Qualified custodian

Imagine someone entrusting an investment adviser with a portfolio. They want to know not just what the adviser will buy, but who will hold the assets and how they can be checked. US Rule 206(4)-2, known as the Custody Rule, places duties on advisers registered or required to register under the relevant Advisers Act provision. It concerns client funds and securities. The SEC staff FAQ explains that it does not cover all other assets. A Qualified custodian label therefore does not itself settle a crypto-asset’s legal classification, whether the rule applies to a particular adviser or what other requirements the service must satisfy. [1] [2]

The definition in paragraph (d)(6) has four branches. It includes a bank meeting the statutory definition or a savings association with insured deposits. Another branch is a registered broker-dealer holding client assets in customer accounts. A registered futures commission merchant, an intermediary for futures trading, holding assets in customer accounts is another possibility. Its branch covers only client funds, security futures and other securities incidental to the specified commodity futures and options transactions. The final branch covers a qualifying foreign financial institution that customarily safeguards customer financial assets and keeps advisory clients’ assets separate from its own. An exchange registration or trust in a company’s name therefore does not establish qualification by itself. [1]

The adviser making investment decisions and the custodian holding assets need not be the same institution. Custody has a wider meaning in the rule than physical possession: it includes authority to obtain access to assets or direct withdrawals. A login that only shows a balance is different from access that can send a customer’s money to another person’s account. Such powers may give the adviser custody even when another Qualified custodian actually holds the assets. Narrow interpretations and exceptions also exist, including for certain transfers between the customer’s own accounts. The answer cannot rest solely on the account’s name or who has an office with a vault. The custodian’s status alone does not remove the adviser’s duties. [1] [2]

The adviser’s screen is not independent confirmation that the stated assets actually exist. The basic route therefore requires the adviser to have a reasonable belief, after due inquiry, that the qualified custodian sends statements to the customer at least quarterly. The rule also addresses account titling and customer information. Consider a purely illustrative number of security units: an opening 10, a purchase of 2 and a sale of 1 leave 11. If the adviser shows 12, the difference of 1 needs explanation. This is not a price model or a claim that BTC is a security. A custodian statement gives the customer another record to compare. [1]

The baseline includes annual surprise verification by an independent public accountant. It is more than checking an image in an app. An exception may apply when custody arises solely from deducting advisory fees, subject to the other relevant conditions. An eligible pooled vehicle can follow another route: at least annual audit, financial statements under generally accepted accounting principles and distribution to investors within 120 days of fiscal year-end. The independent auditor must have the required registration and regular inspections by the PCAOB, the US audit-firm overseer; separate requirements also apply on liquidation. This route replaces particular checks, not automatically every condition including use of a qualified custodian. [1] [2]

In 2023, the SEC proposed Safeguarding Advisory Client Assets to extend protection to a broader set of assets. It withdrew that proposal effective 17 June 2025. The Final Rule label on the withdrawal page does not mean the original proposal’s substance was adopted. Another step came on 1 October 2026: the SEC issued a new proposal, Adviser and Regulated Fund Custody Rules; Crypto Custody Rules. At this review, it remains a proposal, not a new effective rule. Readers should not import contemplated options or duties into a description of current law. Withdrawal of the old proposal did not itself repeal the existing Custody Rule. [3] [6]

Here, a state trust company is an entity organized under the law of a US state, subject to bank supervision and holding the relevant fiduciary powers, meaning authority to administer others’ property with special legal responsibilities. It does not mean a state-owned company. On 30 September 2025, SEC staff issued a conditional no-action response: in the described circumstances, they would not recommend enforcement against specified advisers and funds for treating such a company as a bank for custody of crypto-assets and necessary related cash or cash equivalents. They did not change the law. Conditions include initial and annual authority and safeguards reviews, the prescribed audited financial statements and an internal controls report. A written agreement must segregate customer assets from proprietary assets and prohibit lending or pledging without prior written consent, and then permit it only for the customer’s or fund’s account. Material risk disclosure and a best-interest determination for the customer or for the fund and its shareholders also matter. Other duties continue; this is not recognition of every company with trust in its name. [4]

Legal status matters, but it is neither insurance nor the result of stress-testing a particular wallet. Verify the exact legal entity and its basis for qualification, not merely the familiar brand of a whole group. FDIC insurance does not cover BTC themselves; a price fall or lost private key does not become an insured event merely because of the Qualified custodian label. A private key is secret information used to sign a transfer. Who controls it, whether another custodian is involved, what contractual liability applies and how withdrawals work therefore need separate assessment. The legal category and the service’s actual operation answer different questions. [1] [4] [5]