← back to the index
PA-008 ICO fraud · United States / Russia 2019

ICOBox — The ICO Launchpad That Was Itself an Illegal ICO

ico-tokenconvictedico-era
Project
ICOBox
ICO Raise
$14.6 million
Token
ICOS (ERC-20)
Status
Convicted

Summary

ICOBox was a platform launched in 2017 by Nikolay Evdokimov that purported to offer end-to-end services for companies conducting initial coin offerings — legal structuring, marketing, white-label technology, and investor outreach. In September 2017, before offering those services at scale, ICOBox raised approximately $14.6 million by selling its own ICOS token to more than 2,000 investors in an offering it did not register with the SEC. The token was sold on the promise it would function as the platform's primary access credential and appreciate as the client roster grew.

The SEC filed a civil complaint against ICOBox and Evdokimov in September 2019, charging both with conducting an unregistered securities offering and with acting as unregistered brokers in connection with at least 30 other ICOs. After being served, Evdokimov went silent, vacated his last known residence in the middle of the night with two months' rent unpaid, and did not appear in the litigation. On March 5, 2020, U.S. District Judge Dale S. Fischer of the Central District of California entered a default judgment: $16 million against ICOBox and a personal civil penalty of more than $192,000 against Evdokimov. His whereabouts remained unconfirmed.

The case carries a structural irony that regulators noted explicitly: a company that existed to facilitate other companies' token sales conducted its own token sale in violation of the securities laws it was nominally advising clients to navigate. The platform for ICOs was itself an illegal ICO.

Timeline

2017
ICOBox founded
Nikolay Evdokimov launches ICOBox as an ICO-as-a-service platform, offering legal, marketing, and technical support to companies seeking to conduct token sales. The platform is marketed globally to projects seeking to raise funds in the expanding ICO market.
September 2017
ICOS token sale conducted
ICOBox raises approximately $14.6 million from more than 2,000 investors by selling ICOS tokens. The offering is not registered with the SEC. Investors are told the ICOS token will serve as the platform's primary access and utility credential and will appreciate in value as ICOBox's client roster grows.
2017–2018
ICOBox facilitates third-party ICOs
The platform provides services to at least 30 ICO projects, acting — in the SEC's subsequent assessment — as an unregistered broker-dealer by soliciting investors, marketing token offerings, and receiving compensation for doing so, without registering with the SEC in the capacity required for those activities.
2018–2019
ICO market collapses
The broader ICO market deteriorates sharply through 2018. ICOS tokens lose the great majority of their value. ICOBox's client pipeline contracts. Regulatory scrutiny of ICO service providers increases globally.
September 18, 2019
SEC files complaint
The SEC files a civil complaint in the U.S. District Court for the Central District of California against ICOBox and Evdokimov, charging them with conducting an unregistered securities offering (the 2017 ICOS sale) and with acting as unregistered brokers for other ICOs.
Late September 2019
Service on Evdokimov's wife; Evdokimov disappears
After the SEC serves a subpoena on Evdokimov's wife in late September 2019, Evdokimov vacates his last known residence overnight, leaving two months' rent unpaid. He does not respond to the SEC's communications or retain counsel in the proceedings.
January 9, 2020
SEC moves for default judgment
After months of non-response, the SEC files a motion for default judgment, citing Evdokimov's failure to appear or respond to the complaint.
March 5, 2020
Default judgment entered
Judge Dale S. Fischer grants the SEC's motion. The court enters a default judgment against ICOBox of $16 million and against Evdokimov personally of more than $192,000. ICOBox is permanently enjoined from future securities violations.
2020–present
Evdokimov remains unlocated
No arrest of Evdokimov has been publicly reported as of the research date. The default judgment is a civil order; its collectability depends on locating and attaching Evdokimov's assets. ICOS tokens retain no material market value.

The Platform That Sold the Shovel and Kept the Gold

ICOBox's model rested on a distinction between conducting an ICO and facilitating one. In 2017, the SEC had not yet articulated a clear framework for whether service providers — as opposed to issuers — bore securities-law obligations. ICOBox exploited this ambiguity by positioning itself as infrastructure rather than issuer, a technology layer that would help others navigate token sales without itself being the party selling unregistered securities.

The premise collapsed at its foundation. Before offering infrastructure services to others, ICOBox conducted its own token sale — selling approximately $14.6 million in ICOS tokens under the argument that the token was a utility instrument rather than a security. The SEC applied the Howey test and concluded that ICOS tokens were investment contracts: buyers invested money in a common enterprise with an expectation of profit from ICOBox's management. The utility framing was the standard ICO-era attempt to escape securities regulation; courts and regulators had consistently rejected it where economic substance matched the Howey pattern.

The irony was structural. ICOBox was offering compliance services to other ICO projects — implicitly representing expertise in what made a token offering legally defensible — while running its own unregistered offering in violation of those same rules. Investors paid $14.6 million for a token with no registered legal status whose value depended entirely on the platform's future performance.

Thirty ICOs and the Unregistered Broker

The SEC's complaint against ICOBox extended beyond the ICOS token sale to encompass a second, distinct violation: ICOBox had acted as an unregistered broker-dealer in connection with at least 30 other ICO projects. Under U.S. securities law, a party that solicits investors, facilitates transactions in securities, and receives compensation for doing so must register as a broker-dealer with the SEC — a requirement that applies regardless of whether the instruments being sold are traditional stocks or newly issued cryptocurrency tokens.

ICOBox did precisely this. It marketed third-party token offerings to investors, provided the communication and outreach infrastructure through which those investors were approached, and received fees from the ICO projects it serviced. The economic function was that of a broker: connecting issuers with investors in exchange for compensation. The fact that the instruments were called tokens rather than shares did not alter the economic substance. ICOBox had created, in effect, an unregistered broker-dealer operation that processed dozens of offerings through a legal framework it had not filed the paperwork to occupy.

The 30-ICO broker-dealer count was the core of ICOBox's revenue model. By declining to register, ICOBox avoided the disclosure requirements, supervisory obligations, and investor-protection rules that registered broker-dealers must satisfy — including the obligation to conduct due diligence on the offerings they sell. The third-party offerings were processed through a compliance-free channel that provided investors with none of the protections that broker-dealer registration is designed to ensure.

The Midnight Departure

The chronology of Evdokimov's disappearance is a compressed account of what the SEC's complaint describes as an attempt to evade the proceedings entirely. The agency filed its complaint in September 2019. Service on Evdokimov's wife with a subpoena in late September appears to have been the trigger: according to the SEC's subsequent default judgment filings, Evdokimov vacated his last known residence shortly after the subpoena was served, leaving two months' rent unpaid and providing no forwarding information. He did not engage with the SEC's attorneys. He did not retain counsel in the case. He did not file an answer to the complaint.

This behavior pattern — the overnight departure, the unpaid rent, the communications silence — reflects a calculation available to civil-only enforcement targets: a default civil judgment imposes a financial obligation but no criminal consequence. Evdokimov's disappearance kept him free of criminal exposure while the $16 million judgment against ICOBox and $192,000 personal penalty against him remained paper obligations whose collection depended on locating assets within reach of U.S. courts.

The practical result is that investors who purchased ICOS tokens in 2017 have no meaningful recovery pathway. ICOBox has no operating assets. The civil judgment has not been publicly reported as satisfied. Evdokimov has not been located in any published law enforcement action.

The Five Factors

01
Platform-layer regulatory arbitrage
ICOBox positioned itself as infrastructure rather than issuer, implying that the securities-law obligations applicable to ICO issuers did not reach ICO service providers. This framing was false on two levels: ICOBox conducted its own unregistered offering (making it an issuer) and provided broker-dealer services without registration (making it a regulated market participant). The platform/issuer distinction was not a genuine legal boundary; it was a rhetorical strategy for claiming that no registration requirements applied.
02
Utility-token exemption claim
The ICOS token was characterized as a utility instrument — an access credential for ICOBox's services — rather than an investment contract. This framing was the standard ICO-era attempt to take a token outside securities regulation. The SEC and courts applying the Howey test to ICOS found that the economic substance of the offering — investors providing money to a common enterprise with profit expectations from the promoter's efforts — controlled over the label. The utility framing was an argument; it was not a legal shield.
03
Broker-dealer function without broker-dealer obligations
ICOBox performed the economic function of a broker-dealer — matching investors to securities offerings for compensation — without accepting the compliance, disclosure, and due-diligence obligations that broker-dealer registration imposes. Investors who participated in ICOBox-facilitated offerings received none of the protections that a registered broker-dealer is required to provide: no independent review of the offering's representations, no suitability assessment, no supervisory oversight.
04
Default judgment as a flight-path option
Evdokimov's decision to disappear rather than contest the SEC's complaint reflects a rational calculation available to operators of civil-only enforcement targets: a default civil judgment imposes a financial obligation but no criminal consequence. The $16 million judgment against ICOBox is a paper liability if the entity has no collectible assets. The enforcement gap between a civil default judgment and actual recovery is exploitable by operators willing to accept the reputational consequence of non-appearance. Criminal charges, by contrast, do not permit the same exit.
05
Meta-credibility as a fraud accelerant
ICOBox's status as an ICO compliance and services platform gave it a form of second-order credibility: if the company helping others structure legitimate ICOs was conducting its own token sale, the inference — available to investors — was that ICOBox had assessed its own offering and found it compliant. This inference was unfounded, but it was structurally available. Fraudulent operators who occupy advisory or infrastructure positions in a market can leverage the implied expertise of that position to attract investors to their own schemes.

Aftermath

The default judgment entered on March 5, 2020 imposed $16 million in penalties on ICOBox and $192,000 on Evdokimov personally. ICOBox was permanently enjoined from violating the registration and anti-fraud provisions of the federal securities laws. The judgment was a civil order in the Central District of California; its enforcement depended on the SEC's ability to locate ICOBox or Evdokimov assets within reach of U.S. judicial process.

No criminal charges against Evdokimov have been publicly filed or reported as of the research date. Evdokimov's post-2019 location has not been confirmed in any published law enforcement communication. The ICOS token, whose sale generated the $14.6 million that triggered the SEC action, has no reported residual market value or tradeable liquidity.

The case contributed to the SEC's enforcement posture on ICO service providers: the agency's subsequent actions against other ICO-adjacent platforms have consistently applied the broker-dealer analysis first articulated in the ICOBox complaint, treating companies that solicit investors and receive compensation for facilitating token sales as market participants subject to registration requirements, regardless of whether they characterize their services as technology, advisory, or infrastructure.

Lessons

  1. A company that provides services to ICO issuers while simultaneously conducting its own unregistered token sale bears the obligations of both a broker-dealer and an issuer; the infrastructure or advisory framing does not dissolve either obligation.
  2. The utility-token characterization — tokens sold as access credentials rather than investment instruments — does not override the Howey test; courts assess economic substance, not the label applied by the issuer, and investors who provide money to a common enterprise with profit expectations hold a security.
  3. Investors in tokens issued by platforms that claim domain expertise in ICO compliance should apply the same verification standards they would apply to any other issuer; claimed expertise is not evidence of compliant conduct.
  4. Civil default judgments without parallel criminal proceedings leave operators the option of disappearing and accepting a paper liability in lieu of contesting charges; where the assets subject to the judgment are dissipated or offshore, the practical recovery for investors approaches zero.
  5. Acting as an intermediary that connects investors to token offerings and receives compensation for doing so requires broker-dealer registration under U.S. law; this obligation attaches to the economic function, not the label applied to the entity or the instruments it facilitates.

References