Utility token legal opinion (2026): SEC, MiCA and VARA tests

A utility token legal opinion is counsel’s dated conclusion that an access token is not a security or financial instrument under a named law. US federal securities law has no utility-token category: the SEC and CFTC’s March 2026 release never uses the term; its nearest categories are digital commodities and digital tools. MiCA and the DFSA’s rules for the DIFC define a utility token; VARA and India do not.

Founders usually ask for one because a distributor, a venue or an investor has, and because the whitepaper already says “utility”. The label is not the test. Each regime asks its own question about the same token, and the conclusion holds only where the facts answer that question.

What a utility token legal opinion has to establish

A utility conclusion is a conclusion under a named law. In the US that is the federal securities laws as the SEC now applies them. In the EU it is MiCA, the Markets in Crypto-Assets Regulation, read with the guidelines of the European Securities and Markets Authority (ESMA). In Dubai it is the Issuance Rulebook of the Virtual Assets Regulatory Authority (VARA) or, inside the Dubai International Financial Centre (DIFC), the General Module of the Dubai Financial Services Authority (DFSA). Under the Core Opinion Principles used in US opinion practice, an opinion covers only the law it names, and securities laws are covered only if the opinion names them expressly. The conclusion then rests on use-or-access facts: what the token does on the day of sale, who supplies what it unlocks, and what the issuer promised buyers. A founder certificate that states the conclusion cannot carry it, because an opinion should not rest on a representation that is tantamount to the legal conclusion it expresses.

What a token legal opinion contains in general is set out on the hub, and the sample token legal opinion letter shows a finished non-security opinion on invented facts. This page covers what the utility conclusion itself has to survive.

There is no utility token in US federal securities law: where the 2026 release puts it

The SEC and CFTC interpretation of 17 March 2026, Release Nos. 33-11412 and 34-105020, effective 23 March 2026, is how the Commission now applies Howey to crypto assets; the staff’s 2019 Framework is marked withdrawn. A full-text search of the release on 24 September 2026 finds no use of “utility token”. The nearest principle is an old one. Citing United Housing Foundation v. Forman, the release restates that “the Federal securities laws generally do not apply to items that are purchased for use or consumption”.

Of the release’s five categories, two usually fit an access token (a hybrid can also sit in the digital-collectible category). A digital commodity derives its value from the programmatic operation of a functional crypto system and from supply and demand, not from the essential managerial efforts of others. For a digital commodity, footnote 49 supplies the functionality test: “a crypto system is ‘functional’ if the system’s native crypto asset can be used on the system in accordance with the programmatic utility of the system.” A digital tool performs a practical function, such as a membership, ticket, credential, title instrument or identity badge, and is often non-transferable. Neither is itself a security.

Schedule A · Where an access token can sit in Release 33-11412, as at 24 September 2026
Category	Utility feature	What the opinion must evidence	What breaks it
Digital commodity	Native asset needed to use the system: gas, staking, or votes on technical or governance matters such as software upgrades and treasury expenditures	The system is functional in the footnote 49 sense (the native asset can be used on it in accordance with its programmatic utility); where the issuer promised functionality, also fulfilled as the issuer defined it (footnote 96); value comes from its programmatic operation and supply and demand	Passive yield; rights to an enterprise’s income, profits or assets; value that depends on the team’s promised efforts
Digital tool	Membership, ticket, credential, title instrument or identity badge, often non-transferable	The practical function works at sale, and any resale price rests on that function	Passive yield or other economic rights; marketing that sells the issuer’s efforts rather than the function

The category answers half the question. Either category can still be sold subject to an investment contract, which is a security, when the issuer (which the release reads to include its affiliates, agents and a promoter) induces an investment of money in a common enterprise with representations or promises to undertake essential managerial efforts from which a purchaser would reasonably expect profits. A business plan with detailed milestones, a timeline, personnel, funding sources and an explanation of how holders will profit likely creates that expectation; vague promises with no actionable plan likely do not. In a SAFT (simple agreement for future tokens) the sale happens at signing, and the delivered tokens stay subject to the contract unless buyers would no longer reasonably expect profit from the issuer’s efforts, for example because it has publicly disclosed completing what it promised. The full investment-contract overlay, with the release’s other three categories, sits with the security question.

One point is proposal commentary, not law. In its proposing release for Regulation Crypto Assets of 18 August 2026 (Release No. 33-11434, comments due 20 October 2026), the Commission states its view that once a network is functional, services to secure, maintain or improve it, or to facilitate network effects, are not essential managerial efforts. An opinion that leans on this should label it as a proposal.

Wyoming has a state Utility Token Act (Wyo. Stat. 34-29-106) that treats a qualifying consumptive token as intangible personal property and requires a notice of intent with the Wyoming Secretary of State before sale; it is a state statute, not part of the federal securities laws the SEC release interprets. No federal statute has created a utility-token category: on 15 September 2026 the Senate vote to invoke cloture on the motion to proceed to H.R.3633, the Digital Asset Market Clarity Act, failed, short of the 60 votes required, and nothing in the bill is enacted.

In the US, then, a utility conclusion is two conclusions: the asset is a digital commodity or a digital tool, and it was not sold on promises that made the sale an investment contract.

MiCA: when the utility token exemption applies, and when a listing ends it

Start with the provision that ends the exemption. Under MiCA Article 4(4), the Article 4(2) and 4(3) exemptions stop applying once the offeror, or anyone acting for it, makes known in any communication an intention to seek admission to trading. The European Commission’s answer to ESMA Q&A 2671, dated 21 May 2026, confines that to trading platforms operated by crypto-asset service providers established in the Union. Whether a listing only outside the EU triggers white-paper duties is answered on the listing checklist.

Next, the clock. Where the good or service does not yet exist or is not yet in operation, the offer described in the white paper may not last more than 12 months from publication (Article 4(6)), and modifying the white paper does not extend that limit (Article 12(8)).

Then the exemption itself. Article 4(3)(c) disapplies the whole of Title II, the white-paper regime for offers, where a utility token gives access to a good or service that exists or is in operation; recital 26 adds that the exemptions do not reach stored goods not intended to be collected. The definition in Article 3(1)(9) narrows the field first: a utility token is “a type of crypto-asset that is only intended to provide access to a good or a service supplied by its issuer”. A token that unlocks someone else’s service does not meet it, whatever the whitepaper says. The neighbouring free-offer exemption is narrower than it sounds: an offer is not free where recipients must provide personal data or the offeror receives any fee, commission or other benefit in exchange.

Three disclosure points tie the classification to the paperwork. A white paper drawn up voluntarily for an exempt offer switches Title II on (Article 4(8)). A utility-token white paper must state that the token may not be exchangeable against the promised good or service, especially if the project fails (Article 6(5)(d)). And since 23 December 2025 white papers are tagged in Inline XBRL under Implementing Regulation (EU) 2024/2984, whose Table 2 carries the Article 6(5)(d) statement as field 05 and true or false utility-token classification flags at D.6 and G.6; those flags have to match the classification.

ESMA’s guidelines on qualifying crypto-assets as financial instruments (dated 19 March 2025) state ESMA’s view on utility directly. Paragraph 23 says utility tokens used to access services, premium content on a platform or discounts, which give no financial returns comparable to dividends or interest and do not belong to a class of securities, should not be qualified as transferable securities, even if bought with an expectation of profit from appreciation. Guideline 7 (paragraph 62 and its footnote 34) adds the design rule: no financial rights linked to profits, capital or liquidation surpluses, and no voting rights in the company’s decision-making.

The Article 2(4) gate comes first: a financial instrument is outside MiCA altogether, as set out in the four-regime comparison.
Hybrids: under Guideline 9, financial-instrument features take precedence over a utility label; how hybrids are read sits with the security question.

Where no exemption applies, the EU document for a crypto-asset that is neither an asset-referenced nor an e-money token is not a legal opinion. It is an Article 8(4) explanation of why the token is not excluded under Article 2(4), not an e-money token and not an asset-referenced token, on the template in the ESAs’ Joint Guidelines JC 2024 28, notified with the white paper at least 20 working days before publication. Nothing is approved: Article 8(3) bars competent authorities from requiring prior approval of the white paper, and MiCA sets no approval step for the explanation. How the EU route compares with Dubai’s is in MiCA vs VARA.

Schedule B · MiCA Title II paths for a utility token, as at 24 September 2026
Path	When it applies	What is filed
Exempt under Article 4(3)(c)	The issuer’s good or service exists or is in operation	Nothing under Title II; a voluntary white paper switches Title II on
Ended by Article 4(4)	An intention to seek admission to trading on an EU platform is communicated	White paper and Article 8(4) explanation before the offer continues
White paper and Article 8(4) explanation	A pre-product token, or any offer, that fits none of the Article 4(2) or 4(3) exemptions	Both notified at least 20 working days before publication; no approval; a pre-product offer runs 12 months at most
Admission under Article 5	Admission to trading on a platform in the Union	A white paper from the person seeking admission, or from the platform where it takes on the duty

The Article 4(3)(c) exemption is a timing question as much as a design one: it holds until the offeror first communicates an intention to seek admission on a platform run by an EU crypto-asset service provider, or the token is admitted there. On EU filings, as on MiCA authorisation, Infinilex quarterbacks, EU local counsel files.

A utility token legal opinion in Dubai, Abu Dhabi and the DIFC: three different answers

VARA regulates virtual assets across Dubai, free zones included, except the DIFC, where the DFSA regulates; in Abu Dhabi, the Financial Services Regulatory Authority (FSRA) of Abu Dhabi Global Market (ADGM) runs its own regime. The regulators themselves are compared in VARA vs ADGM vs DIFC.

Dubai (VARA). The Virtual Asset Issuance Rulebook (effective 19 June 2025) binds entities in Dubai that issue a virtual asset in the course of a business, and it has no utility category. For an issuer in Dubai outside the DIFC, a token is Exempt only under one of three limbs. A Non-Transferable Virtual Asset cannot be sold, redeemed for goods, services or discounts, or moved between wallets. A Redeemable Closed-Loop Virtual Asset is redeemable only with the issuer or its designated merchants, is not sold for or convertible into fiat or virtual assets, and cannot move between wallets except for redemption. The third limb is any other virtual asset VARA determines to be Exempt. A tradeable “utility” token fails the first two, so it is usually Category 2: no licence and no prior VARA approval, but placement only through a Licensed Distributor. Under the Broker-Dealer Services Rulebook the distributor must ensure “beyond all reasonable doubt” the quality of the issuer and the token, including compliance with all applicable laws, then file with VARA and wait out a 15 Working Day submission period. VARA is not deemed to have approved the token, even if the period passes without comment. The basic category test is in how VARA’s categories sort a token.

The Rulebook requires no opinion for a Category 2 token: a full-text search finds “legal opinion” only in Annex 2, the rules for Asset-Referenced Virtual Asset issuers. So when a Dubai utility token legal opinion is requested, the request comes from the distributor, a venue or an investor, not from the Rulebook. This page quotes none of their requirements.

A revenue or fee share changes the analysis. VARA’s definitions make a token an Asset-Referenced Virtual Asset where it carries an entitlement to receive or share Income deriving from a real-world asset (RWA), and that is Category 1: a licence, then approval of each token. VARA’s definition of RWA covers any interest in a financial instrument, scheme or arrangement, physical assets, and intangible rights other than the virtual asset itself or items that exist in digital form only. Whether a share of on-chain fees is Income deriving from an RWA, for example an interest in a scheme or arrangement, is tested on the facts. Foundations are caught too: VARA’s course-of-business test expressly includes not-for-profit organisations and foundations.

Abu Dhabi (ADGM). The FSRA’s virtual asset guidance (current version from 10 June 2025) treats utility tokens as commodities, not Specified Investments; unless a utility token is caught as an Accepted Virtual Asset, spot trading and transactions in it are not Regulated Activities. That guidance does not apply to token offerings. An ICO in or from ADGM is assessed case by case under the FSRA’s 2020 offering guidance: where tokens lack the features of shares, debentures or units, the offer is unlikely to be an Offer of Securities.

DIFC (DFSA). The DFSA’s General Module defines a Utility Token as one usable only to pay for, get a discount on, or access a current or proposed product or service of the issuer or its Group, and makes it an Excluded Token. A DFSA Authorised Person must not provide any service related to it, except custody where its licence permits. The label does not decide it: the DFSA’s Example 4 treats a self-described “utility token” that shares in the issuer’s profits as likely an Investment Token.

Schedule C · UAE doors for a utility token, as at 24 September 2026
Regulator	Treatment	Step before sale	What an opinion answers, and who asks
VARA	For a Dubai issuer, usually Category 2; Category 1 if Asset-Referenced	Distributor files Whitepaper, Risk Disclosure Statement, declaration and due diligence; 15 Working Days; no deemed approval	The category and the Whitepaper items; asked by a distributor, a venue or an investor, not the Rulebook
ADGM (FSRA)	A commodity, not a Specified Investment; spot trading is not a Regulated Activity unless it is an Accepted Virtual Asset	For an ICO in or from ADGM, assessed case by case under the 2020 guidance, with an early approach to the FSRA	Whether the token has the features of a security
DIFC (DFSA)	Excluded Token; Authorised Persons may not service it, custody aside	None under the Crypto Token regime for a true Utility Token	Utility Token, Investment Token or Crypto Token
CBUAE (Central Bank of the UAE)	Not a Payment Token unless it purports to hold a stable value against a fiat currency; dirham-referenced tokens sit with the CBUAE alone	None for a non-payment access token; the Payment Token Services Regulation also exempts services in payment tokens usable only to pay for the issuer’s non-financial goods or services	Whether any stable-value or payment function brings it inside the CBUAE perimeter

The same access token can be a distributor-gated Category 2 asset, a commodity outside the FSRA’s Specified Investments, or a token DIFC firms may not service beyond custody. An opinion has to say which door it is written for, and a Dubai distribution plan sits next to VARA licensing.

India: the utility label changes nothing

Section 2(111) of the Income-tax Act 2025, in force from 1 April 2026, defines a virtual digital asset (VDA). Sub-clause (a) reaches any token, “called by any name”, that gives a digital representation of value with a promise of inherent value, or works as a store of value or unit of account, and can be transferred, stored or traded electronically. Sub-clause (d) catches any crypto-asset that is a digital representation of value relying on a cryptographically secured distributed ledger, whether or not it falls within the other sub-clauses. So the utility label does not take a token out. The notified exits are narrow: CBDT Notification No. 74/2022 excludes gift cards and vouchers, reward points given without direct monetary consideration, and subscriptions to websites, platforms or applications, and section 536(2)(j) keeps it in force under the 2025 Act. It was made under the 1961 Act, so whether it also takes an asset out of sub-clause (d) is a question for Indian counsel. Rates and tax deducted at source sit in the four-regime comparison, and the AML perimeter in FIU-IND registration.

Design features that break a utility conclusion, regime by regime

These are the features that turn on the utility question itself. Generic features are tested on the security question and link to where that analysis sits.

Schedule D · Utility-specific features by regime, as at 24 September 2026
Feature	US	EU	UAE	India
Revenue or fee share	Outside both categories where it gives a right to an enterprise’s or promisor’s income or profits; a protocol-level fee distribution is tested against the release’s staking and reward analysis	Guideline 7 excludes profit rights; points toward a financial instrument	Risk, tested on facts: VARA Category 1 if it shares Income from a real-world asset; DIFC: likely an Investment Token where it shares in the issuer’s profits (Example 4), otherwise possibly a Crypto Token	VDA regardless, unless a 2022 exclusion applies
Pre-product presale or SAFT	Sale at signing; delivered tokens stay subject to the investment contract while buyers reasonably expect profit from the issuer’s promised efforts, and separate on fulfilment (for example a public completion notice) or on clear failure or abandonment	No Article 4(3)(c) exemption; a white paper unless an Article 4(2) or other Article 4(3) exemption fits, and then a 12-month cap on the offer described in it	VARA category turns on rights and business model; the DIFC definition reaches a proposed product	VDA regardless, unless a 2022 exclusion applies
Announced EU listing	No listing rule; the test stays the issuer’s promises in every channel	Communicated intent to seek admission on an EU platform ends the Article 4(2) and 4(3) exemptions; admission needs an Article 5 white paper	No listing trigger in VARA’s category test	VDA regardless, unless a 2022 exclusion applies
Non-transferability	Consistent with a digital tool	Outside MiCA if also accepted only by the issuer or offeror	VARA Exempt only on the full Non-Transferable definition, which also bars redemption for goods or services	VDA regardless, unless a 2022 exclusion applies
Lock-up or vesting	Not a factor the release names	Does not defeat negotiability, even with a temporary lock-up	Not VARA’s Non-Transferable status, which needs a token that cannot move between wallets	VDA regardless, unless a 2022 exclusion applies
Passive yield or fixed APY	Does paying a staking APY make my token a security?
Staking rewards	The same staking answer
Corporate-governance votes	Is a governance token a security?
Task-based airdrops	Can an airdrop be a securities offering?

Buyback-and-burn is not a settled row in any of these regimes; it is tested on its own facts. Nothing in this table is a conclusion on your token.

Issuing from BVI, Cayman, Panama or Switzerland? The issuer’s home law is one leg; the US, EU, UAE and India legs still apply where buyers and venues sit. The home-law analysis comes from local counsel there, and how the legs of one opinion fit together is set out on the hub.

What the opinion must evidence for the utility conclusion to hold

A utility conclusion is only as good as the record under it. On top of the four sets of evidence every opinion needs, a utility conclusion needs:

Proof that the product exists or is in operation at the date of the EU offer.
No communication of EU listing intent, or a white paper and Article 8(4) explanation already notified.
A matching Article 6(5)(d) statement, with the field 05 statement and the D.6 and G.6 flags consistent with the classification.
For Dubai, Whitepaper items C.ix, C.x, C.xv and C.xvi of the Issuance Rulebook’s Schedule 1: holder rights and their enforceability, rights on insolvency, material legal considerations, and governing law and forum. Add the distributor’s due-diligence pack.

The conclusion also needs a stated confidence scale. The ABA’s 2002 Guidelines for the Preparation of Closing Opinions, section 3.5, said an opinion means the same whether stated as “would” or “should”, and noted that tax opinions may differ. A token opinion should state which scale it uses. The specimen shows both points in practice: facts in the certificate, not the conclusion, and a defined confidence scale.

Infinilex builds this record and runs the legs. Infinilex counsel sign the India, UAE and US legs; local counsel qualified in any other jurisdiction sign theirs, brought into the engagement explicitly and named to you before they act. Who signs each leg is set out on the hub.

When a utility conclusion stops holding

In the US, where buyers would reasonably expect the issuer’s promises to stay connected to the token, secondary-market sales remain securities transactions until the token separates from them. In Dubai, a change that could move a token out of its category must meet the new category’s requirements before it takes effect. The wider list of triggers is under is your token legal opinion stale.

Frequently asked questions

Do I need a legal opinion if my token is only a utility token?

No enacted US rule requires a classification opinion for a utility token, and neither does MiCA or VARA's Issuance Rulebook. In the EU, an offer of a utility token for a good or service that exists or is in operation sits outside Title II until an intention to seek admission to trading on an EU platform is communicated or the token is admitted there. Where no exemption applies, a white paper is notified with an Article 8(4) explanation, which is not a legal opinion. In Dubai, the Rulebook asks for no opinion on a Category 2 token, but the Licensed Distributor must itself be satisfied beyond all reasonable doubt, so a distributor, a venue or an investor may ask for one.

Is a utility token exempt from MiCA?

Only from Title II, the white-paper regime for offers. The utility-token exemption in Article 4(3)(c) needs a good or service that exists or is in operation, and ends once an intention to seek admission to trading on a platform run by an EU crypto-asset service provider is communicated or the token is admitted there. Before that point, a pre-product token may still fit another Article 4(2) or 4(3) exemption, such as an offer to fewer than 150 persons per Member State. The Article 2(4) financial-instrument test applies first: a token that qualifies as a financial instrument is outside MiCA altogether.

Can an access token be a digital tool rather than a security?

Yes, on the right facts. The SEC and CFTC release of 17 March 2026 describes a digital tool as performing a practical function, such as a membership, ticket or credential, with no passive yield or other economic rights, and a digital tool is not itself a security. It can still be sold subject to an investment contract where the issuer's promises create an expectation of profit, and that contract is a security.

Does a revenue share or fee share break a utility conclusion?

It can. Digital commodities and digital tools carry no rights to the income or profits of an enterprise or promisor. ESMA's Guideline 7 excludes profit rights from a utility token. The DFSA's Example 4 treats a profit-sharing 'utility token' as likely an Investment Token. VARA's Asset-Referenced Virtual Asset definition catches an entitlement to share Income deriving from a real-world asset, and whether a share of on-chain fees is such Income is a question counsel answers on the facts.

Is a utility token treated the same in Dubai, ADGM and the DIFC?

No. Under VARA, a Dubai issuer's utility token is usually a Category 2 virtual asset, placed only through a Licensed Distributor and with no prior VARA approval. In ADGM the FSRA treats utility tokens as commodities, not Specified Investments, and spot trading in them is not a Regulated Activity unless they are Accepted Virtual Assets. In the DIFC a Utility Token is an Excluded Token that DFSA Authorised Persons may not service, except for custody where their licence permits.

Does Wyoming's Utility Token Act make a token a utility token under federal law?

No. It is a state statute that treats a qualifying consumptive token as intangible personal property and requires a notice of intent with the Wyoming Secretary of State before sale. It is not part of the federal securities laws that the SEC's March 2026 release interprets, and that release does not use the term utility token.

Next step

Want the utility conclusion tested before you sell?

Bring the whitepaper draft, the deck and every channel that has described the token. We will map which regimes your buyers and venues bring in, and what each one asks of the token.

Book a discovery call The exchange listing legal opinion checklist

What a utility token legal opinion has to show, and the features that break it