There is no single rule that can be used to determine whether it is legal. There are many countries that monitor ICOs as long as they can avoid this part of the risk.