The U.S. Securities and Exchange Commission on October 1, 2026, proposed a 760-page rule that would, for the first time, let registered investment advisers self-custody client crypto assets under tightly controlled conditions. The proposal also elevates state-chartered trust companies to qualifie...
"Existing custody regulations were designed for a bygone financial landscape." — Paul Atkins, Chairman, U.S. Securities and Exchange Commission
The U.S. Securities and Exchange Commission on October 1, 2026, proposed a 760-page rule that would, for the first time, let registered investment advisers self-custody client crypto assets under tightly controlled conditions. The proposal also elevates state-chartered trust companies to qualified-custodian status, amending both the Investment Advisers Act of 1940 and the Investment Company Act of 1940.
The SEC estimates 823 of its 16,442 registered advisers — roughly 5% — would use the self-custody fallback. Compliance costs are modeled at $433,833 per adviser per year, a figure that excludes technology spending. A 60-day public comment period opens upon Federal Register publication.
The rule lands one day before Commissioner Hester Peirce's departure, reducing the agency to two sitting members and requiring unanimity on every contested vote going forward. No successor has been nominated.
The proposal replaces the SEC's withdrawn 2023 Safeguarding proposal and supersedes a September 2025 no-action letter that, according to the Commission, lacked "legal force or effect." It creates two new custodial pathways for crypto assets held by RIAs and regulated funds:
The rule also bundles a set of modernization amendments to traditional custody provisions that apply to all advisers regardless of whether they touch crypto.
The self-custody option is not a blanket license. It is a fallback mechanism governed by five operational requirements:
Written determination. An adviser must document that no qualified custodian will maintain each specific crypto asset before initiating self-custody. This determination must be reassessed quarterly.
Exclusive key control. The adviser must be the sole possessor of key materials. Keys cannot be shared with clients, other custodians, or wallet providers.
Dual authorization. Every transfer requires joint authorization by at least two designated supervisory persons, one of whom must be management-level. This requirement effectively excludes sole-practitioner advisory firms.
Segregated wallets. Per-client wallet addresses are mandatory. Omnibus accounts are prohibited for self-custodied crypto assets.
Annual independent control report. An independent auditor must produce a report on the design and effectiveness of the adviser's controls each year. The SEC models this at $376,000 annually.
If a qualified custodian later becomes available for the asset, the adviser must transfer the asset to that custodian "as soon as reasonably practicable."
An additional legal requirement: adviser and client must agree in writing to treat self-custodied assets as "financial assets" under UCC Article 8, making the adviser a "securities intermediary." This mechanism protects client entitlements from adviser creditors in insolvency.
The second pathway allows advisers and funds to use state-chartered trust companies as qualified custodians. Before engagement, the adviser must verify in writing that the trust company is authorized by its state banking authority to provide crypto custody.
Due diligence requirements include review of:
One notable omission: unlike the SEC's 2025 staff letter, the proposed rules contain no restriction on rehypothecation, leaving the practice to existing disclosure requirements and fiduciary duties.
The SEC's own economic analysis estimates annual self-custody compliance costs at $433,833 per adviser:
| Cost Component | Annual Estimate | |---|---| | Independent control report | $376,000 | | Recurring internal compliance | $57,833 | | One-time setup (amortized) | $173,499 | | Technology, software, hardware | Not modeled |
The exclusion of technology costs from the modeled total is significant. Multi-person key management systems, segregated wallet infrastructure, and cybersecurity protocols represent material additional expense that varies by scale.
The Commission acknowledges the structural implication directly in the proposal: "smaller advisers may elect against self-custody, while larger advisers could have sufficient resources to meet the safeguards." Fixed costs spread over larger asset pools create inherent advantages for bigger firms, while advisers with focused crypto practices may already possess necessary infrastructure.
According to analysis by SpendNode, this cost structure could create access disparities: certain crypto assets may become available to clients of large advisory firms while remaining inaccessible through smaller competitors — a form of service fragmentation driven by compliance economics rather than client demand.
The proposal carves its scope carefully. For advisory clients that are not regulated funds:
However, the same digital commodities become "securities and similar investments" when held in self-custody by advisers managing regulated fund accounts. This dual classification creates a split regime: a commodity for one client type, a custody-eligible security for another, depending on the fund wrapper.
The Commission poses over 330 questions for public comment, including high-impact open issues on:
The proposal shifts competitive dynamics in institutional crypto custody. According to analysis by CryptoBriefing, the market will increasingly reward asset coverage breadth over regulatory charter status. The self-custody trigger — available only when no qualified custodian supports an asset — creates a direct incentive for custodians to expand their supported token lists.
Positioned to benefit:
Under pressure:
The digital asset custody market was valued at approximately $700 billion in assets under custody in 2026, according to The Business Research Company, with projections reaching $2.12 trillion by 2031 at a 24.67% compound annual growth rate.
Reaction has split along predictable lines. According to WealthManagement.com, one adviser advocacy group described the proposal as a "positive framework" for crypto custody. An investor protection group countered that the rule "subjects investors to the very high risk of loss the SEC exists to prevent."
Commissioner Peirce, in a statement titled "Roller Coaster Ride," clarified the terminology: "self-custody" in the adviser context means the adviser holding assets for clients, not retail investors keeping their own keys. She emphasized the distinction matters for investor protection analysis.
The SEC noted that typical qualified custodians — large financial institutions like Schwab and Fidelity — may not be willing or able to hold certain crypto assets, and may not support "the large and continuously growing number of crypto assets in the market." Schwab has since unveiled direct trading access for Bitcoin and Ethereum, while Fidelity provides cryptocurrency custody and trading services for institutional clients.
Beyond crypto, the proposal includes traditional custody rule updates applicable to all advisers:
No transition period is proposed. Compliance would be required upon adoption for all provisions.
The custody proposal fills a gap that has persisted since the SEC withdrew its 2023 Safeguarding rule. It provides legal footing where only a staff letter existed before. But its $433,833 annual cost floor — with technology costs unaccounted for — creates a regime where compliance economics, not market demand, may determine which firms can offer which crypto assets to which clients.
The 60-day comment period will test whether the 330-plus open questions produce sufficient industry input to resolve the rule's structural ambiguities before finalization. With only two commissioners remaining to vote on a final rule, the margin for disagreement is zero.