Picture a registered investment adviser in Chicago. Her client calls with a simple request. He wants the firm to buy and hold a small, newly launched token for his portfolio. The adviser checks the usual list of approved custodians. None of them supports the token. She checks again. Still nothing.

Now she faces an awkward choice. She can refuse the trade and disappoint her client. Or she can hold the token herself and risk breaking the federal custody rules. Neither option is acceptable for a professional adviser. Yet this exact problem has sat at the heart of institutional crypto for years.

The client’s request sounds harmless. The legal problem behind it is anything but. Under the current rules, most advisers cannot simply keep client crypto in a firm-controlled wallet. The rules were written for a world of bank vaults, share certificates and broker-dealer accounts. A brand-new token that no qualified custodian supports falls straight through the cracks.

On October 1, 2026, the US Securities and Exchange Commission moved to close that gap. The Commission proposed a new sec crypto custody framework for advisers and regulated funds. The proposal creates two new pathways. Advisers could use state-chartered trust companies as crypto custodians. In narrow cases, they could even hold client crypto themselves, under strict conditions.

Here is the surprising part. Registered advisers in the United States manage more than $100 trillion in assets. Even a tiny, carefully controlled doorway into crypto could matter enormously over time. That is why a dry-looking custody proposal deserves your attention.

This guide explains the proposal in plain English. You will learn what custody means, why crypto broke the old rules, and how the two new options would work. You will also see the safeguard conditions, the key dates, and the December 7 comment deadline. We will be honest throughout: this is a proposal, not a law.

Executive Summary

The SEC published its crypto custody proposal on October 1, 2026. It appeared in the Federal Register on October 6, 2026. Public comments are due by December 7, 2026. Nothing becomes final until the comment period ends and the Commission votes. Here are the key points.

• The proposal covers SEC-registered investment advisers, registered investment companies and business development companies.
• It applies to crypto assets that count as client funds or securities under the Advisers Act custody rule, or as securities and similar investments under the Investment Company Act.
• Option one lets advisers and funds use state trust companies as permitted crypto custodians, if strict due-diligence conditions are met.
• Option two allows adviser self-custody only as a last resort, after a written finding that no permitted custodian is available for the asset.
• Cost alone can never justify self-custody. If a custodian later becomes available, the assets must move.
• Self-custody comes with heavy safeguards: separate addresses per client, two-person approval for transfers, quarterly findings, annual cybersecurity reviews and an independent audit of controls within six months.
• The proposal does not touch personal self-custody. Your own wallet, held for yourself, is completely unaffected.
• The Advisers Act custody rule would be redesignated from Rule 206(4)-2 to Rule 223-1. New Investment Company Act rules 17f-8 and 17f-9 would be added.
• The package also updates some non-crypto items, including private fund audits, broker-dealers as fund custodians and standing letters of authorization.

What Custody Actually Means

Custody sounds like a legal term, and it is. But the idea underneath is simple. Custody means holding something valuable on behalf of someone else. When you hand your assets to a professional, custody rules decide who holds them and how they are protected.

The basic idea in everyday terms

Think about a safe deposit box at a bank. The bank holds your valuables. You still own them. The bank’s job is to keep them safe and return them when asked. Financial custody works the same way. A custodian holds client assets so the adviser who manages them cannot simply walk away with them.

This separation matters. History is full of advisers who stole client money because they controlled both the advice and the assets. Custody rules break that link. The adviser decides what to buy. An independent custodian holds what was bought. Clients get statements from the custodian, so they can check the adviser’s story.

Why regulators care so much

The SEC’s custody framework exists to prevent loss, theft and misuse of client assets. It requires advisers to use qualified custodians in most cases. It also sets up surprise examinations, internal controls and client notifications. These protections sound boring. They are also the reason most clients never have to worry about whether their assets still exist.

If you are new to how digital asset platforms fit into this picture, our complete guide to crypto exchanges explains how trading venues differ from dedicated custodians. The distinction matters here, because an exchange account is not the same thing as regulated custody.

Funds and securities: the two buckets

The proposal works across two legal buckets. Under the Advisers Act, the custody rule covers client funds and securities that an adviser holds or can access. Under the Investment Company Act, separate rules govern how registered funds and business development companies custody their securities and similar investments. The crypto proposal updates both sides, which is why it carries two sets of release numbers and two sets of rule changes.

Why Crypto Broke the Old Rules

The existing custody rules were built for traditional assets. Stocks sit in brokerage accounts. Bonds sit with banks and trust companies. The system assumes a willing, qualified custodian exists for every asset an adviser might buy. Crypto broke that assumption.

New tokens, no custodian

Thousands of tokens exist, and new ones launch constantly. Qualified custodians support only a fraction of them. A custodian must build secure key storage, insurance arrangements and compliance processes for each asset. That takes time and money. So for many smaller or newer tokens, no qualified custodian exists at all.

This creates the adviser’s dilemma from our opening story. The client wants the asset. The rules require a qualified custodian. No qualified custodian will take it. The trade cannot happen, at least not cleanly.

The 2023 proposal that went nowhere

This is not the SEC’s first attempt at the problem. In 2023, the Commission proposed a broad “Safeguarding” rule for adviser custody. Industry figures argued that compliant crypto custody under that proposal would have been near-impossible. The criticism was fierce and sustained. That proposal was eventually withdrawn.

The 2026 approach is different. Instead of rewriting everything, it builds on the existing custody framework. It adds targeted pathways for crypto rather than forcing crypto into a shape designed for other assets. Law firm analysis of the new proposal, including Sidley Austin’s summary of the proposed rules, highlights this narrower, more practical design.

A stalled law and a regulatory workaround

Timing matters too. The Clarity Act, the big crypto market-structure bill, stalled in the Senate in September 2026. With legislation stuck, the SEC used its own rulemaking power instead. Chairman Paul S. Atkins framed the proposal as closing a gap. The existing rules were written for traditional assets, he noted, while custodians may not yet offer services for nascent or novel tokens. The proposal tries to solve that specific problem while Congress remains gridlocked.

Regulation is moving on several fronts at once. Our coverage of the CFTC’s latest crypto rules and enforcement moves shows how the derivatives regulator is approaching the same industry from a different angle.

The Proposal at a Glance

Before we dig into the details, it helps to see the whole map. The proposal creates three ways client crypto could be held. The first is the traditional route that already exists. The second and third are new.

Notice the philosophy. The SEC is not deregulating custody. It is widening the door slightly, then surrounding the new entrances with conditions. Self-custody by advisers sits at the far end of the table for a reason. It is the option of last resort, not a convenience. If the differences between trading venues and custodians still blur together for you, our guide to how crypto exchanges work draws that line clearly.

Option 1: State Trust Companies as Custodians

The first new pathway is the simpler one. Advisers and regulated funds could use state-chartered trust companies as permitted custodians for crypto assets. Today, the federal custody framework leans heavily on banks and a short list of qualified institutions. Many crypto-native custody businesses, however, operate as state trust companies. This option would bring them inside the federal perimeter, with conditions.

The reasonable-basis test

An adviser cannot simply pick any trust company and move on. The adviser or fund must have a reasonable basis to believe the company qualifies. That belief must rest on due inquiry. It must also be maintained on an ongoing basis, not checked once and forgotten.

Two things must be true. First, the trust company must be authorised by its state regulator to provide custody services. Second, it must maintain written policies and procedures designed to protect assets from theft, loss or misappropriation. Those procedures include producing annual audited financial statements. In plain terms: the company must be licensed, organised and financially transparent.

Why this option matters

State trust charters are already a common home for crypto custody businesses. Allowing advisers to use them expands real choice without inventing a new institution type. More competition among custodians could also expand token coverage over time. If more custodians can serve advisers profitably, more assets become holdable through the traditional route. That, in turn, shrinks the number of cases where anyone needs the self-custody fallback.

Regulators outside the US are wrestling with similar questions. Our report on Japan’s latest crypto regulation moves shows another major market tightening its own exchange and custody expectations.

Option 2: Adviser Self-Custody as a Last Resort

The second pathway is the headline-grabber. In limited circumstances, an adviser could hold client crypto assets itself. Read the conditions carefully, though. The SEC has wrapped this option in so many safeguards that it functions more like an emergency bridge than an open road.

The written finding comes first

Before self-custody begins, the adviser must document a written finding. The finding must state that no permitted or qualified custodian is available for that specific asset. Think of our opening example: a newly launched token that no custodian supports. That is the target situation.

The finding is not permanent. It must be refreshed quarterly. If a custodian becomes reasonably available, the assets must move to that custodian. And one justification is explicitly banned. Cost alone can never justify self-custody. An adviser cannot choose self-custody merely because a custodian is expensive.

The safeguard checklist

While assets sit with the adviser, a demanding set of controls applies. The table below lists them.

Reading the checklist like a compliance officer

Each line solves a specific historical problem. Separate addresses stop one client’s assets from quietly covering another’s losses. Two-person approval stops a single rogue employee from draining a wallet. Quarterly statements let clients verify holdings themselves. The independent audit gives outsiders a look at the controls. Together, the conditions recreate much of what a custodian provides, inside the adviser’s own walls.

The burden is deliberate. Self-custody under this proposal is possible, but it is not cheap or casual. An adviser would need expertise, systems, staff and auditors. For most firms, a custodian will remain the easier answer whenever one exists. That is precisely the point.

What self-custody does not allow

It is worth stating the limits plainly. An adviser cannot self-custody because it prefers its own wallet software. It cannot self-custody because a custodian charges high fees. It cannot keep assets after a custodian becomes available. And it cannot treat the written finding as a one-time formality. Every quarter, the question must be asked again: is there still no other way?

Who Is Affected, and Who Is Not

Custody headlines often cause unnecessary panic among ordinary holders. So let us separate the audiences clearly.

Covered by the proposal

The proposal speaks to regulated professionals. It covers SEC-registered investment advisers. It covers registered investment companies, the regulated funds most investors know as mutual funds and similar vehicles. It also covers business development companies. For these actors, the proposal changes which custodians they may use for crypto, and when an adviser may hold crypto itself.

The assets covered are equally specific. On the adviser side, the rules address crypto assets that are client funds or securities under the custody rule. On the fund side, they address securities and similar investments under the Investment Company Act. Not every token automatically falls inside. The legal character of each asset still matters.

Not covered: your own wallet

Here is the reassurance many readers need. This proposal does not change personal self-custody. If you hold your own crypto in your own wallet, nothing here applies to you. No written findings. No quarterly reviews. No two-person rule for your own transfers. The proposal regulates professionals holding other people’s assets, not individuals holding their own.

If personal wallet choices are your concern, our complete wallet guide walks through the main options and trade-offs. And if you are deciding which assets deserve a place in your portfolio at all, our practical framework for evaluating crypto is a sensible starting point.

The trillion-dollar backdrop

Why does an inside-baseball custody rule matter to markets? Scale. Registered advisers manage over $100 trillion. Most of that money will never touch crypto. But even a small compliant pathway can channel significant institutional capital over time. Custody has long been the boring bottleneck. This proposal attacks the bottleneck directly, which is why industry coverage such as Crowdfund Insider’s report on the conditional custody framework treated the release as a notable step.

Timeline: The Key Dates

Rulemaking runs on a calendar. Here is where this proposal stands and what happens next.

Two lessons hide in that table. First, the comment period is real. Industry groups, advisers and ordinary investors can all file comments, and agencies do adjust rules in response. Second, there is no shortcut. Even a popular proposal must survive the comment process and a final Commission vote before it binds anyone.

Market timing adds another layer. Custody news lands in a market already digesting rate decisions and shifting sentiment, as our analysis of Bitcoin below $80,000 around the Fed decision explored. Regulatory clarity rarely moves prices in a day, but it quietly shapes who can buy, and how, for years.

Four Illustrative Scenarios

The firms below are invented for illustration. They are not real companies or people. Each scenario shows how the proposal could work in practice if it is adopted.

Case study 1: The adviser and the unsupported token

Problem: A mid-sized advisory firm, call it Northgate Advisory, has a client who wants exposure to a newly launched token. No qualified custodian supports it. The firm must either refuse or break its own compliance rules.

Strategy: Under the proposal, Northgate documents a written finding that no permitted custodian is available for the token. It then prepares to self-custody under the full safeguard checklist.

Execution: The firm opens a separate blockchain address for the client. It sets up two-person approval for every transfer. It schedules quarterly reviews of the finding and quarterly statements to the client. An independent auditor is engaged to evaluate the custody controls within six months.

Results: In this scenario, the client gets the exposure he asked for, inside a documented and audited structure. The firm gains a new service, but also a permanent quarterly workload.

Lessons: Self-custody is a compliance project, not a wallet download. The finding, the controls and the audit trail are the product.

Case study 2: The fund adding a crypto sleeve

Problem: A registered fund, call it the Harbor Balanced Fund, wants a small crypto allocation. Its board worries about custody risk and about relying on institutions outside the traditional qualified-custodian list.

Strategy: The fund evaluates a state-chartered trust company that already custodies crypto. It applies the reasonable-basis test before appointing it.

Execution: The fund’s due-diligence team confirms the trust company is authorised by its state regulator. It reviews the company’s written safeguarding policies and its annual audited financial statements. The board documents its conclusions and schedules ongoing reviews.

Results: The fund launches its crypto sleeve with a custodian its board can defend. The arrangement fits the new Investment Company Act rules 17f-8 and 17f-9.

Lessons: For funds, option one is likely the workhorse of this proposal. Diligence is ongoing, so the first check is only the beginning.

Case study 3: The trust company preparing to qualify

Problem: A state-chartered trust company, call it Prairie State Trust, custodies crypto for retail platforms. It wants adviser and fund clients, but it must prove it meets the proposal’s expectations.

Strategy: Prairie State treats the proposal as a specification sheet. It strengthens its written policies against theft, loss and misappropriation. It also prepares clean, annual audited financial statements.

Execution: The company documents its state authorisation. It builds a diligence pack for prospective adviser clients. The pack includes its policies, audit reports and supervisory history, ready for any adviser’s due inquiry.

Results: When advisers come calling, Prairie State can answer the reasonable-basis test quickly and completely. Its preparation becomes a competitive advantage.

Lessons: The proposal rewards custodians who can prove discipline on paper. Transparency is the qualification.

Case study 4: The compliance officer’s quarterly machine

Problem: A chief compliance officer, call her Dana, works at a firm that self-custodies one unsupported token for a handful of clients. She fears the arrangement will decay into a forgotten exception.

Strategy: Dana builds a quarterly machine. Every quarter, the firm re-runs the custodian availability search, refreshes the written findings and issues client statements. For fund clients, she prepares board review materials on the same cycle.

Execution: She calendars the annual cybersecurity review. She diarises the six-month independent audit deadline. She keeps a watchlist of custodians, so the moment one supports the token, transfers can begin.

Results: In this scenario, the exception stays exceptional. The quarterly rhythm catches changes early, and the exit to a custodian happens as soon as it becomes possible.

Lessons: The proposal’s safeguards only work if someone owns the calendar. Process, not intention, keeps self-custody compliant.

Custody Providers Advisers Already Use

Whatever happens to this proposal, advisers will keep relying on specialist custodians for most assets. Below are ten real providers that dominate institutional crypto custody conversations. Most price on a custom, quote-based model. Where typical ranges are commonly reported, we describe them as typical rather than exact, because fees vary with assets, volume and services.

1. Coinbase Custody

Pros: Huge scale, deep liquidity connections through the wider Coinbase group, and a long operating history with institutions. Cons: Pricing is custom and can be significant for smaller accounts. Pricing: Quote-based; custody fees are commonly reported as a percentage of assets under custody, varying by client. Best use: Large advisers and funds wanting a mainstream, heavily scrutinised provider.

2. BitGo

Pros: One of the oldest crypto custody specialists, with regulated trust operations and strong wallet technology. Cons: The breadth of products can make onboarding feel complex. Pricing: Custom quotes, typically blending custody and wallet service fees. Best use: Institutions wanting a crypto-native custodian with a long track record.

3. Anchorage Digital Bank

Pros: A federally chartered digital asset bank in the US, which simplifies some regulatory conversations. Cons: Premium positioning means premium pricing for many clients. Pricing: Quote-based and undisclosed publicly. Best use: Advisers and funds that value a national bank charter in their custody stack.

4. Fidelity Digital Assets

Pros: The Fidelity name carries weight with traditional boards and compliance teams. Integrated trading and custody. Cons: Asset support has historically been narrower than crypto-native rivals. Pricing: Custom institutional pricing. Best use: Traditional firms making a cautious first move into digital assets.

5. Fireblocks

Pros: Powerful wallet infrastructure and transfer network used across the industry. Excellent for active movement of assets. Cons: It is primarily a technology platform, so the regulatory custody wrapper depends on the arrangement chosen. Pricing: Subscription and usage-based, quoted per client. Best use: Firms needing secure wallet infrastructure and fast internal transfers.

6. Ledger Enterprise

Pros: Built on Ledger’s hardware security heritage, with governance workflows for teams. Cons: Self-managed elements mean the client carries more operational responsibility. Pricing: Platform pricing on application. Best use: Firms that want direct control of keys with institutional governance layered on top.

7. Gemini Custody

Pros: A regulated US trust company structure with a clean, compliance-forward reputation. Cons: Smaller scale than the largest rivals. Pricing: Gemini has historically published custody fee schedules, though institutional terms are quoted individually. Best use: Advisers wanting a US-regulated trust custodian with straightforward arrangements.

8. Kraken Custody

Pros: Backed by a long-running exchange group with a state-chartered banking arm in Wyoming. Cons: Its institutional custody offering is newer than its exchange business. Pricing: Custom quotes for qualified clients. Best use: Institutions already working within the Kraken ecosystem.

9. Copper

Pros: Known for off-exchange settlement, letting clients trade while assets stay in custody. Cons: Its model differs from classic custody, so diligence teams must understand the structure carefully. Pricing: Quote-based. Best use: Trading-focused institutions that want to reduce exchange counterparty exposure.

10. Hex Trust

Pros: Strong presence in Asia and the Middle East, with licences in several jurisdictions. Cons: Less familiar to US-only compliance teams than domestic names. Pricing: Custom institutional pricing. Best use: Global firms needing licensed custody across multiple regions.

Choosing among providers is only one part of building a sensible crypto process. Our framework for evaluating which crypto to buy covers the asset side of the same decision. And for readers still forming a view on the market’s long-term direction, our long-form analysis asking whether crypto is dead puts custody and adoption trends in a wider context.

What Happens Next

The proposal now sits in its comment window. Until December 7, 2026, anyone can file a view with the SEC. Expect detailed letters from adviser groups, fund complexes, custodians and investor advocates. Some will push for wider pathways. Others will argue the safeguards are still too light, or too heavy.

After the window closes, the Commission staff will review the comments. The Commission may then vote to adopt the rules, adopt them with changes, or let the proposal lapse. Timelines after a comment period vary. Nobody honest can give you a firm adoption date today.

Watch three things while you wait. First, watch whether commenters attack the quarterly finding requirement as unworkable. Second, watch whether state trust companies seek clearer qualification standards. Third, watch Congress. A revived market-structure bill could overtake parts of this rulemaking entirely. Other regulators are moving in parallel, as our reporting on Japan’s crypto regulation news and the CFTC’s enforcement agenda both show.

Meanwhile, the rule redesignations are worth noting for compliance teams. The Advisers Act custody rule would move from Rule 206(4)-2 to Rule 223-1. The new Investment Company Act rules are numbered 17f-8 and 17f-9. The package also updates private fund audits, broker-dealers as fund custodians and standing letters of authorization. Custody professionals will be updating manuals whichever way the vote goes.

Frequently Asked Questions

1. Is this law yet?

No. The sec crypto custody framework is a proposal only. It was proposed on October 1, 2026 and published in the Federal Register on October 6, 2026. It becomes binding only if the Commission votes to adopt final rules after the comment period.

2. Does it affect my own wallet?

No. The proposal regulates professionals holding client assets. Personal self-custody, where you hold your own crypto in your own wallet, is completely untouched. Our guide to choosing a crypto wallet covers the personal side in full.

3. When do comments close?

Public comments are due by December 7, 2026. After that date, the SEC reviews the submissions and decides whether to adopt, amend or drop the proposal.

4. Who exactly is covered?

SEC-registered investment advisers, registered investment companies and business development companies. The rules apply to crypto assets that are client funds or securities under the Advisers Act custody rule, or securities and similar investments under the Investment Company Act.

5. What is a state trust company, and why does it matter?

It is a trust company chartered and supervised by a US state rather than the federal government. Many crypto custody businesses use this structure. The proposal would let advisers and funds use such companies as permitted custodians, if the company is authorised by its state regulator and keeps written safeguarding policies, including annual audited financial statements.

6. When could an adviser self-custody client crypto?

Only as a last resort. The adviser must document a written finding that no permitted or qualified custodian is available for that asset. The finding must be refreshed quarterly, and the assets must move once a custodian becomes reasonably available.

7. Can an adviser self-custody just to save money?

No. The proposal states that cost alone can never justify self-custody. Expense is not a valid reason to skip a custodian.

8. What safeguards apply during self-custody?

The adviser must control the assets alone under a written agreement, show safeguarding expertise, use separate addresses per client, require two-person approval for transfers, send quarterly client statements, complete an annual cybersecurity review, and have an independent auditor evaluate its custody controls within six months. Fund boards must review the arrangement quarterly.

9. How is this different from the 2023 Safeguarding proposal?

The 2023 proposal tried to overhaul custody broadly and was withdrawn after industry figures argued that compliant crypto custody under it would be near-impossible. The 2026 proposal is narrower. It builds on the existing custody framework and adds two targeted crypto pathways.

10. What are the official references for this proposal?

The SEC announced it in Press Release 2026-100. The formal releases are Release Nos. IA-7023 and IC-36353, under File No. S7-2026-35. The Advisers Act custody rule would be redesignated from Rule 206(4)-2 to Rule 223-1, and new Investment Company Act rules 17f-8 and 17f-9 would be added.

The Bottom Line

The sec crypto custody proposal is a careful, conditional opening. It does not throw the custody rulebook away. It admits that the old rules assumed a custodian always exists, and that crypto proved otherwise. State trust companies would gain a defined route into adviser and fund custody. Advisers would gain a narrow, heavily supervised fallback for assets nobody else will hold.

For ordinary investors, the direct effects are small today. Your own wallet is untouched. Your adviser’s options may widen tomorrow. For the industry, though, this is how institutional doors usually open: not with a bang, but with a custody rule, a checklist and a comment deadline.

If you have questions about how regulation affects your own reading of the market, you can learn more about our site and approach or reach us through our contact page. We track proposals like this one precisely because today’s comment file becomes tomorrow’s market structure.

Note: This article explains a regulatory proposal for general information only. It is not financial advice and not legal advice. Rules described here are proposed, not final, and may change or never be adopted. Speak to a qualified professional about your own situation.

So here is the question we leave with you: if the SEC adopts this framework, will the last-resort self-custody option actually get used, or will the safeguards make custodians the only practical answer?