The United States and Hong Kong released competing crypto custody frameworks within days of each other in early October 2026. On October 1, the SEC proposed Rule 223-1, Rule 17f-8, and Rule 17f-9, creating a federal pathway for registered investment advisers and regulated funds to custody crypto ...
"There has been a gap that has left investment advisers and funds guessing how to custody crypto assets clients demand." — Paul Atkins, Chairman, U.S. Securities and Exchange Commission
The United States and Hong Kong released competing crypto custody frameworks within days of each other in early October 2026. On October 1, the SEC proposed Rule 223-1, Rule 17f-8, and Rule 17f-9, creating a federal pathway for registered investment advisers and regulated funds to custody crypto assets — including, for the first time, a conditional self-custody option. On October 6, the Hong Kong government reaffirmed its plan to submit legislation before year-end establishing four new licensing categories covering virtual asset dealing, custody, advisory, and management services under the Securities and Futures Commission.
The two frameworks address the same structural problem — institutional capital cannot flow into digital assets without clear custodial rules — but diverge sharply on entry thresholds, transitional provisions, and philosophical approach. The SEC's proposal opens self-custody as a fallback and adds state trust companies to the qualified custodian list. Hong Kong's regime mandates HK$10 million in paid-up capital for custodians, requires every person with private key access to hold an individual license, and provides no transitional period: unlicensed firms must cease operations the day the law commences.
The digital asset custody market is valued at approximately $834 billion in 2026, according to Mordor Intelligence, with five institutional providers — Anchorage, BitGo, Fireblocks, Coinbase Custody, and Komainu — holding the majority of tokenized fund assets, which crossed $20 billion in early 2026. How the world's two largest financial regulatory systems define "who can hold crypto" will determine where that capital flows next.
The SEC's October 1 proposal (File No. S7-2026-35) amends custody rules under both the Investment Advisers Act of 1940 and the Investment Company Act of 1940. The filing addresses registered investment advisers, registered investment companies, and business development companies.
Expanding the Qualified Custodian List. The proposal adds state trust companies — entities supervised by state banking authorities with fiduciary powers — as qualified custodians for crypto assets. This codifies a September 30, 2025 no-action letter into binding Commission rules. State trust companies must demonstrate authorization by their state banking authority for crypto custody, submit annual audited U.S. GAAP financial statements, and maintain internal control reports. Client crypto assets must be segregated from the trust company's proprietary holdings in dedicated addresses. No omnibus wallets are permitted.
Conditional Self-Custody. The most notable provision allows advisers to hold client crypto assets directly — possessing private keys without a qualified custodian — under strict conditions:
Board Oversight for Funds. Regulated funds may self-custody through compliant advisers only if their boards review qualified custodian availability reports quarterly and make annual reasonable care determinations.
The public comment period runs 60 days after Federal Register publication, placing the deadline around early December 2026. Commissioner Hester Peirce stated she hoped for a "calm end" to regulatory uncertainty. Commissioner Mark Uyeda acknowledged that adviser custody creates an "inherent conflict of interest" but argued the proposal provides a regulatory pathway while retaining safeguards.
Hong Kong's Financial Services and the Treasury Bureau is preparing amendments to the Anti-Money Laundering and Counter-Terrorist Financing Ordinance that will create four new licensing categories: dealing, custody, advisory, and management of virtual assets. The government reaffirmed on October 6 that the bill will be submitted to the Legislative Council before the end of 2026.
Capital Thresholds. OTC dealers require HK$5 million (approximately $640,000) in paid-up share capital and up to HK$3 million in liquid capital, plus a 12-month operating expense reserve. Custodians face a higher bar: HK$10 million (~$1.28 million) in paid-up capital and HK$3 million in liquid capital. Banks regulated by the HKMA are exempt from the capital requirements.
Personnel Licensing. Both dealers and custodians must have at least two responsible officers approved by the SFC. For custodians, all executive directors must be approved as responsible officers. Every person with direct access to private keys must be individually licensed as a representative.
Custody Mandate. Dealers face a structural constraint: they may only custody client virtual assets with SFC-licensed custodian service providers. Overseas custodians are not initially recognized, meaning dealers cannot operate without a Hong Kong-licensed custodian partner.
No Transitional Period. The SFC's consultation conclusions state that "the licensing regime will take full effect on the commencement date." No deeming arrangements or provisional licenses will be provided. Firms without licenses when the law commences must cease operations immediately. The SFC has warned that entities not engaging in pre-application engagement early "will have to stop operations on the commencement date." The consultation for dealing and custody opened in June 2025 and received more than 190 responses.
Historical benchmarks suggest 5–6 months between bill gazettal and commencement, though no official schedule has been confirmed.
| Dimension | SEC (United States) | SFC (Hong Kong) | |---|---|---| | Scope | Advisers and regulated funds only | All VA dealers, custodians, advisers, managers | | Self-Custody | Permitted under 7 conditions | Not addressed; must use SFC-licensed custodian | | Minimum Capital (Custodian) | No federal minimum specified | HK$10M (~$1.28M) paid-up + HK$3M liquid | | Personnel Licensing | Adviser-level registration sufficient | Individual licensing for every key holder | | Transitional Period | 60-day comment, then implementation timeline | None — compliance required on commencement | | Qualified Custodians | Banks, broker-dealers, FCMs, state trust cos., foreign FIs | SFC-licensed custodians only; overseas not recognized | | Wallet Architecture | Dedicated addresses per client; no omnibus | Cold storage standards from existing SFC guidelines | | Accountant Oversight | Independent control reports within 6 months, then annually | External assessor mandatory for key-holding custodians | | Comment Deadline | ~Early December 2026 | Consultation closed; bill pending |
The philosophical divide is clear. The SEC optimizes for optionality: it expands who can custody (adding state trust companies), creates a fallback self-custody path, and leaves capital thresholds to existing regulations. Hong Kong optimizes for control: high capital floors, individual licensing of key holders, domestic-only custodian recognition, and zero tolerance for unlicensed operation.
Standard Chartered announced on October 8 plans to offer custody for selected crypto assets, stablecoins, and tokenized real-world assets to institutional and accredited corporate clients in Singapore, subject to regulatory requirements. Singapore joins the bank's existing digital asset operations across the UAE, Luxembourg, and Hong Kong. The bank's May 2026 investor presentation outlined ambitions spanning digital asset trading, custody, tokenization, and collateral management.
The timing is not coincidental. As regulators in the U.S. and Hong Kong define custodial frameworks, banks and crypto-native custodians are positioning across jurisdictions. BitGo manages over $100 billion in assets under custody and covers 186 of the top 250 digital assets by market cap. Fireblocks has processed over $10 trillion in cumulative transfers. Anchorage offers $350 million in insurance coverage; Coinbase Prime follows at $320 million.
The SEC proposal's inclusion of state trust companies could expand the U.S. custodian pool significantly. Multiple crypto-focused firms have secured state trust charters in Wyoming, South Dakota, and New York precisely to serve as qualified custodians. The rule change would convert their existing licensing into a federally recognized pathway for the first time.
Hong Kong's approach, by contrast, may consolidate custody among a smaller number of well-capitalized incumbents. The HK$10 million capital floor, combined with the requirement for SFC-licensed custodians only, creates a barrier that favors banks and established firms already holding SFC licenses. Smaller crypto-native firms without the capital or licensing infrastructure face a binary choice: comply before commencement or shut down.
The SEC's self-custody provision addresses a specific gap: certain crypto assets exist on networks where no institutional custodian currently operates. For advisers managing diversified crypto portfolios that include assets beyond Bitcoin and Ether, the absence of qualified custodians has been a binding constraint.
The quarterly reassessment requirement creates an unusual regulatory dynamic. An adviser self-custodying a particular token must check every three months whether a qualified custodian has begun supporting that asset. If one has, the adviser must migrate the asset to the custodian. Self-custody under the proposal is designed as a temporary state, not a permanent one.
Hong Kong took no equivalent step. Under the proposed SFC regime, advisers and dealers must use licensed custodians, full stop. Assets not supportable by a licensed custodian are, by implication, not custodable within the Hong Kong regulatory perimeter. This effectively narrows the asset universe that Hong Kong-licensed firms can serve.
The divergence has practical consequences for tokenized real-world assets, many of which exist on newer networks without established custodial infrastructure. The SEC's self-custody pathway, in principle, allows U.S. advisers to custody these assets while the custodian ecosystem catches up. Hong Kong's approach may delay institutional access to the same assets until a licensed custodian explicitly supports them.
The SEC and Hong Kong SFC are answering the same question — who is permitted to hold digital assets on behalf of institutional clients — with structurally different answers. The SEC is adding doors: more custodian types, a self-custody option, and a defined comment process. Hong Kong is adding locks: higher capital requirements, individual personnel licensing, no transitional period, and no recognition of overseas custodians.
Neither framework is final. The SEC's rules remain in the 60-day comment period, and Hong Kong's bill has not yet been introduced to the Legislative Council. But the direction of each regime is set. For institutional allocators and custody providers operating across both markets, the next 12 months will require parallel compliance programs built on fundamentally different assumptions about how crypto assets should be safeguarded.
The digital asset custody market, projected to grow from $834 billion in 2026 to $1.59 trillion by 2030 according to Mordor Intelligence estimates, will develop along the lines these two regulators are now drawing. The winners will be firms capable of navigating both frameworks simultaneously.