Security token vs utility token
They look similar on-chain and are constantly confused – but they answer to different laws. Here is the distinction that decides who can hold a token, how it moves, and what it owes you.
| Utility token | Security token | |
|---|---|---|
| What it represents | Access to a product or service – a consumer good. | Ownership of, or a claim on, something real: equity, debt, a fund, or revenue. |
| Legal status | Not a security. Governed by consumer and AML rules. | A regulated security, subject to securities law. |
| Who can hold it | Generally anyone, subject to basic checks. | Eligible, verified investors – per the offering's exemption (e.g. Reg D / S / CF / A+). |
| Rights conferred | Use, access, discounts, staking utility. No equity or profit-share. | Equity, profit-share, voting, or repayment rights, as defined by the instrument. |
| Transferability | Usually freely transferable. | Compliance-gated – transfer rules are built into the token. |
| What drives value | Demand for the product or network it unlocks. | Performance of the underlying asset or company. |
| At Stobox | STBU – the ecosystem's utility token. | STBX – a regulated security token representing equity in Stobox. |
See how each works at Stobox:STBU (utility) ·STBX (security) ·full glossary ·tokenization vs traditional fundraising
Questions this raises
Answered plainly.
Is a utility token a security?
Generally no – a true utility token is a consumer good used to access a product or network, conferring no equity, profit-share, or voting rights. Whether any given token is a security depends on how it is structured and marketed; regulators look at substance over label.
Can one project have both a utility token and a security token?
Yes. Stobox does: STBU is a utility token for accessing the platform, and STBX is a separate, regulated security token representing equity in Stobox. They are distinct instruments with different rules.
Why does the distinction matter?
It determines the law that applies, who can hold the token, how it can be transferred, and what disclosures are required. Treating a security token as if it were a utility token – or vice versa – is a compliance risk. General information only, not legal or investment advice. Whether a token is a security depends on its structure and applicable law – see Legal & disclosures .
Primary sources: SEC v. W. J. Howey Co., 328 U.S. 293 (1946), the investment-contract test – Cornell LII.
