Who is personally liable when a crypto promotion goes wrong?
Not only the issuer. Financial promotion rules attach to whoever communicated the message, which puts agencies, in-house marketers, paid creators and sometimes unpaid moderators inside the same perimeter as the founders. When a project fails, the issuing entity is frequently offshore, insolvent or dissolved, and the people who are findable and solvent are the ones who did the marketing. That is the risk worth understanding before the contract is signed, not after. None of this is legal advice.
Who actually gets pursued when a crypto project fails?
Whoever is identifiable, reachable and worth pursuing. In practice that means the promoters whose names and faces were attached to the promotion, alongside any founders who can still be found. Enforcement and civil claims both follow visibility and solvency, and an anonymous development team in a jurisdiction with no reciprocal enforcement offers neither.
The legal hooks are ordinary ones. In the UK, communicating an unapproved financial promotion is itself an offence, so no loss needs to be proven for exposure to exist. In the US, receiving consideration for promoting a security without disclosing it is specifically prohibited. Beyond those, misrepresentation, consumer protection and advertising standards apply to crypto exactly as to anything else.
The asymmetry is what catches people. A creator paid a modest fee for one post carries statutory exposure equivalent to the issuer's, having captured a fraction of the upside. That trade is rarely priced into the fee.
Is an agency liable for a client's token?
Frequently yes, and a contract does not fix it. Statutory liability for a financial promotion sits with the person who communicates it and cannot be transferred by agreement. An indemnity from the client changes who pays at the end of a dispute, assuming the client still exists and has money, but it does not stop a regulator or a claimant naming the agency in the first place.
Indemnities in this sector are unusually weak for that reason. The counterparty is often a foundation or a company formed a few months earlier, holding a treasury denominated in the asset that has just collapsed. An indemnity from that entity is a promise of payment from a balance sheet correlated with the exact event that triggers the claim.
The other gap is insurance. Professional indemnity policies commonly exclude cryptoasset work, and agencies routinely discover this after taking the brief. Read the policy wording before the engagement letter, and if the exclusion applies, decide consciously rather than by accident.
Where does the exposure sit by role?
Roughly as follows. The ranking is by how easily a claimant or regulator can reach the person, which correlates poorly with how much each of them earned.
| Role | Main exposure | What mitigates it |
|---|---|---|
| Founder or issuer | Everything, including securities treatment of the asset | Authorised approval route, published documentation that matches the chain |
| In-house marketer | Communicating an unapproved promotion, personally | Written approval trail, refusing to publish outside the claims list |
| Agency | Communicator liability plus advertising standards, jointly with the client | Scope in writing, approval evidence retained, insurance checked before signing |
| Paid creator | Undisclosed material connection, misleading claims | Clear in-post disclosure, no payment in the promoted asset, content retained |
| Ambassador or moderator | Statements made in chat, even unpaid | A published claims list, escalation rules, no performance incentives |
| Affiliate or referrer | Incentivised promotion, restricted outright in some regimes | Not operating referral incentives into restricted markets at all |
Does unregulated mean there are no rules?
No, and the confusion is doing real damage. Unregulated in this context means the consumer has no access to a compensation scheme or an ombudsman if the investment fails. It does not mean the promotion is unregulated: the act of promoting is regulated even where the asset is not, which is precisely the arrangement that surprises people.
Everything else continues to apply regardless. Fraud, misrepresentation, unfair commercial practices, data protection and advertising standards do not have crypto exemptions. Advertising regulators have consistently found crypto advertising irresponsible where it failed to make risk clear or implied that returns were easy, and those rulings are published under the advertiser's name.
So the sentence to remove from internal conversations is that the space is unregulated so anything goes. The accurate version is that the consumer has fewer protections and the promoter has the usual liabilities, which is the worst combination for everyone except the issuer.
What actually reduces exposure?
Refusing payment in the asset you are promoting. It is the single highest-value control available to an agency or creator, because it removes the incentive that regulators look for, simplifies disclosure and keeps your fee uncorrelated with the thing you are describing. It also, usefully, causes some prospective clients to lose interest immediately, which is information.
Then records. Keep the approved copy, who approved it, when it was published and where, along with the creator contracts and the published disclosures. Most enforcement difficulty in this area comes from the absence of evidence rather than from the content of what was said, and the absence is read unsympathetically.
Then scope discipline: write down what you are and are not responsible for, do not staff a client's community with your people unless the claims list governs them too, and never let anyone on your side answer questions about price, listings or returns. Those three subjects generate most of the exposure and none of the value.
What should you check before accepting a crypto brief?
Six questions, all answerable in an afternoon, all of which some clients will decline to answer. Which legal entity is contracting, and where is it registered. Who controls the treasury and the deployer keys. Is there published documentation, and does the on-chain distribution reconcile with it. Is the promotion being approved, and by whom. Are there insider or advisor allocations, and are they disclosed. And what happens to my fee if the token falls by ninety per cent.
The reconciliation question is the one that separates serious projects from the rest, because it is checkable. Take the published distribution, open a block explorer and follow the largest holdings. If the reality does not match the chart, you have learned everything you need to know about the rest of the engagement.
Refusal to answer any of these is a decision, not an obstacle. Work in this category is well paid because the risk is real, and the projects that resist diligence are the ones the risk is attached to.
Common questions
- Can a marketing agency be liable for a client's crypto promotion?
- Yes. Liability for a financial promotion attaches to whoever communicates it, and cannot be contracted away. An indemnity determines who pays at the end of a dispute but does not prevent an agency being named at the start, and in this sector the indemnifying entity is often newly formed with a treasury denominated in the asset that has just fallen. Professional indemnity policies also commonly exclude cryptoasset work.
- Are crypto influencers personally liable for promotions?
- They can be. Communicating an unapproved financial promotion is an offence in the UK regardless of whether anyone lost money, and in the US receiving consideration for promoting a security without disclosing it is specifically prohibited. Misrepresentation and advertising standards apply on top. A creator paid a modest one-off fee can carry exposure comparable to the issuer's while capturing a fraction of the upside.
- Does unregulated mean crypto marketing has no rules?
- No. Unregulated describes the consumer's position: no compensation scheme and no ombudsman if the investment fails. The act of promoting is regulated even where the asset is not. Fraud, misrepresentation, unfair commercial practices, data protection and advertising standards have no crypto exemption, and advertising regulators have repeatedly ruled crypto ads irresponsible for failing to make risk clear.
- Should an agency accept payment in tokens?
- It is the control most worth keeping. Being paid in the asset being promoted creates the exact incentive regulators look for, complicates disclosure and ties the fee to the thing being described. Declining also filters prospective clients usefully, since a project that can only pay in its own token is telling you something about its funding and its confidence.
- What due diligence should you run before taking a crypto client?
- Establish which entity is contracting and where it is registered, who controls the treasury and deployer keys, whether published documentation exists, whether the promotion is being approved and by whom, and whether insider allocations are disclosed. Then reconcile the published token distribution against a block explorer. If the chart and the chain disagree, that discrepancy will define the engagement.
- What records should be kept for a crypto marketing campaign?
- Approved copy with the identity of the approver and the date, a log of what was published where and when, contracts with every paid creator requiring disclosure and content retention, and copies of the disclosures as published. Most difficulty in this area comes from missing evidence rather than from the content of the promotion, and gaps in the record are interpreted unfavourably.
