Strategy · Marketing and distribution

KOL contracts and due diligence

Last updated October 2026 · By TrustSwap

On this page
  1. 01Who decides this
  2. 02Should we use a crypto KOL agency or contract creators directly?
  3. 03What due diligence should we run on a KOL before paying?
  4. 04What should a KOL contract say?
  5. 05Which disclosure rules apply where?
  6. 06What records will we need if a regulator asks?
  7. 07What goes wrong: the question you could not answer
  8. 08How Alcyone approaches it

Treat every paid KOL post as a promotion your company made, and contract for it that way: written pre-approval, disclosure in each post, excluded markets, and a log you could hand a regulator. The cost of skipping this is concrete. In 2022 the US SEC settled with a celebrity for about $1.26 million over a single crypto promotion with an undisclosed $250,000 fee.

Who decides this

The CMO decides which creators to use, what they say and what they are paid, and is accountable for whether the spend reached the right users. General counsel owns the contract terms, the disclosure wording and the list of markets that are closed. Both sign the promotion log. A crypto KOL agency can source creators and run logistics, but several regimes put responsibility on the advertiser or offeror, not only on the agency or the creator.

Should we use a crypto KOL agency or contract creators directly?

Use an agency for sourcing and logistics if you need reach quickly, but contract so that every creator agreement, fee and post is visible to you. An agency that keeps creator terms confidential leaves you unable to prove what was paid and what was disclosed.

The trade-off is speed against control. An agency brings relationships and can book many creators in a week. Direct contracts take longer, but you hold the terms, the payment records and the approvals.

Volume is a risk in itself. The UK FCA's social media guidance asks firms to consider how many influencer partnerships they can monitor properly. Ten creators you can supervise beat fifty you cannot.

KOL marketing rates have no published standard, and the figures agencies quote vary widely; our guide to crypto marketing agencies sets out the ranges two agency sources publish. What we would do: if you use an agency, require it to disclose each creator's fee and its own margin, and make that a condition of payment.

What due diligence should we run on a KOL before paying?

Check where the audience is, who it is, what the creator has promoted before, and whether the creator understands your product and the rules. Follower counts answer none of those questions.

CheckWhy it mattersWhat to ask for
Audience by countryPromotion rules follow the audience, not the creator's homePlatform analytics by country, screenshot dated within 30 days
Audience profileUK guidance asks firms to consider whether an audience may be vulnerableAge bands and a sample of recent comments
Promotion historyPast undisclosed or deleted promotions predict future onesList of paid crypto posts in the last 24 months, with disclosures used
Product understandingUK guidance expects firms to make sure influencers understand the product and the rulesA short call; a written summary in the creator's own words
Content stylePrice and profit claims damage compliance and the listing caseTen recent posts reviewed by counsel
Willingness to signA creator who refuses pre-approval or disclosure terms will not follow themSigned contract before any brief is shared

Two rows deserve emphasis. The FCA guidance says firms should check that influencers understand the product and the relevant rules, and consider whether an affiliate might alter approved content. Our view: ask the creator to explain the product back to you, and walk away if they cannot.

Content style matters beyond regulators. Coinbase's listings page lists investment or profit claims among its red flags when reviewing an asset. A creator campaign built on price talk can hurt a later listing application.

What should a KOL contract say?

A KOL contract should require written approval of every post, a clear paid-promotion disclosure in each post, no price or return claims, no targeting of closed markets, and records kept by both sides. Each clause answers a question a regulator or exchange may later ask.

Approval. Every post, thread, video, space and meme is approved in writing before it goes live. No edits after approval without a new approval. FCA guidance says each communication must comply on its own, so a thread cannot rely on a disclaimer in an earlier post.

Disclosure. Each post carries a clear label that it is paid, in the post itself, not in a bio or a reply. Specify the wording per platform and per market, as counsel sets it.

Content limits. No statements about price, returns or listings. No claims beyond the white paper. In the EU, marketing must be consistent with the white paper and carry the statements MiCA requires.

Markets. The creator may not target, translate for, or run paid boosts into any market on counsel's closed list.

Payment. Cash, at a stated fee, recorded. If tokens are unavoidable, record the amount, vesting and value at grant. US enforcement officials have said that anyone promoting a crypto asset security must disclose the nature, source and amount of their compensation.

Records and takedown. The creator keeps copies of every post and the approval trail. The project can require a post to be removed within hours. Termination for any breach, with unpaid fees forfeited.

Which disclosure rules apply where?

As of October 2026, the US, UK and EU each regulate paid crypto promotion differently, and a single KOL post can reach all three. Counsel decides which rules apply to your token; the summaries below show why the question cannot wait.

United States. In its 2022 action, the SEC found that a celebrity had promoted a crypto asset security on Instagram without disclosing a $250,000 payment. The settlement came to about $1.26 million, including a $1 million penalty, under the anti-touting provision. The celebrity also agreed not to promote crypto asset securities for three years. Whether your token is a security is a question for counsel.

Separately, the FTC's endorsement guidance says a paid relationship must be disclosed clearly and conspicuously in each post, and that a disclosure left in the comments is not enough. It also expects advertisers to run reasonable programs to train and monitor the people promoting them. Passing that job to an agency does not remove the advertiser's responsibility.

United Kingdom. The FCA's cryptoasset promotion rules apply to overseas firms marketing to UK consumers. Promotions need one of four lawful routes and a prescribed risk warning, and incentives such as refer-a-friend bonuses are banned. The FCA's social media guidance says an unauthorised influencer promoting without approval may be committing a criminal offence, punishable by up to two years' imprisonment, an unlimited fine or both.

The same guidance says payment is not required for a post to count: an indirect commercial interest, such as building followers for future deals, can be enough. Audience size does not matter, and a meme can be a financial promotion. Firms should keep their own records, because platforms may delete content.

European Union. MiCA Article 7 requires marketing to be clearly identifiable, fair, clear, not misleading and consistent with the white paper. It must give contact details and state that no EU authority has reviewed or approved it and that the offeror is solely responsible for it. Where a white paper is required, no marketing may go out before it is published.

These rules are enforced. In August 2026 Austria's regulator published a EUR 70,000 fine on a crypto firm, partly for marketing before publishing its white paper and for omitting the required statement and contact details, according to Finance Magnates, which reported the decision as final.

What records will we need if a regulator asks?

Keep a promotion log that shows who was paid, how much and in what form, for which post, with what disclosure, approved by whom, and aimed at which markets. If you cannot produce it in a day, you do not have it.

The log belongs to the project, not the agency. Store screenshots and links of each live post, because content gets deleted. Record any post that was taken down and why.

Keep the log for at least as long as the token is held by the public. In the EU, MiCA already expects the white paper to stay available for that long; your marketing evidence should not expire sooner. Counsel should set the exact retention period for each market.

What goes wrong: the question you could not answer

The failure shows up long after the campaign. Eighteen months after TGE, an exchange's compliance team, a regulator or a litigant asks a simple question. Which creators did you pay around launch, how much, in what, and what did each one disclose?

Nobody can answer. The agency that booked them has closed or will not share its creator contracts. Payments went out in tokens from a wallet nobody labelled. Half the posts are deleted, and the approval trail lives in a former employee's direct messages.

The project may have done nothing wrong, but it cannot show that. The fix costs little at the time: a contract with disclosure and approval clauses, a log the project owns, and one person responsible for keeping it.

How Alcyone approaches it

Alcyone treats creators as one channel in a distribution plan with a named owner, not a separate campaign. Alcyone's marketing and visibility advisory covers the marketing strategy and channel plan and KOL and community activation; contract drafting and the legal view on each market stay with counsel. The partners have helped launch 80+ projects through the TrustSwap Launchpad. Engagements begin with a thirty-minute call with a senior partner and a fixed-scope, fixed-fee assessment.

Thirty minutes with a senior partner.Alcyone will tell you on the call whether it is the right firm for the work.

This guide is for information only and is not legal, tax, investment or financial advice. All product and company names are trademarks of their respective holders, used for identification only. Facts current as of October 2026.