In the span of 12 days — October 21 to November 2, 2026 — three U.S. federal agencies rewrote the rules governing who can hold digital assets for institutional clients and under what terms. The OCC finalized GENIUS Act stablecoin rules (effective January 18, 2027), the SEC proposed a crypto-speci...
"We've always said crypto and banks work better together — this is what that looks like." — Brad Garlinghouse, CEO, Ripple
In the span of 12 days — October 21 to November 2, 2026 — three U.S. federal agencies rewrote the rules governing who can hold digital assets for institutional clients and under what terms. The OCC finalized GENIUS Act stablecoin rules (effective January 18, 2027), the SEC proposed a crypto-specific custody framework for registered investment advisers and funds, and the Financial Stability Oversight Council designated stablecoin custody activities as systemically important. Simultaneously, Ripple secured the first OCC national trust bank charter granted to a stablecoin issuer, Galaxy Digital filed its own charter application, and Chainlink launched CustodySync to bridge $700 billion in custodied assets to DeFi lending markets.
The net effect: crypto custody is shifting from an unregulated grey zone to a multi-agency supervisory regime that will raise costs, compress margins, and force smaller custodians to consolidate or exit. For the first time, the U.S. has a legible — if fragmented — custody rulebook. The question is whether three overlapping frameworks create clarity or a compliance maze.
On October 21, 2026, the OCC issued its final rule implementing the Guiding and Establishing National Innovation for U.S. Stablecoins (GENIUS) Act for permitted payment stablecoin issuers (PPSIs). The rule takes effect January 18, 2027, giving issuers a 90-day implementation window.
Reserve requirements. Every PPSI must maintain 1:1 reserve backing at all times. At least 5% of reserves must be held in demand deposits, demand share accounts, or Federal Reserve balances — down from 10% in the proposed rule. No single counterparty may hold more than 40% of reserves. PPSIs must stress-test reserve portfolios under rising-rate scenarios and demonstrate reliable monetization access. The proposed requirement for large issuers (over $25 billion outstanding) to hold 0.5% of reserves as insured deposits was eliminated in the final rule.
Interest prohibition. Stablecoin issuers cannot pay interest directly to token holders, though the OCC backed away from treating third-party reward arrangements as automatic workarounds. This distinction matters: it preserves the yield-bearing stablecoin arrangements that have become a core distribution mechanism in DeFi.
Charter scope. The rule establishes that OCC-chartered stablecoin entities are limited-purpose national trust banks — they cannot accept traditional deposits or make commercial loans. This confines federally chartered stablecoin issuers to a narrow lane: custody, reserve management, and issuance.
On October 1, 2026, the SEC proposed Release No. 2026-100, a comprehensive overhaul of the Advisers Act custody rule (Rule 206(4)-2) with a crypto-specific subframework. Comments close December 7, 2026.
State trust companies as qualified custodians. The proposal would formally recognize state-chartered trust companies as qualified custodians for crypto assets under both the Investment Advisers Act and the Investment Company Act. This opens a lane for dozens of state-regulated entities currently excluded from the qualified custodian definition.
Self-custody, with conditions. Investment advisers could hold client crypto themselves, but only after establishing that no qualified custodian is available for each specific asset — reassessed quarterly. Assets must move to a custodian as soon as one becomes available. Commissioner Hester Peirce, in her final statement before departing the SEC on October 2, noted: "True self-custody is not the right choice for everyone, but many crypto owners prize being able to custody their own assets."
Segregation mandates. Client crypto must be held in accounts segregated from a custodian's proprietary assets. Regulated funds' custodial agreements must contractually provide for segregation — a requirement that goes beyond current market practice at several smaller custodians.
Scope. Notably, the rule affects all registered investment advisers, not just those with crypto exposure. The broader custody rule modernization includes changes to reporting, surprise examination timing, and custodial agreement requirements.
On November 2, 2026, the Financial Stability Oversight Council designated stablecoin custody activities as systemically important. The designation layers heightened capital and liquidity expectations onto any institution that touches stablecoin reserves, regardless of whether it holds a federal charter.
The practical implication: stablecoin custodians now face capital surcharges analogous to those applied to systemically important financial institutions (SIFIs). For state-chartered trust companies that recently entered stablecoin custody — many attracted by the lighter regulatory overhead compared to national bank charters — the FSOC designation erodes that advantage.
This creates a layered regulatory structure where a single custodian could simultaneously answer to the OCC (if federally chartered), the SEC (if serving registered advisers or funds), and the FSOC (if touching stablecoin reserves). The compliance cost structure for multi-service custodians will rise materially.
On October 26, 2026, the OCC granted Ripple National Trust Bank its final charter — the first federal bank charter issued to a stablecoin-native company. The charter authorizes Ripple to manage segregated reserves backing RLUSD, act as collateral trustee of those reserves for RLUSD holders, and provide fiduciary digital asset custody services to enterprises.
RLUSD itself continues to be issued by Standard Custody & Trust Company, Ripple's NYDFS-regulated entity. The national trust bank sits alongside it as the reserve and custody arm. On October 28, Moody's assigned RLUSD an A2 long-term and P-1 short-term deposit rating — investment grade, five notches below Aaa. The P-1 short-term rating is Moody's highest.
On October 27, BNY Mellon — custodian of $63.4 trillion in assets globally — added XRP and RLUSD to its digital asset custody platform, enabling institutional clients to hold and transfer both assets. BNY and Ripple are also working with C2FO on tokenized supply chain financing on the XRP Ledger.
Three days after Ripple's approval, Galaxy Digital filed its own OCC national trust bank application on October 29. If approved, Galaxy National Bank would offer custody, trading, and staking services under federal supervision. The Independent Community Bankers of America has sued the OCC over what it calls a "spike in trust bank charter activity," arguing expanded use of the trust charter creates "a gaping hole in financial regulation."
The charter pipeline signals a structural shift: crypto firms are not merely seeking regulatory approval — they are becoming regulated financial institutions. The cost is significant. OCC-supervised entities face examination fees, capital maintenance requirements, and ongoing reporting obligations that most crypto-native firms have never borne.
On October 26, 2026, Chainlink launched CustodySync, a product designed to let qualified custodians give institutional clients access to DeFi lending markets without moving assets out of custody. Anchorage Digital Bank, N.A. — the first OCC-chartered crypto bank (chartered January 2021) — is the launch partner.
The product uses Anchorage's Atlas Collateral Management system to coordinate collateral deposits, borrowing, repayment, and liquidation between custodied assets and on-chain lending protocols. The arrangement mirrors traditional tri-party repo structures, with Anchorage acting as the lending protocol's appointed collateral agent.
Chainlink estimates approximately $700 billion in digital assets currently sit under institutional custody. Much of this is economically idle — earning no yield while incurring custody fees. CustodySync's premise is that institutions should not have to choose between fiduciary custody and capital efficiency.
Anchorage reported approximately $4 billion in assets under custody across Atlas-powered activity. For context, Coinbase Custody holds approximately $300 billion, and BitGo — which went public on the NYSE in January 2026 at a $2 billion valuation — reported 5,569 institutional clients as of Q1 2026.
The regulatory timing is notable. CustodySync launched the same week that the OCC finalized GENIUS Act rules and Ripple received its charter. Whether the product architecture satisfies the SEC's proposed segregation requirements and the FSOC's systemic importance standards remains untested.
The custody market exhibits extreme concentration. According to CryptoSlate data from April 2026, Coinbase Custody holds $77.1 billion in U.S. spot Bitcoin ETF assets — 84.1% of the $91.7 billion ETF market. It custodies assets for 9 of 11 Bitcoin ETFs and 8 of 9 Ethereum ETFs.
The custody provider market breaks down as follows:
| Provider | Key Metrics (2026) | |---|---| | Coinbase Custody | ~$300B AUC; 84% of BTC ETF custody | | BitGo | IPO at $2B valuation (Jan 2026); 5,569 institutional clients; 186 of top 250 assets covered | | Fireblocks | $14T+ in secured transactions; 2,400+ institutional clients; infrastructure layer | | Anchorage Digital | ~$4B AUC; first OCC-chartered crypto bank; CustodySync launch partner | | BNY Mellon | $63.4T global custody; added XRP, RLUSD; exploring XRPL tokenization |
The digital asset custody market is valued at approximately $834 billion in 2026, according to Research and Markets, projected to reach $1.59 trillion by 2030 at a 17.6% CAGR. The custody provider services market (fees, not assets) is valued at $3.69 billion, projected to reach $7.74 billion by 2032.
The new regulatory framework will likely accelerate consolidation. Smaller state-chartered trust companies that entered crypto custody for lighter oversight now face FSOC capital requirements. The SEC's proposed segregation mandates will require operational upgrades. OCC examination fees add recurring costs. Firms that cannot absorb these expenses will either merge, partner with larger custodians, or exit.
The October 2026 regulatory cluster marks a structural shift in how digital assets are held in the United States. For the first time, custody has a federal rulebook — fragmented across three agencies, but legible. The GENIUS Act sets reserve standards for stablecoin custodians. The SEC defines who qualifies to hold crypto for advisers and funds. The FSOC adds systemic-risk capital surcharges on top.
The winners are firms large enough to absorb compliance costs across all three frameworks: Coinbase, with its $300 billion custody footprint; BNY Mellon, extending its $63.4 trillion custody infrastructure to digital assets; and Ripple, which now operates under federal supervision with an investment-grade stablecoin. The losers are smaller custodians that entered the market expecting light-touch regulation and now face layered federal oversight.
The open question is whether this framework produces the clarity the industry has sought or creates a compliance maze that entrenches incumbents and freezes smaller players out. The data, so far, points to the latter.