Alex is Sprintlaw’s co-founder and principal lawyer. Alex previously worked at a top-tier firm as a lawyer specialising in technology and media contracts, and founded a digital agency which he sold in 2015.
If you’ve been exploring ways to raise capital using blockchain, you’ve probably heard the term STO. It’s a fast-evolving space and, for founders in Australia, the legal differences between an STO, ICO and a traditional raise really matter.
In this guide, we’ll explain what a Security Token Offering (STO) is, how it compares to other capital-raising options, and the key Australian legal requirements to consider before you launch. We’ll also walk through a practical setup roadmap and the core documents you’ll likely need so you can move forward with confidence.
What Is An STO (Security Token Offering)?
A Security Token Offering (STO) is a way for a business to raise funds by issuing digital tokens on a blockchain that represent a regulated “security” interest - for example, equity, debt, revenue share or a right to future dividends.
Unlike utility tokens (which are intended to provide access to a product or service), security tokens give holders investment-style rights. Because of this, they are generally regulated under Australia’s Corporations Act 2001 (Cth) and associated financial services laws.
Put simply: if a token gives investors a financial return or ownership-type rights, there’s a strong chance it will be treated as a security. That triggers disclosure, licensing and other compliance obligations that you need to address before offering tokens to the public in Australia.
STO vs ICO vs IPO: What’s The Difference?
These acronyms sound similar but carry very different legal implications and investor expectations.
- STO (Security Token Offering): Digital tokens that confer securities-like rights (e.g. equity or debt). Requires compliance with the Corporations Act, and often involves offering tokens to sophisticated investors or under specific disclosure exemptions.
- ICO (Initial Coin Offering): Typically offers “utility” tokens meant to be used on a platform. However, many tokens marketed as utilities have been found to be financial products in substance. If your token has investment characteristics, regulators may treat your ICO like an STO.
- IPO (Initial Public Offering): A traditional share offering on a public stock exchange. It requires a prospectus, extensive due diligence and listing rules compliance, which is costly and time-consuming but well-established.
Practically, STOs sit between ICOs and IPOs: you’re leveraging blockchain to issue and manage securities, but you still need to meet the same underlying legal requirements that apply to securities offerings in Australia.
Are STOs Legal In Australia?
Yes, but only when structured compliantly. In Australia, security token offerings are subject to the Corporations Act and Australian Securities and Investments Commission (ASIC) oversight.
Whether your token is a “security” depends on the token’s rights and how it is offered. Common triggers include tokens that represent shares, interests in a managed investment scheme, debt instruments or derivatives. If your token falls into these categories, the offering will usually be treated like any other offer of securities.
Key compliance areas typically include:
- Disclosure obligations: You may need a prospectus or other disclosure document unless an exemption applies (for example, offers to professional investors, offers to sophisticated investors, or the small-scale personal offer exemption). See how these carve-outs operate under section 708 of the Corporations Act.
- Financial services licensing (AFSL): Issuing or dealing in security tokens can be a “financial service”. You may need an Australian Financial Services Licence (AFSL) yourself, or to work with an appropriately licensed intermediary.
- Marketing and consumer law: Your promotions must be clear, accurate and not misleading. The Australian Consumer Law applies to your advertising claims, even in a sophisticated crypto context.
- AML/CTF and KYC: Anti-money laundering and counter-terrorism financing obligations often apply to token offers and exchanges. You’ll need appropriate KYC checks and record-keeping.
- Privacy: If you collect personal information (e.g. for KYC, waitlists, or investor relations), you’ll need a compliant Privacy Policy and processes aligned with Australia’s Privacy Act.
Bottom line: an STO is not a shortcut around securities law. It’s a technology-forward way to run a regulated raise - and getting the legal framework right is essential.
Planning An STO: A Practical Roadmap
You don’t need to be a blockchain engineer to plan an STO, but you do need a clear strategy, a compliant structure and the right documents. Here’s a practical sequence to guide your planning.
1) Define The Token And Its Rights
Start by clearly defining what your token represents. Is it equity-like (shares or share-like rights)? Debt-like (a tokenised note)? A revenue share? The precise rights will determine your legal obligations and investor appeal.
Document the token’s economic terms, governance rights, transferability, vesting or lock-ups, and any conversion mechanics (for example, a future right to equity). This step underpins your disclosure materials and contracts later.
2) Map Your Investor Audience And Offer Pathway
Will you offer tokens to wholesale investors only, or a mix of wholesale and retail? Your answer shapes the disclosure and licensing pathway. Many early-stage businesses target wholesale investors (professional and sophisticated) so they can rely on Corporations Act exemptions like section 708.
If retail participation is essential, expect more stringent disclosure and compliance requirements. Plan for the level of due diligence and investor protection that is appropriate for your audience.
3) Choose Your Business Structure And Governance
Most STO issuers operate through a company. A company is a separate legal entity that can issue securities, enter contracts and limit personal liability for founders.
- Company setup: If you haven’t incorporated, consider a formal company set up with a fit-for-purpose Company Constitution.
- Founder arrangements: If there are multiple founders, align expectations early with a Shareholders Agreement (decision-making, share vesting, exits, and dispute processes).
- Corporate actions: Ensure board approvals and shareholder resolutions authorise your STO. Good corporate hygiene builds trust with investors.
4) Assemble Your Compliance Stack
Identify the licences and authorisations you’ll need (or partners you’ll rely on). Decide who will perform KYC/AML checks, how investor onboarding will work, and where records will be stored. Integrate privacy and cybersecurity from day one.
At this stage, draft your offer materials and investor terms, prepare your website or portal, and lock in the third-party providers you’ll use for payments, custody or token issuance.
5) Prepare The Key Documents
Depending on your pathway, you might prepare an offer document for wholesale investors (for example, an information memorandum with appropriate disclaimers) or a formal disclosure document if required for retail. Contracts like a Share Subscription Agreement and platform terms should align with your token’s rights and your compliance position.
6) Launch, Communicate And Keep Records
When you go live, keep communications consistent with your offer documents. Maintain a clear audit trail of investor onboarding, statements provided to investors, funds received and tokens issued. Ongoing reporting and updates will help you meet legal obligations and build investor trust.
What Laws Do I Need To Follow For An STO?
Every STO is different, but most Australian offerings touch the same core legal areas. Here’s what founders typically need to cover.
Corporations Act And Disclosure
If your token is a security (or another financial product), you’ll need to either issue a compliant disclosure document or qualify for an exemption. Common options include offers to sophisticated or professional investors, or small-scale personal offers. A careful analysis under section 708 is essential to avoid unlawful fundraising.
Even if you use an exemption, investors should still receive accurate, complete information about risks, rights and how funds will be used. Many issuers use an information memorandum supported by an Information Memorandum Disclaimer to set expectations and manage risk.
Financial Services Licensing (AFSL)
Issuing, arranging or providing advice in relation to security tokens can be a financial service. You may need an AFSL or to partner with an AFSL holder. Consider whether your activities amount to dealing, advising or operating a managed investment scheme. This is a critical scoping exercise before you market your STO.
Consumer Law And Advertising
All promotional materials must be clear and not misleading. Avoid overstating returns or downplaying risk, and make sure terms like “utility” vs “security” reflect the token’s real features. The Australian Consumer Law applies to websites, social media, videos and pitch decks.
Privacy And Data Handling
Investor onboarding and KYC means you’ll collect sensitive personal information. You’ll need a clear and prominent Privacy Policy, and data handling practices that align with the Privacy Act (collection notices, secure storage, access controls and breach response planning).
Intellectual Property And Branding
Secure your brand before launch. Registering your brand name or logo as a trade mark can reduce the risk of copycats and investor confusion. Consider early trade mark filing via Register Your Trade Mark so your token and platform branding are protected.
Website And Platform Terms
If investors interact through your website or portal, your legal terms must match your offer documents. Clear Website Terms and Conditions, disclaimers and risk warnings set expectations and reduce disputes. Keep these aligned with your token terms and disclosure document so there’s no inconsistency.
Which Legal Documents Will I Need For An STO?
The exact paperwork depends on your offer structure, but many Australian STOs include some or all of the following.
- Information Memorandum + Disclaimer: Summarises the offer for wholesale investors, the token’s rights, risks and use of funds, supported by an appropriate Information Memorandum Disclaimer.
- Disclosure Document (if required): If you’re making a retail offer, you may need a compliant disclosure document (e.g. prospectus or PDS) tailored to the token’s structure.
- Token/Investor Terms: Sets out the token rights (dividends, revenue share, governance), transfer restrictions, vesting and lock-ups, dispute resolution and jurisdiction.
- Share Subscription Agreement: If tokens convert into shares or accompany a share issue, use a Share Subscription Agreement aligned with the token mechanics.
- Company Documents: A bespoke Company Constitution and board/shareholder resolutions to authorise the issue and set cap table rules for tokenised securities.
- Shareholders Agreement: If multiple founders or early investors are involved, a Shareholders Agreement covers decision-making, exits, pre-emption and restrictions on transfer.
- Website Terms & Privacy: Investor-facing Website Terms and Conditions and a compliant Privacy Policy, especially where onboarding and KYC happen online.
- Brand Protection: Early trade mark filing via Register Your Trade Mark to protect your token and platform identity.
- Capital-Raising Documents: Depending on your path, you might also prepare a Term Sheet and broader capital raising suite to keep negotiations on track.
You won’t necessarily need every document on this list, but getting the core suite right from day one will reduce risk and speed up your raise.
Common STO Pitfalls (And How To Avoid Them)
Because STOs mix cutting-edge tech with established law, some pitfalls are predictable. Here are the big ones to watch for.
- Assuming a token is a “utility” when it looks like a security: If the token’s value depends on the issuer’s efforts or it offers investor-style returns, treat it as a security and plan accordingly.
- Inconsistent documents and marketing: Your offer document, website, pitch deck and token terms must tell the same story. Even small discrepancies can create legal and reputational risk.
- Underestimating licensing needs: Map out whether you’re “dealing”, “advising” or operating a scheme. Consider whether you or your partners need an AFSL before you start marketing.
- Weak investor onboarding: Keep clean records of who you offered to, why they qualify (e.g. sophisticated), and the exact documents provided. This helps evidence reliance on exemptions like section 708.
- Neglecting privacy and cybersecurity: Investor data and KYC details are sensitive. A robust privacy posture and breach response plan protect investors and your brand.
Step-By-Step: Bringing Your STO To Life
Here’s a condensed checklist you can adapt to your project.
- Define token rights (equity/debt/revenue share) and economics.
- Decide your investor audience (wholesale vs retail) and offer pathway under section 708 or other frameworks.
- Set up or refine your company structure, governance and approvals.
- Scope AFSL and AML/CTF obligations; line up licensed partners if needed.
- Draft disclosure materials, token terms, and onboarding flows (website terms, privacy, KYC).
- Protect your branding (trade marks) and align your communications.
- Launch to the right audience, keep compliant records, and maintain clear investor updates.
Key Takeaways
- An STO is a capital raise using blockchain-based tokens that function like securities - which means Australia’s securities laws apply.
- Your legal pathway depends on the token’s rights and your investor audience; many early-stage issuers rely on wholesale investor exemptions under section 708.
- Plan your structure, licensing and disclosures early; treat your offer documents, token terms and website as a single, consistent source of truth.
- Core documents typically include an information memorandum (or disclosure document), investor/token terms, a Share Subscription Agreement, company approvals, website terms and a Privacy Policy.
- Protect your brand and investor data from day one, and keep meticulous records of onboarding and communications.
- Getting tailored legal support early makes STOs smoother, safer and more attractive to serious investors.
If you’d like a consultation on planning or documenting your STO in Australia, you can reach us at 1800 730 617 or team@sprintlaw.com.au for a free, no-obligations chat.








