
Qualified Custodian for Crypto: SEC Custody Rules Explained
Last updated: October 12, 2026. This page explains regulation; it is not legal advice.
TL;DR
A qualified custodian is a regulated institution that SEC-registered investment advisers must generally use to hold client assets. For crypto, that means banks, trust banks, registered broker-dealers and, since a September 2025 SEC staff letter, qualifying state-chartered trust companies. On October 1, 2026, the SEC proposed rules that would make state trust companies qualified custodians for crypto by rule and allow limited adviser self-custody. The proposal is open for public comment.
Qualified custodian: definition and positioning
The term comes from the Custody Rule, Rule 206(4)-2 under the Investment Advisers Act of 1940. If an adviser has custody of client funds or securities, it must keep them with a qualified custodian, which historically means:
- Banks and savings associations
- Registered broker-dealers
- Futures commission merchants, for certain assets
- Certain foreign financial institutions
Registered funds face parallel requirements under the Investment Company Act. This page covers the regulatory question of who qualifies. For how custody works operationally (key management, cold storage, MPC), see our digital asset custody guide.
The reason crypto made this hard: most specialist crypto custodians are state-chartered trust companies, not banks or broker-dealers, and the rule never clearly said whether a state trust company counted as a "bank." For years, advisers could not be sure their crypto custodian satisfied the rule.
How the rules evolved
| Date | Development | Effect |
|---|---|---|
| February 2023 | SEC proposes the Safeguarding Rule | Would have extended custody rules to all assets, including crypto, with strict conditions |
| January 2025 | SEC staff rescinds SAB 121 | Removed an accounting barrier to banks custodying crypto |
| June 2025 | SEC withdraws the Safeguarding proposal | Ended the 2023 approach |
| September 30, 2025 | Division of Investment Management no-action letter | Staff will not recommend enforcement if advisers and funds use qualifying state trust companies for crypto |
| October 1, 2026 | SEC proposes tailored crypto custody rules | Would make state trust companies qualified custodians by rule and allow conditional self-custody |
Sources: SEC proposing release IA-7023; law firm summaries of the 2025 no-action letter.
The 2025 no-action letter
The September 30, 2025 letter said SEC staff would not recommend enforcement against advisers or regulated funds that treat a state trust company as a bank for holding crypto assets and related cash, if conditions are met. Those include:
- The trust company is authorized by its state banking regulator to custody crypto assets.
- The adviser has a reasonable basis, after due inquiry, to believe that authorization is in place.
- The adviser reviews the custodian's audited financial statements and a recent SOC 1 or SOC 2 report on its controls.
- A written custody agreement requires segregation of client assets and bars lending or rehypothecation without client consent.
- The adviser discloses the material risks of using a state trust company to clients.
Commissioner Hester Peirce described the letter as moving crypto custody out of a regulatory gray zone. The limitation: a no-action letter is staff guidance, not a rule, and can be withdrawn.
The October 2026 proposal
The SEC's October 1, 2026 proposal would turn that relief into rules and go further:
- State trust companies become qualified custodians for crypto assets and related cash under the Advisers Act, and permitted custodians for funds under a new Investment Company Act rule. No determination that the trust company is a "bank" would be needed.
- Conditional adviser self-custody would be allowed only for crypto assets that no qualified custodian will hold, and only if the adviser alone controls the keys.
- New reporting on Form ADV would disclose the use of self-custody or state trust companies for crypto.
The framing I keep coming back to: the 2023 proposal required a qualified custodian while casting doubt on whether any crypto custodian could qualify; the 2026 proposal is designed to close that trap. It accepts the custodians the market already uses and sets conditions around them, rather than redesigning custody for every asset class.
What it means for advisers and funds
- Today: advisers can rely on the 2025 letter to use qualifying state trust companies, provided they document the diligence and agreements it requires.
- If the proposal is adopted: the same custodians gain formal status, and advisers gain a narrow path to self-custody for assets custodians will not support.
- Either way: custody is not a box to tick. Advisers remain responsible for due diligence on controls, segregation, insurance and the custodian's financial health. Our institutional custody guide covers what to evaluate.
Examples of chartered crypto custodians include Anchorage Digital Bank, a federally chartered trust bank, and New York trust companies such as Coinbase Custody Trust Company and Fidelity Digital Assets. Whether a specific firm meets the conditions for a given adviser is a legal determination.
Trade-offs and open questions
The approach expands choice but leaves gaps. State trust company supervision varies by state. Self-custody conditions may be hard for most advisers to meet. Crypto assets that are not securities sit awkwardly in a rule written for "funds and securities." And the broader market structure question, which regulator oversees which tokens, still depends on federal legislation such as the CLARITY Act, which stalled in the Senate in September 2026.
FAQs
What is a qualified custodian for crypto?
A qualified custodian for crypto is a regulated institution that an SEC-registered investment adviser can use to hold client crypto assets under the Custody Rule. Eligible types include banks and federally chartered trust banks, registered broker-dealers and, under 2025 SEC staff relief, state-chartered trust companies authorized by their state to custody crypto.
Can a crypto exchange be a qualified custodian?
An exchange is not automatically a qualified custodian. What matters is the legal entity holding the assets. Some exchange groups operate separately chartered trust companies or banks for custody, and those entities may qualify. Holding client assets in an ordinary exchange trading account generally does not satisfy the Custody Rule.
Are state trust companies qualified custodians?
Under a September 2025 SEC staff no-action letter, advisers and funds can treat qualifying state trust companies as qualified custodians for crypto, subject to conditions including state authorization, audited financials, SOC reports and segregation. An October 2026 SEC proposal would make that status formal by rule.
What did the SEC propose in October 2026?
On October 1, 2026, the SEC proposed custody rules tailored to crypto. They would make state trust companies qualified custodians for crypto assets and related cash, allow advisers to self-custody only crypto that no qualified custodian will hold, and add Form ADV disclosure. The proposal has a 60-day comment period.
Can investment advisers self-custody crypto?
Not under current rules, which require a qualified custodian. The October 2026 SEC proposal would allow adviser self-custody only for crypto assets that no qualified custodian will hold and only where the adviser alone controls the keys, with additional conditions. It is a proposal and is not yet in effect.
Is crypto held by a qualified custodian insured?
Not automatically. Crypto held by a custodian is not covered by FDIC deposit insurance, and SIPC protection depends on the asset and account type. Many custodians carry private insurance against theft or key loss, but coverage limits and exclusions vary, so advisers should review policies directly.
The takeaway
US crypto custody has moved from "no clear compliant option" to a staff-endorsed path, and now to a proposed rule that recognizes the custodians the market actually uses. The open question is whether the final rule keeps the self-custody path narrow or widens it, which will shape how much institutional crypto stays with third-party custodians.


