The SEC’s Division of Corporation Finance reportedly added three questions to its crypto FAQ on governance, network control and decentralization. The key distinction is simple: a token may work as designed while a person or group still holds significant power over the network around it.
- Shared governance alone may not amount to centralized control.
- Unilateral powers over access, code or network operations can matter.
- The FAQ’s reported date and exact wording remain unconfirmed.
What the SEC FAQ reportedly says
Crypto.news reported that the Division added questions 1.4 through 1.6 to its crypto asset FAQ, building on the SEC’s March 17, 2026, interpretation of how federal securities laws apply to crypto assets.
The reported FAQ update is dated Nov. 2, but the year is not specified. That matters because the SEC’s March interpretation is dated March 17, 2026. The FAQ update would have to come later to expand on it. The SEC’s March announcement confirms the interpretation, but not the FAQ additions, their date or their wording.
The reported questions cover three issues: whether governance participants act together as a controlling group, which powers may amount to oversight of network participation, and how a token’s functionality differs from a network’s decentralization. The exact FAQ text has not been confirmed here, so the details below summarize the reported guidance. They should not be read as a verified SEC determination.
Governance participation is not automatically control
According to the summary, question 1.4 says unaffiliated participants generally would not be treated as a group just because they take part in governance, as long as they have no separate agreement or understanding to act together.
That does not give projects a blanket pass for calling themselves “community governed.” The reported test looks at formal arrangements, informal coordination and delegation. Even if participants count as a group, the summary says they would also need operational, economic or voting control to meet the definition of a central party.
The reported guidance describes qualifying governance as transparent and rules-based. Proposals, deliberations, votes and implementation would be publicly accessible, and authority would not be concentrated among affiliated participants or through delegation. The summary also says this analysis applies only to digital-commodity classification under Section III of the March interpretation. It does not cover other securities-law provisions on groups, including the Exchange Act’s definition of an exchange.
That limit matters. A view on one classification question is not a universal ruling on a project’s legal status. Without the FAQ text, the precise meaning and application of these qualifications remain unclear.
Who can change the rules, or restrict access?
The reported summary of question 1.5 looks at powers that a person or entity can exercise unilaterally. Examples include granting or limiting access, changing voting procedures, choosing who validates transactions, modifying code, reversing transactions and revoking access.
The summary contrasts those powers with material operations handled automatically by rules-based code, without discretionary intervention. Automation can limit a decision-maker’s role, but code alone does not prove a system is decentralized. People or organizations may still control upgrades, access or other consequential decisions in practice.
A decentralized underlying blockchain also does not necessarily make every application built on it decentralized. The reported guidance says an association or foundation could control a separate crypto system, including by setting operating parameters for applications on an underlying network. The key question is who holds and can exercise authority, not what a project calls its governance model.
Functionality and decentralization are different questions
As reported, question 1.6 separates whether a token works from who controls the network. Functionality is about whether the native asset can be used according to its programmed utility. Decentralization is about whether the system operates without a person, entity or coordinated group holding operational, economic or voting control.
A token can perform its intended function without showing that control of the network is widely distributed. And people’s participation in governance does not, on its own, establish centralized control. The authority structure and the circumstances of the particular system would matter.
The SEC’s March 17, 2026, interpretation established a taxonomy that includes digital commodities, digital collectibles, digital tools, stablecoins and digital securities. It also separates an asset’s classification from the question of whether transactions involving it form an investment contract.
When it announced the interpretation, the SEC said the CFTC joined it and would administer the Commodity Exchange Act consistently with it. SEC Chair Paul Atkins called the interpretation an important bridge while Congress worked on a statutory market-structure framework.
Guidance is not the same as legislation
The reported FAQ additions have been discussed alongside the CLARITY Act, but they are not the same thing. The proposed bill text addresses issues such as issuer disclosures, blockchain-system maturity and intermediary obligations. Those provisions differ from the reported FAQ’s analysis of a central party, and proposed legislation is not law.
The SEC’s March announcement said its interpretation complemented Congress’s work on a statutory framework. A staff FAQ, if the reported description is accurate, would be a different kind of guidance. It is said to express staff views, create no new obligations and carry no legal force. That disclaimer should be checked against the FAQ itself before being treated as confirmed.
Even nonbinding guidance can affect how companies assess risk, but it does not settle a project’s legal status or provide a guaranteed safe harbor. Staff guidance can also be revised, unlike a statute. Whether the reported additions ease pressure on lawmakers to pass the CLARITY Act, or make legislation more urgent, remains an open question. Neither effect is established.
Key questions and answers
-
Does joining crypto governance automatically make someone part of a controlling group?
Not according to the reported FAQ summary. Affiliation, coordination, delegation and actual control would all matter. The exact SEC wording has not been confirmed.
-
What powers could indicate centralized oversight?
The reported examples include unilateral authority over access, voting, validators, code, transaction reversals or revoking participation.
-
Does a functional token prove its network is decentralized?
No. Functionality is about whether the token performs its programmed role. Decentralization is about who can control how the system operates.
-
Does the reported FAQ settle a project’s legal status?
No. The reported tests depend on context, and token classification remains separate from whether particular transactions form an investment contract.
The practical lesson is to look at who holds consequential powers and whether they can exercise them. Governance labels and a token’s utility are not enough. The reported FAQ may offer a useful framework, but its date, wording and legal-status disclaimer need confirmation before anyone treats it as a settled SEC position.
