United States: Takeaways From SEC's First Ever Enforcement Actions Against Cryptocurrency Firms For Failing To Register As A Broker-Dealer And Investment Company

Over the past year, the U.S. Securities and Exchange Commission has ramped up its scrutiny of cryptocurrencies and other digital token offerings. On Sept. 11, 2018, the SEC escalated its crackdown when it announced a pair of settled enforcement actions against non-issuers participating in the offer and sale of cryptocurrencies it deemed unregistered securities. As with prior cryptocurrency cases, the SEC charged the defendants with offering or selling securities without filing a registration statement or having a valid exemption from registration. However, these cases mark the SEC's first cryptocurrency enforcement actions against non-issuers for failing to register as broker-dealers and investment companies. As such, they highlight the SEC's continuing efforts to bring the purchase and sale of cryptocurrencies within a regulated framework, including by targeting third parties who facilitate the purchase and sale of such assets.  

Rising Scrutiny of Cryptocurrency Offerings

The SEC previously issued a report in July 2017, warning that digital tokens could constitute securities and that unregistered initial coin offerings—or ICOs—could violate the securities laws. In December 2017, the SEC issued a cease and desist order to a company that failed to register an offering of utility tokens, even though there were no allegations of fraud. (Read Fenwick's prior analysis of these developm​​ents in " The SEC and Plaintiffs' Class Action Attorneys Are Targeting Initial Coin Offerings.")  In 2018, the SEC has continued to target fraudulent and unregistered digital token offerings.  


On Sept. 11, 2018, the SEC filed its first enforcement action alleging that an online platform that bought and sold digital assets was operating as an unregistered broker-dealer. The SEC alleged that from July 2017 through late February 2018, a company named TokenLot operated as a broker by facilitating sales of digital tokens offered by nine issuers in ICOs. A self-styled "ICO superstore," TokenLot operated an online platform where retail investors could purchase digital tokens during and after an ICO. TokenLot marketed the digital tokens; accepted investors' orders and funds for payment; worked with issuers to transfer purchased digital tokens to investors; and disbursed the proceeds of the sales to the issuer. The company also operated as a broker by listing for sale and participating in secondary sales of digital tokens issued by 145 different issuers. Further, TokenLot operated as a dealer by purchasing digital tokens at a discount during the ICOs and then selling them to retail investors for a profit.

TokenLot earned approximately $344,000 in connection with its activities as an unregistered broker-dealer. In addition, the company earned approximately $127,000 in marketing fees to promote the sale of 40 digital tokens to potential investors, including retail investors, through the company's website, various social media platforms and forums, email newsletters and other means. Neither TokenLot nor its owners/operators had ever registered with the SEC.

The SEC charged the company and its owners/operators with failing to register as a broker-dealer and for selling unregistered securities. Notably, unlike most of the prior SEC enforcement actions involving cryptocurrencies, the SEC did not allege any fraudulent conduct. 

TokenLot and its owners/operators were ordered to pay an aggregate $478,929 in disgorgement and prejudgment interest. The owners/operators were also ordered to pay $45,000 each as a civil penalty and were barred from participating in the securities industry with the right to apply for reentry after three years. The company, which is in the process of winding down, agreed to retain a qualified independent intermediary to take possession of and destroy the remaining digital tokens in TokenLot's inventory.


On the same day it filed its case against TokenLot, the SEC brought a separate action against Crypto Asset Management. CAM managed Crypto Asset Fund, or CAF, a pooled investment vehicle formed for the purpose of investing in digital assets. The SEC alleged that from August 1, 2017, through December 1, 2017, CAM raised over $3.6 million from 44 investors, most of whom were individuals. There was no pre-existing relationship between CAM and these investors; rather, CAM engaged in a general solicitation of investors through the company's website, social media accounts and traditional media outlet interviews. Moreover, CAM not only failed to register CAF as an investment company, it also misrepresented that CAF had filed a registration statement with the SEC and that it was the "first regulated crypto asset fund in the United States," according to the SEC's findings.

The SEC charged CAM and its owner with several violations of the securities laws, including:

  • Offering or selling unregistered securities
  • Failing to register CAF as an investment company
  • Making material misrepresentations or omissions in connection with the offer or sale of securities, and
  • Making material misrepresentations or omissions to prospective investors in a pooled investment vehicle 

The SEC ordered CAM and its owner to pay $200,000 in civil penalties. According to the SEC, the monetary penalty reflected the cooperation and remedial acts undertaken by CAM, which included:

  • An immediate halt to the offering
  • A review of CAM's website, marketing materials and offering procedures
  • Verification of the accredited status of investors
  • Disclosure of CAM's previous misstatements to investors and potential investors, and
  • A rescission offer to each accredited investor 

In addition, beginning in January 2018, CAM began offering securities pursuant to a Regulation D Rule 506(c) exemption from registration.

Key Takeaways

Entities and individuals need to analyze the risk that transactions in a given digital token or cryptocurrency are likely to involve the offer or sale of a security.   The test to determine whether or not a given transaction involves an investment contract, and thus implicates the federal securities laws, was articulated by the U.S. Supreme Court in SEC v. W.J. Howey (1946). There are no bright-line rules. Rather, the test is a highly fact-specific inquiry considering whether the transaction (1) is an investment of money (2) in a common enterprise (3) with a reasonable expectation of profits (4) derived from the managerial efforts of others.

Senior SEC officials indicated in June that established, well-functioning and decentralized cryptocurrencies such as Bitcoin and Ethereum are not themselves securities. However, many digital tokens—and the platforms used to transact in such tokens—are much less developed and more dependent on the efforts of the issuer for success. In such cases, purchases of the token are more likely to be considered investments, and the token itself likely constitutes a security. And the enforcement action against CAM confirms that even transactions involving Bitcoin and Ethereum may implicate a security if they are packaged as part of fund for investment.

The SEC's enforcement actions against TokenLot and CAM underscore that the agency has expanded its enforcement beyond cryptocurrency issuers and is now scrutinizing the actions of third parties who facilitate sales of cryptocurrencies that, in the SEC's view, are unregistered securities without a valid exemption from registration. At the outset, firms and entities wishing to transact in digital tokens and cryptocurrencies must apply the Howey test and analyze the economic substance of the transaction to understand the risk that it may implicate a security, thus triggering the various disclosure and registration requirements under the federal securities laws. 

Entities and individuals that transact in cryptocurrencies must consider whether they are required to register with the SEC.    Separate and apart from selling unregistered securities, TokenLot and CAM were also charged with failing to register as a broker-dealer and an investment company, respectively. Cryptocurrency transactions that implicate securities may trigger SEC registration requirements, not just for the underlying cryptocurrency offering, but also potentially for third parties that are in the business of various types of cryptocurrency transactions.

Entities and individuals that are engaged in the business of buying, selling or investing in securities, including applicable cryptocurrencies should consider whether they need to be registered with the SEC. This includes brokers (i.e. those who are in the business of facilitating securities transactions for the accounts of others), dealers (i.e., those who are engaged in the business of buying and selling securities for their own account), and investment companies (i.e., issuers that are primarily engaged in the business of investing, reinvesting or trading in securities). It does not include traders who generally buy for their own account, either individually or as a fiduciary, but not as part of a regular business.

The SEC is targeting not just entities, but individuals, and the consequences can be severe.   Finally, it's worth noting that in TokenLot and CAM, the SEC brought charges not just against the entities but also against the control persons behind the entities individually. In the case of TokenLot, the two individual respondents were barred from associating with a broker-dealer, investment adviser, or investment company for a minimum of three years. In addition, the individuals are on the hook (along with the TokenLot entity, jointly and severally) to pay the SEC over $475,000 in disgorgement and interest. Further, they were required to shutter TokenLot and destroy any cryptocurrencies it held. In CAM, the entity's owner was required to pay a $200,000 penalty, jointly and severally with the entity. Notably, in both cases, the SEC said that the sanctions would have been more severe but for the remedial efforts of the respondents.

The sanctions against the individual owners of TokenLot and CAM are a reminder that an SEC investigation can quickly turn into an enforcement action with serious individual consequences. Accordingly, individuals engaged in cryptocurrency activities should seek legal advice from experienced practitioners when structuring their businesses, and should engage experienced SEC counsel should their activities draw the unwanted attention of the agency's enforcement division. ​​​​​​​​​​​​​​​​​​​​​​​​​​

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

To print this article, all you need is to be registered on Mondaq.com.

Click to Login as an existing user or Register so you can print this article.

Events from this Firm
2 Dec 2019, Speaking Engagement, San Francisco, United States

With the revenue and lease standards in the rear-view mirror but CECL still to be adopted, it is as important as ever to keep up with new and evolving accounting standards and regulations especially given the SEC’s Disclosure Modernization and Simplification initiatives.

Similar Articles
Relevancy Powered by MondaqAI
Sheppard Mullin Richter & Hampton
Hunton Andrews Kurth LLP
In association with
Related Topics
Similar Articles
Relevancy Powered by MondaqAI
Sheppard Mullin Richter & Hampton
Hunton Andrews Kurth LLP
Related Articles
Related Video
Up-coming Events Search
Font Size:
Mondaq on Twitter
Mondaq Free Registration
Gain access to Mondaq global archive of over 375,000 articles covering 200 countries with a personalised News Alert and automatic login on this device.
Mondaq News Alert (some suggested topics and region)
Select Topics
Registration (please scroll down to set your data preferences)

Mondaq Ltd requires you to register and provide information that personally identifies you, including your content preferences, for three primary purposes (full details of Mondaq’s use of your personal data can be found in our Privacy and Cookies Notice):

  • To allow you to personalize the Mondaq websites you are visiting to show content ("Content") relevant to your interests.
  • To enable features such as password reminder, news alerts, email a colleague, and linking from Mondaq (and its affiliate sites) to your website.
  • To produce demographic feedback for our content providers ("Contributors") who contribute Content for free for your use.

Mondaq hopes that our registered users will support us in maintaining our free to view business model by consenting to our use of your personal data as described below.

Mondaq has a "free to view" business model. Our services are paid for by Contributors in exchange for Mondaq providing them with access to information about who accesses their content. Once personal data is transferred to our Contributors they become a data controller of this personal data. They use it to measure the response that their articles are receiving, as a form of market research. They may also use it to provide Mondaq users with information about their products and services.

Details of each Contributor to which your personal data will be transferred is clearly stated within the Content that you access. For full details of how this Contributor will use your personal data, you should review the Contributor’s own Privacy Notice.

Please indicate your preference below:

Yes, I am happy to support Mondaq in maintaining its free to view business model by agreeing to allow Mondaq to share my personal data with Contributors whose Content I access
No, I do not want Mondaq to share my personal data with Contributors

Also please let us know whether you are happy to receive communications promoting products and services offered by Mondaq:

Yes, I am happy to received promotional communications from Mondaq
No, please do not send me promotional communications from Mondaq
Terms & Conditions

Mondaq.com (the Website) is owned and managed by Mondaq Ltd (Mondaq). Mondaq grants you a non-exclusive, revocable licence to access the Website and associated services, such as the Mondaq News Alerts (Services), subject to and in consideration of your compliance with the following terms and conditions of use (Terms). Your use of the Website and/or Services constitutes your agreement to the Terms. Mondaq may terminate your use of the Website and Services if you are in breach of these Terms or if Mondaq decides to terminate the licence granted hereunder for any reason whatsoever.

Use of www.mondaq.com

To Use Mondaq.com you must be: eighteen (18) years old or over; legally capable of entering into binding contracts; and not in any way prohibited by the applicable law to enter into these Terms in the jurisdiction which you are currently located.

You may use the Website as an unregistered user, however, you are required to register as a user if you wish to read the full text of the Content or to receive the Services.

You may not modify, publish, transmit, transfer or sell, reproduce, create derivative works from, distribute, perform, link, display, or in any way exploit any of the Content, in whole or in part, except as expressly permitted in these Terms or with the prior written consent of Mondaq. You may not use electronic or other means to extract details or information from the Content. Nor shall you extract information about users or Contributors in order to offer them any services or products.

In your use of the Website and/or Services you shall: comply with all applicable laws, regulations, directives and legislations which apply to your Use of the Website and/or Services in whatever country you are physically located including without limitation any and all consumer law, export control laws and regulations; provide to us true, correct and accurate information and promptly inform us in the event that any information that you have provided to us changes or becomes inaccurate; notify Mondaq immediately of any circumstances where you have reason to believe that any Intellectual Property Rights or any other rights of any third party may have been infringed; co-operate with reasonable security or other checks or requests for information made by Mondaq from time to time; and at all times be fully liable for the breach of any of these Terms by a third party using your login details to access the Website and/or Services

however, you shall not: do anything likely to impair, interfere with or damage or cause harm or distress to any persons, or the network; do anything that will infringe any Intellectual Property Rights or other rights of Mondaq or any third party; or use the Website, Services and/or Content otherwise than in accordance with these Terms; use any trade marks or service marks of Mondaq or the Contributors, or do anything which may be seen to take unfair advantage of the reputation and goodwill of Mondaq or the Contributors, or the Website, Services and/or Content.

Mondaq reserves the right, in its sole discretion, to take any action that it deems necessary and appropriate in the event it considers that there is a breach or threatened breach of the Terms.

Mondaq’s Rights and Obligations

Unless otherwise expressly set out to the contrary, nothing in these Terms shall serve to transfer from Mondaq to you, any Intellectual Property Rights owned by and/or licensed to Mondaq and all rights, title and interest in and to such Intellectual Property Rights will remain exclusively with Mondaq and/or its licensors.

Mondaq shall use its reasonable endeavours to make the Website and Services available to you at all times, but we cannot guarantee an uninterrupted and fault free service.

Mondaq reserves the right to make changes to the services and/or the Website or part thereof, from time to time, and we may add, remove, modify and/or vary any elements of features and functionalities of the Website or the services.

Mondaq also reserves the right from time to time to monitor your Use of the Website and/or services.


The Content is general information only. It is not intended to constitute legal advice or seek to be the complete and comprehensive statement of the law, nor is it intended to address your specific requirements or provide advice on which reliance should be placed. Mondaq and/or its Contributors and other suppliers make no representations about the suitability of the information contained in the Content for any purpose. All Content provided "as is" without warranty of any kind. Mondaq and/or its Contributors and other suppliers hereby exclude and disclaim all representations, warranties or guarantees with regard to the Content, including all implied warranties and conditions of merchantability, fitness for a particular purpose, title and non-infringement. To the maximum extent permitted by law, Mondaq expressly excludes all representations, warranties, obligations, and liabilities arising out of or in connection with all Content. In no event shall Mondaq and/or its respective suppliers be liable for any special, indirect or consequential damages or any damages whatsoever resulting from loss of use, data or profits, whether in an action of contract, negligence or other tortious action, arising out of or in connection with the use of the Content or performance of Mondaq’s Services.


Mondaq may alter or amend these Terms by amending them on the Website. By continuing to Use the Services and/or the Website after such amendment, you will be deemed to have accepted any amendment to these Terms.

These Terms shall be governed by and construed in accordance with the laws of England and Wales and you irrevocably submit to the exclusive jurisdiction of the courts of England and Wales to settle any dispute which may arise out of or in connection with these Terms. If you live outside the United Kingdom, English law shall apply only to the extent that English law shall not deprive you of any legal protection accorded in accordance with the law of the place where you are habitually resident ("Local Law"). In the event English law deprives you of any legal protection which is accorded to you under Local Law, then these terms shall be governed by Local Law and any dispute or claim arising out of or in connection with these Terms shall be subject to the non-exclusive jurisdiction of the courts where you are habitually resident.

You may print and keep a copy of these Terms, which form the entire agreement between you and Mondaq and supersede any other communications or advertising in respect of the Service and/or the Website.

No delay in exercising or non-exercise by you and/or Mondaq of any of its rights under or in connection with these Terms shall operate as a waiver or release of each of your or Mondaq’s right. Rather, any such waiver or release must be specifically granted in writing signed by the party granting it.

If any part of these Terms is held unenforceable, that part shall be enforced to the maximum extent permissible so as to give effect to the intent of the parties, and the Terms shall continue in full force and effect.

Mondaq shall not incur any liability to you on account of any loss or damage resulting from any delay or failure to perform all or any part of these Terms if such delay or failure is caused, in whole or in part, by events, occurrences, or causes beyond the control of Mondaq. Such events, occurrences or causes will include, without limitation, acts of God, strikes, lockouts, server and network failure, riots, acts of war, earthquakes, fire and explosions.

By clicking Register you state you have read and agree to our Terms and Conditions