Key Takeaways
- • The SEC issued no-action relief in September 2025 permitting state-chartered trust companies to serve as qualified custodians for cryptocurrency assets, establishing a formal regulatory pathway for institutional digital asset custody.
- • Registered investment advisers utilizing state trust companies for crypto custody must execute written agreements that mandate full asset segregation, prohibit unauthorized use, and prevent rehypothecation of client holdings.
- • Investment advisers are required to conduct annual due diligence assessments on state trust company custodians before and during engagement, ensuring ongoing compliance with qualified custodian standards.
- • Qualified custodian status under the Investment Advisers Act of 1940 provides investor protection by ensuring digital assets are held by institutions subject to regulatory oversight and established safeguarding standards.
- • The regulatory clarification reflects accelerating institutional demand for compliant cryptocurrency custody infrastructure and represents a meaningful evolution in how blockchain-based assets are integrated into regulated investment adviser operations.
Summary
The regulatory framework governing cryptocurrency custody has matured substantially with the Securities and Exchange Commission's formal guidance on qualified custodian status for digital assets. A qualified custodian is defined as a financial institution meeting specific regulatory standards authorized to hold client assets—a requirement long established in traditional finance under the Investment Advisers Act of 1940. As institutional participation in cryptocurrency markets has accelerated, regulators have adapted these foundational custody protections to address the unique technical and security characteristics of blockchain-based assets.
In September 2025, the SEC provided decisive no-action relief that permits state-chartered trust companies to qualify as custodians for crypto assets. This development resolves a significant regulatory ambiguity that previously constrained institutional entry into digital asset management. The guidance establishes that qualified custodians holding cryptocurrency must maintain written custody agreements incorporating explicit protections against unauthorized use and rehypothecation, while requiring complete segregation of client digital assets from custodian operational holdings and other client accounts.
Registered investment advisers engaging state trust companies as cryptocurrency custodians face specific compliance obligations. Annual due diligence on custodian institutions is mandatory, requiring advisers to assess custodian controls, security protocols, and regulatory compliance status on an ongoing basis before and throughout the engagement period. These requirements ensure that the custody protection framework applicable to traditional securities extends with appropriate modifications to digital assets.
The evolution of qualified custodian rules for cryptocurrency reflects institutional market maturation and the demand for secure, regulated pathways to hold and manage digital assets at scale. By extending established custody protections to crypto assets while maintaining rigorous regulatory standards, the SEC's framework addresses both operational risk and investor protection concerns that arise when institutional capital enters blockchain-based markets.
In September 2025, the SEC provided decisive no-action relief that permits state-chartered trust companies to qualify as custodians for crypto assets. This development resolves a significant regulatory ambiguity that previously constrained institutional entry into digital asset management. The guidance establishes that qualified custodians holding cryptocurrency must maintain written custody agreements incorporating explicit protections against unauthorized use and rehypothecation, while requiring complete segregation of client digital assets from custodian operational holdings and other client accounts.
Registered investment advisers engaging state trust companies as cryptocurrency custodians face specific compliance obligations. Annual due diligence on custodian institutions is mandatory, requiring advisers to assess custodian controls, security protocols, and regulatory compliance status on an ongoing basis before and throughout the engagement period. These requirements ensure that the custody protection framework applicable to traditional securities extends with appropriate modifications to digital assets.
The evolution of qualified custodian rules for cryptocurrency reflects institutional market maturation and the demand for secure, regulated pathways to hold and manage digital assets at scale. By extending established custody protections to crypto assets while maintaining rigorous regulatory standards, the SEC's framework addresses both operational risk and investor protection concerns that arise when institutional capital enters blockchain-based markets.
Go deeper than the headline
Research every firm in this story, track the ones that matter and get the daily briefing — free for 7 days.