Regulation D 506(c), created by the JOBS Act in 2012 and effective since September 2013, is the dominant exemption for security token offerings in the United States. An estimated 78% of all SEC-compliant security token issuances between 2018 and 2025 relied on 506(c), according to Form D filing data from SEC EDGAR. The total Reg D market raised $2.15 trillion in 2024, with STO issuance growing from $5.6 billion in 2024 to $6.66 billion in 2025. BlackRock’s BUIDL fund — the largest tokenized treasury fund at $1.87 billion AUM, tokenized by Securitize — was structured under Reg D 506(c). On April 10, 2025, the SEC’s Division of Corporation Finance issued staff guidance clarifying that crypto asset issuers should include smart contract code as an exhibit in filings. The exemption permits unlimited capital raises from verified accredited investors with general solicitation — meaning issuers can publicly market their token offerings, a critical feature for blockchain projects that rely on community awareness and network effects.
Core Requirements
General Solicitation Permitted
The defining feature of 506(c) is its allowance of general solicitation and general advertising. Unlike 506(b) — which prohibits public marketing — 506(c) permits issuers to advertise their token offerings through websites, social media, industry conferences, and any other public channel.
This permission fundamentally transformed security token capital formation. Pre-JOBS Act, private placements required issuers to have preexisting relationships with potential investors, making blockchain-native token distributions essentially impossible under the securities laws. 506(c) opened the door to publicly marketed token offerings that could reach the global accredited investor base.
Accredited Investor Verification
The cost of 506(c)’s general solicitation permission is a mandatory verification requirement. Issuers must take “reasonable steps to verify” that every purchaser is an accredited investor, using methods that consider the specific facts and circumstances of each purchaser.
The SEC provides non-exclusive safe harbors for verification:
Income verification: Review of IRS forms (W-2, 1099, Schedule K-1, or tax returns) for the two most recent years, plus a written representation of expected current-year income.
Net worth verification: Review of bank, brokerage, and other financial statements within the prior three months, combined with a consumer credit report to identify liabilities.
Third-party verification: Written confirmation from a registered broker-dealer, SEC-registered investment adviser, licensed attorney, or CPA that the professional has verified the investor’s accredited status within the prior three months.
Existing investor status: For existing investors in the same issuer who previously verified their accredited status, the issuer may rely on a written certification that the investor remains accredited.
Security token platforms have streamlined verification through integrated services. Securitize offers built-in accredited investor verification through its issuance platform, while third-party services like Verify Investor process verifications for $50-$100 per investor. The typical verification timeline is 24-72 hours.
No Limit on Offering Amount
506(c) imposes no cap on the amount of capital that can be raised, making it suitable for offerings of any size. Security token issuances under 506(c) have ranged from $1 million seed rounds to $300+ million institutional capital raises.
No SEC Review or Qualification
Unlike Regulation A+, which requires SEC qualification of an offering statement, 506(c) does not require prior SEC approval. The issuer files Form D with the SEC within 15 days after the first sale of securities, providing basic information about the offering. The filing is a notice, not a registration — the SEC does not review or approve the offering terms.
Federal Preemption
Section 18 of the Securities Act preempts state securities registration requirements for 506(c) offerings, though states may require notice filings and filing fees. This preemption eliminates the need for blue sky compliance in each state where investors reside — a significant advantage for token offerings that attract investors nationwide.
Token-Specific Considerations
Smart Contract Compliance
Security tokens issued under 506(c) must enforce transfer restrictions to prevent sales to non-accredited investors. The standard approach uses a compliance-enabled smart contract (sometimes called a “regulatory token standard”) that:
- Maintains a whitelist of verified investor addresses.
- Checks the whitelist before processing any transfer.
- Enforces Rule 144 holding period restrictions.
- Supports transfer agent reconciliation requirements.
Token standards like ERC-1400 (security token standard for Ethereum), ST-20 (Polymath), and DS Protocol (Securitize) embed these compliance features natively, enabling automated enforcement of securities law requirements on-chain.
Secondary Market Trading
506(c) tokens are restricted securities subject to Rule 144 resale restrictions. After the applicable holding period (six months for reporting issuers, one year for non-reporting issuers), tokens may be resold to other accredited investors through registered ATS platforms.
The secondary market for 506(c) security tokens has grown significantly since 2020, with platforms including tZERO, INX, and Securitize Markets providing regulated trading venues. Aggregate secondary market volume for 506(c) tokens reached approximately $2.8 billion in 2025.
Integration Doctrine
The SEC’s integration doctrine examines whether multiple offerings should be “integrated” — treated as a single offering — which could disqualify exemptions if the combined offering violates conditions of any individual exemption. For token issuers conducting simultaneous 506(c) (domestic) and Reg S (offshore) offerings, integration analysis is critical.
Rule 152’s safe harbors provide some protection: offerings separated by more than 30 days are presumed not to be integrated, and offerings under different exemptions are generally not integrated if each independently satisfies its exemption’s conditions. However, for token offerings where the same token is sold domestically under 506(c) and offshore under Reg S, the integration analysis is fact-specific and requires careful legal structuring.
Form D Filing
Issuers must file Form D on EDGAR within 15 days of the first sale of securities. Form D requires disclosure of:
- Issuer name, address, and jurisdiction.
- Related persons (directors, officers, promoters).
- Industry classification.
- Federal exemption(s) claimed.
- Type of securities offered.
- Minimum investment amount.
- Sales compensation (commissions to broker-dealers).
- Offering amount and amount sold.
- Number of investors (accredited and non-accredited).
Form D amendments must be filed annually if the offering is ongoing and promptly upon any material change in the information provided.
Cost Analysis
A typical 506(c) security token offering involves the following costs:
| Component | Estimated Cost |
|---|---|
| Legal structuring and opinion | $100,000 - $250,000 |
| Smart contract development and audit | $50,000 - $150,000 |
| Platform integration (Securitize, tZERO, etc.) | $25,000 - $75,000 |
| Investor verification | $50 - $100 per investor |
| Transfer agent setup | $10,000 - $30,000 |
| Marketing and investor relations | $50,000 - $500,000+ |
| Form D and state notice filings | $5,000 - $15,000 |
Total all-in costs typically range from $250,000 to $1 million+, depending on offering complexity and marketing spend. For comparison, see our analysis of Reg A+ costs and our Reg D vs. Reg A+ comparison.
Common Pitfalls
Inadequate verification. The most common 506(c) compliance failure is insufficient accredited investor verification. Self-certification (checking a box) does not satisfy the verification requirement — issuers must obtain documentary evidence or third-party confirmation.
Late Form D filing. While failure to file Form D does not automatically disqualify the exemption, it can trigger SEC inquiry and state enforcement action. Several states have imposed penalties on issuers that failed to make required notice filings.
Bad actor disqualification. Rule 506(d) disqualifies offerings involving “bad actors” — persons with certain criminal convictions, SEC disciplinary orders, or other regulatory sanctions. Token issuers must conduct bad actor diligence on all covered persons before launching an offering.
Enforcement Risks and Compliance Failures
SEC enforcement actions involving Reg D token offerings have targeted several common compliance failures:
Inadequate accredited investor verification. The SEC has taken action against issuers who relied solely on self-certification checkboxes rather than conducting proper verification. Self-certification is sufficient for 506(b) but explicitly insufficient for 506(c).
Failure to file Form D. While late or missing Form D filing does not automatically disqualify the exemption, it triggers SEC inquiry and can result in state enforcement actions. The SEC views failure to file as an indicator of broader compliance deficiencies.
Bad actor violations. Issuers who fail to screen covered persons (directors, officers, promoters, compensated solicitors) for disqualifying events under Rule 506(d) risk losing the entire exemption — with liability for rescission to all investors.
Misleading general solicitation. Marketing materials that make false claims about token performance, guaranteed returns, or misleading technology claims violate antifraud provisions regardless of whether the exemption’s structural requirements are satisfied.
Smart Contract and Platform Architecture
The technical infrastructure supporting a 506(c) token offering must integrate compliance at multiple levels:
Issuance layer. Platforms like Securitize, Polymath, and Republic provide issuance infrastructure that connects investor onboarding (KYC, accredited verification) with token minting. The investor’s verified wallet address is added to the smart contract’s compliance whitelist only after verification is complete.
Transfer agent integration. The transfer agent’s official ownership registry must synchronize with on-chain token records. Interoperability standards like ERC-3643 include transfer agent notification functions that automatically update the registry when on-chain transfers occur.
Settlement infrastructure. 506(c) tokens settle through ATS platform DvP mechanisms. T+0 atomic settlement eliminates counterparty risk and reduces the cost of secondary market trading — a structural advantage over traditional private placement securities that settle through manual processes.
Custody architecture. Investor tokens must be held by a qualified custodian or through SPBD arrangements. The custody solution must integrate with the ATS platform’s order execution system.
State Blue Sky Compliance
Section 18 of the Securities Act preempts state registration for 506 offerings, but states retain authority to require notice filings and fees. Token issuers must file in each state where investors reside, typically within 15 days of the first sale to a resident of that state. Filing fees range from $0 to $750 per state, with aggregate costs of $5,000-$15,000 for nationwide offerings.
506(c) Market Data
Regulation D 506(c) is the dominant exemption for security token offerings in the United States:
Filing volume. Form D filings referencing digital asset securities under Rule 506(c) increased from approximately 45 in 2020 to over 180 in 2025. These filings represent the broadest cross-section of the security token market, from real estate tokens to tokenized funds to platform equity tokens.
Offering size distribution. The median 506(c) security token offering seeks $25 million, with a range from $1 million (minimum viable offerings) to $500 million+ (institutional tokenization projects). BlackRock’s BUIDL fund and similar institutional products use 506(c) for initial distribution to accredited investors.
Sector concentration. Real estate tokenization represents the largest segment (approximately 35% of filings), followed by venture/equity tokens (25%), fund interests (20%), debt tokens (15%), and other (5%).
Geographic distribution. Token issuers are concentrated in New York, California, Florida, and Texas — reflecting both issuer locations and investor concentrations. State blue sky notice filings are required in each state where investors reside.
Secondary market growth. The secondary market for 506(c) security tokens has expanded significantly, with platforms including tZERO, INX, and Securitize Markets providing regulated trading venues. Aggregate secondary market volume for 506(c) tokens reached approximately $2.8 billion in 2025, up from $1.2 billion in 2023. The growth reflects both increased issuance volume and the maturation of tokens past their Rule 144 holding periods, making them available for secondary trading among accredited investors.
Verification cost trends. The cost of accredited investor verification has declined as platforms integrate automated verification services. In 2020, the average verification cost was $75-$150 per investor; by 2025, integrated platform verification through Securitize and similar services has reduced this to $50-$100, with further cost reductions expected as blockchain-based credential verification systems mature.
For token issuers evaluating their exemption strategy, 506(c) offers the most flexible framework for publicly marketed offerings to accredited investors. For offerings requiring broader retail access, consider Regulation A+. For international components, Regulation S provides a complementary offshore exemption, subject to integration analysis. Our entity profiles of major platforms provide implementation guidance for each approach. For the Howey test analysis that determines whether 506(c) is required, see our framework. For the offering timeline incorporating all 506(c) compliance steps, see our checklist. For FINRA rules applicable to broker-dealers distributing 506(c) tokens, see our regulatory guide. For the SEC’s official 506(c) guidance, see SEC Rule 506(c) Overview.