On October 1, 2026, the U.S. Securities and Exchange Commission published a 760-page proposed rule (File No. S7-2026-35) that would, for the first time, establish a federal framework governing how registered investment advisers (RIAs) and regulated funds custody crypto assets. The proposal amends...
"This proposal closes a gap that has left investment advisers and funds guessing how to lawfully custody an asset class that their clients increasingly demand." — Paul Atkins, Chairman, U.S. Securities and Exchange Commission
On October 1, 2026, the U.S. Securities and Exchange Commission published a 760-page proposed rule (File No. S7-2026-35) that would, for the first time, establish a federal framework governing how registered investment advisers (RIAs) and regulated funds custody crypto assets. The proposal amends both the Investment Advisers Act of 1940 and the Investment Company Act of 1940. Public comments close December 7, 2026.
The rule creates two pathways: advisers may use state-chartered trust companies as qualified custodians, or they may self-custody client crypto assets under a narrow set of conditions. The SEC's own economic analysis estimates annual compliance costs of $433,833 per adviser electing self-custody — a figure that, by the agency's admission, excludes the "economically significant" costs of the technology, software, and hardware required to safeguard private keys.
The proposal arrives at a moment of rising adviser demand. According to the Bitwise/VettaFi 2026 Benchmark Survey, 42% of financial advisers can now buy crypto in client accounts, up from 19% in 2023. Of those already allocating, 99% plan to maintain or increase exposure. Yet $376 billion in institutional crypto assets sit with a single custodian — Coinbase — which serves more than 80% of U.S. spot Bitcoin and Ethereum ETFs. The SEC's rule would widen the custodian field, but its cost structure may simultaneously narrow who can participate.
The SEC's proposal creates two distinct routes for advisers seeking to custody client crypto assets under federal securities law.
Path 1 — Qualified Custodians. The rule would expand the definition of "qualified custodian" to include state-chartered trust companies authorized by their home state to custody crypto assets. This supplements the existing qualified-custodian list, which includes banks, savings associations, broker-dealers, and futures commission merchants. The expansion means an adviser could place client Bitcoin, Ethereum, or other crypto assets with a Wyoming-chartered trust company and satisfy federal custody obligations — something that was legally ambiguous before this proposal.
Path 2 — Conditional Self-Custody. An adviser may hold a client's crypto assets directly, but only under a strict set of conditions. This pathway is designed as a fallback, not a default. The SEC frames it as available "only for crypto assets that no qualified custodian will maintain."
Both pathways apply to registered investment advisers, registered management investment companies, and business development companies. The proposal runs to 760 pages and poses more than 330 questions for public comment — a signal, according to multiple securities law firms, that the Commission considers significant design elements unsettled.
Several states — Wyoming, South Dakota, and Nevada among them — have adopted trust company charters specifically tailored to digital asset custody. The SEC's proposal would recognize these entities as qualified custodians, subject to four conditions:
Chairman Atkins stated that the state trust company pathway "already works in practice," citing existing operational infrastructure in states that have moved ahead of the federal government. The practical effect is that firms like the Wyoming-based Custodia Bank or South Dakota trust companies would gain a federally recognized role in the custody chain for investment advisers, without needing a federal bank charter.
This matters for market structure. Currently, Coinbase Custody holds $376 billion in institutional crypto assets and serves as custodian for over 80% of U.S. spot Bitcoin and Ethereum ETFs, according to its Q2 2026 10-Q filing. BNY Mellon, the world's largest custodian with $59.4 trillion in total assets under custody, has expanded into crypto custody for ETF issuers and launched Bitcoin and Ethereum custody in Abu Dhabi in May 2026. Together, Fidelity, BNY, and State Street have announced custody capacity exceeding $500 billion in digital assets.
By opening the qualified-custodian designation to state trust companies, the SEC would introduce a tier of smaller, specialized custodians into the competitive landscape. Whether those entities can absorb meaningful institutional volume remains to be seen.
The self-custody pathway imposes five cumulative requirements:
Commissioner Hester Peirce, in a statement accompanying the proposal, noted that the framework "refers to advisers acting as custodians, not true investor self-custody," preferring the term "shelf-custody" to describe the arrangement.
The self-custody pathway is designed for a narrow use case: tokens and crypto assets so new or obscure that no regulated custodian yet supports them. For mainstream assets like Bitcoin and Ethereum, where multiple qualified custodians exist, self-custody would not be an option under this framework.
The SEC's economic analysis, contained in Table 8 of the proposing release, estimates the annual cost of the self-custody pathway at $433,833 per adviser. The breakdown:
| Cost Component | Annual Amount | |---|---| | Independent accountant internal control report | $376,000 | | Internal compliance | $57,833 | | Total annual cost | $433,833 | | Initial setup cost (one-time) | $173,499 |
The SEC explicitly notes that this estimate excludes the cost of "the technology, software and hardware to actually safeguard the assets," which it expects to be "economically significant."
The agency's own analysis concedes that because these costs are largely fixed, they "could make self-custody uneconomical for many advisers." A $433,833 annual compliance cost is a rounding error for BlackRock or Fidelity. For a smaller RIA managing $50 million in crypto assets, it represents nearly 87 basis points of assets — a cost that would likely be passed through to clients or simply render the service unviable.
This creates a structural tilt. The rule formally opens self-custody to all registered advisers, but the economics restrict it to the largest firms. Smaller advisers will, in practice, be directed toward the qualified-custodian pathway — which in turn concentrates assets among a limited number of entities equipped to serve them.
The crypto custody market was valued at $3.69 billion in 2026, according to The Business Research Company, with projections reaching $7.74 billion by 2032. Traditional financial institution custodians represent the fastest-growing segment at a projected CAGR of 27.87% through 2031, according to Mordor Intelligence.
The current market is heavily concentrated:
The SEC's custody proposal could either reinforce or disrupt this concentration. On one hand, recognizing state trust companies as qualified custodians opens competition. On the other, the compliance costs of self-custody funnel smaller advisers toward existing large custodians, and the quarterly reassessment requirement means self-custody positions are inherently temporary — assets migrate to qualified custodians as soon as one becomes available.
The net effect may be that custody concentration increases in the short term while the addressable market expands. More advisers can legally offer crypto exposure, but fewer custodians absorb the volume.
The custody proposal is one component of Chairman Atkins' "Project Crypto," a commission-wide initiative launched in late 2025 to modernize securities rules for on-chain markets. The 2026 rulemaking stack includes:
Together, these measures form what securities attorneys at Sidley Austin have described as the SEC's "most concrete crypto rulemaking" in its history. The custody proposal is the infrastructure layer: it determines who holds the assets and under what rules, which in turn constrains who can offer the products enabled by Regulation Crypto Assets.
The proposing release contains more than 330 specific questions directed at commenters. This volume is unusual even by SEC standards and indicates meaningful uncertainty within the Commission about several design choices.
Key areas where the SEC is soliciting feedback:
The 60-day comment window — set to close December 7, 2026 — is standard for major SEC rulemakings. Industry groups, crypto-native firms, state regulators, and investor advocates are expected to submit detailed responses. The SEC will then review comments and draft a final rule, a process that typically takes several months.
The SEC's custody proposal addresses a real gap. Before October 1, registered investment advisers had no explicit federal framework for holding client crypto assets. The proposal provides one. Whether it provides the right one depends on how the Commission resolves the tension between access and compliance cost.
The economic structure of the rule — fixed costs exceeding $400,000 annually for self-custody, quarterly reassessment obligations, dual-person authorization requirements — will concentrate the self-custody option among the largest advisory firms. Smaller advisers will be directed toward qualified custodians, which today means a handful of entities led by Coinbase, BNY Mellon, and Fidelity. The state trust company pathway may diversify this pool over time, but building institutional-grade custody infrastructure requires capital and credentialing that most state-chartered entities do not yet possess.
The comment period closes December 7. The final rule — assuming the Commission advances one — will determine whether the U.S. custody framework expands access to crypto exposure through the advisory channel or simply formalizes the existing concentration under a new regulatory label.