What Is the SEC-CFTC Token Taxonomy, and Where Do RWAs Sit?
On 17 March 2026 the SEC and CFTC issued a joint interpretation setting out a coordinated federal framework for assessing when a digital asset falls within the definition of a security. It sorts crypto assets into five categories — digital commodities, digital collectibles, digital tools, stablecoins, and digital securities — and places tokenized equity, debt and similar instruments in the last of these, where they remain securities regardless of the technology used to record ownership. The more consequential move is analytical rather than categorical: the interpretation holds that a crypto asset is not itself an investment contract, that the token remains a thing, and that the transaction rather than the token is the proper unit of analysis. This guide covers the five categories, what that reframing changes, and where tokenized real-world assets land.
TL;DR — Key Takeaways
- ✓The Date: 17 March 2026 — a joint SEC and CFTC interpretation establishing a coordinated framework for when a digital asset is a security.
- ✓Five Categories: Digital commodities, digital collectibles, digital tools, stablecoins, and digital securities. The first three are generally non-securities; they lack the economic characteristics of securities.
- ✓The Reframing: "The transaction, not the token, is the proper unit of analysis." A crypto asset is not itself an investment contract — the token remains a thing.
- ✓Where RWAs Sit: Digital securities. Tokenized equity and debt remain securities regardless of the recording technology, and on-chain form does not displace an instrument's economic characteristics.
- ✓Narrowed Howey Factors: Only pre-sale or at-sale representations, from the issuer or coordinated third parties, on official channels, and specific enough to be actionable.
A Classification Scheme and a Change of Subject
The joint interpretation issued on 17 March 2026 does two separable things. It provides a five-part taxonomy that sorts crypto assets by economic character, and it relocates the legal question from the asset to the arrangement around it. The second is the part that reorganises how the analysis runs.
Years of argument treated classification as a property of tokens — as though each one carried a hidden attribute, security or not, that sufficient analysis would reveal. The interpretation rejects the framing. A token is an item; whether a given sale of it creates an investment contract depends on what the seller promised about future managerial effort. Two sales of the same token can come out differently, and neither answer is wrong.
“A crypto asset is not itself an investment contract: the token remains a ‘thing.’” And accordingly, “the transaction, not the token, is the proper unit of analysis.”
— SEC and CFTC joint interpretation on crypto asset classification, 17 March 2026
For institutional RWA issuers this cuts a familiar knot. A tokenized bond was never in genuine doubt — it is a note, and a note is an enumerated instrument. The doubt lived in the surrounding questions about what the token “is”, which the interpretation dissolves by pointing out that the token is a recording mechanism and the security is the instrument being recorded.
The Five Categories
The taxonomy sorts assets by economic characteristics rather than by technology. Digital commodities, collectibles and tools should generally be treated as non-securities because they do not have the economic characteristics of securities; stablecoins have their own treatment; and digital securities remain securities whatever technology records them.
| Category | Defining characteristic | Default treatment |
|---|---|---|
| Digital commodities | Value from the operation of a functional crypto system and market dynamics, not managerial effort | Generally non-security |
| Digital collectibles | For collecting or use — art, music, NFTs — with no intrinsic economic properties or yield rights | Generally non-security |
| Digital tools | Practical function such as membership access or credentials; typically non-transferable | Generally non-security |
| Stablecoins | Payment stablecoins from permitted issuers under the GENIUS Act | Outside the securities definition, absent features creating an investment contract |
| Digital securities | Enumerated instruments — tokenized equity, debt and similar | Security, regardless of recording technology |
The phrase “generally” in the first three rows is not decorative. These are default treatments based on economic character, and the transaction-level analysis can still attach an investment contract to a sale of any of them. A digital collectible sold with specific promises about the issuer's future efforts to increase its value is a collectible sold under an investment contract.
Which Statements Actually Count
Investment contracts arise from transactions involving issuer promises about essential managerial efforts producing profits — and the interpretation narrows which promises qualify on four axes. Each axis eliminates a class of argument that had previously been available to regulators and litigants.
Timing — only pre-sale or at-sale
Representations made after the sale do not retroactively convert a completed transaction into an investment contract. What the issuer says next year does not change what happened this year.
Source — issuer, or coordinated third parties
Statements by the issuer count, as do third-party statements amounting to coordination or collusion. An unaffiliated enthusiast's forecast does not bind the issuer.
Medium — official channels
Websites, social media accounts and whitepapers operated by the issuer. This locates the analysis in a documented, reviewable record rather than in informal or unattributable communications.
Specificity — actionable milestones
Vague promises lacking actionable milestones are unlikely to create an investment contract. Aspiration is not undertaking.
Key Insight
These four axes convert a diffuse legal risk into a records-management obligation, which is a much better problem to have. If what counts is issuer statements, on official channels, before or at the sale, with specific milestones, then an issuer can know its own exposure by knowing its own communications. The corollary is uncomfortable for firms with loose marketing practices: an archive of what was published, where and when now sits directly on the critical path of a classification analysis. Programs that cannot reconstruct their own pre-sale communications have made the question unanswerable in their own favour.
Where Tokenized Real-World Assets Land
Tokenized equity, debt and similar instruments are digital securities and remain securities regardless of the technology used to record ownership, or of whether they provide non-financial benefits to holders. On-chain representation does not displace the economic characteristics of stock, notes, or other enumerated instruments.
The clause about non-financial benefits closes a specific gap. A tokenized instrument that also grants governance rights, platform access, or community membership does not thereby become a tool or a collectible. Bundling utility around a security leaves a security with utility bundled around it — a structure that had been floated often enough to be worth naming.
| Instrument | Category | Consequence |
|---|---|---|
| Tokenized bond or note | Digital security | Full securities framework — registration or exemption, disclosure, transfer agent |
| Tokenized fund share | Digital security | Securities framework plus fund-specific requirements |
| Tokenized equity with governance rights attached | Digital security | Non-financial benefits do not change the classification |
| Payment stablecoin used for settlement | Stablecoin | Outside the securities definition, absent investment-contract features |
| Access credential to a platform | Digital tool | Generally non-security if genuinely functional and typically non-transferable |
For most institutional programs the classification step is now short, and the work moves downstream to the operational obligations that follow from being a digital security — the register, the transfer agent, the reporting. Those are covered in who is the transfer agent for a tokenized security and in the structural models set out in the four SEC tokenization models.
What Changes, What Does Not, and Where It Breaks
For an issuer of tokenized bonds, funds or equity, the taxonomy confirms an existing position rather than altering it: the instrument was a security and remains one. The change is in the quality of the answer available — a named category in a joint federal interpretation, rather than an inference from enforcement patterns.
Clearer now
- Tokenized enumerated instruments are digital securities
- Recording technology is irrelevant to classification
- Which statements can create an investment contract
- That utility bundled onto a security changes nothing
Still to establish
- Hybrid instruments spanning categories
- Assets whose character changes after issuance
- Where an interpretation binds and where it does not
- How state regulators and courts respond
Where it breaks
- Marketing that made specific pre-sale profit promises
- No archive of what was published and when
- A “utility” wrapper around an enumerated instrument
- Classification assumed rather than documented at issuance
One caution about weight. A joint interpretation is agency guidance on how the agencies read existing law, not legislation and not a court's ruling. It is highly informative about enforcement posture and materially reduces uncertainty, and it does not foreclose a court reaching a different conclusion on facts before it. Programs should treat it as the best available statement of the regulators' position rather than as a settled question.
How Blockmaze Records Classification as a Program Fact
If the transaction is the unit of analysis, then the conditions of each transaction are what a program needs to be able to reproduce later. That is a recordkeeping property, and it is more useful to build in at issuance than to reconstruct under examination.
Classification Recorded at Issuance
The category an instrument was issued under, and the reasoning behind it, are recorded against the instrument rather than living in a memo nobody can locate three years later.
Offering Terms Retained per Transaction
Because classification turns on the transaction, the terms under which each tranche was offered are retained with it, so a later analysis examines the actual arrangement.
Eligibility Follows Classification
An instrument classified as a digital security carries the transfer restrictions that status implies, enforced at the protocol level rather than relied on as policy.
Category Changes Are Events
If an instrument's treatment changes, that is recorded as a dated event with what preceded it, rather than a silent overwrite of the current state.
The through-line is the same one the interpretation itself draws. Legal character attaches to arrangements between parties, and arrangements are evidenced by records. Infrastructure that keeps those records well makes the legal analysis tractable; infrastructure that does not leaves it to be argued from reconstruction — the general problem described in immutable audit trails for RWA compliance.
Documenting Classification Before You Need To?
Blockmaze provides the compliance layer that records classification and offering terms against each instrument, enforces the restrictions that follow from them, and treats a change in treatment as a dated event.
Frequently Asked Questions
What are the five categories in the joint taxonomy?
Digital commodities, which derive value from the operation of a functional crypto system and market dynamics rather than from profit expectations tied to managerial effort. Digital collectibles, designed for collecting or use — artwork, music, NFTs — without intrinsic economic properties or yield rights. Digital tools, which serve practical functions such as membership access or credentials and are typically non-transferable. Stablecoins, where payment stablecoins issued by permitted issuers are excluded from the securities definition under the GENIUS Act. And digital securities, the enumerated financial instruments that remain securities regardless of how ownership is recorded.
What does the interpretation mean by saying the token is a thing?
It means the asset and the legal relationship around it are separate objects of analysis. The interpretation states that a crypto asset is not itself an investment contract — the token remains a thing — and that investment contracts arise from transactions involving issuer promises about essential managerial efforts producing profits. The practical consequence is that the same token can be sold in one transaction that creates an investment contract and in another that does not, because what is being analysed is the arrangement between the parties rather than the properties of the item changing hands.
Where do tokenized real-world assets sit in the taxonomy?
In digital securities, in almost every case that matters to an institutional issuer. Tokenized equity, debt and similar instruments are classified as digital securities and remain securities regardless of the technology used to record ownership, or of whether they provide non-financial benefits to holders. On-chain representation does not displace the economic characteristics of stock, notes, or other enumerated instruments. For an RWA program this is a confirmation rather than a change: a tokenized bond was already a bond, and the taxonomy says so explicitly rather than leaving it to be inferred.
Which representations count when assessing profit expectations?
The interpretation narrows this on four axes. Timing: only pre-sale or at-sale representations count, so statements made after a sale do not retroactively create an investment contract. Source: issuer statements, or coordinated third-party statements amounting to collusion — an unaffiliated commentator's enthusiasm does not bind the issuer. Medium: official channels such as websites, social media and whitepapers. Specificity: vague promises lacking actionable milestones are unlikely to create a contract. Together these make the analysis turn on what the issuer actually said, when, and where.
Does this mean a non-security token can never become a security?
No. A non-security crypto asset can become subject to an investment contract through issuer representations, while the asset itself remains distinct from the investment contract attaching to its sale. The distinction is between the item and the deal. That is why the interpretation insists the transaction is the unit of analysis: classification is not a permanent property stamped onto a token at creation, and an issuer that changes what it promises about future managerial effort can change the character of the transactions it enters into, without the token itself changing at all.
Does the taxonomy change what a tokenized asset issuer has to do?
It clarifies rather than reduces the obligations. If an instrument is a digital security, the full securities framework applies — registration or exemption, disclosure, reporting, transfer agent obligations — exactly as it would off-chain. What the taxonomy provides is a defensible classification step at the front of the analysis and a narrowed set of factors for the harder cases. It does not create a route by which an enumerated instrument stops being one, which is the reading some market participants hoped for and did not get.
Related Articles
What Are the Four SEC Tokenization Models?
The January 2026 staff statement on how tokenized securities are structured, which the taxonomy builds on.
Who Is the Transfer Agent for a Tokenized Security?
What follows operationally once an instrument is classified as a digital security.
RWA Token Standards Guide
The technical standards that carry these instruments, and what each enforces.
How Do Real-World Assets Back Compliant Stablecoins?
The stablecoin category in the taxonomy, and what backs the instruments inside it.