I don't think NFTs as a whole are breaking any FTC related laws. However, the way that they are marketed or sold could break some laws if the communications are deceptive. For example, a rug pull might be considered illegal under US Law Title 16, Chapter 1, Subchapter B, Part 238.4 "Switch after Sale":
crypto consumers should be far more discerning than they are
even the term “rug-pull” is not discerning enough, it refers to a dozen distinct behaviors, of which a few would still be illegal while the other many behaviors are just a misalignment of expectations
removing liquidity? thats not illegal under either consumer or securities framework and most commonly called a “rug pull”. communities can provide their own liquidity as a feature of the crypto space, and in no space do purchasers have an expectation for liquidity
ceasing to continue making press releases or taking down a website and community channels? also not illegal under the consumer or securities framework.
taking other people’s provided liquidity out of a staking contract without saying thats whats going to happen would be illegal under both frameworks. that kind of rug pull is theft.
collecting funds and promising to do X and then not even attempting it, thats prosecutable under both the consumer and securities frameworks, in more ways under a securities framework
Let's start by looking at what typical tokens are.
A fungible token is simply a store of the following records:
(public key, amount)
There is a stored procedure that lets anyone with the private key to lower the "amount" value on their row and increase the "amount" value on another row by the same amount. There's no tracking of which part of the amount came from where, the "tokens" are fungible.
Now let's look at what a non-fungible token is.
It's a store of the following records:
(public key, id)
Whoever has the private key can change the public key field in the record.
That's... it.
You can add a table that has
(id, metadata, url), that's common and what you see with most shown NFTs. There's some helper functions but really that's the essence of it.
None of that necessitates it being sold as an investment in a common enterprise any more than selling bits of paper with a number and a signature on them does. Signed prints by an artist aren't securities, your place in the line in a queue isn't a security, a concert ticket isn't a security.
You can obviously however treat the above data structure as representing some kind of security. This is true with fungible tokens too, a list of shareholders is essentially the same structure. So it comes down to how it's sold.
Not all ownership denotes a security. If you own (and own can often be interpreted simply around having control over) a thing, you can sell it without that necessarily being a security. That's why the test is not "can it be sold".