The SEC's War on NFT Securities: What Every Trading Card Tokenization Platform Must Know in 2026

The Legal Infrastructure of Card Tokenization

The legal status of a tokenized trading card is not self-evident. It depends on how the token is structured, what rights it conveys, how it is marketed, to whom it is sold, and — critically — what representations the issuing platform makes about future value. A PSA 10 Charizard represented as a single Polygon NFT, sold for USDC at current market price with no promises attached, sits in a very different legal universe from a fractional NFT in a pool of 1,000 cards, sold to investors with reference to projected appreciation from the platform’s portfolio management expertise. Both are “NFT trading cards.” Only one is almost certainly a security.

The SEC’s recent enforcement history — discussed in detail below — has sharpened this distinction considerably. But the industry’s response has been uneven. Many platforms operate in legal grey zones not because they have analysed the framework and concluded they are compliant, but because they have never rigorously applied it. This analysis provides that framework, beginning with the foundational legal test and proceeding to specific enforcement actions, international regulatory comparisons, and a practical compliance checklist.

The Howey Test and NFTs

The legal test for whether a financial instrument constitutes a “security” under US law derives from SEC v. W.J. Howey Co., 328 U.S. 293 (1946). The Supreme Court established that an investment contract — and therefore a security subject to SEC registration requirements — exists when there is: (1) an investment of money; (2) in a common enterprise; (3) with an expectation of profits; (4) to come predominantly from the efforts of others.

The SEC’s application of Howey to NFTs was first articulated in detail in its July 2023 enforcement action against Impact Theory — an important case that deserves careful reading by every participant in the tokenized card market.

Impact Theory, a Los Angeles media company founded by Tom Bilyeu, raised approximately $30 million from the sale of NFTs called “Founder’s Keys” between October and December 2021. The NFT offering materials explicitly represented that purchasing a Founder’s Key was an investment in Impact Theory’s business; that the proceeds would fund content development; and that as the company grew, the NFTs would appreciate in value. The SEC’s order found that all four Howey prongs were satisfied and ordered Impact Theory to pay $6.1M in disgorgement, prejudgment interest, and civil penalties — the first time the SEC had applied the securities framework to an NFT offering.

The elements that triggered SEC liability in Impact Theory are instructive for card platforms:

Investment of money: Satisfied. Holders paid ETH for Founder’s Keys. For card NFTs, holders pay USDC or ETH — equally satisfied.

Common enterprise: Satisfied. Impact Theory pooled proceeds for its business development. For a fractional card platform where proceeds fund card acquisition, portfolio management, and platform operations, a common enterprise argument is straightforward.

Expectation of profits: Satisfied, explicitly. Impact Theory’s marketing materials used investment language — “bet on us,” “building a billion-dollar company.” Card platforms that market tokenized cards with projected appreciation data, price index references, or historical return figures are creating exactly this expectation.

Efforts of others: Satisfied. Founder’s Key holders were passive; Impact Theory’s team was to create the value. For platforms that actively manage card portfolios, curate card selections, or promise “expert curation,” the efforts-of-others prong is clearly met.

The critical question for card platforms is whether the single-asset NFT model — one card, one NFT, no pooling — satisfies the “common enterprise” element. The SEC’s position in Impact Theory was that proceeds were pooled across all NFT buyers to fund the issuer’s operations. If a card platform merely mints an NFT representing a specific physical card that it custodies, with no pooling of proceeds and no platform-driven value creation promise, the common enterprise element is weaker. But “weaker” is not “absent.”

Impact Theory: What the Settlement Actually Says

The SEC’s full order is worth reading beyond the headline number. Several elements are particularly relevant to card platforms.

First, the SEC emphasised that Impact Theory “encouraged potential investors to view the Founder’s Keys as an investment in the company.” The company’s founder stated publicly that “buying a Founder’s Key is like buying a small piece of our business.” Card platforms that use language associating NFT purchases with investment in the platform’s growth — including marketing copy that references the platform’s AUM growth, TVL milestones, or expansion plans as a reason to buy cards through the platform — are sailing toward the same harbour.

Second, the SEC noted that Impact Theory promised to create “intrinsic value” in the NFTs through its efforts — developing media content, building partnerships, creating a brand ecosystem. For card tokenization platforms, the analogous promise would be: curating a platform that drives secondary market demand, developing market data tools that support price appreciation, or managing vault quality standards that maintain the value of tokenized cards. If a platform’s marketing argues that its expertise and curation add value, the SEC may argue it is promising profits from others’ efforts.

Third, and most importantly for card platforms: the SEC explicitly stated that “the form of the instrument is irrelevant to whether it is an investment contract.” The fact that something is called an NFT, a collectible, or a “digital art piece” does not exempt it from securities analysis. What matters is the economic substance of the arrangement.

Stoner Cats: A Different Structure, A Different Outcome

The SEC’s action against Stoner Cats 2 LLC, settled in September 2023 with a $1M civil penalty, presents a structurally different case that card platforms will find closer to their own models. Where Impact Theory was unambiguous — the company explicitly used investment language — Stoner Cats presented more nuance.

Stoner Cats NFTs were sold as access tokens to an animated web series. Holders received access to content; the NFTs also traded on secondary markets at significant premiums. The SEC’s order found that the marketing materials — while not as explicitly investment-oriented as Impact Theory’s — created a sufficient expectation of profits: the celebrity backing (Mila Kunis, Ashton Kutcher, Vitalik Buterin), the emphasis on secondary market performance, and references to “exclusive” content all contributed to a Howey analysis that the SEC found dispositive.

The Stoner Cats case teaches card platforms that the question of whether an NFT is a security is not limited to platforms that use overt investment language. A platform that emphasises secondary market liquidity, past price performance, celebrity endorsements, or the exclusivity of its curated card selection may be inadvertently constructing the factual predicate for a securities analysis — even without a single sentence that uses the word “investment.”

The $1M Stoner Cats penalty, compared to the $6.1M Impact Theory settlement, suggests that the SEC calibrates enforcement to the scale and sophistication of the offering — but the graduated response should not be read as tolerance. Both cases resulted in requirements to offer rescission to NFT purchasers, which for a card platform could mean unwinding every tokenized card sale.

Fractional NFTs: The Highest-Risk Category

If single-asset card NFTs sit in legal grey territory, fractional NFTs — which divide ownership of a single physical card into multiple tokens distributed across multiple holders — sit in considerably darker territory.

Dibbs was the most prominent fractional card ownership platform before its closure in 2023. The Dibbs model allowed users to purchase fractional shares of high-value graded cards — a user could own 5% of a PSA 10 Charizard, for instance, and trade that fractional interest on the platform’s secondary market. The platform generated significant early traction and raised venture capital before shutting down, citing “current market conditions.”

The legal exposure for the fractional model is substantial. Fractional ownership of a single asset by multiple passive investors, managed by a platform that makes acquisition decisions, sets custody standards, and provides the marketplace for trading, satisfies the Howey test’s common enterprise and efforts-of-others elements more clearly than most structures in this market. The SEC has not, to date, brought an enforcement action specifically targeting a fractional card platform — but its enforcement infrastructure is oriented toward this category. The agency has explicitly stated, in the context of fractional real estate tokens and fractional art NFTs, that fractional ownership structures heighten securities analysis concerns.

The lesson from Dibbs’s shutdown — and from the regulatory environment that informed it — is that the fractional card model requires either a securities registration that no platform has yet pursued, or a structural redesign that severs the Howey elements. Possible structural mitigations include: ensuring token holders have genuine governance rights over the underlying card (weakening the “efforts of others” element); structuring the token as a direct property ownership instrument under applicable state law (moving the analysis from securities law to real property law); or obtaining a no-action letter from the SEC. None of these mitigations is straightforward.

The Spectrum: Utility NFT to Security

The card tokenization market operates across a spectrum of legal risk:

Lowest risk — Single-asset custody NFT: One card, one NFT, representing the legal right to redeem the physical card. No pooling, no platform promises of value creation, no marketing referencing investment returns. The card is sold at current market price. This is the Courtyard.io model in its purest form. The analysis here is closest to: is a warehouse receipt for a commodity a security? Generally, no. The NFT is a title document, not an investment contract.

Moderate risk — Platform-curated card sets: A platform mints a “collection” of 100 NFTs representing its curated selection of Gem Mint Pokémon cards, marketed as an “investment-grade portfolio.” The curation adds a “efforts of others” element; the portfolio framing adds a “common enterprise” element; the investment-grade marketing adds an “expectation of profits” element. This model should not be launched without securities counsel.

High risk — Fractional card NFTs with secondary market: Multiple tokens representing fractional ownership of a single valuable card, traded on a platform secondary market, with price data and historical returns prominently featured. All four Howey elements are plausibly met. This model requires either registration or a definitive legal opinion — and Dibbs’s closure suggests that obtaining the latter is harder than it appears.

Extreme risk — Yield-bearing card tokens: Any model that promises holders a share of rental income, licensing revenue, or platform profits from the underlying cards. This is an unregistered investment contract by any reasonable legal analysis.

MiCA: The EU Framework and Its NFT Carve-Out

The EU’s Markets in Crypto-Assets Regulation (MiCA), which came into full effect in December 2024, takes a meaningfully different approach to NFTs than the SEC’s enforcement-first posture. MiCA explicitly excludes unique, non-fungible tokens from its scope — a carve-out that sounds more protective than it is, because MiCA also specifies conditions under which NFTs lose their “unique” character and fall back into regulated territory.

The relevant provision states that crypto-assets are excluded from MiCA’s scope only if they are “genuinely unique and not fungible with other crypto-assets.” The problem for card platforms is the word “genuinely.” A single Charizard PSA 10 NFT is genuinely unique. But a batch of 102 NFTs representing the 102 cards in the Base Set of Pokémon — all minted on the same platform, all following the same technical standard, all trading on the same marketplace — may not be “genuinely” unique in the sense MiCA intends. The European Securities and Markets Authority (ESMA) has published guidance suggesting that series, collection, or batch-minted NFTs will receive heightened regulatory scrutiny even under MiCA’s NFT carve-out.

For EU-facing card tokenization platforms, the practical implication is that each NFT issuance requires a legal assessment of whether it constitutes a “unique” asset or is better characterised as part of a fungible series. This is not an abstract compliance question; ESMA has indicated it will pursue enforcement on a case-by-case basis in 2026-2027.

IRS Treatment: The 28% Reality

The US tax treatment of tokenized card gains is a necessary companion to the securities analysis. The IRS has designated collectibles as a specific asset class under section 1(h)(5) of the Internal Revenue Code, subject to a maximum 28% long-term capital gains rate — 8 percentage points higher than the maximum rate on most equity investments.

The question of whether a card NFT is taxed as a collectible (28% rate) or as a standard capital asset (20% maximum rate) remains technically unsettled. The IRS’s 2023 Notice 2023-27 addressed this directly, asking for comments on whether NFTs that represent or otherwise are associated with collectibles should themselves be treated as collectibles. The IRS’s preliminary view — not yet finalised as of February 2026 — is that NFTs that constitute or directly represent collectibles should receive collectibles tax treatment. This position, if finalised, would preserve the 28% rate for all tokenized card gains, eliminating any tax arbitrage between owning the physical card and owning its NFT representation.

Reporting requirements are a separate concern. The IRS treats virtual currency transactions as taxable events, meaning every secondary market card NFT sale — even at minimal gain — is a reportable transaction. For investors trading dozens of cards through platforms like Courtyard, the compliance burden of accurate cost basis tracking and transaction reporting is non-trivial.

State Money Transmission Laws

A regulatory dimension that card platforms frequently underestimate is state money transmission licensing. Platforms that facilitate the purchase and sale of tokenized cards for fiat currency — even through USDC as an intermediary — may be operating as money transmitters under state law, requiring licensure in each state where they accept customers. The licensing requirement applies in most US states and carries penalties for unlicensed operation that can include criminal liability.

The practical consequence is that card tokenization platforms operating in the US should conduct a 50-state money transmission analysis before launch, or structure their operations to avoid the licensing trigger. Common structural approaches include operating exclusively peer-to-peer (so the platform never handles customer funds) or routing fiat transactions through a licensed money transmitter. Neither approach is a complete solution to the underlying regulatory exposure, but both reduce the licensing footprint.

International Regulatory Frameworks: Comparative Analysis

Friendlier Jurisdictions: Switzerland, Singapore, Dubai

For card platforms with flexibility on domicile, three jurisdictions stand out as offering clearer regulatory pathways.

Switzerland enacted the Distributed Ledger Technology (DLT) Act in 2021, creating a category of “ledger-based securities” that explicitly contemplates tokenized physical assets. The Swiss framework allows a tokenized card NFT to be registered as a ledger-based security with defined legal rights for holders — providing the legal certainty that the US and EU frameworks currently lack. FINMA, the Swiss financial regulator, has been more willing than either the SEC or ESMA to issue proactive guidance on novel tokenization structures. The tradeoff is that operating from Switzerland requires navigating Swiss corporate law, and accessing US customers from a Swiss entity reintroduces US securities compliance questions.

Singapore’s Monetary Authority (MAS) has adopted a risk-calibrated approach to digital assets that distinguishes between payment tokens, utility tokens, and security tokens. NFTs that represent ownership of physical collectibles with no investment promise have generally been treated as outside the regulated perimeter — though MAS has signalled that this analysis depends heavily on how the NFT is marketed. Singapore’s appeal is its sophisticated financial services infrastructure and its explicit policy objective of being a digital asset hub.

Dubai’s Virtual Assets Regulatory Authority (VARA), established in 2022, has created a licensing framework specifically for virtual asset businesses that is more operational than the SEC’s enforcement posture. VARA has issued licenses to significant crypto businesses and has been engaged with the NFT collectibles market as a distinct category. The UAE’s zero capital gains tax on collectibles is an additional consideration for platforms thinking about where to domicile holding structures.

What Dibbs’s Shutdown Teaches the Market

The closure of Dibbs in 2023 provides the only significant case study of fractional card platform failure available to the market. Dibbs raised venture capital from prominent investors, grew a user base of tens of thousands, and — critically — was generally understood to operate in a legal grey zone that its investors and team believed was manageable.

The lessons are multiple. First, regulatory uncertainty itself is a business risk independent of whether an enforcement action materialises: Dibbs’s closure was attributed to market conditions, but its ability to raise further capital was constrained by the regulatory overhang. Second, the shutdown created genuine harm to users who held fractional card positions — the process of unwinding fractional positions, redistributing assets, and providing clear legal title back to card holders proved operationally complex. Third, the vacuum left by Dibbs was not filled by a compliant successor: the fractional card market, post-Dibbs, largely moved back to the single-asset NFT model (Courtyard) or to traditional collector-to-collector trading, suggesting that regulatory clarity is a prerequisite for the fractional model’s commercial viability.

The path forward for fractional card ownership likely requires one of two things: a definitive SEC no-action letter providing a safe harbour for structures that genuinely separate the Howey elements, or a legislative solution that creates a registration pathway designed for fractional collectible ownership. Neither is imminent. Platforms contemplating fractional models should explore our investment analysis for the market context underpinning the demand for fractional access.

Practical Compliance Checklist for Card Platforms

The following is a framework for card tokenization platforms to assess their current regulatory exposure. It is not legal advice and is not a substitute for qualified counsel:

Marketing language audit. Review all marketing materials — website copy, social media, pitch decks, influencer briefs — for language that could establish an expectation of profit from the platform’s efforts. Remove or revise any reference to: projected returns, historical price appreciation attributed to platform curation, investment-grade terminology applied to the platform’s offering (as distinct from the cards themselves), or comparisons to investment products.

Structural analysis. Map the legal structure of each token type the platform issues. For each token type, apply the four Howey prongs and document the analysis. Where any prong is ambiguous, note it and escalate to securities counsel. Do not assume that calling something a “utility token” or a “collectible NFT” resolves the analysis.

Jurisdiction mapping. Identify every jurisdiction from which users are accepted and confirm that the platform’s activity does not trigger money transmission, securities, or virtual asset licensing requirements in that jurisdiction. Implement geographic restrictions where necessary — geo-blocking US users from fractional offerings is not a complete solution, but it reduces the primary enforcement risk.

Smart contract review. Ensure that the NFT smart contracts accurately reflect the claimed legal rights. If the NFT purports to represent ownership of the physical card, the smart contract should implement redemption rights that are technically enforceable. Discrepancies between smart contract behaviour and platform ToS representations create both legal and reputational risk.

Custody documentation. Maintain complete documentation of custody arrangements that could survive platform closure. This includes: the identity of the custodian, the terms of the custody agreement, insurance coverage, and the mechanism by which card holders would recover physical assets if the platform ceased operations.

The regulatory landscape facing card tokenization platforms is not stable, and the enforcement calendar for 2026 is likely to produce further guidance. Monitoring the SEC’s enforcement docket and the IRS digital assets page for updated guidance is a basic operational requirement for any platform in this space. See also our analysis of the platform landscape for how existing platforms are navigating these constraints.

This analysis is for informational purposes only. It does not constitute legal advice. Regulatory frameworks change frequently; consult qualified legal counsel for guidance specific to your jurisdiction and business model.