What Is Securities Law?

Securities law is the rulebook for raising money from investors. If you’re a founder selling stock, a SAFE, or a convertible note, you’re playing in securities-law territory whether you mean to or not. Knowing the basics early can save you from expensive mistakes later.

Quick answer

Securities law is a mix of federal and state laws meant to protect investors and promote fair, orderly capital markets. The practical takeaway for founders is simple: if you’re offering or selling a security, you generally must either register the offering with the SEC or fit within an exemption from registration.

Which exemption you use drives a lot of downstream decisions: who can invest, whether you can publicly market the round, what you have to file, and how much ongoing process you’re signing up for.

What is a “security”?

In startup fundraising, “security” should be read broadly. Common examples include:

• Equity (common stock, preferred stock)
• SAFEs and other equity-linked contracts
• Convertible notes
• Some revenue-share or profit-sharing arrangements (depends on structure)

There are multiple legal definitions of “security,” and whether something is a security can depend on the facts. If you’re inventing a new fundraising instrument (especially anything token-like or with “community ownership” vibes), get securities counsel involved early. The labels don’t control; the substance does.

Registration vs. exemption (the fork in the road)

SEC registration (a public offering) is usually too slow and expensive for early-stage companies. So most startups raise under an exemption. An exemption is not a loophole; it’s a defined legal pathway with its own rules.

Two important clarifications that founders often miss:

• “Exempt from registration” does not mean “exempt from securities law.” Anti-fraud rules still apply, and you still need to follow the exemption’s conditions.
• State “blue sky” laws can matter depending on the exemption you use. Some exemptions preempt a lot of state-level registration requirements, but states may still require notice filings or fees.

The key exemptions founders run into (and what to know about each)

The details vary based on your facts, but here are the big buckets most venture-backed (and venture-adjacent) startups use.

Exemption	Who can invest	Raise limit	Big “gotcha” to understand
Regulation Crowdfunding (Reg CF)	Generally anyone (accredited and non-accredited), subject to investor limits	There is an SEC-set cap per 12-month period (check the current number; it has changed in recent years)	Must be conducted through an SEC-registered funding portal or broker-dealer, with specific disclosure and filing requirements
Regulation D, Rule 506(b)	Accredited investors, plus up to 35 non-accredited but sophisticated investors	No federal cap	You generally can’t use general solicitation/advertising; you also need to be careful about what you say publicly while raising
Regulation D, Rule 506(c)	Accredited investors only	No federal cap	You can generally solicit publicly, but you must take reasonable steps to verify accredited status (not just “check a box”)
Regulation A (often called “Reg A+”)	Generally anyone, depending on the tier and offering structure	There are SEC-set caps per 12-month period by tier	More like a “mini public offering”: more time, more cost, more disclosure, and often ongoing reporting
Regulation S	Non-U.S. investors in offshore transactions	No federal cap	Not a free pass for U.S. marketing; you need to structure it carefully to avoid “directed selling efforts” into the U.S.

Who enforces securities law?

Three institutions come up a lot in startup fundraising:

• The SEC regulates federal securities laws, including registration requirements and many exemptions.
• State securities regulators enforce state “blue sky” laws. Even when federal law preempts state registration, states may still have notice-filing authority and anti-fraud enforcement.
• FINRA oversees broker-dealers and funding portals, including conduct rules relevant to how offerings are marketed and run.

Why founders should care (even if you “just raised a little money”)

If you raise in a way that doesn’t comply with securities law, the consequences can be brutal and distracting:

• Investors may have rescission rights in some cases (they can demand their money back).
• Regulators can bring enforcement actions, which can include penalties and orders to stop selling.
• Future financings and acquisitions can get derailed during diligence when your earlier round doesn’t “paper” correctly.
• In extreme situations involving fraud or willful misconduct, there can be criminal exposure.

The goal isn’t to be paranoid. It’s to pick the right exemption, run a clean process, and avoid creating a future landmine for your company.

Examples: how this plays out in real fundraising

Scenario 1: “We want to tweet the round and let anyone invest.”

You’re usually looking at Reg CF or a 506(c) strategy. The legal difference is huge: Reg CF is designed for broad retail participation but comes with portal requirements and specific disclosures; 506(c) allows general solicitation but only accredited investors can invest and their status must be verified.

Scenario 2: “We’re raising from a few angels and don’t want a public campaign.”

Many founders use Rule 506(b) for a more private raise, especially if they’re limiting outreach and primarily taking accredited investors. Whether you can include any non-accredited investors depends on the exemption’s conditions and your specific facts.

Scenario 3: “We have international investors.”

You may be combining a U.S. exemption (like Reg D or Reg CF) with an offshore component (often discussed under Regulation S). This can get technical quickly, and counsel should sanity-check the plan.

Frequently asked questions

Is a SAFE a security?

Generally, yes. SAFEs are typically treated as securities, which means you need to offer and sell them under a valid exemption (or registration).

Can I sell tokens under securities law?

Some tokens may be securities, and whether a particular token is a security is highly fact-specific. If a token is a security, the offering needs to comply with securities laws like any other security. Talk to a securities lawyer before you sell anything token-like.

Does Wefunder handle securities compliance?

Wefunder operates as an SEC-registered funding portal for Regulation Crowdfunding offerings. A funding portal plays a defined role under Reg CF, but it doesn’t replace your need for legal counsel on company-specific questions (like your cap table, offering terms, or what you can safely say in marketing).

Bottom line

Securities law isn’t optional once you take investor money. For most startups, the job is to choose the right exemption, follow its rules, and run a process you won’t regret in diligence later. When you’re unsure whether something is a security or which exemption fits, that’s not a “Google it” moment—it’s a talk-to-counsel moment.