SEC Introduces Proposed Crypto Custody Regulations for Investment Advisors and Funds

The United States Securities and Exchange Commission (SEC) has unveiled a comprehensive draft regulation that would reshape how investment advisers and pooled investment vehicles handle the custody of digital assets such as cryptocurrencies. This proposal arrives at a pivotal moment for the agency’s newly formed Crypto Task Force, marking what many observers describe as a symbolic farewell to its inaugural chair, Commissioner Hester Peirce, who is slated to leave the commission later this week. While the formal rulemaking process is still in its early stages, the substance of the proposal signals a decisive shift toward tighter oversight of crypto‑related custodial practices, aiming to protect investors and bring greater clarity to an industry that has long operated in a regulatory gray zone. **Background and Context** Since the SEC first began addressing the rapid rise of digital assets, the question of who can safely hold and safeguard those assets for clients has been a persistent source of uncertainty.

Traditional securities custodians—banks, broker‑dealers, and other regulated entities—have long been subject to stringent rules that require segregation of client assets, regular audits, and robust internal controls. By contrast, many crypto‑focused advisers and fund managers have relied on a patchwork of self‑regulation, third‑party custodians that may lack the same level of regulatory scrutiny, or even direct control of private keys themselves. This disparity has raised concerns among regulators, investors, and industry participants about the potential for fraud, theft, or mismanagement. Commissioner Peirce, known for her advocacy of clearer rules for emerging technologies, helped launch the Crypto Task Force in 2023 to bring focused attention to these issues.

Over the past year, the task force has conducted public hearings, solicited stakeholder input, and produced a series of advisory letters. The new custody rule can be seen as the culmination of those efforts, providing a concrete regulatory framework that the SEC hopes will standardize best practices across the sector.

**Key Provisions of the Proposed Rule** 1. **Definition of Custody** – The draft expands the definition of “custody” to include not only the physical or electronic holding of crypto tokens but also the control of private keys, access credentials, and any technology that enables the transfer or disposition of digital assets.

This broader definition is intended to capture a wider range of arrangements, including custodial services offered by third‑party providers and self‑custody arrangements used by advisers themselves. 2. **Eligibility Requirements for Custodians** – Entities that wish to act as custodians for investment advisers or funds will need to meet a set of eligibility criteria similar to those imposed on traditional securities custodians. These criteria include maintaining a minimum net‑capital level, undergoing regular independent audits, and implementing robust cybersecurity controls.

The rule also calls for custodians to be registered with the SEC or to be subject to a comparable supervisory regime in another jurisdiction. 3.

**Segregation and Record‑Keeping** – Custodians must keep client assets segregated from their own proprietary holdings, ensuring that each client’s crypto portfolio is clearly identifiable and protected from claims by the custodian’s creditors. Detailed record‑keeping requirements will mandate real‑time reporting of asset balances, transaction histories, and any movements of private keys. 4.

**Audit and Examination** – The SEC proposes that custodians be subject to periodic examinations by the agency or its designated auditors. These examinations will focus on the adequacy of internal controls, the effectiveness of cybersecurity measures, and compliance with segregation rules. Custodians will also be required to provide auditors with cryptographic proof of asset holdings, such as merkle‑tree proofs or other verifiable data structures.

5. **Disclosure Obligations** – Investment advisers and fund managers must disclose to investors the specific custodial arrangements they employ, including the identity of the custodian, the level of protection offered, and any associated risks. This disclosure must be included in offering documents, prospectuses, and ongoing reporting to clients. 6.

**Transition Period and Compliance Timeline** – The proposal includes a phased implementation schedule, giving existing advisers and funds a grace period of up to 18 months to align with the new requirements. New entrants to the market would be expected to comply within six months of launching their services.

**Implications for Market Participants** The introduction of a formal custody rule is likely to have far‑reaching consequences for a variety of stakeholders: - **Investment Advisers** – Firms that currently rely on informal or self‑custody arrangements may need to partner with regulated custodians, potentially increasing operational costs but also enhancing investor confidence. - **Crypto Custodial Providers** – Companies that specialize in safeguarding digital assets will face a regulatory hurdle, needing to obtain SEC registration or demonstrate compliance with equivalent standards abroad. This could spur consolidation in the custodial market as smaller players seek partnerships or acquisitions.

- **Investors** – Retail and institutional investors stand to benefit from greater transparency and stronger safeguards against loss or theft. The mandatory disclosures will also help investors make more informed decisions about the risk profile of crypto‑focused funds.

- **Legal and Compliance Teams** – The rule will generate a surge in demand for legal counsel and compliance professionals with expertise in both securities law and blockchain technology, as firms scramble to interpret and implement the new requirements. **Potential Challenges and Criticisms** While many welcome the move toward greater regulatory certainty, some critics argue that the proposed rule may stifle innovation. The added compliance burden could deter startups from entering the market or limit the ability of smaller advisers to offer crypto exposure to their clients.

Others contend that the definition of custody may be overly broad, capturing arrangements that do not pose significant risk and thereby imposing unnecessary oversight. Furthermore, the rule’s emphasis on registration and periodic audits raises questions about jurisdictional coordination. Many crypto custodians operate globally, and aligning U.S. standards with those of other regulatory bodies—such as the European Securities and Markets Authority (ESMA) or the Financial Conduct Authority (FCA) in the United Kingdom—will be essential to avoid duplicate reporting and conflicting obligations.

**Next Steps in the Rulemaking Process** The SEC has opened a 60‑day public comment period, inviting feedback from industry participants, consumer advocates, and the general public. Following the comment period, the agency will review the input, potentially revise the language of the rule, and then issue a final version. Once finalized, the rule will be codified in the Code of Federal Regulations and become enforceable. Commissioner Peirce’s departure adds a symbolic dimension to the rollout.

Her tenure was marked by a proactive approach to emerging technologies, and the custody proposal serves as a capstone to her efforts to bring clarity to the crypto space. Observers will watch closely to see whether her successor maintains the same momentum or adopts a different regulatory philosophy.

**Conclusion** The SEC’s proposed crypto custody rule represents a significant step toward integrating digital assets into the existing securities regulatory framework. By establishing clear standards for who can hold crypto assets on behalf of investors, how those assets must be safeguarded, and what disclosures are required, the agency aims to reduce risk and foster greater market confidence.

While the rule may introduce new compliance costs and operational adjustments, it also offers the promise of a more transparent, secure, and mature crypto investment landscape. Stakeholders are encouraged to engage in the comment process, assess the potential impact on their business models, and begin preparing for the eventual implementation of these new requirements.