Utility Tokens vs Security Tokens: The Distinction With Real Legal Consequences
One gives you access to a product. The other represents a financial stake regulators treat like an investment contract. Confusing the two carries genuine legal risk.
By Firoz Khan|8 August 2026|Updated 26 September 2026|4 min read
Most token classification discussions boil down to one core question: is this token a key that unlocks a product or service, or is it fundamentally an investment contract dressed up in crypto terminology? The answer determines which regulatory regime, if any, actually applies, and it's not always obvious from the marketing.
What a genuine utility token is
It grants access to a specific product, service or function within a platform, paying a network fee, unlocking a feature, redeeming for a service, with its value tied primarily to actually using that platform rather than to a promised financial return from someone else's efforts.
What a security token actually represents
It represents a financial stake, a right to future profits, revenue share, or equity-like ownership, that depends substantially on the effort of a promoter or team, which is precisely the pattern securities regulation in the UK and elsewhere is designed to capture and protect buyers within.
How the FCA sorts tokens
The FCA's guidance on cryptoassets, published in July 2019, sorts tokens into three groups. Security tokens amount to a specified investment under the Regulated Activities Order, for example by giving rights of ownership, repayment of a sum of money or a share in future profits, and are likely to be inside the FCA's regulatory perimeter. E-money tokens meet the legal definition of electronic money and are regulated on that basis. Everything else is an unregulated token, which includes exchange tokens such as Bitcoin and utility tokens that can be redeemed for a product or service.
Newsletter
Make sense of money and crypto
Practical guides, useful calculators, and straightforward insights, delivered to your inbox.
Unsubscribe anytime. See our Privacy Policy.
Unregulated here means outside the perimeter for the token itself. Firms dealing in them still have to register with the FCA for money laundering purposes and follow the financial promotion rules, and the FCA says unregulated cryptoassets are not covered by the Financial Services Compensation Scheme. The FCA also says the new UK regime, covering activities such as custody, trading platforms, lending and staking, starts on 25 October 2027.
How HMRC sorts them
HMRC uses similar groups for tax: exchange tokens, utility tokens that give access to goods or services on a platform, security tokens that give rights in a business, and stablecoins. It says the tax treatment of any token depends on its nature and use, not on the definition or label it is given.
Why the label a project chooses doesn't settle the question
Regulators generally look at substance over form: a token marketed as a 'utility token' that in practice functions as an investment, bought primarily in expectation of profit from a team's efforts rather than genuine platform use, can still be judged a security regardless of what the project calls it publicly.
Two examples
Say a platform's token gives holders a 10% discount on its fees and access to a new feature. That looks like a utility token. Now say another project's token entitles holders to a share of the platform's future profits. That is close to HMRC's description of a security token, whatever the project calls it. The examples are invented to show the difference, not real projects, and only a proper assessment of a specific token can say which category it falls into.
Why this distinction carries real consequences
A token judged to be a security, sold without the authorisation the rules require, can expose the issuing project to significant regulatory action, and buyers may find themselves holding an asset a regulator considers to have been sold unlawfully, with real uncertainty about legal recourse. Checking how a token actually functions, not just what it's called in its marketing, is a genuinely worthwhile five minutes before buying anything positioned as a new project's native token.
A reminder
The FCA risk warning still applies to higher-risk crypto content. Always assess how much risk you are willing to take before buying.
Related reading