On September 1, 2026, the U.S. Securities and Exchange Commission published Release No. 34-106246, a 421-page proposed overhaul of transfer agent rules — the first substantive rewrite since the late 1970s. For the first time in federal securities regulation, the proposal explicitly permits distri...
"The transfer agent rule proposal, more than a decade in the making, is finally out." — Commissioner Hester Peirce, U.S. Securities and Exchange Commission
On September 1, 2026, the U.S. Securities and Exchange Commission published Release No. 34-106246, a 421-page proposed overhaul of transfer agent rules — the first substantive rewrite since the late 1970s. For the first time in federal securities regulation, the proposal explicitly permits distributed ledger technology (DLT) as part of, or the entirety of, the official master securityholder file. The 60-day comment period runs from Federal Register publication.
The timing is not incidental. DTCC began its SEC-approved tokenization pilot for Russell 1000 equities, major ETFs, and U.S. Treasuries in July 2026. Computershare — transfer agent for approximately 58% of the S&P 500 — announced a partnership with Securitize to issue onchain equity tokens in April 2026. Bullish signed a $4.2 billion deal to acquire Equiniti in May 2026, explicitly to build a global transfer agent for tokenized securities. The SEC is now writing rules for a market that is already forming around it.
This report compares three competing transfer agent models — legacy incumbents, blockchain-native entrants, and hybrid acquirers — and evaluates how Release 34-106246 distributes regulatory advantage among them.
Transfer agents maintain the official record of who owns a publicly traded security. They process transfers, issue and cancel certificates, distribute approximately $5 trillion in dividends and interest annually, and serve as the authoritative link between issuers and shareholders. As of 2025, 253 transfer agents filed Form TA-2 with the SEC. Of those, 152 functioned as recordkeeping agents and 126 provided paying-agent services. Roughly 44% relied on outside service providers.
The rules governing these entities were written when paper stock certificates were the norm. Commissioner Hester Peirce noted in her September 1 statement: "When the Commission first adopted the rules governing transfer agents, holding paper share certificates was the norm. Now few paper certificates exist, and many shares will be tokenized."
The SEC last conducted a formal review of transfer agent rules in a 2015 concept release. No action followed. The intervening 11 years saw tokenized securities grow from a niche concept to a $35.82 billion market in 2026, according to Mordor Intelligence, with projections reaching $184.27 billion by 2031 at a 38.76% compound annual growth rate.
The proposal spans amendments to existing Rules 17ad-1 through 17ad-17 and introduces two new rules: 17ad-30 (compliance programs) and 17ad-31 (restrictive legends). Key provisions:
Technology-neutral recordkeeping. The proposal adopts language expressly permitting transfer agents to use DLT, including blockchain, as the master securityholder file — or as one component of it. Position records must capture digital wallet addresses for tokenized securities. Personal identifying information may be maintained off-chain while position data (share counts, issue dates, wallet addresses) resides on-chain.
Records access and control. Onchain transfer agents must retain exclusive control over the master securityholder file continuously, access and produce records independently without third-party involvement, and post position details within one business day. Records must be retained for six years, including deleted position data, and delivered to the issuer within 15 calendar days upon ceasing service.
Cybersecurity and risk management. Proposed Rule 17ad-12 replaces certificate-focused safeguarding with comprehensive risk management. Written policies must address cybersecurity vulnerabilities inherent to blockchain systems and smart contracts, business continuity plans, and segregated "for the benefit of" bank accounts for client asset protection.
Form TA-2 reporting expansion. Transfer agents must now disclose: the number of security issues using DLT for master files, tokenization provider and DLT platform names, tokenized issue counts segmented by tokenization model (issuer-sponsored vs. third-party) and security type.
Restrictive legends. Rule 17ad-31 governs the placement and removal of restrictive legends, potentially enabling smart contract logic that enforces transfer restrictions directly. Transfer agents must establish a reasonable basis that transactions do not violate Section 5(a) of the Securities Act of 1933.
Compliance programs. Rule 17ad-30 requires written compliance procedures for federal securities law adherence — a new obligation for an industry that previously operated without a formal compliance rule.
SEC Chairman Paul Atkins stated: "This proposal would streamline and modernize the Commission's rules to reflect transfer agents' current processes and operations, including blockchain technology."
The transfer agent sector is consolidating around three distinct models. Each faces different regulatory exposure under the proposed rules.
Model 1: Legacy Incumbents. Computershare, the world's largest transfer agent, serves approximately 58% of the S&P 500 and nearly 3,000 issuer clients. In April 2026, it partnered with Securitize to offer Issuer-Sponsored Tokens (ISTs) alongside traditional shares. ISTs are not derivative tokens; they represent direct equity ownership on-chain, connected to the issuer's official shareholder register. Corporate actions process for IST holdings alongside other directly registered holdings. Computershare's advantage is scale and existing issuer relationships. Its risk is execution speed in an unfamiliar technology stack.
Model 2: Blockchain-Native Entrants. Securitize, the first operational transfer agent to leverage blockchain technology, acts as both a registered transfer agent and a technology provider. Superstate registered its blockchain-based transfer agent in March 2025 to support tokenized funds including its Short Duration U.S. Government Securities Fund. Injective Institutional Services secured transfer agent registration in August 2025. These firms were built for DLT-native recordkeeping but lack the client base and settlement infrastructure of incumbents.
Model 3: Hybrid Acquirers. Bullish announced in May 2026 a $4.2 billion agreement to acquire Equiniti from Siris Capital. The transaction comprises $1.85 billion in assumed Equiniti debt and approximately $2.35 billion in Bullish stock. Equiniti serves nearly 3,000 issuer clients and processes approximately $500 billion in annual payments. On a pro forma combined basis, the companies project approximately $1.3 billion in adjusted total revenue and over $500 million in adjusted EBITDA less capex for 2026. The deal is expected to close in January 2027. The strategy: buy a legacy client base and layer blockchain infrastructure on top.
The Securities Transfer Association, the industry's trade group, has advocated for issuer-sponsored tokenization models integrated directly into transfer agent registers. The distinction is material:
Issuer-sponsored tokens are genuine digital securities maintained on official transfer agent books. The token represents the actual security. The transfer agent processes transfers, corporate actions, and compliance within the same system.
Third-party synthetic tokens are derivative representations created outside official frameworks. A third party takes custody of the underlying security and issues a token that tracks its value. The transfer agent's books may not reflect the beneficial owner.
The SEC's proposed Form TA-2 reporting explicitly requires segmentation by tokenization model, signaling that the regulator views these as categorically different structures. Traditional transfer agents have lobbied the SEC, warning that third-party tokens pose risks to market integrity by separating legal ownership from economic exposure.
This divide will shape competitive dynamics. Computershare's IST model and Securitize's direct-issuance approach both fall on the issuer-sponsored side. Third-party models — common in crypto markets where tokens wrap underlying assets — face higher regulatory scrutiny under the proposed framework.
The Depository Trust Company, a DTCC subsidiary, received a No-Action Letter from the SEC on December 11, 2025, authorizing a three-year tokenization pilot. Limited production trades began in July 2026, with a broader rollout planned for October 2026. The pilot covers select Russell 1000 equities, major-index ETFs, and U.S. Treasuries.
Over 50 financial firms are involved, including BlackRock and JPMorgan. Participants register blockchain wallet addresses to hold tokens corresponding to Tokenized Entitlements — digital representations that mirror the legal and ownership rights of existing book-entry holdings. The service runs on DTCC's ComposerX platform, with planned integration into the Stellar blockchain by mid-2027.
The DTCC pilot operates in parallel with, but separately from, the transfer agent rule proposal. DTCC's model keeps tokenized entitlements within the existing DTC custody framework; the SEC's proposed rules would allow transfer agents to maintain records natively on-chain without DTC intermediation. These are complementary but potentially competing paths to the same destination: blockchain-based securities infrastructure.
The proposal introduces material compliance costs that will fall unevenly across the three models:
New compliance programs (Rule 17ad-30) require written policies that blockchain-native firms largely already maintain but legacy agents must build from scratch. However, the scope extends to federal securities law compliance broadly, not just DLT-specific requirements.
Cybersecurity mandates (Rule 17ad-12) require written risk management policies covering smart contract vulnerabilities, business continuity, and operational resilience. Blockchain-native firms have infrastructure for this; legacy firms must invest in capabilities they currently lack.
Reporting burden (Form TA-2 amendments) requires granular disclosure of DLT usage, tokenization models, and platform providers. This creates transparency that benefits the market but adds administrative overhead. The SEC's rescission of Rule 17ad-4 exemptions — previously available to smaller operators — means these requirements now apply to all registered transfer agents regardless of size.
Six-year record retention including deleted position data is straightforward for immutable blockchains but creates storage obligations for off-chain data. The SEC has explicitly asked whether immutable blockchain networks should be exempt from traditional record deletion requirements.
Commissioner Mark Uyeda criticized the prior regulatory approach: the SEC's "regulation-by-enforcement approach was a piecemeal strategy that provided neither clarity nor predictability." The proposed rules represent a shift toward ex-ante regulation — defining requirements before enforcement, rather than after.
The proposal opens 60 days of public comment. Several questions remain unanswered:
Wallet address as identity. The proposal requires position records to include digital wallet addresses. It does not resolve whether pseudonymous wallet addresses satisfy the requirement for full name and physical mailing address. Transfer agents maintaining personal data off-chain while recording positions on-chain must bridge this gap.
Cross-chain interoperability. The SEC acknowledges smart-contract-driven processes and cross-chain interoperability as emerging features but provides no framework for multi-chain recordkeeping. A tokenized security existing on Ethereum, Solana, and Stellar simultaneously — each with different finality guarantees — creates unresolved questions about which chain constitutes the master record.
Onchain fraud risk. The SEC solicits input on fraud risks unique to onchain transactions but does not prescribe specific controls. Transfer agents must develop their own risk frameworks, which will likely diverge significantly between models.
Smart contract enforcement of transfer restrictions. Rule 17ad-31's restrictive legend provisions suggest that transfer restrictions could be enforced programmatically via smart contracts, but the proposal does not define standards for such enforcement or address what happens when a smart contract fails.
The SEC's transfer agent proposal is not a technology endorsement. It is a regulatory framework that assumes tokenized securities will exist and attempts to define who controls the record. The economic value at stake is substantial: $5 trillion in annual dividend and interest distributions flowing through 273 registered agents, with the tokenized securities market projected to grow from $35.82 billion to $184.27 billion by 2031.
The three-way competition between legacy incumbents, blockchain-native entrants, and hybrid acquirers will be decided less by technology and more by who can satisfy both the new compliance requirements and existing issuer expectations. Computershare's 58% S&P 500 coverage gives it distribution. Securitize's first-mover status gives it operational experience. Bullish's $4.2 billion Equiniti acquisition gives it both scale and a stated mandate to build for tokenization.
The 60-day comment period will shape the final rule. The market is not waiting.