The guidance takes the form of a Frequently Asked Questions document and applies the Howey test, the Supreme Court framework used to determine whether a financial instrument qualifies as a security, to six areas of crypto practice that have long sat in regulatory grey zones: token buybacks on live networks, buybacks on pre-functional networks (networks still under development), ongoing protocol development, liquid staking receipt tokens, the promotion of current utility versus profit promises, and trading platform liability. The Division explicitly noted that the FAQ was not approved by the full Commission, creates no new legal obligations, and establishes no safe harbors.

What the Guidance Says

On token buybacks, the SEC staff drew a clear line between functional and pre-functional networks. When a network is already operational, an issuer announcing a buyback program does not automatically constitute a promise to undertake what the Howey test calls "essential managerial efforts," the type of effort by a central party that can make a token look like a security. On networks still under development, the analysis shifts: a buyback framed as generating yield or returns for holders could still contribute to a securities classification.

The guidance also addressed ongoing protocol development in direct terms. According to the FAQ, "services to secure, maintain, improve or enhance a functional system, and efforts facilitating network effects, generally would not constitute essential managerial efforts." This gives protocol teams explicit cover to continue building on live networks without triggering reclassification of their tokens as securities under U.S. law.

The FAQ also addresses how teams communicate about their projects. Promotional statements describing existing features and current utility generally would not constitute promises of profit under the Howey test. Aspirational statements about future features "generally would not constitute such promises" unless they explicitly promote profit potential. The FAQ does caution, however, that "explicit, unambiguous representations about essential efforts can still create reasonable profit expectations under Howey," a distinction with direct relevance for any team writing project updates, roadmaps, or investor-facing communications.

On liquid staking, staff concluded that a receipt token issued by a protocol-based liquid staking provider may qualify as a "digital commodity" rather than a security, provided it is tied to the programmatic operation of a functional crypto system, derives its value from that operation and supply-and-demand dynamics, and the issuer does not lend, pledge, or redeploy the deposited assets.

The FAQ also clarified that trading platforms hosting secondary markets for crypto assets are not automatically classified as "promoters" under Securities Act Rule 405, reducing potential liability for exchanges listing tokens with buyback programs.

Building on Earlier Frameworks

The September FAQ extends work the SEC and CFTC began jointly in March 2026, when they issued an interpretive release establishing a five-part token taxonomy covering digital commodities, digital collectibles, digital tools, stablecoins, and digital securities. That release introduced the concept that tokens can move between categories as networks mature. The September FAQ operationalizes that concept, particularly in its treatment of functional versus pre-functional networks.

The shift also reflects a broader change in SEC philosophy under Chair Paul Atkins. Under former Chair Gary Gensler, the agency took an outcome-based approach, examining whether token revenue was distributed to holders in ways that resembled dividends and treating most buybacks as security-like activity subject to strict oversight. The current approach is structure-based, focusing on governance: whether decisions are made by decentralized code and community governance rather than by a centralized foundation.

Token buyback programs largely disappeared from crypto markets after 2022 due to enforcement risk and returned in 2025 as the regulatory environment evolved. Protocols including Hyperliquid (which routes 99% of buybacks through automated systems with no foundation discretion), Uniswap (via a DAO-controlled fee routing proposal called Unification), and Pump.fun now operate models aligned with the structure the FAQ describes.

What It Means Outside the United States

The guidance carries practical weight for developer communities in South Asia and Africa, two of the world's fastest-growing crypto regions. India ranks first in Chainalysis's 2025 Global Crypto Adoption Index, Pakistan ranks third, and Nigeria ranks sixth. Sub-Saharan Africa received more than $205 billion in on-chain value between July 2024 and June 2025, a 52% increase year-over-year.

For teams building out of Bangalore, Karachi, Lahore, Dhaka, Lagos, or Nairobi, the FAQ matters on several fronts. Developers maintaining live DeFi protocols or liquid staking infrastructure now have clearer guidance that routine upgrades will not retroactively make their tokens U.S. securities, a material reduction in legal risk for any project with American investor exposure. African exchanges listing tokens with buyback programs also benefit from the clarification on trading platform liability.

South Asian developers should note one important limitation that the U.S. guidance does not address: domestic tax environments remain a separate obstacle. India currently imposes a 30% flat tax on crypto gains with no loss offsetting, plus a 1% tax deducted at source on transactions. U.S. regulatory progress does not ease those domestic burdens, and teams in the region will need to track both sets of rules independently.

The guidance may also influence regulators in Nigeria, Kenya, South Africa, and Ghana, all of which are actively building new crypto frameworks. Nigeria's Investments and Securities Act 2025 classifies digital assets as securities. South Africa has issued more than 59 crypto asset service provider licenses and was removed from the FATF grey list in October 2025. Kenya's Virtual Asset Service Providers Act took effect on November 4, 2025. Ghana passed the Virtual Assets Act (Act 1154) on December 19, 2025. The SEC's move toward structure-based analysis, centered on decentralization and governance mechanisms rather than revenue outcomes, is a framework these regulators may absorb into their own guidance over time.

One caution applies across all regions: staff FAQs are not law. They carry no enforcement weight, and the Division's own disclaimer makes this explicit. Developers in markets where access to U.S. securities counsel is expensive or limited should not treat this document as a compliance clearance. It is a signal, not a safe harbor, and local legal review remains essential.

What Comes Next

The September FAQ arrives alongside ongoing U.S. congressional debate over the Clarity Act, which would shift oversight of secondary crypto markets from the SEC to the CFTC. The legislation turns on a key distinction: tokens at the point of issuance may constitute investment contracts, while the same tokens trading in secondary markets would be classified as digital commodities subject to CFTC oversight. If that legislation passes, it would formalize in statute much of what staff guidance has been building toward informally. Until then, the FAQ gives developers and protocol teams a clearer picture of how SEC staff reads the law today, without committing the Commission to anything.