The SEC announced settled charges against Flyfish Club, LLC for an unregistered offering of crypto asset securities in the form of non-fungible tokens that raised approximately $14.8 million from investors, with Flyfish agreeing to a cease-and-desist order, to pay a civil penalty of $750,000, and to destroy all NFTs in its possession or control. OpenSea said on February 21, 2025, that the U.S. Securities and Exchange Commission has closed its investigation into the non-fungible token marketplace, ending an inquiry that began with a Wells notice issued in August 2024 indicating that NFTs sold on the platform may be unregistered securities. The reversal scrambled what had looked like an aggressive US posture, while Europe, Asia, and the UK kept advancing on their own timelines.
Seven major jurisdictions classify the same digital asset class differently. The compliance map below walks through each regulator’s working definition, enforcement record, and practical thresholds.
Key Takeaways
- The SEC has charged three NFT issuers (Impact Theory, Stoner Cats 2, and Flyfish Club) with civil penalties under the Securities Act of 1933.
- MiCA’s Article 2(3) excludes unique non-fungible crypto-assets, while Recital 11 re-qualifies fractional parts and large series as fungible.
- IRS Notice 2023-27 applies a look-through analysis under section 408(m), exposing collectible-classified NFTs to a maximum 28% capital-gains rate.
- FATF reports that 65 of 94 responding jurisdictions had passed Travel Rule legislation by 2024, covering NFT marketplaces that meet the VASP definition.
- The UK FCA’s PS19/22 sorts NFTs into three buckets: security tokens, e-money tokens, and unregulated tokens, with case-by-case perimeter analysis.
- Singapore’s MAS exempts purely utility or governance tokens from its DTSP regime, which took effect on June 30, 2025.
- Japan’s FSA treats NFTs as cryptoassets only when each token costs less than ¥1,000 or fewer than 1 million are issued.
Why NFT Regulation Diverges Across Borders
Seven major regulators, the SEC, ESMA, IRS, FATF, FCA, MAS, and Japan’s FSA, have written separate working definitions for NFTs, applying securities law, anti-money-laundering rules, or tax classification onto a token type that none of those frameworks anticipated. No global standard-setter has issued binding NFT-specific rules; each authority extended an existing framework instead.
The pattern repeats across our coverage of regulatory events: enforcement follows market collapse within roughly 12 months. The 2022 NFT speculative peak gave way to Impact Theory and Stoner Cats actions in late 2023, then Flyfish Club in 2024, the same crisis-to-license sequence that played out after Mt. Gox and FTX in other corners of crypto. Compliance teams reading the resulting SEC and CFTC enforcement record face the same divergence in every market, while the history of NFTs frames how the asset class arrived at this regulatory crossroads. The next question is whether existing securities frameworks even fit.
How the Howey Test Applies to NFTs
The US securities-law analysis traces back to SEC v. W.J. Howey Co. That ruling defined an investment contract as an investment of money in a common enterprise with an expectation of profits derived from the efforts of others. Each prong has to be met for an NFT offering to qualify as a security; missing any one prong moves the asset outside SEC jurisdiction.
The most consequential NFT application came from Friel v. Dapper Labs in the Southern District of New York. The court held that plaintiffs had plausibly alleged that Dapper Labs’s offer and sale of NBA Top Shot Moments constitutes an investment contract within the meaning of Howey, citing direct sales plus marketing materials including images of rocket ships and stock-market emojis that objectively led purchasers to expect profits derived from Dapper’s continued managerial efforts. The opinion does not hold that all NFTs are securities, but only that, on the facts alleged, the Top Shot Moments meet the Howey test.
The fact pattern matters more than the asset label. Pure art collectibles without ongoing managerial efforts typically fail the third Howey prong; series sold with explicit profit promises typically meet it.
SEC Enforcement Actions Against NFT Issuers
The agency announced charges against Stoner Cats 2 LLC for conducting an unregistered offering of crypto asset securities in the form of purported non-fungible tokens that raised approximately $8 million from investors to finance an animated web series called Stoner Cats. On July 27, 2021, SC2 offered and sold to the public more than 10,000 NFTs for approximately $800 each, selling out in just 35 minutes. Without admitting or denying the SEC’s findings, SC2 agreed to a cease-and-desist order, to pay a civil penalty of $1 million, and to establish a Fair Fund to return monies that injured investors paid to purchase the NFTs.
The Flyfish Club action followed a year later. The SEC announced settled charges against Flyfish Club, LLC, an operator of a private dining club, for conducting an unregistered offering of crypto asset securities in the form of non-fungible tokens that raised approximately $14.8 million from investors to finance the construction of the club. According to the SEC’s order, Flyfish offered and sold approximately 1,600 NFTs to investors from August 2021 to May 2022 at prices ranging from approximately 2.5 ETH to 4.25 ETH per NFT. Without admitting or denying the SEC’s findings, Flyfish agreed to a cease-and-desist order, to pay a civil penalty of $750,000, and to destroy all NFTs in its possession or control.
By the numbers: Stoner Cats 2 paid a $1 million penalty on approximately $8 million raised across more than 10,000 NFTs at approximately $800 each, while Flyfish Club paid $750,000 on approximately $14.8 million raised across approximately 1,600 NFTs priced at approximately 2.5 to 4.25 ETH. Both orders required destruction of remaining NFTs in issuer custody.
The earlier Impact Theory settlement followed a similar template, with Impact Theory agreeing to disgorgement and civil penalties for its Founder’s Keys offering. Together, the actions establish that NFT offerings marketed with profit promises trigger Securities Act registration obligations regardless of how the asset is labeled.
The Peirce-Uyeda Dissent and the OpenSea Reversal
Two SEC commissioners broke publicly with the Stoner Cats action on the day it was announced. Hester Peirce and Mark Uyeda dissented, writing that the application of the Howey investment contract analysis in this matter lacks any meaningful limiting principle and carries implications for creators of all kinds. Distinguishing the Stoner Cats NFTs from Star Wars collectibles sold in the 1970s requires the Commission to take an exceptionally expansive view of what constitutes a securities offering.
That dissent moved from a minority view to an operative policy. OpenSea said on February 21, 2025, that the U.S. Securities and Exchange Commission has closed its investigation into the non-fungible token marketplace, ending an inquiry that began with a Wells notice issued in August 2024 indicating that NFTs sold on the platform may be unregistered securities. The closure follows a broader shift at the SEC under Acting Chairman Mark Uyeda, who has tasked Commissioner Hester Peirce with leading a crypto task force to develop new industry guidelines.
Why it matters: The OpenSea closure under Acting Chairman Uyeda flipped the largest NFT marketplace from “potentially liable for unregistered securities” to “no enforcement recommended.” The Peirce dissent on Stoner Cats foreshadowed the reversal, same Howey-prong critique, now writing the rules instead of dissenting from them.
The US enforcement environment now looks materially different from the prior posture, even though the three settled cases remain on the books and the underlying Securities Act registration obligations are unchanged. An NFT marketplace operator reading this record sees both the prior actions and the current task force at once: precedent and pause coexist. Every NFT marketplace woke up in a different posture overnight.
MiCA’s NFT Carve-Out and Anti-Circumvention Provisions
Article 2(3) of MiCA states that the Regulation does not apply to crypto-assets that are unique and not fungible with other crypto-assets. Recital 11 clarifies that fractional parts of a unique and non-fungible crypto-asset should not be considered as unique and non-fungible, that the issuance of crypto-assets as non-fungible tokens in large series or collections should be considered as an indicator of their fungibility, and that the mere attribution of a unique identifier to a crypto-asset is not, in and of itself, sufficient to classify it as unique and non-fungible.
Key finding: ESMA recommends that an interdependent value test be considered by national competent authorities and financial market participants as part of their assessment in order to classify a crypto-asset as unique and non-fungible, while where each fraction of a non-fungible crypto-asset reflects an undivided share of the same right, the fractions could be considered as fungible among themselves and consequently fall within the scope of MiCA.
The practical implications run in both directions. A 1-of-1 generative art piece with no fractional offering and no series sits clearly outside MiCA. A 10,000-piece profile-picture collection minted with identical metadata patterns sits closer to the Recital 11 indicia, regardless of how the issuer labels the asset. The ESMA Final Report gives national competent authorities the analytical framework; enforcement plays out at the member-state level. The companion MiCA and NFT market data page tracks compliance across the regulation’s operational years.
IRS Tax Treatment Under Notice 2023-27
The IRS released Notice 2023-27 announcing that the Department of the Treasury and the Internal Revenue Service intend to issue guidance related to the treatment of certain nonfungible tokens as collectibles under section 408(m) of the Internal Revenue Code. Until such guidance is issued, the IRS intends to determine when an NFT is treated as a collectible by using a look-through analysis, under which an NFT is treated as a collectible if the NFT’s associated right or asset falls under the definition of collectible in the Code.
The classification carries two practical consequences. The acquisition by an individual retirement account of a collectible is treated as a distribution from the IRA equal to the cost to the IRA of the collectible. Long-term capital gains on collectible-classified NFTs face a higher maximum rate than other long-term assets.
Comments on Notice 2023-27 were requested by June 19, 2023. Until Treasury issues final guidance, taxpayers and issuers operate under the look-through framework, applying the section 408(m) collectible definitions to the asset inside each digital wrapper.
FATF Travel Rule and AML Obligations for NFT Marketplaces
The Financial Action Task Force extended its anti-money-laundering and counter-terrorist-financing standards to virtual assets and virtual asset service providers through Recommendation 15. The Travel Rule requires VASPs to collect, verify, and share originator and beneficiary information that travels with the transfer.
For the 2024 survey, 65 of 94 responding jurisdictions reported that they have passed legislation implementing the Travel Rule, representing 70 percent of respondents, reflecting notable improvement compared to the 2023 and 2022 surveys. However, jurisdictions have made insufficient progress in implementing the Travel Rule, with nearly one-third of survey respondents not yet passing legislation implementing it. NFT marketplaces that conduct activity falling within the FATF definition of a VASP, including the transfer of virtual assets on behalf of natural or legal persons, must comply with Recommendation 15 obligations, including customer due diligence and originator and beneficiary information sharing.
Compliance scope depends on the marketplace’s operational model. A pure peer-to-peer protocol that never custodies user assets typically falls outside the VASP definition; a centralized marketplace that holds user funds, transfers tokens on user instructions, or facilitates fiat on-and-off ramps typically falls inside it. The lines on the crypto security and fraud record get redrawn each time a major marketplace is reclassified.
NFT Status in the UK, Singapore, and Japan
The UK’s FCA sorts cryptoassets into three categories, security tokens, e-money tokens, and unregulated tokens, under PS19/22. Security tokens are tokens that amount to a Specified Investment under the Regulated Activities Order, and may provide rights such as ownership, repayment of a specific sum of money, or entitlement to a share in future profits, and these tokens are likely to be inside the FCA’s regulatory perimeter. Most NFTs default to the unregulated-tokens category, with case-by-case analysis for collections that exhibit security-like or e-money-like features.
Singapore took a different route. The Monetary Authority of Singapore clarified the scope of its Digital Token Service Provider regime under the Financial Services and Markets Act 2022, with effect from June 30, 2025, requiring DTSPs providing services solely to customers outside Singapore relating to digital payment tokens and tokens of capital market products to be licensed. NFTs and tokens used purely as utility or governance instruments fall outside the licensing requirement; however, MAS indicated that it will generally not issue licenses for offshore-only DTSP business models, citing elevated money laundering risks.
Japan’s Financial Services Agency applies a quantitative test. Under the current regulatory framework, NFTs that have no economic function as a means of payment due to their unique characteristics are not regulated as cryptoassets; the FSA distinguishes pure NFTs from cryptoassets using two criteria, including that one NFT costs more than 1,000 yen or the total number of NFTs issued is less than 1 million. Where an NFT provides dividends or economic benefits to holders, it may be considered a security under the Financial Instruments and Exchange Act.
| Regulator | NFT Default Status | Trigger That Pulls In Regulation | Key Citation |
|---|---|---|---|
| US SEC | Case-by-case under Howey | Profit promise plus managerial efforts | Stoner Cats, Flyfish, Friel |
| EU MiCA | Excluded under Article 2(3) | Fractional parts; large series; identifier-only uniqueness (Recital 11) | ESMA Guidelines |
| US IRS | Collectible look-through | Underlying right is a 408(m) collectible | Notice 2023-27 |
| FATF | VASP rules apply | Marketplace transfers virtual assets for users | Recommendation 15 |
| UK FCA | Unregulated token | Security-token or e-money-token features | PS19/22 |
| Singapore MAS | Outside DTSP regime | Token used as digital payment or capital-market product | FSMA 2022 |
| Japan FSA | Outside cryptoasset rules | NFT below 1,000 yen each, more than 1 million issued, or paying dividends | FIEA |
Source: SEC, ESMA, IRS, FATF, FCA, MAS, Japan FSA
Compliance teams now read seven rulebooks for the same asset class.
What NFT Issuers and Marketplaces Should Document
A defensible compliance posture starts with three written records. The first is a Howey-prong-by-prong self-assessment per offering, supported by marketing materials, smart-contract design, and post-launch communications. Friel’s reliance on rocket-ship imagery and stock-market emojis shows how readily marketing language travels into the legal record.
The second is a tax-treatment memo applying the IRS look-through to the underlying right or asset, flagged at issuance for buyer disclosures and at custody onboarding for IRA-holding restrictions. The third is an AML program for any marketplace meeting the FATF VASP definition: customer due diligence, originator and beneficiary information sharing, sanctions screening, and recordkeeping.
Cross-border issuers need a fourth record, a jurisdictional applicability matrix that walks each material market against the seven regulators above and records the operative threshold.
The crypto user demographics data provides an adjacent reference framework for who is buying these assets across jurisdictions.
Frequently Asked Questions (FAQs)
The court in Friel v. Dapper Labs held that plaintiffs had plausibly alleged that Dapper Labs’s offer and sale of NBA Top Shot Moments meets the Howey test on the facts alleged, while leaving open that not all NFTs are securities. Pure art collectibles without profit promises typically fall outside the test; series marketed with explicit profit expectations have been found to be securities, like Stoner Cats and Flyfish.
Article 2(3) of MiCA states that the Regulation does not apply to crypto-assets that are unique and not fungible, while Recital 11 narrows that carve-out: fractional parts should not be considered unique and non-fungible, issuance in large series or collections is treated as an indicator of fungibility, and the mere attribution of a unique identifier is not sufficient to classify a token as unique and non-fungible. ESMA’s Final Report adds an interdependent value test that national competent authorities apply at the member-state level.
IRS Notice 2023-27 announces a look-through analysis under section 408(m): an NFT is treated as a collectible when its underlying right or asset would be a collectible under the Code, and the acquisition by an individual retirement account of a collectible is treated as a distribution from the IRA equal to the cost. Long-term capital gains on collectible-classified NFTs face a higher maximum rate than standard long-term assets.
Yes, when the marketplace meets the VASP definition. NFT marketplaces that conduct activity falling within the FATF definition of a VASP, including the transfer of virtual assets on behalf of natural or legal persons, must comply with Recommendation 15 obligations, including customer due diligence and originator and beneficiary information sharing.
The FSA distinguishes pure NFTs from cryptoassets using two criteria, including that one NFT costs more than 1,000 yen or the total number of NFTs issued is less than 1 million, while NFTs that pay dividends or provide economic benefits may be considered a security under the Financial Instruments and Exchange Act.
Conclusion
The map starts with the Stoner Cats and Flyfish Club enforcement settlements, runs through a dropped OpenSea probe and a new SEC crypto task force, crosses into MiCA’s Article 2(3) carve-out and Recital 11 anti-circumvention indicia, then reaches an IRS look-through analysis under section 408(m). FATF Travel Rule expectations layer on top of that, with 65 of 94 responding jurisdictions having passed Travel Rule legislation as of the 2024 FATF survey. With those numbers in view, the seven-regulator picture sharpens.
NFT issuers, marketplaces, and creators benefit most from documenting the analysis upfront: a Howey self-assessment per offering, a section 408(m) look-through memo per asset class, and a jurisdictional applicability matrix per material market. The compliance map will keep moving as ESMA’s national competent authorities apply the interdependent value test, the SEC’s task force converts dissent into guidance, and Japan and Singapore extend their respective tests. Reading all seven rulebooks at once is the new baseline.
