Regulation 101: Reg D, Reg S, Reg A+, Reg CF

The core U.S. exemptions and what "accredited investor" actually means.

Every discussion of security token offerings, private placements, or U.S. capital raising eventually collides with the same four labels: Reg D, Reg S, Reg A+, and Reg CF. They sound bureaucratic, but they are the actual plumbing that determines who can invest in what, how much can be raised, and what an issuer has to disclose.

This article is a plain-English tour of those four exemptions — where they come from, when to use each, and what they mean for both issuers and investors. It also unpacks a term almost everyone in this world hears and few can define precisely: accredited investor.

None of this replaces securities counsel. But if you can hold these frameworks in your head, most of the rest of U.S. capital-markets vocabulary starts to make sense.

Why Exemptions Exist in the First Place

The U.S. Securities Act of 1933 begins with a very simple default rule: any offer or sale of a security must be registered with the Securities and Exchange Commission. Registration is what produces the familiar S-1, roadshow, and IPO process — comprehensive disclosure, audited financials, and public trading.

Registration is expensive. Really expensive. For a small or growth-stage company, or for a private real-estate deal, the cost and delay of a full IPO would kill the raise. So the same 1933 Act — plus decades of SEC rulemaking on top of it — carves out exemptions that let issuers sell securities without full registration, in exchange for accepting limits on who can buy, how much can be raised, how the offering can be marketed, and how the securities can be resold.

The four exemptions covered here are the workhorses of modern private markets — and, increasingly, of tokenized securities:

• Reg D — private placements to (mostly) sophisticated investors.
• Reg S — offerings sold outside the United States.
• Reg A+ — a "mini-IPO" for retail-eligible offerings up to $75M.
• Reg CF — regulated crowdfunding for small raises with broad retail access.

Each one is a package deal: relax one constraint (say, allowing retail investors), tighten another (say, disclosure and caps). Understanding that tradeoff is the whole point.

Regulation D — The Private Placement Workhorse

Reg D is, by a wide margin, the most-used capital-raising exemption in the United States. Well over a trillion dollars is raised under it each year — more than the public IPO market. Almost every venture round, private real estate deal, hedge fund launch, and tokenized private security in the U.S. uses one of its rules.

Reg D contains three main rules; the two that matter for almost everyone are Rule 506(b) and Rule 506(c).

Rule 506(b): the quiet private placement

• Who can invest: an unlimited number of accredited investors, plus up to 35 sophisticated non-accredited investors (in practice, most issuers avoid non-accredited investors entirely under 506(b) because they trigger extra disclosure obligations).
• How much can be raised: unlimited.
• Marketing: no general solicitation. Issuers may only offer to people with whom they (or their agents) have a pre-existing, substantive relationship. That means no public ads, no open web pages promoting the deal, no pitching to strangers at conferences.
• Verification: the issuer can reasonably rely on the investor self-certifying accredited status.
• Resale: the securities are restricted — no public resale for at least six or twelve months, and typically only via another exemption (Rule 144, another private sale, etc.).
• Filing: a Form D filed with the SEC within 15 days of the first sale, plus state "blue sky" notice filings.

506(b) is what most traditional VC rounds and boutique private funds still use. It is quiet, flexible, and battle-tested.

Rule 506(c): the publicly-marketed private placement

Introduced by the JOBS Act, 506(c) traded one of 506(b)'s constraints for another.

• Who can invest: accredited investors only — no non-accredited allowed.
• How much can be raised: unlimited.
• Marketing: general solicitation is permitted. Public websites, social media, conference pitches, email blasts — all fair game.
• Verification: the issuer must take reasonable steps to verify accredited status. Self-certification is not enough; typical evidence is tax returns, brokerage statements, or a letter from a CPA, attorney, or registered broker-dealer.
• Resale and filing: same as 506(b) — restricted securities, Form D, state notices.

506(c) is the default choice for security token offerings that want to build a public marketing funnel while still limiting the buyer pool to accredited investors. The verification step is the biggest operational lift.

The bottom line on Reg D

If you see a private U.S. offering — from a small SPV to a large private fund — it is almost certainly relying on 506(b) or 506(c). The choice between them is a marketing question: can you build the book privately, or do you need to advertise? If the former, 506(b) is simpler. If the latter, 506(c) is the price of being allowed to publicize.

Regulation S — The Offshore Companion

Reg S is not really a stand-alone raise so much as the international companion to Reg D. It provides a safe harbor for offers and sales made outside the United States, so an issuer can sell to non-U.S. investors without triggering U.S. registration.

• Who can invest: non-U.S. persons only. "U.S. person" is defined broadly and includes U.S. residents, U.S. entities, and certain accounts managed for U.S. persons — regardless of nationality.
• Where the deal must happen: the offer and sale must occur in an offshore transaction, and there must be no "directed selling efforts" into the United States.
• How much can be raised: no cap.
• Resale into the U.S.: restricted for a distribution compliance period (typically 40 days for debt and reporting-company equity, up to one year for equity of non-reporting issuers). During that window, the security cannot be sold to a U.S. person.

Nearly every serious tokenized offering that targets a global audience is structured as a parallel Reg D / Reg S deal: the same token is offered to U.S. accredited investors under Reg D (usually 506(c)) and to non-U.S. investors under Reg S, with the smart contract enforcing the boundary — blocking U.S. wallets from Reg S tranches during the lock-up, and vice versa.

The takeaway: Reg S is what lets a U.S.-domiciled issuer sell to Europe, Asia, Latin America, and the Middle East without dragging the entire offering into U.S. registration.

Regulation A+ — The "Mini-IPO"

Regulation A, upgraded by the JOBS Act into what everyone now calls Reg A+, sits between a private placement and a full IPO. It is designed for companies that want to raise meaningful capital from the general public, including retail investors, but without going through the cost and complexity of an S-1.

Reg A+ has two tiers:

• Tier 1 — up to $20 million in a 12-month period. Requires SEC qualification and coordinated state-level review.
• Tier 2 — up to $75 million in a 12-month period. Requires SEC qualification but preempts state blue sky review, which is why almost all serious Reg A+ deals use Tier 2.

The important features:

• Who can invest: the general public — no accreditation requirement. Non-accredited retail investors in a Tier 2 offering are subject to an investment cap: no more than 10% of the greater of their annual income or net worth per year.
• Disclosure: the issuer must file an offering circular (Form 1-A) with the SEC and go through a formal qualification process, then provide ongoing reports (annual, semi-annual, and current event reports).
• Testing the waters: issuers may "test the waters" — publicly gauge investor interest — both before and after filing, subject to specific rules.
• Marketing: general solicitation is fully permitted.
• Resale: securities are not restricted — they can be freely traded after issuance, which is one reason Reg A+ is attractive for issuers that want secondary liquidity for retail investors.

Reg A+ is the most retail-friendly regulated raise short of a full IPO, and it has been used for several high-profile tokenized issuances precisely because the resulting tokens can trade freely on regulated ATSs without a Rule 144 holding period. The tradeoff is real disclosure work: audited financials for Tier 2, SEC review, and ongoing reporting obligations that look a lot like being a public company.

Regulation CF — Regulated Crowdfunding

Regulation Crowdfunding (Reg CF) is the most retail-native of the four exemptions. It was created by the JOBS Act specifically to let small businesses and startups raise from ordinary people, online, in modest amounts.

• Who can invest: anyone, subject to per-investor caps that scale with income and net worth. For most retail investors this means a low-to-moderate annual cap across all Reg CF investments.
• How much can be raised: up to $5 million in a 12-month period.
• Where it must happen: exclusively through a registered funding portal or broker-dealer. Issuers cannot run a Reg CF offering directly from their own website — the deal has to be hosted on a regulated intermediary.
• Disclosure: a Form C with the SEC covering business description, use of proceeds, capital structure, financial condition, and financial statements (reviewed or audited depending on raise size).
• Marketing: limited advertising outside the funding portal — you can point people to the portal listing, but the substantive offering happens there.
• Resale: restricted for one year, with narrow exceptions (sale to accredited investors, back to the issuer, or to family members).

Reg CF is the right tool for early-stage community capital raises, product-linked crowdfunding, and small tokenized issues that need broad retail participation without the cost of a Reg A+. It is not the right tool for institutional capital or for large private-market deals — the $5M cap and portal requirement close that door.

What "Accredited Investor" Actually Means

The single most-used and most-misunderstood term in this whole framework is accredited investor. It is the gate for most private placements — including Reg D — and it defines who is presumed able to fend for themselves in a lightly-disclosed private deal.

The definition lives in Rule 501 of Regulation D and has expanded over time. Today, an individual can qualify in any of the following ways:

The financial tests

• Income test. Individual income above $200,000 in each of the two most recent years (or $300,000 jointly with a spouse or spousal equivalent), with a reasonable expectation of the same in the current year.
• Net worth test. Net worth of more than $1,000,000, individually or jointly, excluding the value of the primary residence (mortgages on the primary residence are also generally excluded unless the loan balance exceeds the home's value).

The professional-knowledge test

Added by the SEC in 2020, this was a significant modernization: certain professional certifications and designations now qualify a person as accredited on the basis of demonstrated financial sophistication, regardless of wealth. Currently the qualifying credentials include the Series 7, Series 65, and Series 82 licenses held in good standing.

The insider test

Directors, executive officers, and general partners of the issuer are automatically accredited with respect to that issuer.

The entity tests

Entities — funds, corporations, trusts, family offices — qualify through a variety of rules, typically involving assets under management above $5M, all-accredited ownership, or status as a regulated institution (banks, insurance companies, registered investment advisers, etc.).

Why the definition matters so much

Being accredited is not a moral judgment or a certificate of intelligence. It is a legal presumption that the person has the resources to absorb losses and the sophistication (or access to advisors) to evaluate a private deal without SEC-mandated disclosure. That presumption is what unlocks Reg D — which is what unlocks the majority of private capital markets. Change the definition and you change who has access to a huge slice of the investable universe. That is why the accredited definition is a perennial public-policy debate.

For issuers, the practical impact is process: under 506(c) you must verify accreditation (not just accept the investor's word), and under most tokenized offerings the KYC/onboarding platform is what actually performs and documents that check before whitelisting the investor's wallet.

For investors, the practical impact is access: without accredited status, most private tokenized deals are simply closed to you. Reg A+ and Reg CF are the two main doorways in — with the corresponding investment caps.

Side-by-Side: The Four Exemptions at a Glance

The right exemption is a function of who you want as investors, how much you need to raise, how loudly you can market, and how much disclosure and ongoing reporting you can support. There is rarely one correct answer — but the wrong answer is expensive to unwind.

How Tokenization Interacts With These Rules

None of these exemptions changed when securities went on-chain — but tokenization did change how issuers enforce them.

• Whitelisting enforces investor eligibility at the smart-contract level. A wallet that hasn't cleared KYC and accreditation cannot receive tokens at all. This is how a single token can support parallel Reg D (accredited U.S.) and Reg S (offshore) tranches without leakage.
• Lock-ups are enforced by code. A Reg D 6- or 12-month restriction, a Reg S 40-day compliance period, or a Reg CF one-year hold is written into the token and automatically prevents non-compliant transfers.
• Transfer restrictions persist forever. Even years after issuance, a resale to an ineligible buyer will simply fail on-chain — closing the compliance gap that manual private-market transfers historically had to bridge with legal opinions and paperwork.
• Reporting becomes easier. Because the register lives on-chain, Form D filings, Reg A+ ongoing reports, and Reg CF disclosures can be generated from live data rather than reconciled after the fact.

This is what makes the U.S. exemption framework unusually well-suited to tokenized securities: the rules were already about who can buy, how they must be verified, and when they can resell — questions a smart contract is uniquely good at answering.

Common Misconceptions

A handful of misunderstandings show up over and over. Worth naming them explicitly:

• "Reg D means retail can't invest at all." Not quite. 506(b) technically allows up to 35 non-accredited sophisticated investors. Most issuers avoid them because of the extra disclosure, but the door is not fully closed by rule.
• "Reg S means anywhere but the U.S." Reg S is defined by U.S. person status, not geography. A U.S. citizen living abroad can still be a U.S. person; a foreign national trust with a U.S. beneficiary can be a U.S. person. Get this wrong and the whole tranche is at risk.
• "Accredited just means rich." The income and net-worth tests are the most common paths, but the professional-license path (Series 7/65/82) is a real, growing route — and matters a lot for younger financial professionals who are sophisticated but not yet wealthy.
• "Reg CF is like Kickstarter." No. Kickstarter is rewards-based crowdfunding — you pre-buy a product. Reg CF is securities crowdfunding — you are buying a real financial instrument with the associated rights and risks. The confusion still causes real harm.
• "Reg A+ is a full IPO." Reg A+ is a public offering, but not a listing. Tier 2 issuers have to disclose and report, but they are not automatically listed on Nasdaq or NYSE — many trade OTC or on regulated ATSs, and increasingly on security-token venues.

Where This Fits in the Bigger Picture

For anyone building or investing in tokenized securities, these four exemptions are the U.S. half of the map. The other half — MiCA and prospectus regimes in the EU, the DLT Act in Switzerland, the SFA in Singapore, VARA rules in the UAE — will get their own treatment in the series.

The reason to learn the U.S. framework first is that it is the most-cited, most-copied, and most-tested — and because almost every serious tokenized offering that wants a global audience touches at least one of these four rules directly. A structuring conversation that starts with "Reg D 506(c) plus Reg S, with a possible Reg A+ later once we have audited financials" is the shorthand of the entire industry.

Learn the rules, learn the tradeoffs, learn what accredited actually means — and every other conversation in this market gets shorter and clearer.