Custody

What qualified custodian means, and what it does not reach

It is a status list, not a quality rating. Rule 206(4)-2 makes it a fraudulent act for a registered investment adviser with custody of client funds or securities to keep them anywhere other than with a qualified custodian, and the rule names four institution types: a bank or an FDIC-insured savings association, a broker-dealer registered under section 15(b)(1) of the Exchange Act holding the assets in accounts complying with Rule 15c3-3, a futures commission merchant, and a foreign financial institution that customarily holds financial assets for customers and keeps advisory client assets segregated from its proprietary assets.¹

Two limits get missed. The rule attaches to the adviser rather than the asset, so it binds registered investment advisers and nobody else. And it reaches funds and securities, so a non-security digital asset held for a client sits outside the text.

The SEC proposed closing both gaps in February 2023. The Safeguarding Advisory Client Assets proposal would extend the regime from funds and securities to any client assets, explicitly including non-security crypto, and would replace the current "maintain" standard with "possession or control."² As of August 2026 it is still a proposal. Design against the rule in force, and keep a note of what changes if it is adopted.

The EU asks a different question entirely

MiCA has no qualified custodian category. Eligibility runs through authorisation: a firm providing custody and administration of crypto-assets on behalf of clients must be authorised as a crypto-asset service provider for that specific service, and if it passes assets to another firm for the same service, that firm must hold the same authorisation.³ Whether the firm is a bank is beside the point; the authorisation is.

Article 75 is more explicit on segregation than the US rule is. Client crypto-assets must be held separately from the provider's own holdings on the distributed ledger itself, legally segregated from the provider's estate so that its creditors have no recourse in insolvency, and operationally segregated as well. Article 70 adds the general safekeeping duty and requires client funds other than e-money tokens to be placed with a credit institution or central bank by the end of the next business day.³

Then Article 75(8) does something the US rule does not. It makes the provider liable for the loss of crypto-assets or of the means of access to them where the incident is attributable to the provider, capped at the market value of the asset at the time the loss occurred.³ Read the cap. If the asset appreciates between the incident and the payout, the holder absorbs the difference. If it falls, the provider does.

One boundary matters more than any of this for RWA work. MiCA does not apply to crypto-assets qualifying as financial instruments, deposits or funds, so custody of a tokenized bond or fund unit is not a MiCA question at all. It falls to MiFID II and the existing EU securities rules.³ In the structures we have reviewed, founders tokenizing securities in Europe regularly diligence the wrong regime and get clean answers to questions that do not govern them.

Custody of the token is not custody of the asset

An RWA structure has two custody layers and they are usually at different firms under different law. The off-chain asset sits with a securities or commodities custodian, governed by the rules for that asset class. The token and the key material controlling it sit with whoever runs the wallet, governed by the crypto-asset rules. Diligencing one is diligencing half.

The failure modes split the same way. A flawless securities custodian does not help if the minting key is on a laptop, and flawless key management does not help if the bills were never delivered into a segregated account. Ask for both chains of evidence, from both firms, and check that the two registers reconcile to the same number on the same date.

Watch the wording on the crypto leg. Holding a key is not the same as having exclusive control of it. A signature shows that somebody can sign. It does not show that nobody else can, or that a second firm is not counting the same balance in its own reporting.

How segregation gets proven, and on what calendar

A claim of segregation is worth what the evidence behind it is worth, and Rule 206(4)-2 builds three artifacts. First, reporting: the qualified custodian sends an account statement to each client at least quarterly, identifying holdings and every transaction in the period, and the adviser must tell clients to compare it against its own.¹

The second is the surprise examination. Client funds and securities are verified by actual examination at least once each calendar year by an independent public accountant, at a time the accountant chooses without notice and irregular from year to year. The accountant files a certificate on Form ADV-E within 120 days, and on finding a material discrepancy notifies the Commission within one business day.¹

The third applies when the adviser or a related person is itself the qualified custodian, which is the structure many crypto platforms run. Then the accountant must be PCAOB-registered and inspected, and the adviser must obtain a written internal control report each calendar year, carrying an opinion on whether custodial controls are suitably designed and operating effectively, with holdings reconciled to a custodian other than the adviser or its related person.¹

Now do the arithmetic, because the design consequence lives in the intervals rather than in the list of requirements. "At least once during each calendar year" at a date the accountant picks means an examination in January 2026 and the next in December 2027 is fully compliant and leaves close to twenty three months between two verifications. Quarterly statements narrow the gap, but a custodian statement is the custodian reporting on itself. The EU runs a similar interval from the other direction: a statement of position at least once every three months, so up to ninety two days between reads.³ Set your redemption promises against those gaps, not against the marketing page.

Three documented ways custody has failed

FTX is the commingling case. The CFTC's December 2022 complaint alleges that from at least May 2019 through November 2022, FTX customer assets were commingled with Alameda Research's assets and used by Alameda for its own trading, investment and expenses.⁴ Nothing cryptographic broke. The assets were in the operator's control and the operator spent them.

Prime Trust is the operational case. Nevada's Financial Institutions Division moved a licensed Nevada trust company into receivership in June 2023 after it lost access to legacy wallets and then purchased crypto with customer funds to satisfy withdrawal requests, instead of delivering the segregated assets it was supposed to be holding.⁵ A charter is a licence to be examined. It is not evidence that the assets are there.

Celsius is the contract case. The FTC's complaint alleges the company took title to customer crypto-assets and transferred deposits into its own proprietary accounts, treating the assets as its property to deploy at its discretion, including to pay operating expenses.⁶ That one turned on the terms of service. The assets were never segregated, because the contract said they did not have to be.

Three mechanisms: commingling with an affiliate, an operational hole covered with customer money, and a contract that moved ownership on deposit. Only the third shows up in a document review, which is why the artifacts above are the diligence and the representations are not.

What to diligence in a custodian, in order

Start with the entity and the licence. A Nevada trust charter, a New York limited purpose trust charter, a national bank charter and a MiCA authorisation are four different things with four different examination regimes behind them. Ask which legal entity is contracting, which authorisation it holds, and when it was last examined. Then read the licence, not the logo.

Next, the account structure and the related-party map. Are your assets in an account in your own name or in an omnibus holding only client assets, and what does that agreement say happens in insolvency? Is the custodian a related person of the issuer, the adviser or the trading venue? If so, ask for the internal control report and the Form ADV-E rather than the trust page. Ask which sub-custodians are used, and whether each holds the authorisation the primary holds, which the EU requires expressly.³

Finally, control and liability. How many parties are needed to move assets, and can the custodian demonstrate exclusive control of the key material rather than assert it? What do the liability terms cover, and what do they exclude? Under MiCA the cap is statutory. Everywhere else it is whatever the agreement says, and the carve-outs are usually where the value went.

Where custody sits in the rest of the structure

Custody is one of three roles founders collapse into one counterparty. The custodian holds the asset. The transfer agent maintains the register and mints and burns. The issuer is the entity whose promise the holder owns. Keeping them apart is what makes reporting mean anything, because the party holding the asset is then not the party reporting on it. Proof of reserves sits on top of this layer and inherits every weakness in it: an attestation over assets held by a custodian that is a related person of the issuer is an attestation of the group's own numbers.

Bankruptcy remoteness is the other half. Segregation decides whose asset it is. Entity structure decides whose creditors can reach it. Both are jurisdiction-specific and both are tested at the worst possible moment. Neither is a setting inside a contract.

Whether a specific custody arrangement achieves segregation or bankruptcy remoteness in a specific jurisdiction is a fact-specific legal question and belongs with your counsel. This page is reference material for design work. It is not legal advice, and nothing here is a recommendation to buy, sell or hold any asset.