Two regulators are watching your creator campaign, not one
Most crypto founders who pay a creator to post think about one rulebook: the FTC's, satisfied with a #sponsored tag. That instinct is half right and dangerously incomplete. If the token you're promoting could be deemed a security — and post-Howey, the SEC's working assumption is that most of them are — then a second, stricter regime kicks in on top of the FTC's. The crypto influencer promotion SEC 17(b) disclosure requirements are not a variation on the FTC's standard. They demand something the FTC never asks for: the dollar amount.
This is the gap that turned a single Instagram story into a $1.26 million lesson. It's also the gap that almost every influencer-marketing guide skips, because those guides were written for beauty and apparel brands where only the FTC is in the room. In crypto, both regulators are in the room, and they don't grade on the same curve.
FTC vs. SEC: two regimes, two different disclosure standards
The FTC governs deceptive advertising. Under Section 5 of the FTC Act and the 2023 Endorsement Guides, a paid creator must make a "clear and conspicuous" disclosure that a material connection exists between them and the brand. The standard is about existence: the audience must understand this is an ad. #ad, #sponsored, or "Paid partnership with [brand]" — placed where a viewer actually sees it, not buried in a hashtag wall — clears the FTC bar.
The SEC governs securities touting. Section 17(b) of the Securities Act of 1933, the "anti-touting" provision, makes it unlawful to promote a security while describing it, without "fully disclosing the receipt... of such consideration and the amount thereof." The standard is about existence and magnitude: the audience must know both that you were paid and how much.
That one clause — and the amount thereof — is the entire ballgame. A disclosure that satisfies the FTC can still violate Section 17(b), because "this is sponsored" answers the FTC's question and ignores the SEC's.
| FTC (Section 5) | SEC (Section 17(b)) | |
|---|---|---|
| What it governs | Deceptive endorsements | Touting a security |
| Triggers when | Any paid endorsement | The asset is a security and you describe it |
| Must disclose the fact of payment | Yes | Yes |
| Must disclose the amount | No | Yes |
Does #sponsored satisfy it |
Usually, if conspicuous | No — omits the amount |
| Max exposure | $53,088 per violation (2025) | Disgorgement + penalty; see Kardashian |
| Who's liable | Brand and creator | Creator (and those who aid/abet) |
Read the bottom two rows together and the whole strategy falls out: you satisfy the FTC and the SEC simultaneously by disclosing the amount. Doing less leaves one regulator unanswered.
Section 17(b): why "#sponsored" fails the touting test
Here's the mechanic that trips people up. Section 17(b) doesn't care whether your creator's post was misleading. It doesn't require that anyone lost money, that the token was a scam, or that the creator had bad intent. It is a strict disclosure statute on a specific, narrow class of speech: promoting a security for consideration. If your token is a security and money changed hands, the only lawful way to describe it publicly is to state the payment and its amount, in the post itself.
So a creator who writes "Really excited about $TOKEN, this is going to be huge #sponsored" has:
- Passed the FTC test (a material connection was disclosed), and
- Failed Section 17(b) (the amount was omitted).
The fix is not longer or more enthusiastic disclosure. It's specific disclosure. The SEC's own guidance and settlements point to language like: "I was paid $10,000 in USDC by [Issuer] to promote $TOKEN." Fact, form of payment, source, and amount, in the creator's own copy — not a legal footnote, not a hashtag.
The $1.26M Kardashian fine, decoded into what you actually do
On October 3, 2022, the SEC settled with Kim Kardashian over a single June 2021 Instagram story promoting EthereumMax's EMAX token. The numbers are worth internalizing because they map cleanly onto obligations:
- She was paid $250,000 to publish the post.
- She disclosed neither the fact nor the amount of that payment. (Her post carried "#AD," which is why people assume she was covered — she was covered for the FTC, not the SEC.)
- The settlement totaled $1.26 million: $250,000 in disgorgement (the fee she took), roughly $10,000 in interest, and a $1 million penalty.
Decode that into an operating rule. The disgorgement equals the payment — the SEC claws back the exact consideration that should have been disclosed. The $1M penalty is the price of the omission itself. And the tag she did use is precisely the trap: a disclosure that clears one regulator lulls you into thinking you're clear of both. The same pattern recurred in the SEC's broader touting sweeps and in the FTC's parallel actions against paid promoters — different names, identical omission.
The takeaway isn't "hire lawyers and hope." It's that the compliant version of that exact post was one sentence longer: "EthereumMax paid me $250,000 to share this. $EMAX #AD." That sentence is free. Omitting it cost seven figures.
The checklist: what every paid crypto post needs before it goes live
Run every sponsored post through this before it publishes. If any box is unchecked, it doesn't go live.
- Classify the asset first. Is the token plausibly a security under Howey? If you can't get a clean "no" from counsel, assume yes and comply with 17(b). The cost of over-disclosing is zero.
- Disclose the fact of payment in plain language the audience sees without tapping "more." (FTC bar.)
- Disclose the amount and form — "$10,000 in USDC," "5,000 $TOKEN," "$25,000 cash." (SEC 17(b) bar.)
- Name the payer — the issuer or brand that paid, not a vague "sponsored."
- Put the disclosure in the creator's own post, at the top or woven into the copy — not in a comment, not in a linked doc, not auto-collapsed.
- Make it platform-native too. Use X's/Instagram's built-in "Paid partnership" label in addition to the written amount — the label alone never states the amount.
- Avoid forward-looking hype ("guaranteed 10x," "can't lose"). Touting compliance is about disclosure; anti-fraud liability is a separate, worse problem you don't want on top.
- Capture proof — screenshot the live post, log the contract, timestamp everything, so you can show a regulator exactly what was disclosed and when.
Steps 3, 4, and 5 are where nearly every campaign fails, and they're exactly the steps generic influencer-marketing advice never mentions.
Contracts that force compliance instead of hoping for it
A checklist is only as good as your ability to enforce it across creators you don't control. The real failure mode isn't a founder who doesn't know the rule — it's a creator who edits the disclosure out to make the copy "cleaner," and a founder who finds out after the post is live and screenshotted by a critic.
That's a contract problem, and it's solved before money moves. The disclosure language — exact amount, form of payment, payer name — belongs in the deliverable spec of an e-signed agreement, not in a Slack message the creator can ignore. When the required post copy is a contractual term the creator signs, "I'll fix the disclosure later" stops being an option, and payment is conditioned on the compliant post actually shipping.
This is precisely the workflow Amplis is built for. Because Amplis specializes in the restricted categories the big platforms reject — prediction markets, crypto, politics, finance — the disclosure obligations aren't an afterthought bolted on; they're wired into how a deal is structured. E-signed contracts carry the FTC + Section 17(b) language as enforceable terms, and escrow means the creator gets paid when the compliant post is verified, not before.
The audit trail that proves you disclosed — if the SEC ever asks
Compliance you can't prove is compliance you don't have. When a regulator opens an inquiry, the question is evidentiary: show us what was disclosed, in which post, on what date, under what agreement. A folder of screenshots and a memory of a DM is not an answer.
The defensible posture is a tamper-evident record connecting three things: the signed contract that specified the disclosure, the live post that carried it, and the payment that was released against it. That chain — contract → compliant post → escrow release — is exactly what a tamper-evident audit trail preserves, and it's the difference between a five-minute response to an SEC letter and a document scramble that looks, from the outside, like consciousness of a problem.
Crypto is the category the big creator platforms won't touch, which is exactly why the compliance burden falls on you and exactly why doing it right is a moat. If you're paying creators to promote a token, run your campaigns through Amplis — verified creators, e-signed contracts that carry the disclosure as a term, escrow-protected payments, and an audit trail built for the day a regulator asks. The legitimate, on-the-record way to run the campaigns the big platforms won't.