Buying an NFT feels like buying a picture, and it is not. What changes hands is a token — an entry on a blockchain that points to a work — not the copyright in the work itself. The difference is the whole subject of this note, because it decides what a buyer may and may not do with what they paid for.
An NFT, a non-fungible token, is a unique record on a blockchain. When someone buys one, the ledger updates to show that a particular address now controls that record, and the record usually points to a work — an image, a piece of music, a video. The transfer is real and the control is real. What the transfer does not do, by itself, is move the copyright in the underlying work, and the gap between those two things is where most of the misunderstanding lives.
This note takes the narrow question and stays on it: what a buyer actually owns when the token lands in their wallet. The broader subject of structuring digital-asset vehicles is taken up in the firm's article on digital-asset funds and token vehicles, and the terms that govern licensing creative work are worked through in the article on licensing creative work for artists and brands. What follows assumes the buyer has the token and wants to know what comes with it — and the answer turns on a rule of copyright that predates the blockchain entirely.
The token is not the copyright
Copyright law has long drawn a line that surprises people, and the blockchain has not erased it. Owning a copy of a work is not the same as owning the copyright in the work. A person who buys a painting owns the canvas; they may hang it, lend it, and resell it, but they do not by that purchase acquire the right to reproduce the image, to make derivative works, or to license it to others. Those rights remain with the creator unless the creator transfers them, and a transfer of copyright must be in a writing signed by the owner of the rights conveyed. The default is separation: the object moves, the copyright stays.
An NFT sits inside that rule rather than outside it. The token is the modern equivalent of the copy — or, more precisely, a record that points to a copy. Buying it transfers control of the token and, with it, whatever the seller has chosen to attach to the token. It does not transfer the copyright in the underlying work unless a signed writing says so, and a transaction recorded on a ledger is not, on its own, that writing. So the buyer who assumes the image is now theirs to exploit has skipped the step that would have made it true.
This is why the question is rarely answered by looking at the chain. The blockchain confirms who controls the token; it says nothing, by itself, about who holds the copyright or what the buyer may do with the work. To learn that, a buyer has to look away from the ledger and toward the terms the project published — the license that came with the token. Whether those terms exist, what they grant, and whether they were signed in a form the law recognizes are the questions that decide ownership, and they are not visible in the transaction record.
The ledger confirms who controls the token. It says nothing, by itself, about who holds the copyright in the work.
The license decides what the buyer gets
If the copyright does not pass with the token by default, then whatever a buyer can do with the work comes from the license — the set of terms the project attached to the sale. There is no industry standard, and the variation is enormous. Some projects grant broad rights, including personal display and a defined commercial use of the specific work tied to the token. Some grant a narrow personal-use right and nothing more. Some are silent, leaving the buyer with control of the token and no stated permission to reproduce the work at all. Two NFTs that look identical on a marketplace can carry entirely different rights, and the only way to know is to read.
Commercial use is the point where the difference bites hardest. A buyer who wants to put the image on merchandise, build a brand around it, or license it onward can do so only if the project's license grants that right, and grants it to them. Where the license is narrow or silent, none of that is permitted, and doing it anyway is an infringement of a copyright the buyer never acquired. The market's habit of treating an expensive purchase as outright ownership does not change the legal position; the price paid for the token has no bearing on the scope of the rights that came with it.
Reading the license also means reading it carefully, because the grant is often qualified. A commercial right may be capped at a revenue threshold, limited to the single work tied to the token, conditioned on continued ownership so that it ends when the token is sold, or restricted in ways that matter to the use the buyer has in mind. Whether the terms were presented in a form that binds the buyer at all — and whether they were signed in the writing a copyright transfer requires — are further questions. The terms that govern licensing of creative work generally are taken up in the firm's article on licensing creative work for artists and brands; the point here is narrower, that the license, not the token, is the document that answers what the buyer may do.
The on-chain and off-chain gap
There is a second gap, technical rather than legal, that compounds the first. The token lives on the blockchain, but the work it points to usually does not. Storing a full image or video on-chain is costly, so most tokens hold a pointer — a web address or a reference to a file kept elsewhere — rather than the work itself. The buyer who controls the token controls the pointer. What sits at the other end of that pointer is governed by wherever the file actually lives, which is often not on the chain at all.
That arrangement introduces a risk worth naming plainly. If the work is hosted at an ordinary web address, the server can go down, the address can change, or whoever maintains it can take the file offline, and the token is left pointing at nothing. This is the phenomenon sometimes called link rot, and it can leave a buyer holding a verified token that resolves to a broken link. Some projects reduce the risk by using content-addressed storage such as IPFS, where the reference is tied to the file's content rather than to a location, so the link does not break as long as someone keeps the file available. Even there, the work persists only while it continues to be hosted; nothing about the token guarantees the work endures.
The two gaps together describe what a buyer actually holds: a token that records control on a ledger, a pointer to a work that may live elsewhere and may not be permanent, and whatever rights — often few — the project's license grants in that work. The copyright, absent a signed transfer, stays with the creator. Where any of this lands for a particular purchase depends on the project's terms, the buyer's facts, and the law in force, and a buyer who plans to rely on or commercialize an NFT should have the terms reviewed by counsel before treating the picture as theirs to use.
A verified token can point to a work that lives off-chain — at an address that can move or disappear, leaving the buyer holding a link to nothing.