How to Launch an ICO: A Step-by-Step Playbook

Launching an initial coin offering (ICO) is not a marketing exercise. It is a regulatory process. The difference between a compliant token launch and an enforcement action comes down to three decisions you make before writing a single line of code: how your token is classified, where you incorporate, and which filing path you follow.

Here are the regulatory requirements for launching an ICO across the six jurisdictions founders ask about most. For each, we cover the classification test, the filing or notification path, the key thresholds, and the post-launch obligations. If you need help evaluating which jurisdiction fits your project, schedule a free consultation.

Get Assistance on ICO Launch

What counts as an ICO (and what regulators call it now)

The term “ICO” is still common in search and in founder conversations, but regulators do not use it. The SEC calls it an “offer or sale of crypto asset securities.” MiCA uses “offer to the public of crypto-assets.” Singapore’s Payment Services Act 2019 refers to “digital payment token (DPT) services.” El Salvador’s LEAD law uses “public offering of digital assets.”

The substance is the same: a project creates tokens, offers them to investors or the public, and raises capital in return. What changes by jurisdiction is whether the token is treated as a security, a utility token, an e-money token, or a digital asset with its own classification. For background on how tokens represent value on-chain, see our guide to asset tokenization.

Step 1: Classify your token

Token classification determines everything that follows. If your token is a security, you face securities registration or exemption requirements. If it is a utility token, you may have lighter obligations. If it is a stablecoin, you face additional capital and redemption rules. See our token issuance guide for a broader overview.

The US Howey test

In the United States, the SEC uses the Howey test to determine whether a token is a security. A token is an “investment contract” (and therefore a security) if it meets four elements:

1. An investment of money
2. In a common enterprise
3. With an expectation of profits
4. Derived from the efforts of others

The SEC’s March 2026 interpretive release (Release No. 33-11412) formally affirmed that a common enterprise is a required element. The release also clarified that representations or promises about essential managerial efforts must be made before or at the time of the offer or sale. Post-sale representations alone generally do not create an investment contract, though ongoing issuer efforts remain relevant to whether the investment contract has terminated.

If your token passes the Howey test, you must either register with the SEC (Form S-1) or qualify for an exemption (Reg D, Reg S, or Reg A+). If it does not pass, you may still need to comply with FinCEN money transmission rules if your token sale involves accepting and transmitting value.

MiCA token categories

The EU’s Markets in Crypto-Assets Regulation (Regulation (EU) 2023/1114) sorts tokens into three categories:

• Utility tokens (Art. 3(1)(9)): Tokens intended to provide access to a good or service supplied by the issuer. Subject to Title II (white paper notification, not authorization).
• Asset-referenced tokens (ARTs) (Art. 3(1)(6)): Tokens that maintain a stable value by referencing multiple assets or currencies. Require authorization under Title III. Issuer must be a credit institution or electronic money institution.
• E-money tokens (EMTs) (Art. 3(1)(7)): Tokens that maintain a stable value by referencing a single official currency. Require authorization under Title IV. Issuer must be a credit institution or electronic money institution.

Most ICO tokens that provide access to a platform or service fall under the utility token category. The key advantage: MiCA does not require pre-approval for utility token white papers, only notification to the home member state’s competent authority 20 working days before publication (Art. 8). See our MiCA token issuance guide for details.

Singapore DPT classification

Under the Payment Services Act 2019, a “digital payment token” is a digital representation of value that is not denominated in any currency and can be transferred, stored, or traded electronically. If your token qualifies as a DPT and you are operating a DPT service (exchanging, transferring, or providing custody), you need a Major Payment Institution (MPI) license from MAS.

Utility tokens that only provide access to a specific product or service may fall outside the DPT definition if they cannot be exchanged or transferred on secondary markets. The classification depends on how the token is actually used, not just how it is described in the white paper.

Step 2: Choose your jurisdiction

Your jurisdiction choice affects your filing path, timeline, cost, and ongoing compliance burden. Here is how the six most common options compare.

United States

Regulator: Securities and Exchange Commission (SEC), Financial Crimes Enforcement Network (FinCEN)

See our US crypto license page for licensing options beyond ICOs.

Classification: Howey test determines security vs. non-security

Filing paths (if security):

If not a security: FinCEN MSB registration may still be required if you accept and transmit value (Form 107, within 180 days). Exemption applies if you are registered with and regulated by the SEC or CFTC. See FinCEN’s 2019 guidance for ICO-specific analysis.

Timeline: Reg D filings can close in 2 to 4 weeks. Reg A+ Tier 2 qualification takes 3 to 6 months. Form S-1 registration takes 6 to 12+ months.

Cost: Legal fees for Reg D: USD 50,000 to 150,000. Reg A+ Tier 2: USD 100,000 to 300,000 including audit. Form S-1: USD 200,000 to 500,000+.

European Union (MiCA)

Regulator: National competent authorities (varies by member state), ESMA, EBA

Classification: Utility token, ART, or EMT under MiCA

For utility token ICOs:

• Draw up a white paper per Art. 6 and Annex I
• Notify the white paper to the home member state’s competent authority 20 working days before publication (Art. 8)
• Publish on your website before the offer starts (Art. 9)
• No pre-approval required (notification only)
• Registration fee: varies by member state

For ART ICOs: Authorization required (Art. 16). Issuer must be a credit institution or electronic money institution. Application fee: varies. Authorization decision within 60 working days of complete file.

For EMT ICOs: Same as ART. Must be authorized as credit institution or electronic money institution (Art. 48).

Exemptions (Art. 4(4)): No white paper needed if total consideration is below EUR 1,000,000 over 12 months, or if offers are addressed solely to qualified investors, or if fewer than 150 persons per member state are targeted.

Timeline: Utility token notification: 20 working days. ART/EMT authorization: 2 to 3 months.

Singapore

Regulator: Monetary Authority of Singapore (MAS)

See our Singapore crypto license page for the full licensing landscape.

Classification: Digital Payment Token (DPT) under PSA 2019

Requirements:

• MPI license required for DPT services (Section 5)
• Base capital: SGD 250,000 minimum
• AML/CFT compliance per MAS Notices PSN02
• Legal opinion mapping business model to regulated services
• Independent External Auditor assessment for new DPT applications (effective August 2024)

Utility token exemption: If your token only provides access to a specific product or service and cannot be exchanged on secondary markets, it may not qualify as a DPT. Classification depends on actual use.

Timeline: MPI license application: 6 to 9+ months.

Cost: Legal and compliance setup: SGD 100,000 to 300,000.

El Salvador

Regulator: Comision Nacional de Activos Digitales (CNAD)

See our El Salvador crypto license page for the full LEAD framework.

Classification: Digital assets under LEAD (Ley de Emision de Activos Digitales, Legislative Decree No. 643, January 2023)

Key advantages:

• Digital assets are not classified as securities
• No distinction between utility, security, or governance tokens in the law
• Tax exemptions: all yields, income, and capital gains from digital assets are exempt from all taxes (Art. 36)
• 5-day fast-track for standard applications
• Registration fee: 0.01% of public offering amount

Requirements:

• Prepare a Relevant Information Document (Art. 32)
• Have it certified by an authorized certifier entity (Art. 26)
• Register in the Issuers Registry
• CNAD authorization for public offerings

DASP registration: Initial fee of 15 minimum wages (approximately USD 5,475); annual renewal of 10 minimum wages (approximately USD 3,650).

Timeline: 5 business days for standard applications; 15 business days for complex cases.

Limitations: Small market. Limited investor base. Banking relationships may be difficult to establish.

British Virgin Islands

Regulator: BVI Financial Services Commission (FSC)

Classification: Tokens are not expressly included in SIBA Schedule 1. Whether a token is an “investment” is a fact-specific enquiry.

Key advantages:

• Token issuance (minting and sale) is NOT a regulated activity under the VASP Act 2022
• No ICO-specific legislation
• No mandatory reserve, collateralization, or backing-asset requirements
• No economic substance requirements for pure token issuance
• FATCA/CRS does not currently require token issuers to disclose purchaser information

Post-issuance activities: Exchange services, custody, and transfers may require VASP registration.

Common structure: BVI business company limited by shares under the BCA 2004. Can be orphaned for decentralized projects.

Timeline: Company formation: 1 to 2 weeks. VASP registration (if needed): 2 to 3 months.

United Kingdom

Regulator: Financial Conduct Authority (FCA)

See our UK crypto license page for the full regulatory landscape.

Classification: Security tokens, e-money tokens, or unregulated tokens (utility and exchange tokens) per PS19/22

Current regime (MLR 2017):

• Must register with FCA before providing cryptoasset exchange or custodian wallet services
• Cryptoassets classified as “Restricted Mass Market Investments”
• Financial promotions must be fair, clear, and not misleading
• Risk warnings required in all promotions
• Criminal offense for illegal financial promotions: up to 2 years imprisonment or unlimited fine

Future FSMA regime (October 2027):

• New regulated activities for cryptoassets under the RAO
• Applications for FSMA authorization open September 30, 2026
• Will cover: issuing qualifying stablecoins, safeguarding cryptoassets, operating trading platforms, intermediation, staking

Utility token exemption: If your token is an unregulated utility token (providing access to a specific product or service), it falls outside the FCA perimeter. But marketing it to UK consumers still requires compliance with financial promotion rules.

Timeline: MLR registration: 3 to 6 months. FSMA authorization (from October 2027): TBD.

Free Consultation on ICO Jurisdiction

Step 3: Set up your entity

Your corporate structure depends on your jurisdiction choice and token classification.

1. For US ICOs: Delaware C-Corp or LLC. If using Reg D, the issuing entity must be organized in the US (or Canada for Reg A+). For Reg S, offshore entities (BVI, Cayman, Singapore) are common for the offshore tranche.
2. For EU ICOs: Company incorporated in an EU/EEA member state. The issuer’s registered office must be in the EU/EEA for public offerings under MiCA (Art. 4(1)(d)).
3. For Singapore ICOs: Singapore-registered company. Must be locally incorporated for MPI license application.
4. For El Salvador ICOs: Company registered in El Salvador. CNAD registration requires local presence.
5. For BVI ICOs: BVI business company limited by shares under the BCA 2004. Standard vehicle for offshore token issuers.
6. For UK ICOs: UK-registered company. FCA registration requires UK presence.

Step 4: Prepare your white paper and filings

The white paper is the core document for any ICO. Its content requirements vary by jurisdiction, but the basics are consistent: describe the project, the token, the risks, and how funds will be used.

MiCA white paper (utility tokens)

Must include (Art. 6, Annex I):

• Identity of the offeror
• Description of the crypto-asset project
• Description of rights and obligations attached to the tokens
• Description of the underlying technology
• Description of risks
• Summary in clear, non-technical language
• First page statement: “This crypto-asset white paper has not been approved by a competent authority of any Member State”
• Management body statement confirming completeness and fairness

Must be notified to the home member state competent authority 20 working days before publication (Art. 8). No pre-approval required.

SEC registration or exemption (US)

Reg D: File Form D with the SEC within 15 days after the first sale. No full prospectus required, but you must provide sufficient information to investors. Accredited investor verification required for 506(c).

Reg A+ Tier 2: File Form 1-A on EDGAR. Must include audited financial statements (AICPA GAAS or PCAOB standards). Ongoing reporting: annual, semi-annual, current reports.

Form S-1: Full registration statement. Most comprehensive and time-consuming path.

El Salvador Relevant Information Document

Must be prepared by every issuer planning a public offering (Art. 32). Must be certified by an authorized certifier entity. Content includes:

• Details of the issuer
• Description of the digital assets
• Risk factors
• Use of proceeds
• Technology description

Singapore white paper

Not required for utility token offerings that do not involve DPT services. If your token is a DPT, MAS expects a white paper or equivalent disclosure document as part of the MPI license application.

Step 5: Handle AML/KYC and compliance

Every jurisdiction requires some form of anti-money laundering (AML) and know-your-customer (KYC) compliance. The specifics vary, but the core obligations are consistent.

US: BSA/AML compliance if registered as MSB. FinCEN’s 2019 guidance (FIN-2019-G001) applies to ICOs. Customer identification program (CIP) required.

EU: AMLD6 and national transposition. CASPs must conduct customer due diligence (CDD) under MiCA Title V. Travel Rule applies to transfers above EUR 1,000.

Singapore: MAS Notices PSN02 for DPT services. Enhanced AML/CFT requirements due to higher ML/TF risks of DPT transactions.

El Salvador: DASPs must comply with CNAD anti-money laundering regulations. KYC required for all participants.

BVI: Anti-Money Laundering and Terrorist Financing Act 2008. VASP Act 2002 AML/CTF requirements for registered VASPs.

UK: MLR 2017 requirements. FCA expects firms to comply with the Joint Money Laundering Steering Group (JMLSG) guidance.

Step 6: Launch and post-launch obligations

The launch itself is the easy part. The hard part is maintaining compliance afterward.

US: Ongoing reporting obligations depend on your exemption path. Reg D: Form D amendments for material changes. Reg A+ Tier 2: annual, semi-annual, and current reports. Form S-1: periodic reporting under the Exchange Act.

EU: White paper must be updated whenever there is a significant new factor, material mistake, or material inaccuracy (Art. 12). Ongoing compliance with MiCA conduct rules.

Singapore: Ongoing AML/CFT compliance. Annual audits. MAS inspections.

El Salvador: Annual renewal of DASP registration. Ongoing compliance with CNAD regulations.

BVI: Annual company fees. VASP registration renewal if applicable.

UK: Ongoing MLR compliance. From October 2027, FSMA authorization requirements will apply.

Jurisdiction comparison table

For a deeper look at token sale structures, see our ICO fundraising guide.

Launch your ICO the right way

The regulatory landscape for ICOs has matured significantly since the 2017 boom. Projects that treat compliance as an afterthought face enforcement actions, fund freezes, and personal liability for founders. Projects that build compliance into their launch plan from day one move faster, attract better investors, and avoid costly rework.

LegalBison helps founders navigate the full lifecycle of a token launch, from jurisdiction selection and entity setup through white paper preparation, regulatory filing, and post-launch compliance. Contact us to discuss your project, or read more about our ICO legal services.

Get Expert Advisory on Your ICO Launch

FAQ on how to launch an ICO

Do I need a license to launch an ICO?

It depends on your jurisdiction and token classification. In the US, if your token is a security under the Howey test, you need SEC registration or an exemption. In the EU, utility token issuers only need to notify a white paper (no authorization). In Singapore, if your token is a DPT, you need an MPI license. In El Salvador, you need CNAD authorization for any public offering. In the BVI, token issuance itself is not regulated, but post-issuance exchange activities may require VASP registration.

How much does it cost to launch an ICO?

Costs vary widely by jurisdiction. A Reg D offering in the US costs USD 50,000 to 150,000 in legal fees. A MiCA utility token notification in the EU costs EUR 10,000 to 100,000. An El Salvador LEAD filing costs as little as USD 5,000 to 20,000. A BVI incorporation and launch costs USD 5,000 to 15,000. These figures exclude development, marketing, and ongoing compliance costs.

Can I launch an ICO without being a security?

Yes. If your token does not meet the Howey test (US) or is classified as a utility token under MiCA (EU), you may avoid securities regulation entirely. Utility tokens that provide access to a specific product or service, without profit expectations from the issuer’s efforts, generally fall outside securities law. But you still need to comply with AML/KYC requirements and any applicable financial promotion rules.

How long does it take to launch an ICO?

Timeline depends on jurisdiction and complexity. El Salvador: 5 to 15 business days. BVI: 1 to 2 weeks for company formation. EU MiCA utility token: 20 working days for notification. US Reg D: 2 to 4 weeks. Singapore MPI: 6 to 9 months. US Reg A+ Tier 2: 3 to 6 months. US Form S-1: 6 to 12+ months.

What is the difference between an ICO, IEO, and STO?

An ICO (Initial Coin Offering) is a direct token sale by the issuer to investors. An IEO (Initial Exchange Offering) is conducted through a cryptocurrency exchange, which acts as an intermediary. An STO (Security Token Offering) is a token sale where the tokens are classified as securities and must comply with securities law. See our STO service page for more on security token offerings. The regulatory requirements depend on the token classification.

Do I need a white paper for an ICO?

In most jurisdictions, yes. MiCA requires a white paper for public offerings of utility tokens (Art. 6). El Salvador requires a Relevant Information Document (Art. 32). The SEC does not require a specific “white paper” format, but expects sufficient disclosure for investors. Singapore expects disclosure as part of the MPI license application. A well-written white paper is also essential for investor confidence regardless of legal requirements.