Digital Assets, Listing & the Law: What You Can Actually Sell, Transfer, and Pass On
Part of the Deliberate Digital Legacy resource library. This is a practical, self-help technical guide — not legal, financial, or estate advice. Laws vary by country and state and change over time. For contracts, taxes, inheritance, or compliance decisions, consult a qualified attorney.
How to read this guide
- New to this? Read Parts 1–4. They give you the one mental model you need and walk through real examples (including what happens to a course you bought, and to your assets when you die).
- Building a product, advising clients, or planning an estate? Keep going into Parts 5–6 for the case law, statutes, and the four compliance workstreams that decide whether a resale or transfer is actually lawful.
Part 1: The one idea that explains everything — ownership vs. license
Almost every question about selling, transferring, or inheriting a digital asset collapses into a single test:
Do you own the asset, or are you merely licensed to use it?
- Ownership means you hold title to the thing itself. You can use it, sell it, give it away, or pass it to your heirs. A domain name, a crypto wallet, a website you built, a photo you shot.
- A license means a company has granted you permission to use something they still control — usually personal, usually non-transferable, and revocable under their terms. A Netflix subscription, a Kindle book, a Udemy course.
The confusion is understandable, because the everyday word for both is “buy.” You “buy” a domain and you “buy” a course — but only one of them becomes yours. The license simply rents you access, often for a long time, sometimes for “lifetime,” but never as property.
Everything below is just this test applied to different situations.
Part 2: What you can actually sell
Only assets that pass two tests belong in a “for sale” or “for transfer” state: provable ownership and a real transfer mechanism.
Cleanly sellable — real markets exist
| Asset | Why it qualifies | How ownership is proven | How it transfers |
|---|---|---|---|
| Domain names | You hold title, not a license | WHOIS / registrar login / auth (EPP) code | Registrar push or EPP transfer, escrow-backed |
| Monetized websites & blogs | Transferable business asset | Domain control + traffic/revenue records | Domain + hosting migration bundle |
| Newsletters & email lists | Transferable business asset | Platform ownership + list export | Platform/list migration (privacy caveat below) |
| Creator-owned digital IP — courses, ebooks, presets, templates, fonts, photos, code you made | You own the copyright | Proof of authorship / original source files | File delivery + license or assignment |
| Crypto & NFTs | Transferable by design | On-chain signature from the controlling wallet | On-chain transaction |
Domains are the cleanest case in the entire landscape: ownership verification, legal transfer, and escrow are all solved with off-the-shelf infrastructure.
The grey zone — restricted by terms of service
Social media handles, gaming accounts, and in-game items have real demand and informal markets, but trading them usually violates the platform’s terms. These trades also attract the classic attack vectors: the original owner reclaiming the account, SMS/email recovery exploits, and payment chargebacks after the login is handed over. Catalog and inform here; don’t broker until a hardened trust-and-escrow layer exists.
Vault-only — never transferable
Purchased courses (Udemy, Coursera), streaming and SaaS subscriptions, and purchased media (Kindle, iTunes) are personal licenses. They belong in an inventory for security and legacy planning, but they cannot carry a “for transfer” state — there is nothing to transfer but a login.
Part 3: Worked example — the Udemy course
This example is worth spelling out because it’s the single most common misunderstanding.
Can you resell one course you bought? No.
When you enroll in a Udemy course, you receive a limited, non-exclusive, non-transferable license to view it — courses are licensed, not sold. Udemy’s terms explicitly prohibit transferring or reselling a course “in any way, including by sharing account information with a purchaser.” There is no asset changing hands; there’s a personal viewing permission that cannot be handed off.
Can you sell your whole account instead? Also no — and it’s more clearly banned.
Selling the account is “sharing account information with a purchaser,” which the terms name directly. Beyond the contract, it fails mechanically:
- There’s no “transfer ownership” feature — you’d hand over your email login and password.
- The account stays tied to your identity, email, payment methods, and 2FA. A single password reset locks the other party out.
- The lifetime access you’d be “selling” can be disabled by the platform for a policy violation — and reselling is the violation. The buyer can lose everything, with no escrow and no chargeback protection for either side.
Ten non-transferable licenses inside one account are still ten non-transferable licenses. Wrapping them in an account doesn’t convert access the platform grants you personally into property you own.
The one exception: a course you created
If you were the instructor, the course is your intellectual property. The copyright — and any future royalties — is a genuine asset that you can license, sell, or pass to your estate. Authoring something and buying access to it are opposite sides of this entire guide.
Part 4: What happens when you die
Inheritance runs through the same ownership-vs-license test — and adds a second hurdle. For an heir to actually receive a digital asset, both of these must be true:
- Legal right — Is it yours to pass on? (An owned asset or your own IP: yes. A license: generally no.)
- Practical access — Can your heirs actually reach it? Registrar logins, wallet keys, seed phrases, recovery details.
Either one missing is fatal. A crypto wallet you fully own is worthless to your family if the seed phrase is lost — nothing and no one can recover it. A domain you own sits in limbo if no one knows the registrar login. Owned but inaccessible is its own failure mode, separate from licensed and therefore not yours.
What happens to common assets on death
| Asset | Passes to heirs? | The catch |
|---|---|---|
| Domain names | Yes — it’s property | Registrars have a deceased-owner process; heirs need the login or a death certificate + paperwork |
| Crypto / NFTs | Yes, if heirs have the keys | No keys = permanently lost |
| Websites, newsletters, monetized IP you built | Yes — business asset + copyright | Access to hosting, domain, and lists must be documented |
| Courses / ebooks / music you created | Yes — copyright to your estate | Confirm the platform’s terms on future income to beneficiaries |
| Courses you bought, streaming/SaaS subs, Kindle/iTunes purchases | No — personal license | Terminates on death; not part of your estate |
| Social & gaming accounts | Usually no | Most platforms offer only memorialization or deletion, not transfer |
Your Udemy courses, specifically
They end with you. The license is personal and non-transferable, so there is nothing to inherit. Udemy has no legacy-contact or beneficiary tool. The account goes dormant. Family members logging in with your credentials face the same grey-zone problem as an account sale — and unauthorized access to a deceased person’s account can violate both the platform’s terms and computer-access laws.
The mechanisms that actually work
Because platforms rarely hand accounts to grieving families, real digital estate planning depends on things you set up in advance:
- Platform legacy tools — Apple Legacy Contact, Google Inactive Account Manager, Facebook Legacy Contact. These are the only sanctioned “pass it on” switches, and only work if configured before death.
- The legal layer — In the US, most states have adopted RUFADAA (see Part 5), which gives your executor a legal path to your digital assets — but subject to the tools you set and the wishes you document.
- An inventory + credential plan — For everything without a legacy tool (domains, wallets, self-hosted sites), a documented catalog of what you own and how to reach it is what actually determines whether it survives you.
The takeaway: for most assets, inheritance isn’t a feature a platform grants — it’s a plan you make.
Part 5: The legal layer (for professionals and operators)
This section is a map of the doctrines and statutes that govern digital resale and transfer. It is general information, not legal advice, and it is jurisdiction-specific.
Why “buying” a digital good rarely lets you resell it: the first-sale doctrine
In the physical world, the first-sale doctrine (US: 17 U.S.C. § 109; the EU analogue is “exhaustion”) is what lets you resell a used book or CD: once a lawful copy is sold, the rights holder can’t control its further distribution. Courts have largely refused to extend this to digital goods.
- United States — no digital first sale. In Capitol Records, LLC v. ReDigi Inc. (2d Cir., 2018), the court held that reselling purchased digital music files inherently creates a new, unauthorized reproduction, so the first-sale defense doesn’t apply. Earlier, Vernor v. Autodesk (9th Cir., 2010) reinforced that a user acquiring software under a license is a licensee, not an owner, and therefore cannot invoke first sale to resell.
- European Union — a narrow, software-only exception. In UsedSoft GmbH v. Oracle (CJEU, 2012), the court allowed resale of “used” downloaded software licenses under the Software Directive, provided the original licensee stops using their copy. But the CJEU later declined to extend this to ebooks in Tom Kabinet (2019), treating ebook supply as “communication to the public” rather than distribution — so no exhaustion.
Bottom line for a marketplace operator: licensed digital content (courses, ebooks, media) is generally not resellable in the US, and only narrowly resellable (software, in the EU). This is before you even reach the platform’s own contractual ban. It’s also why vendors deliberately frame transactions as licenses via EULA/ToS — it lets them retain resale control.
Access after death: RUFADAA, the CFAA, and the SCA
- RUFADAA (Revised Uniform Fiduciary Access to Digital Assets Act, 2015) has been adopted by the large majority of US states. It gives fiduciaries — executors, trustees, agents under power of attorney — legal authority over a decedent’s digital assets, but in a strict priority order: (1) an online tool the user set (e.g., a legacy contact) controls; (2) absent that, the user’s will/directive; (3) absent both, the provider’s terms of service. Practical implication: user-configured legacy tools override everything, which is why “set it up in advance” is the whole game.
- The Computer Fraud and Abuse Act (CFAA) can criminalize unauthorized account access — even by next of kin. Sharing a password is not the same as legal authorization.
- The Stored Communications Act (SCA) restricts providers from disclosing the contents of communications, which is a major reason platforms resist handing account access to families even when they sympathize.
Selling data: GDPR / CCPA
A subscriber email list is personal data. Transferring or selling it isn’t a clean asset sale — under GDPR you need a lawful basis and proper notice, and under the CCPA/CPRA transferring personal data for value can meet the statutory definition of a “sale,” triggering disclosure and opt-out obligations. Newsletter and list transfers must be structured with this in mind, typically via the business-asset-transfer provisions rather than a bare data sale.
Moving money and crypto: money-transmitter / MSB rules
Any marketplace that holds or moves funds between buyer and seller — escrow, payouts, crypto settlement — can trip state money-transmitter licensing and federal FinCEN money-services-business (MSB) registration and AML/KYC obligations. Using a licensed payments/escrow provider (rather than touching funds directly) is the standard way solo operators avoid becoming a regulated money transmitter themselves, but the analysis is fact-specific.
Facilitating breaches of platform terms
A marketplace that helps users transfer assets their platform prohibits from transferring (social handles, gaming accounts, licensed content) risks tortious-interference and contributory-liability exposure, plus the blunt operational risk of the platform banning the transferred accounts outright. “The users agreed to it” is not a shield when the product’s purpose is to route around another company’s contract.
Part 6: Design principles for a compliant transfer marketplace
If you’re operationalizing all of the above into a product, five principles fall out:
- “For transfer” is earned, not a default. An asset qualifies for a transfer state only after passing the ownership test — provable title plus a lawful transfer mechanism. Never a toggle offered by default.
- Launch on the clean tier first. Domains, then creator-owned IP. Both have verifiable ownership and lawful transfer paths, and neither fights a platform’s terms.
- Catalog the grey tier without brokering it. Let users inventory gaming and social accounts and see the restrictions and risks, while you withhold execution until trust and escrow are hardened.
- Keep licenses vault-only. Purchased courses, subscriptions, and licensed media are for inventory, security, and legacy planning — never listing.
- Separate the four compliance workstreams early. (a) Payments/fintech — money-transmitter/MSB analysis and licensed escrow. (b) Contracts — enforceable transfer agreements, warranties, no-reclaim covenants, ToS-risk disclosures. (c) Data protection — GDPR/CCPA handling for any list/data transfer. (d) IP/technology — avoiding facilitation of platform-ToS breaches.
The single rule underneath all five: a marketplace’s job is to move ownership, not access. The moment a “sale” is really a login handoff, you’ve left the realm of assets and entered the realm of liability.
Quick reference
- Can I sell it? Only if I own it (title or my own IP) and there’s a lawful transfer mechanism.
- Bought course or subscription? License, not property. Can’t sell, can’t bequeath.
- Made the course/ebook/photo myself? That’s IP — I can sell and pass it on.
- Domain, website, wallet, NFT? Genuinely transferable — the clean tier.
- Social handle / gaming account? Grey zone; usually against the platform’s terms.
- Planning for death? Need legal right and practical access; set up legacy tools now.
Deliberate Digital Legacy provides practical, self-help technical guides. We do not provide legal advice or estate execution services. Legal outcomes depend on your jurisdiction and specific facts. For legal drafting, statutory compliance, or complex estate matters, consult a qualified attorney.