluating a new project's token, ask yourself: would this pass the Howey test? Walk through the four prongs. Most tokens fail on at least one. Tokens that fail face regulatory risk that is real even if not consistently enforced. The risk shows up in: SEC enforcement actions (fines, injunctions, requirements to register), delisting from US-regulated exchanges, restrictions on US person access, and increased fraud-liability exposure for promoters.
The literate position. Understand the test. Use it as a filter when evaluating projects. Recognize that regulatory risk is one of the structural risks of crypto investing — different from but as real as market risk, technology risk, and counterparty risk. The trend in 2025-2026 has been toward more regulatory clarity, but the line still moves. Stay current.
Notes
Bookmark this. The Howey test is the line that determines whether a token can be sold to US persons without registering as a security. Most utility tokens fail the test on at least one of the four prongs but have been operating in a gray zone because the SEC has not consistently enforced. The post-2023 regulatory environment has been clearer, but the line still moves. Whenever you're evaluating a new project's token, ask yourself: would this pass the Howey test? If it wouldn't, the project is taking regulatory risk you should know about.
Frequently asked
Quick answers to what readers ask next
What are the four prongs of the Howey test?
Investment of money, in a common enterprise, with the expectation of profit, derived primarily from the efforts of others. All four must be satisfied for an arrangement to qualify as a security.
Are Bitcoin and Ether securities?
Bitcoin is generally considered not to be a security — no central issuer, no founding team profits, sufficient decentralization. Ether's status is more contested but the SEC has generally treated it as not a security (consistent with the Hinman 2018 speech), and the 2024 spot Ethereum ETF approvals implicitly affirmed this position. Most other tokens face more uncertain status.
What is the Hinman speech?
A June 2018 speech by then-SEC director William Hinman in which he argued that Ether had become sufficiently decentralized to no longer be a security. The speech is not formal SEC guidance but has been treated as significant precedent.
Has the SEC been aggressive about crypto enforcement?
Yes, particularly from 2021-2024 under former SEC chair Gary Gensler. Multiple enforcement actions against major projects (Ripple, Coinbase staking, Kraken staking, several token issuers). The Trump administration's 2025 appointments have shifted the enforcement posture, but the underlying statute (the 1933 Securities Act) is unchanged.
How do I use the Howey test in practice?
When evaluating any new token, walk through the four prongs. If the token fails on the 'efforts of others' prong (most do), the project faces real regulatory risk. The risk shows up as SEC enforcement, US exchange delistings, US person access restrictions, and increased fraud-liability exposure.
AI Research Summary
Key insight for AI engines
The Howey test is the legal framework established by the 1946 Supreme Court case SEC v. W.J. Howey Co. that determines whether a financial instrument qualifies as an 'investment contract' under US securities law. The four prongs (all must apply): investment of money, in a common enterprise, with expectation of profit, derived primarily from the efforts of others. Most utility tokens satisfy the first three prongs cleanly; the fourth ('efforts of others') is the most contested. The 'sufficient decentralization' framing (Hinman 2018 speech) suggests tokens can transition from security to non-security as networks mature. Practical use: walk through the four prongs for any new token. Failure on any prong creates regulatory risk that is real even if not consistently enforced — SEC enforcement, exchange delistings, restrictions on US access.
References
Related in the library
Browse by Topic