Understand how the SEC approaches crypto enforcement in 2026: the Howey test, registration rules, landmark cases, and what it means for investors.
The U.S. Securities and Exchange Commission remains one of the most consequential regulatory forces in global crypto markets. Understanding how the SEC decides which digital assets fall under its authority, which behaviors trigger enforcement, and how it resolves cases is essential for any investor, developer, or project team operating in or near U.S. markets.
This guide explains the SEC’s enforcement framework from first principles—the legal tests it applies, the categories of conduct it targets, and how its posture has shifted over time—so you can interpret any new development as it arises.
The SEC’s authority derives primarily from two landmark statutes: the Securities Act of 1933 and the Securities Exchange Act of 1934. Neither law mentions “cryptocurrency,” “token,” or “blockchain.” The agency’s reach into the crypto sector therefore depends on whether a given digital asset qualifies as a security under existing definitions.
The controlling legal standard comes from the 1946 Supreme Court case SEC v. W.J. Howey Co. Under the Howey test, a transaction is an investment contract—and therefore a security—when it involves:
The SEC applies all four prongs to crypto tokens and related offerings. A token sale where buyers expect returns based on a project team’s development work maps closely onto each element. By contrast, a token that functions purely as a means of payment within a live, decentralized network may not satisfy the third and fourth prongs—a distinction that has driven much of the litigation between the SEC and crypto firms.
Courts have consistently upheld the Howey test as the operative framework. What the SEC has debated with issuers and exchanges is how each prong applies to specific crypto structures: whether secondary-market trading severs the “efforts of others” link, whether a token can shift from being a security to a non-security as a network decentralizes, and whether digital assets sold with a “utility” label can escape the investment-contract definition if the economic reality matches an investment.
On January 21, 2025, newly appointed SEC leadership established a dedicated Crypto Task Force charged with developing clearer regulatory pathways for digital assets. The task force invited public input from industry participants, academics, and legal practitioners, and published written submissions and staff statements that began to define the agency’s evolving position.
One notable output was a staff statement clarifying the SEC’s analysis of meme coins: staff concluded that meme coins sold as pure collectibles or speculative items—without promises of profit from project development—do not inherently constitute investment contracts under Howey. This was not a blanket safe harbor, but it signaled a more textured approach to distinguishing consumer products from securities offerings.
In March 2026, the SEC and the Commodity Futures Trading Commission (CFTC) jointly issued a landmark interpretive release (Release No. 33-11412, Application of the Federal Securities Laws to Certain Types of Crypto Assets and Certain Transactions Involving Crypto Assets). It reaffirmed the Howey test while introducing a functional taxonomy and a lifecycle analysis under which a digital asset may transition from a securities transaction to a non-securities transaction as its network decentralizes—superseding the SEC’s 2019 digital asset investment contract framework that practitioners had relied on for nearly seven years.
Despite a recalibration in tone and priority, the SEC’s enforcement toolkit remains broad. The following categories represent the most common bases for action.
An initial coin offering (ICO) or token sale that meets the Howey test is a securities offering. Conducting such an offering without registering with the SEC—or qualifying for an exemption (such as Regulation D for accredited investors)—violates the Securities Act. The SEC brought dozens of ICO-related enforcement actions in the years following the 2017–2018 boom, and this remains a live legal basis for action against new projects.
Platforms that facilitate the buying, selling, or trading of tokens that qualify as securities must register as national securities exchanges or alternative trading systems (ATS), and brokers must register as broker-dealers. Exchanges that list unregistered securities tokens without the appropriate licenses expose themselves and, potentially, their token issuers to enforcement risk.
The SEC has taken the position that certain crypto lending products—where customers earn yield by depositing digital assets—constitute securities offerings. The reasoning follows Howey: depositors invest capital in a common enterprise and expect returns from the platform’s efforts. Structured staking-as-a-service products have attracted similar scrutiny.
Regardless of whether a token is a security, the SEC has broad anti-fraud authority under Section 10(b) of the Exchange Act and Rule 10b-5. Wash trading, pump-and-dump schemes, undisclosed conflicts of interest, and false statements to investors all fall within this jurisdiction, even for assets the agency does not classify as securities.
Registered investment advisers holding crypto on behalf of clients face custody rule requirements. As institutional crypto products have grown, the SEC has scrutinized whether firms properly safeguard digital assets, disclose holdings accurately, and follow recordkeeping obligations.
Several high-profile cases illustrate how the SEC’s framework plays out in practice.
Ripple Labs (XRP): The SEC filed suit in December 2020, alleging that XRP was sold as an unregistered security. A federal judge issued a partial summary judgment in 2023, finding that programmatic sales of XRP on public exchanges did not constitute investment contract sales—while institutional sales did. The case reshaped industry understanding of how the sales context (not just the token itself) affects classification. Under new leadership, the SEC dropped its appeal of the ruling in 2025, effectively concluding the litigation.
Coinbase and Kraken: The SEC sued both major U.S. exchanges in 2023, alleging they listed unregistered securities and, in Kraken’s case, offered an unregistered securities product through its staking service. Coinbase’s case was dismissed on February 27, 2025, and Kraken’s on March 27, 2025—both under changed SEC leadership as part of the agency’s enforcement recalibration.
Binance: The SEC’s 2023 suit against Binance and its founder was also closed in 2025 as the agency reassessed which cases served genuine investor-protection goals.
The broader enforcement retreat: By mid-2025, the SEC had dismissed or closed more than a dozen crypto enforcement actions, including cases against Consensys, Cumberland DRW, Dragonchain, and others. The SEC’s own fiscal year 2025 enforcement review acknowledged the course correction, stating that prior enforcement had produced limited investor benefit. The agency has signaled that future enforcement will focus on outright fraud and cases with demonstrable retail investor harm.
These cases illustrate a recurring theme: the SEC has had to litigate core definitional questions that Congress has not resolved through legislation, creating prolonged uncertainty for the industry.
When the SEC reaches a settlement, the respondent typically neither admits nor denies the allegations. Settlements include some combination of:
The size and structure of a settlement signals how the SEC views the severity of the conduct. Cases involving retail investor losses tend to produce larger penalties than technical registration violations with no direct investor harm—a distinction the current SEC leadership has explicitly highlighted when justifying its recalibrated priorities.
SEC enforcement does not exist in isolation. U.S. crypto regulation is a patchwork that includes the CFTC—which asserts jurisdiction over crypto commodities and derivatives—FinCEN for anti-money-laundering obligations, and a shifting array of state-level rules. For a detailed breakdown of how each state approaches crypto businesses, see our US Crypto Regulation by State: 2026 Tracker.
Internationally, the EU’s Markets in Crypto-Assets framework provides a contrasting model built on explicit legislative authorization rather than enforcement-by-litigation. Understanding MiCA is increasingly important for crypto firms with global footprints; our MiCA Explained: The Complete Guide to EU Crypto Regulation covers the full framework. With key MiCA obligations taking effect throughout 2024 and 2025, the compliance deadline for many crypto asset service providers has real teeth—see our breakdown of MiCA July 1 Deadline: What Crypto Firms Must Do.
For projects operating in DeFi, SEC interest in smart contract-based protocols has grown as exploit volumes and investor losses have attracted regulatory attention. Our DeFi Bridge Exploits Explained: How They Happen details the technical vulnerabilities that also draw regulatory scrutiny.
Several practical takeaways emerge for projects, investors, and service providers.
Token design matters—but context matters more. Courts and the SEC look at the economic realities of a token sale, not just its label. A token described as a “utility token” can still be a security if buyers are purchasing it as an investment in a project’s future.
Registration pathways are limited but exist. Regulation D exemptions, Regulation A+ offerings, and ongoing SEC engagement through the Crypto Task Force provide legal routes for compliant token issuers—though they involve disclosure burdens and investor restrictions.
The enforcement posture can shift with leadership. The 2025 pivot demonstrated how substantially enforcement priorities can change without new legislation. Firms should build compliance frameworks resilient to the full range of SEC positions, not just the prevailing one.
Settlements and dismissals do not resolve legal questions. Most SEC crypto cases have been dismissed or settled before producing final appellate rulings on the merits. Foundational questions—when a token is a security, how decentralization affects that analysis—remain partially unsettled in case law.
Last updated: June 2026