How to Evaluate an ICO or Token Sale: A 25-Point Due Diligence Checklist

Updated for 2026 by the EasyFinance.com editorial team • U.S.-focused educational information • Crypto-asset laws, token classifications, platform rules, taxation, and investor protections vary by jurisdiction and transaction

An Initial Coin Offering, or ICO, is a method of raising capital in which a project offers newly issued crypto assets directly to purchasers. Similar transactions may be called token sales, token generation events, Initial Exchange Offerings, launchpad sales, community sales, Simple Agreements for Future Tokens, or other names.

Quick answer: Do not evaluate an ICO from its website, social-media following, or whitepaper alone. Verify the legal issuer, regulatory status, team, token rights, product status, supply and allocation, insider vesting, use of proceeds, treasury controls, smart-contract code, independent audits, administrator privileges, governance, liquidity, custody, tax consequences, and realistic exit options. Assume that the complete investment can be lost and never rely on a guaranteed listing, return, buyback, or price increase.

An ICO is not simply a combination of crowdfunding and an Initial Public Offering. Unlike a conventional share offering, a token may provide no ownership, voting rights, dividend rights, claim on assets, redemption right, or legally enforceable share of project revenue. Some token offerings may involve securities or investment contracts, while others may involve non-security crypto assets. The legal analysis depends on the facts, promises, rights, and structure rather than the name chosen by the promoter.

Table of Contents

• What Is an ICO?
• ICO, IEO, IDO, SAFT, and Other Token-Sale Structures
• Why an ICO Is Not the Same as an IPO
• 1. Identify the Token’s Legal and Regulatory Status
• 2. Verify the Legal Issuer and Jurisdiction
• 3. Research the Team, Founders, and Advisers
• 4. Verify the Product and Development Status
• 5. Ask Whether the Project Actually Needs a Token
• 6. Understand the Token Holder’s Rights
• 7. Analyse Token Supply and Tokenomics
• 8. Review Insider Allocation and Concentration
• 9. Check Vesting, Lockups, and Unlock Schedules
• 10. Review Price, Valuation, and Sale Terms
• 11. Examine the Use of Proceeds
• 12. Evaluate Treasury Management and Controls
• 13. Review the Smart Contract and Administrator Powers
• 14. Verify Independent Security Audits
• 15. Assess the Network and Technical Architecture
• 16. Understand Governance and Control
• 17. Test the Roadmap and Milestones
• 18. Evaluate Customers, Competition, and Adoption
• 19. Analyse Liquidity and Listing Claims
• 20. Check Market-Making and Manipulation Risk
• 21. Treat Reviews and Community Sentiment Carefully
• 22. Review the Purchase and Distribution Process
• 23. Plan Secure Custody
• 24. Understand Tax and Recordkeeping
• 25. Define the Exit and Loss Scenario
• ICO and Token-Sale Red Flags
• ICO Due Diligence Scorecard
• ICO Investment Checklist
• What to Do After an ICO Scam or Loss
• Frequently Asked Questions

What Is an Initial Coin Offering?

An ICO is a primary sale in which a project or issuer distributes crypto assets to purchasers, commonly in exchange for money, stablecoins, Bitcoin, Ether, or another asset. The proceeds may be used to develop a blockchain network, application, protocol, platform, product, or business.

The token might be available immediately or delivered later. It may be designed to:

• Pay network transaction fees
• Access a product or service
• Participate in governance
• Represent a claim on an asset or revenue stream
• Provide rewards or discounts
• Serve as a settlement or exchange asset
• Support staking or validation
• Function primarily as a speculative asset

The term “ICO” was widely used during the earlier growth of crypto fundraising. Modern projects often use different labels, but changing the label does not remove financial, technical, legal, or fraud risk.

A Token Sale Is a Capital-Raising Event

Regardless of branding, ask:

• Who receives the purchaser’s money?
• What contractual promise is being made?
• What exactly is delivered?
• What rights attach to it?
• Who controls the project after the sale?
• How can the purchaser recover money or enforce a right?

ICO, IEO, IDO, SAFT, and Other Token-Sale Structures

Structure	Basic Description	Important Risk
ICO or direct token sale	The issuer sells tokens directly to purchasers.	The project controls the sale process, disclosures, and custody of proceeds.
Initial Exchange Offering	A centralised crypto platform hosts or distributes the sale.	Platform involvement is not a guarantee of legality, quality, or future listing.
Initial DEX Offering	Tokens launch through a decentralised exchange or liquidity pool.	Smart-contract, liquidity, impersonation, and automated-market risks can be high.
Launchpad sale	A third-party platform markets and allocates tokens.	Allocation rules, conflicts, fees, and platform due diligence can be unclear.
SAFT	A contract promises future delivery of tokens.	The token may never launch, and the agreement itself can involve securities-law obligations.
Private or strategic sale	Tokens or future-token rights are sold to selected investors before the public.	Earlier investors may receive substantial discounts and shorter lockups.
Airdrop or reward distribution	Tokens are distributed without a conventional purchase price.	Recipients can still face phishing, tax, legal, and smart-contract risks.

The structure can affect who holds purchaser funds, when tokens are delivered, which laws apply, and whether earlier investors can sell before public participants.

Why an ICO Is Not the Same as an IPO

Traditional IPO	ICO or Token Sale
Normally offers registered shares in a company	Can offer a token with no corporate ownership rights
Detailed audited financial and legal disclosures generally apply	Disclosure quality varies and can consist mainly of a whitepaper
Shareholders can receive defined voting and economic rights	Token holders may have limited, changeable, or no enforceable rights
Underwriters, exchanges, auditors, lawyers, and regulators have established roles	A token sale can be conducted by a small offshore team through smart contracts
Secondary trading occurs in regulated securities markets	Trading can occur on unregulated, lightly regulated, offshore, or decentralised venues

A polished website, named adviser, exchange logo, legal opinion, or technical audit does not create the protections of a registered public offering.

1. Identify the Token’s Legal and Regulatory Status

The first question is not whether the token is described as “utility,” “governance,” “community,” or “decentralised.” The first question is what is actually being offered and sold.

In March 2026, the SEC issued an interpretation addressing how federal securities laws apply to several crypto-asset categories and how a non-security crypto asset can be offered or sold as part of an investment contract. A token that is not itself a security can still be connected to representations or promises whose offer and sale must be registered or rely on an available exemption.

Questions for a U.S.-Related Offering

• Does the issuer consider the token a security, non-security crypto asset, commodity, collectible, tool, or another category?
• Is the offering registered with the SEC?
• If not registered, which exemption is claimed?
• Who may legally participate?
• Are purchaser limits or resale restrictions imposed?
• Is a Form D, Regulation A filing, registration statement, or other filing available?
• Does the offering involve an investment contract?
• What essential managerial efforts has the project promised?
• When, if ever, does the project claim those promises are fulfilled?

Registration Filing Is Not Approval

A Form D, company registration, money-services registration, trademark, or ordinary corporate filing does not mean that the SEC or another regulator approved the token, verified the investment, or guaranteed returns.

Other Jurisdictions

A global sale can involve several legal systems. Review:

• Issuer jurisdiction
• Purchaser location
• Marketing location
• Token platform and exchange location
• Consumer, securities, commodities, payments, and money-transmission laws
• Sanctions and anti-money-laundering restrictions
• Privacy and data-transfer rules

A statement that the offering is unavailable to U.S. persons does not prove that the issuer complies with every applicable law.

2. Verify the Legal Issuer and Jurisdiction

Identify the entity that receives the money and owes any obligations.

Verify

• Full legal name
• Registration number
• Registered office
• Date of incorporation
• Directors and beneficial owners
• Operating subsidiaries
• Foundation, decentralised autonomous organisation, or nonprofit structure
• Auditor, legal counsel, and bank or custodian where disclosed
• Pending litigation, insolvency, sanctions, or regulatory actions

Entity Mismatch

A project may use different entities for:

• Developing software
• Selling tokens
• Holding intellectual property
• Employing staff
• Managing the treasury
• Operating a foundation

Determine which entity is responsible for each promise. A project brand is not a legal counterparty.

Offshore Does Not Mean Fraud, but It Changes Enforcement

An offshore issuer can be legitimate, but recovery may be more difficult when:

• Assets are held in another country
• The team is geographically dispersed
• Courts and regulators have limited jurisdiction
• The company has no meaningful operating presence
• Terms require foreign arbitration

3. Research the Team, Founders, and Advisers

The CFTC advises purchasers to conduct extensive due diligence on individuals and entities presented as affiliates of a token offering. A team that cannot be verified is a major warning sign.

Verify Each Key Person

• Legal name
• Current role
• Employment history
• Technical or industry experience
• Previous startups and investment projects
• Academic and professional qualifications
• Regulatory history
• Bankruptcies, lawsuits, fraud allegations, or criminal convictions
• Public code contributions or published work

Contact Named Advisers

Projects can display people as advisers without a substantial or current relationship. Check whether the adviser publicly confirms:

• The engagement
• The scope of work
• Compensation
• Token allocation
• Current involvement

Anonymous Teams

An anonymous team is not proof of fraud, but it increases accountability and enforcement risk. Ask whether the technical benefits of anonymity justify the inability to verify:

• Experience
• Conflicts
• Prior failures
• Control of treasury keys
• Location and legal responsibility

Background-Check Limitations

A professional profile and photographs can be fabricated. Reverse-image searches, archived pages, corporate registries, code repositories, conference appearances, and direct confirmation can provide stronger evidence.

4. Verify the Product and Development Status

Separate what exists today from what the project promises to build later.

Evidence of a Real Product

• Working application
• Public test network
• Open-source repository
• Version history and active commits
• Independent users
• Customer contracts
• Revenue or usage records
• Technical documentation
• Bug reports and issue resolution

Demo vs. Production

A video, prototype, controlled demo, or test transaction does not establish that the system can operate securely at commercial scale.

Check:

• Number of active users
• Transaction volume excluding incentives and bots
• System uptime
• Capacity and performance
• Dependency on central servers
• Cost of operating the product
• Customer retention

Forked or Copied Code

Using open-source code is common. The project should disclose significant dependencies, licences, changes, maintenance responsibilities, and why the new network or token adds value.

5. Ask Whether the Project Actually Needs a Token

A product can be useful without requiring a tradable token.

Token-Necessity Questions

• Why can the service not use ordinary money, a stablecoin, subscription, points, or existing network token?
• Does the token improve security, coordination, governance, or settlement?
• Does the token create unnecessary volatility for customers?
• Must users purchase it before accessing the service?
• Can the project change accepted payment assets later?
• Would the product still work if the token price fell by 90%?
• Would the business still need the token after completing fundraising?

Artificial Demand

A project may design mandatory token use to create apparent demand. That does not prove sustainable economic value when users can avoid the service or competitors accept simpler payment methods.

6. Understand the Token Holder’s Rights

The whitepaper and binding terms should clearly explain what the purchaser owns.

Possible Rights

• Access to a product or network
• Discount or fee reduction
• Governance vote
• Staking or reward eligibility
• Redemption right
• Claim on revenue, assets, or reserves
• Conversion into another asset
• No legally enforceable right beyond transferability

Read the Binding Terms

A marketing page or whitepaper may be described as nonbinding. Review:

• Token purchase agreement
• Terms of sale
• SAFT or subscription agreement
• Foundation charter
• Smart-contract code
• Governance constitution
• Risk disclosures

Ownership and Revenue

A token does not represent company equity merely because token value may benefit from company success. Confirm whether holders receive:

• Shares
• Voting rights in the legal entity
• Dividends
• Liquidation rights
• Contractual revenue share
• Information or inspection rights

Changeable Rights

Identify who can change:

• Fees
• Reward rates
• Governance rules
• Accepted payment assets
• Token supply
• Redemption terms
• Transfer restrictions

7. Analyse Token Supply and Tokenomics

Tokenomics describes the rules governing supply, distribution, incentives, issuance, burning, and use.

Supply Questions

• What is the initial supply?
• What is the maximum supply?
• Can more tokens be created?
• Who controls minting?
• What is the issuance schedule?
• Can tokens be burned?
• Can tokens be frozen or replaced?
• What supply will circulate at launch?

Fully Diluted Valuation

Fully diluted valuation = Token price × Maximum or fully diluted token supply

A project can appear inexpensive because only a small percentage of tokens circulates. Future unlocks can substantially increase sellable supply.

Inflation and Rewards

Staking or participation rewards do not create free economic value when they dilute all holders. Analyse the real yield after:

• Token inflation
• Price changes
• Lockups
• Validator costs
• Platform fees
• Taxes

Burning and Buybacks

Token burns and buybacks can affect supply, but investigate:

• Whether they are contractually required
• Source of buyback money
• Who controls execution
• Whether the mechanism is sustainable
• Whether marketing overstates the price effect

8. Review Insider Allocation and Concentration

Determine how the total token supply is allocated among:

• Public purchasers
• Founders
• Employees
• Advisers
• Private investors
• Foundation or treasury
• Ecosystem rewards
• Market makers
• Liquidity pools
• Community grants

Concentration Risk

A small group can influence price, governance, liquidity, and network decisions when it controls a large percentage of supply.

On-Chain Distribution

Blockchain explorers can show wallet concentration, but labels may be incomplete. One entity can control several wallets, and an exchange wallet can represent many customers.

Private-Sale Discounts

Earlier investors may purchase at a fraction of the public price. Calculate their potential profit even after a major public-market decline.

For example, an investor buying at $0.02 can sell profitably at $0.10 even when the public participant purchased at $0.50.

9. Check Vesting, Lockups, and Token Unlocks

Vesting delays the release of insider, adviser, investor, or employee tokens.

Review

• Cliff period
• Release frequency
• Total vesting duration
• Acceleration rights
• What happens when a founder leaves
• Whether vesting is enforced on-chain
• Whether locked tokens can be staked or voted
• Whether agreements can be amended

Unlock Calendar

Compare each unlock with:

• Current circulating supply
• Average trading volume
• Insider cost basis
• Project milestones
• Existing liquidity

A large unlock does not guarantee selling, but it increases the amount that can potentially enter the market.

10. Review Price, Valuation, and Sale Terms

Price Structure

Token sales can use:

• Fixed price
• Increasing price over time
• Dutch auction
• Whitelisted allocation
• Lottery
• Pro-rata distribution
• Bonding curve

Compare Every Sale Round

Round	Token Price	Allocation	Lockup	Special Rights
Seed
Private
Strategic
Public

Fundraising Limits

Check:

• Soft cap
• Hard cap
• Minimum purchase
• Maximum individual allocation
• Oversubscription treatment
• Refund conditions
• Accepted payment assets
• Exchange-rate calculation

Excessive Valuation

Compare the token valuation with:

• Existing product and users
• Revenue
• Comparable projects
• Capital required to execute the roadmap
• Rights received by purchasers
• Concentration and future supply

11. Examine the Use of Proceeds

A percentage chart is only the beginning. The project should explain how the budget connects to specific milestones.

Expected Categories

• Product and protocol development
• Security
• Legal and regulatory compliance
• Staff and contractors
• Infrastructure
• Business development
• Marketing
• Liquidity
• Insurance
• Operating reserve
• Tax

Questions to Ask

• How many months of operations will the raise fund?
• What happens if only the soft cap is reached?
• What happens to unsold tokens?
• Can insiders change the budget?
• Are related-party payments disclosed?
• Will founders receive salaries in addition to tokens?
• How much is allocated to market making and exchange listings?
• Are audited reports promised?

Marketing-Heavy Budgets

A project spending more on promotion than product, security, and compliance may prioritise token demand over sustainable utility.

12. Evaluate Treasury Management and Controls

A transparent budget does not ensure that funds are protected after the sale.

Treasury Questions

• Who controls the wallets and bank accounts?
• Is a multisignature arrangement used?
• How many approvals are required?
• Are key holders independent?
• Are funds held in volatile crypto assets?
• Is part of the treasury converted to operating currency?
• Are assets held through a qualified or professional custodian?
• Are wallet addresses disclosed?
• Are treasury reports independently verified?
• What happens if a key holder becomes unavailable?

Runway Risk

A project raising Ether or another volatile asset can lose a substantial portion of its operating runway when the market price falls.

Related-Party Transactions

Review payments to founders, advisers, affiliated development companies, exchanges, market makers, promoters, and service providers.

On-Chain Transparency Has Limits

A public treasury address can show transfers but may not reveal:

• Off-chain bank balances
• Legal liabilities
• Ownership of destination wallets
• Undisclosed loans
• Contractual commitments
• Tax obligations

13. Review the Smart Contract and Administrator Powers

The token contract determines how balances, transfers, supply, permissions, and other functions operate.

Check Whether the Contract Can

• Mint additional tokens
• Burn tokens
• Pause transfers
• Freeze addresses
• Blacklist users
• Change fees
• Upgrade the contract
• Move user balances
• Change governance
• Redirect treasury funds

Administrator Keys

Identify:

• Who controls administrator keys
• Whether they use multisignature protection
• Whether actions have a time delay
• Whether the community receives notice
• Whether powers can be permanently removed
• What emergency powers exist

Verified Source Code

Compare deployed bytecode with published source code where technically possible. A repository can contain code that is different from the contract used in the sale.

Proxy Contracts

An upgradeable proxy can allow logic to change after audit or purchase. Understand who can authorise the upgrade and whether token-holder approval is required.

14. Verify Independent Security Audits

A genuine audit can identify vulnerabilities, but it is not a warranty that the code is safe.

Audit Checklist

• Name of the audit firm
• Date and version audited
• Scope
• Deployed contract addresses
• Critical, high, medium, and low findings
• Whether findings were fixed
• Whether fixes were retested
• Known exclusions and assumptions

Confirm With the Auditor

A PDF bearing a security company’s logo can be altered. Verify the report through the auditor’s official repository or contact channel.

Audit Limitations

An audit might exclude:

• Economic design
• Frontend website
• Private keys
• Oracle systems
• Third-party protocols
• Future upgrades
• Human fraud
• Legal compliance

Bug Bounty

A public bug-bounty programme can improve continuing security but does not replace independent review, secure operations, monitoring, and incident response.

15. Assess the Network and Technical Architecture

Questions for a New Blockchain

• Which consensus mechanism is used?
• How many validators or miners operate?
• Who can become a validator?
• How concentrated is voting or hash power?
• How is finality achieved?
• What are the network fees?
• What are the performance limits?
• What happens during outages?
• How are upgrades coordinated?

Questions for a Token on an Existing Network

• Which blockchain is used?
• What happens if network fees increase?
• Does the project depend on bridges?
• Does it rely on an oracle?
• Can the token move across several chains?
• Which version is canonical?

Third-Party Dependency Risk

A project can fail because an exchange, cloud provider, bridge, wallet, oracle, stablecoin, custodian, or underlying blockchain fails.

Forks and Competition

The CFTC identifies forks, technological changes, competing tokens, adoption, liquidity, and changes to the underlying technology as factors that can affect future token value.

16. Understand Governance and Control

A project described as decentralised can remain controlled by a company, foundation, administrator, multisignature committee, or concentrated group of token holders.

Governance Questions

• Who can submit proposals?
• Who can vote?
• How is voting power calculated?
• What quorum applies?
• Can insiders delegate or borrow votes?
• Is execution automatic or controlled by a council?
• Can emergency actors override a vote?
• Are treasury grants disclosed?
• Can governance change token-holder rights?

Token Voting Is Not Corporate Voting

A governance vote may influence software parameters without creating shareholder rights, fiduciary duties, ownership, dividends, or a legal claim against the issuer.

Governance Attacks

Low participation and concentrated voting can allow a small holder group to redirect funds or change protocol rules.

17. Test the Roadmap and Future Milestones

A credible roadmap identifies specific deliverables, dependencies, budgets, and responsible teams.

Strong Milestones

• Measurable
• Dated
• Connected to available funding
• Supported by technical work
• Dependent on clearly identified external approvals
• Reported after completion

Weak Milestones

• “Build community”
• “Global expansion”
• “Major exchange listing”
• “Strategic partnerships”
• “Mass adoption”

These phrases are not measurable without named deliverables, agreements, dates, and evidence.

Historical Performance

Compare previous roadmap promises with actual completion. Repeatedly moving dates without a detailed explanation can indicate execution problems.

Dependency on Regulation or Partners

A roadmap can fail when it depends on an unapproved licence, unnamed bank, unsigned customer, unavailable exchange, or third-party technology.

18. Evaluate Customers, Competition, and Adoption

The project should identify a real customer problem rather than relying solely on token speculation.

Market Questions

• Who is the customer?
• Who pays?
• What problem is solved?
• How is the problem solved today?
• Why is blockchain necessary?
• What prevents a competitor from copying the model?
• What is the cost of acquiring a customer?
• Does the business earn revenue?
• Does product usage require token purchases?

Partnership Announcements

Confirm whether a partnership is:

• A signed commercial contract
• A pilot
• A memorandum of understanding
• A technology integration
• A paid marketing relationship
• A simple discussion

Adoption Metrics

Reported users, wallets, transactions, or social followers can be inflated through:

• Bots
• Airdrops
• Reward farming
• Duplicate wallets
• Internal transactions
• Paid followers

Look for active paying users, retained users, independent applications, and sustainable fee or revenue activity.

19. Analyse Liquidity and Exchange-Listing Claims

A token can have a displayed market price while remaining difficult to sell in meaningful size.

Liquidity Questions

• Which venues are expected to support the token?
• Are listings confirmed directly by the venue?
• What trading pairs will exist?
• Who supplies initial liquidity?
• Can liquidity be withdrawn?
• What is expected market depth?
• Are transfers or sales restricted?
• Can the issuer freeze trading?

No Guaranteed Listing

An exchange application, discussion, paid integration, logo, or adviser relationship does not guarantee listing. Legitimate exchanges may refuse to confirm listings before an official announcement.

Decentralised Exchange Liquidity

Check whether liquidity-pool tokens are:

• Locked
• Burned
• Controlled by the team
• Subject to an unlock date
• Held through a multisignature wallet

Slippage

A holder may receive far less than the displayed price when selling into a shallow market.

20. Check Market-Making and Manipulation Risk

Thinly traded tokens can be vulnerable to manipulation.

Potential Warning Signs

• Sudden unexplained volume
• Identical repeated trades
• Large price changes on little liquidity
• Paid trading groups
• Coordinated social-media promotion
• Undisclosed market makers
• Guaranteed price support
• Insider wallets trading around announcements

Market-Maker Agreement

Ask whether the market maker:

• Receives tokens or loans
• Has price or volume targets
• Can sell project inventory
• Must return tokens
• Has conflicts with exchanges or insiders

Pump-and-Dump Risk

A coordinated promoter group can create excitement and price increases before selling into demand from new participants.

21. Treat Reviews and Community Sentiment Carefully

Forums, social networks, videos, ratings, and reviews can reveal useful concerns, but they are not independent evidence by themselves.

Possible Conflicts

• Paid promotion
• Token compensation
• Referral commissions
• Free allocations
• Employees posting as community members
• Competitors spreading false claims
• Automated accounts

Evaluate the Discussion Quality

Useful communities allow questions about:

• Legal structure
• Code
• Vesting
• Treasury spending
• Delays
• Security incidents
• Insider sales

Deleting critical questions, banning researchers, or answering every concern with price predictions is a red flag.

Influencer Disclosure

Determine whether a promoter is paid and whether that compensation is clearly disclosed. Popularity is not proof of expertise or independence.

22. Review the Purchase and Token-Distribution Process

Verify the Official Contract Address

Scammers can create:

• Fake sale websites
• Lookalike domain names
• Impersonation accounts
• Fraudulent token contracts
• Fake support channels

Confirm addresses through several official sources and avoid links received through direct messages.

Know Your Customer Requirements

The project may require identity, residence, accredited-investor, source-of-funds, sanctions, or anti-money-laundering verification.

Review:

• Which company receives personal data
• Where it is stored
• Which vendor performs verification
• How long records are retained
• Whether data are transferred internationally

Refund and Failure Terms

Determine what happens if:

• The soft cap is not reached
• The token is not delivered
• The product is abandoned
• A regulator intervenes
• The project is hacked
• The purchaser fails identity checks

Delivery Risk

A SAFT or delayed token sale can leave the purchaser with a contractual claim rather than a usable token. Recovery depends on the agreement and issuer’s assets.

23. Plan Secure Custody

Decide whether the tokens will be held through an exchange, custodian, software wallet, hardware wallet, multisignature wallet, or another arrangement.

Custody Questions

• Who controls the private keys?
• Does the wallet support the token and network?
• Can the token be recovered after loss?
• Can the issuer freeze the token?
• Does the custodian segregate customer assets?
• What happens in bankruptcy?
• Are withdrawals restricted?

Seed Phrase Security

Never share a seed phrase or private key with:

• The project team
• Customer support
• An auditor
• An exchange representative
• A recovery service

Test Transaction

Send a small amount first when moving tokens. Confirm the correct blockchain, token contract, address, and any required memo or destination tag.

24. Understand Tax and Recordkeeping

For U.S. federal tax purposes, digital assets are considered property. Buying, receiving, selling, exchanging, spending, staking, earning, or disposing of tokens can create reporting obligations.

Keep Records of

• Purchase date and time
• Token quantity
• U.S. dollar value
• Payment asset and its cost basis
• Gas and transaction fees
• Sale documents
• Wallet addresses
• Transaction identifiers
• Vesting and unlock dates
• Airdrops and rewards

Using Crypto to Purchase ICO Tokens

Exchanging Bitcoin, Ether, a stablecoin, or another digital asset for a new token can create a taxable disposal of the payment asset in addition to establishing basis in the new token.

Worthless and Stolen Tokens

Tax treatment of abandonment, theft, fraud, worthlessness, frozen assets, and failed projects can be complex. A price decline alone does not necessarily create a deductible loss.

25. Define the Exit and Complete-Loss Scenario

The CFTC warns that buying a token only because it might later be sold at a higher price is speculation and carries considerable risk, regardless of how convincing the whitepaper or business plan appears.

Exit Questions

• Where could the token legally trade?
• What liquidity is expected?
• When can insiders sell?
• Can U.S. purchasers resell?
• Can the project or platform freeze transfers?
• What happens if no exchange lists it?
• Can the token be redeemed?
• Who is obligated to buy it?

Complete-Loss Scenario

Assume:

• The product is never completed.
• The token receives no exchange listing.
• The treasury loses value.
• The team stops communicating.
• The contract is exploited.
• Regulators restrict the offering.
• The token price falls to zero.

Only invest an amount that can be lost without affecting housing, food, medical care, taxes, debt payments, education, retirement, or emergency savings.

ICO and Token-Sale Red Flags

• Guaranteed profit, return, listing, or buyback
• Pressure to buy before a countdown expires
• Claims that the price can only rise
• No verifiable legal issuer
• Anonymous team controlling the treasury
• Copied biographies or fake adviser profiles
• No binding purchase terms
• Whitepaper containing copied or vague material
• No working product or public code
• No explanation for why a token is needed
• Unclear token rights
• Unlimited or changeable supply controlled by one key
• Large insider allocation without vesting
• Private investors receiving extreme discounts
• Unverified smart-contract audit
• Administrator ability to seize or mint tokens without disclosure
• Exchange logos without confirmed listings
• Marketing expenditure much larger than development and security
• Proceeds sent to a personal wallet
• Team refusing legal, treasury, or vesting questions
• Paid influencers without compensation disclosure
• Fake reviews and bot-driven community activity
• Request for a seed phrase or private key
• Additional payment required to withdraw or unlock tokens
• Social-media stranger offering exclusive access

Guaranteed Wealth Is a Scam Signal

The FTC reported more than $7.9 billion in reported investment-scam losses during 2025, with a median reported individual loss above $10,000. Scammers commonly use social media, messaging apps, advertisements, fake dashboards, and promises of rapid wealth.

ICO Due Diligence Scorecard

Category	Strong Evidence	Warning Evidence	Score 0–5
Legal status	Clear analysis, filings, restrictions, and named counsel	“Utility token” label without explanation
Issuer	Verified entity, owners, accounts, and jurisdiction	Shell entity or no legal counterparty
Team	Verifiable history and relevant execution record	Fake, hidden, or overstated biographies
Product	Working product, code, users, and evidence	Concept, graphics, and promises only
Token purpose	Necessary and clearly connected to product use	Token exists mainly to raise money
Rights	Specific enforceable terms	No ownership, redemption, or meaningful use disclosed
Tokenomics	Transparent supply, issuance, and incentives	Hidden inflation or excessive insider supply
Vesting	Long, enforceable insider lockups	Large immediate unlocks
Treasury	Multisignature controls and regular reporting	One founder controls proceeds
Security	Verified audits, fixes, monitoring, and bug bounty	No audit or audit of different code
Roadmap	Measurable milestones and historical delivery	Vague adoption and listing promises
Liquidity	Realistic plan with disclosed restrictions	Guaranteed exchange listing

A scorecard organises research but cannot predict price or eliminate the risk of fraud, technical failure, legal action, or complete loss.

ICO Investment Checklist

Question	Your Answer
What is the issuer’s full legal name?
Where is it incorporated and operating?
Who owns and controls it?
Is the token or offering subject to securities law?
Which registration or exemption is claimed?
Are resale restrictions disclosed?
Have the founders and advisers been independently verified?
Does a working product exist?
Why does the product require this token?
What legal rights does the token provide?
What is the initial and maximum supply?
Who can mint or burn tokens?
What percentage belongs to insiders?
What discounts did private investors receive?
What are the vesting and unlock dates?
What is the implied fully diluted valuation?
How will sale proceeds be used?
Who controls treasury wallets?
Is multisignature approval required?
Can the contract mint, pause, freeze, or upgrade?
Has deployed code been independently audited?
Were all serious audit findings fixed and retested?
How decentralised is network and governance control?
Are roadmap milestones measurable?
Are customer and adoption claims independently supported?
Are exchange listings independently confirmed?
Who provides liquidity and market making?
Are promoters and influencers compensated?
What happens if the soft cap is not reached?
How and when are tokens delivered?
Which wallet and custody method will be used?
Have U.S. tax consequences been considered?
Can the complete investment be lost without affecting essential finances?

What to Do After an ICO Scam or Loss

1. Stop sending money. Do not pay a tax, recovery, verification, or unlock fee.
2. Preserve evidence. Save websites, whitepapers, agreements, messages, wallet addresses, transaction identifiers, and payment records.
3. Contact involved platforms. Notify exchanges, custodians, banks, and payment providers immediately.
4. Secure accounts. Change passwords, remove malicious wallet permissions, and move unaffected assets when keys may be compromised.
5. Report the matter. Contact the SEC, CFTC, FTC, FBI Internet Crime Complaint Center, and relevant state or foreign authorities as appropriate.
6. Obtain legal and tax advice. Recovery rights and loss treatment depend on the facts.
7. Avoid recovery scams. No private investigator, hacker, lawyer, or regulator can guarantee recovery.

Recovery Can Be Difficult

Crypto transfers can cross jurisdictions and move through private wallets, exchanges, bridges, and conversion services. Reporting quickly can improve the chance of freezing identifiable assets, but recovery is never guaranteed.

Key Takeaways

• An ICO is a token-based capital raise, not automatically the equivalent of an IPO.
• A token may provide no ownership, dividend, redemption, or claim on company assets.
• A non-security crypto asset can still be sold as part of an investment contract subject to federal securities-law requirements.
• “Utility token” is a marketing description, not a complete legal analysis.
• Verify the issuer, jurisdiction, team, advisers, and legal filings independently.
• Separate a working product from a demo, roadmap, and promotional promise.
• Ask whether the product genuinely needs a tradable token.
• Analyse total supply, fully diluted valuation, insider allocation, discounts, vesting, and unlocks.
• Review use of proceeds together with treasury custody and approval controls.
• A smart-contract audit reduces some technical risk but does not guarantee security.
• Understand administrator keys, upgradeability, minting, pausing, and freezing powers.
• Exchange-listing and price-support promises are major warning signs.
• Online comments and influencer reviews may involve undisclosed compensation.
• Buying solely for later resale at a higher price is speculation and can result in complete loss.
• Token purchases and disposals can create U.S. tax and recordkeeping obligations.

Official ICO and Crypto-Asset Resources

• SEC: 2026 Interpretation of Federal Securities Laws and Crypto Assets
• SEC: Offerings and Registrations in Crypto-Asset Markets
• Investor.gov: Initial Coin Offerings
• Investor.gov: Crypto Assets
• CFTC: Use Caution When Buying Digital Coins or Tokens
• FTC: Cryptocurrency and Scams
• IRS: Digital Assets and Tax Reporting
• SEC: Report Possible Securities Fraud
• CFTC: Submit a Complaint
• FTC: Report Fraud

Frequently Asked Questions About ICOs and Token Sales

What does ICO stand for?

ICO stands for Initial Coin Offering.

What is an ICO in simple terms?

It is a fundraising transaction in which a project sells newly issued crypto assets or rights to future tokens.

Is an ICO the same as an IPO?

No. An IPO normally offers registered corporate shares, while an ICO token may provide no ownership, voting, dividend, liquidation, or information rights.

Is every ICO illegal?

No. Legal treatment depends on the token, offering, promises, purchaser locations, registrations, exemptions, and other facts.

Is every ICO token a security?

No. Under the SEC’s 2026 interpretation, crypto assets can fall into different categories. A non-security crypto asset can still be offered or sold as part of an investment contract.

What is an investment contract?

It is a type of security whose analysis considers the investment of money in a common enterprise with a reasonable expectation of profits derived from the essential managerial efforts of others.

Does calling a token a utility token avoid securities law?

No. Regulators and courts consider the actual transaction, promises, rights, and economic reality rather than the label.

What is a SAFT?

A Simple Agreement for Future Tokens is a contract in which an investor pays now for tokens expected to be delivered later.

What is an IEO?

An Initial Exchange Offering is a token sale hosted or distributed through a centralised crypto platform.

What is an IDO?

An Initial DEX Offering is a token launch conducted through a decentralised exchange or liquidity-pool mechanism.

How do I verify an ICO team?

Use corporate registries, employment records, code repositories, archived sites, direct adviser confirmation, regulatory records, court searches, and independent professional references.

Is an anonymous ICO team always a scam?

No, but anonymity materially increases accountability, treasury-control, enforcement, and background-verification risk.

What should an ICO whitepaper contain?

It should clearly describe the issuer, product, token rights, technology, supply, allocation, vesting, sale terms, use of proceeds, governance, risks, legal structure, and roadmap.

Is a whitepaper legally binding?

Not necessarily. Review the purchase agreement, terms of sale, filings, smart contract, and other documents that define enforceable rights.

How can I tell whether the project needs a token?

Ask whether the product can operate with ordinary currency, an existing token, a stablecoin, subscription, or internal points without creating a speculative asset.

What is tokenomics?

Tokenomics covers supply, issuance, allocation, incentives, vesting, burning, rewards, and the economic role of the token.

What is fully diluted valuation?

It is the token price multiplied by the maximum or fully diluted supply. It can reveal a high valuation hidden by low initial circulation.

Why do token unlocks matter?

Unlocks increase the amount insiders, investors, advisers, or the treasury can potentially sell or use in governance.

What is token vesting?

Vesting releases token allocations gradually over time or after milestones rather than making them immediately transferable.

What is a soft cap?

It is the minimum fundraising target the issuer says is needed to proceed. The refund rules after failure to reach it must be verified.

What is a hard cap?

It is the stated maximum amount the sale intends to raise or the maximum allocation available.

What should I check in an ICO smart contract?

Check minting, pausing, freezing, blacklisting, upgradeability, fees, administrator keys, treasury controls, transfer restrictions, and whether deployed code matches published code.

Does a smart-contract audit mean the ICO is safe?

No. An audit can miss defects and normally does not verify the team, treasury, economics, legal compliance, frontend, private keys, or future upgrades.

What is a multisignature treasury?

It is a wallet requiring approval from several keys before funds move. It can reduce single-key risk when signers and policies are independent and secure.

Can an ICO guarantee an exchange listing?

No legitimate project can safely guarantee that an independent exchange will list or continue supporting the token.

How do I check whether an exchange listing is real?

Use the exchange’s official announcement and verify the contract address. Do not rely only on the project website or social-media post.

Can online ICO reviews be trusted?

They can contain useful facts but may be paid, compensated with tokens, generated by bots, or influenced by undisclosed holdings.

Can an ICO guarantee profit?

No. Guaranteed profit, price appreciation, buyback, or risk-free return claims are major fraud warnings.

What happens if an ICO fails?

Purchasers may lose the complete investment. Refund or recovery depends on the contract, remaining assets, legal rights, issuer location, and enforcement.

Are ICO purchases taxable in the United States?

Using one digital asset to purchase another can create a taxable disposal of the payment asset. Later sales, exchanges, rewards, or distributions can create additional reporting obligations.

Can I recover tokens sent to a fake ICO?

Recovery is often difficult. Report quickly to involved exchanges, law enforcement, the SEC, CFTC, and FTC, and avoid anyone demanding another fee for guaranteed recovery.

How much should I invest in an ICO?

Only an amount that can be lost completely without affecting essential expenses, taxes, debt payments, emergency savings, or long-term financial goals.