The Regulatory Framework-Who Can Custody What

The SEC's Custody Rule is the primary framework for investment adviser custody:

SEC RULE 206(4)-2: CORE REQUIREMENTS

- All SEC-registered investment advisers
- Advisers with "custody" of client assets
- Includes authority to withdraw assets

- Holding client funds or securities
- Authority to obtain possession
- Includes passwords/keys for crypto

Core Mandate:
"Client funds and securities must be maintained
with a qualified custodian"

QUALIFIED CUSTODIANS (TRADITIONAL):

1. Banks

2. Broker-Dealers

3. Futures Commission Merchants

4. Foreign Financial Institutions

HISTORICAL UNCERTAINTY (2018-2024):

- "Funds and securities" language
- Traditional custodian categories
- No explicit crypto guidance

1. Is crypto a "security" requiring custody?
2. Are state trust companies qualified?
3. Can advisers self-custody crypto?
4. What about DeFi assets?

- Crypto mostly securities
- Custody Rule likely applies
- State trust companies uncertain
- Safeguarding Rule proposed (2023)

2023 SAFEGUARDING PROPOSAL:

• Expand to "all assets" not just securities

• Explicit crypto inclusion

• State trust company skepticism

• Self-custody restrictions

• Widespread criticism

• Operational concerns

• Potential custody shortage

• Would limit crypto investment

• Never adopted

• Abandoned under new SEC leadership

• But created interim uncertainty

SEPTEMBER 2025 NO-ACTION LETTER:

Key Provisions:
State trust companies CAN be qualified custodians
for crypto assets IF they meet conditions:

CONDITIONS REQUIRED:

1. Written Policies

2. Asset Segregation

3. No Rehypothecation

4. Annual Due Diligence

5. Regulatory Oversight

IMPACT:

For RIAs:
✅ Clear compliance pathway
✅ Existing arrangements validated
✅ Documentation requirements clear

For Custodians:
✅ Business model confirmed
✅ Competitive landscape clarified
✅ Compliance standards established

---

The Office of the Comptroller of the Currency regulates national banks:

OCC CRYPTO CUSTODY GUIDANCE:

JULY 2020 - INTERPRETIVE LETTER 1170:
"National banks may provide cryptocurrency 
custody services for customers"

- Custody is permissible bank activity
- Fiduciary and non-fiduciary capacity
- Subject to safety and soundness
- Risk management required

- First explicit federal authorization
- Established legal foundation
- Encouraged bank custody development

JANUARY 2021 - INTERPRETIVE LETTER 1174:
Stablecoin activities permitted

NOVEMBER 2021 - INTERPRETIVE LETTER 1179:
Clarified crypto activities generally

SAB 121 (MARCH 2022):

- Entities safeguarding crypto must recognize
- Even when crypto belongs to customer
- Even when clearly segregated

Impact on Banks:
┌─────────────────────────────────────────┐
│  Customer deposits $100M in crypto      │
│           for custody                   │
│                  ↓                      │
│  Bank must add $100M asset to balance   │
│        sheet (the crypto)               │
│                  ↓                      │
│  Bank must add $100M liability          │
│        (obligation to return)           │
│                  ↓                      │
│  $100M counts against capital ratios    │
│                  ↓                      │
│  Bank needs additional capital to       │
│        support custody                  │
└─────────────────────────────────────────┘

- Made crypto custody uneconomic for banks
- Effectively blocked bank custody offerings
- Created regulatory moat for crypto-native firms
- Industry strongly opposed

POLITICAL BATTLE (2024):

• H.J. Res. 109 passed House and Senate

• Would have overturned SAB 121

• President Biden vetoed (May 2024)

• Industry lobbying intensified

• New administration expected change

• Banks eager to enter market

JANUARY 2025 - SAB 121 RESCINDED:

- Reversed SAB 121 requirements
- No balance sheet recognition required
- Customer assets remain off-balance-sheet
- Traditional custody treatment restored

- Banks freed to offer crypto custody
- Capital barrier removed
- Traditional custodians re-entering
- Competitive landscape transformed

MAY 2025 - OCC LETTER 1184:

• Banks can custody crypto assets

• Fiduciary and non-fiduciary

• Outsourcing to sub-custodians permitted

• Crypto-fiat exchange services allowed

• Risk management expectations

• Third-party due diligence required

• Integration with existing frameworks

• Examination guidance forthcoming

DECEMBER 2025 - OCC CHARTER APPROVALS:

Conditional Approvals Granted:

• Circle First National Digital Currency Bank

• Ripple National Trust Bank

• Paxos

• BitGo

• Fidelity Digital Assets

WHAT NATIONAL TRUST CHARTER MEANS:

• Custody services (fiduciary)

• Asset management

• Settlement services

• Payment processing

• Taking deposits

• Checking/savings accounts

• FDIC insurance coverage

• Full banking activities

• OCC primary supervisor

• Federal examination

• Uniform national standards

• Preempts state law (mostly)

SIGNIFICANCE FOR XRP:

• Complements Metaco acquisition
• Federal qualified custodian status
• US market direct service
• Enhanced institutional credibility

---

Different states have different trust company frameworks:

STATE TRUST COMPANY LANDSCAPE:

- Most stringent requirements
- Comprehensive examination
- High capital requirements
- Strong consumer protection

- Crypto-friendly framework
- Digital asset specific rules
- Lower barriers than traditional
- Emerging custodian destination

- Trust-friendly jurisdiction
- Reasonable requirements
- Established charter process

- More permissive historically
- Recent failures prompted scrutiny
- Enhanced examination focus

KEY VARIATIONS:

• NY: $10M+ depending on activities

• Wyoming: $5M (SPDI)

• South Dakota: $500K minimum

• Nevada: Varies

• NY: Annual or more

• Others: Risk-based, often annual

• Wyoming: Comprehensive framework

• Others: General trust rules applied

EVALUATING STATE TRUST COMPANIES:

REGULATORY QUALITY:

Strong Indicators:
✅ Regular examination history
✅ No enforcement actions
✅ Adequate capital maintenance
✅ Comprehensive compliance program

Concerns:
⚠️ New charter (limited track record)
⚠️ Regulatory enforcement history
⚠️ Minimal capital above requirements
⚠️ State with limited examination resources

FINANCIAL STABILITY:

• Capital levels and trends

• Revenue diversification

• Profitability

• Parent company strength (if applicable)

• Declining capital ratios

• Concentrated revenue sources

• Operating losses

• Weak or unknown parent

OPERATIONAL ASSESSMENT:

• Security audit results
• SOC 2 Type II status
• Insurance coverage
• Technology infrastructure
• Key person dependencies

---

CLARITY ACT STATUS:

- Digital Asset Market Clarity Act
- Bipartisan support
- Passed House July 2025
- Senate consideration ongoing

KEY CUSTODY PROVISIONS:

• CFTC-registered entities

• Special Purpose Broker-Dealers

• Additional state-chartered entities

• Federally chartered entities

• Technology-neutral approach

• Outcome-focused requirements

• Flexibility for innovation

• Clear compliance standards

IMPACT IF ENACTED:

• More provider options

• Clearer competitive landscape

• Reduced compliance uncertainty

• Potential new entrants

• More custody choices

• Clearer due diligence framework

• Potentially lower costs

• Simplified compliance

• Senate action expected 2026

• Industry strongly supportive

• Administration favorable

GENIUS ACT (ENACTED JULY 2025):

- Stablecoin reserve custody requirements
- Defines qualified custodians for reserves
- Bank and non-bank pathways

- 100% backing required
- Permissible assets defined
- Qualified custodian mandatory
- Regular attestations required

- Clear framework for stablecoin custody
- Banks can custody reserves
- State trust companies pathway
- Enhanced institutional clarity

- Ripple's stablecoin under GENIUS framework
- NYDFS regulated
- Custody requirements clear
- Institutional adoption enabled

---

QUALIFIED CUSTODIAN STATUS (December 2025):

CLEARLY QUALIFIED:

• BNY Mellon (crypto custody)

• US Bank

• Others entering market

• Anchorage Digital Bank

• Ripple National Trust Bank (conditional)

• BitGo (conversion pending)

• Paxos (conversion pending)

• Fidelity Digital Assets (conversion pending)

QUALIFIED WITH CONDITIONS:

• Meeting September 2025 no-action conditions

• Written policies

• Asset segregation

• No rehypothecation without consent

• Adviser annual due diligence

• Coinbase Custody Trust Company (NY)

• BitGo Trust Company (SD)

• Gemini Trust Company (NY)

NOT QUALIFIED:

• Cryptocurrency exchanges (unless separately licensed)
• Unregistered/unchartered entities
• Foreign custodians (without meeting requirements)
• Self-custody by adviser (generally)

QUALIFIED CUSTODIAN DECISION TREE:

START: Need custody for crypto assets

QUESTION 1: Is ETF wrapper acceptable?
├─ YES → Use ETF, custody solved
└─ NO → Continue to direct custody

QUESTION 2: Is bank custodian available?
├─ YES → Evaluate bank offering
│        (strongest regulatory status)
└─ NO → Continue to alternatives

QUESTION 3: Is federal trust bank available?
├─ YES → Evaluate federal trust
│        (federal oversight, clear status)
└─ NO → Continue to state trust

QUESTION 4: Is state trust company acceptable?
├─ YES → Verify conditions met:
│        □ Written policies documented
│        □ Asset segregation confirmed
│        □ No rehypothecation without consent
│        □ Annual due diligence planned
│        → If all YES: Proceed with due diligence
└─ NO → Limited options remain
         (consider ETF wrapper)

---

✅ State trust companies can be qualified custodians - September 2025 no-action letter provides clarity

✅ Banks are now free to offer crypto custody - SAB 121 rescission removed barriers

✅ Federal trust bank charters provide strong regulatory status - OCC December 2025 approvals validate pathway

✅ Regulatory framework has materially improved - 2025 developments transformed landscape

⚠️ How new rules will be examined in practice - Limited examination history under new frameworks

⚠️ State trust company treatment in bankruptcy - Not tested for major custodian failure

⚠️ Long-term regulatory stability - Political changes could affect framework

⚠️ CLARITY Act timing and final form - Senate passage not guaranteed

📌 Assuming all state charters are equal - Significant variation in oversight quality

📌 Ignoring enforcement action history - Past problems predict future risks

📌 Treating "qualified custodian" as guarantee - Legal status ≠ operational excellence

📌 Not documenting compliance rationale - Regulatory defense requires documentation

The regulatory framework for crypto custody is the clearest it's ever been, but clarity doesn't mean simplicity. Understanding the nuances—bank vs. trust company, state vs. federal, conditions for qualification—is essential for compliance and risk management. The September 2025 no-action letter and December 2025 OCC charters represent genuine progress, but institutions must still conduct thorough due diligence.

---

Assignment: Create a comprehensive regulatory decision tree for custody provider selection.

Format: Professional guide, 5 pages maximum

Time Investment: 3-4 hours

---

1. Under the September 2025 SEC no-action letter, what conditions must state trust companies meet to serve as qualified custodians?
Answer: B - Written policies, asset segregation, no rehypothecation without consent, annual adviser due diligence

2. What was the primary impact of SAB 121 on bank crypto custody?
Answer: C - Required balance sheet recognition creating prohibitive capital requirements

3. What does a national trust bank charter authorize that a standard crypto exchange lacks?
Answer: B - Federal qualified custodian status with OCC oversight

4. Why did Prime Trust and Fortress Trust failures matter for state trust company evaluation?
Answer: A - Demonstrated that state charter doesn't guarantee operational safety

5. What is the current status of the CLARITY Act's qualified custodian provisions?
Answer: C - Passed House, under Senate consideration, expected passage in 2026

---

End of Lesson 3

Total Words: ~4,500
Estimated Completion Time: 65 minutes reading + 3-4 hours for deliverable