Crypto Adviser Self-Custody Rules: SEC Requirements

Crypto adviser self custody rules do not currently give registered investment advisers a broad right to hold client crypto directly. Existing SEC custody requirements continue to govern client funds and securities, while an October 1, 2026 SEC proposal would permit self-custody of certain crypto assets only when specified safeguards are met. The distinction matters to advisers, private funds, institutional investors and compliance teams deciding who may control client private keys.

Key Takeaways

• The Investment Advisers Act Custody Rule, Rule 206(4)-2, generally requires SEC-registered investment advisers with custody of client funds or securities to maintain those assets with a qualified custodian.

• On October 1, 2026, the Securities and Exchange Commission proposed rules that would expressly permit adviser self-custody of qualifying crypto assets when a permitted custodian is unavailable and other safeguards are satisfied. The proposal is not yet final.

• Proposed safeguards include quarterly custodian-availability assessments, separate on-chain addresses, private key controls, cybersecurity reviews, independent-accountant reports and quarterly client account statements.

• SEC staff provided no-action relief in September 2025 allowing registered advisers and regulated funds, under specified circumstances, to treat certain state-chartered trust companies as permitted crypto custodians.

• The current Advisers Act custody rule applies to client funds or securities. Not every non-security crypto asset automatically falls within its present scope.

Current SEC Crypto Custody Rules

Under the SEC’s existing Custody Rule, a registered investment adviser that has custody of client funds or securities generally must maintain those assets with a qualified custodian. Qualified custodians can include banks, registered broker-dealers, futures commission merchants and certain foreign financial institutions.

The rule also requires advisers to have a reasonable basis, after due inquiry, for believing that the qualified custodian sends account statements directly to clients at least quarterly.

An annual surprise examination by an independent public accountant is required in many custody situations, although the Custody Rule contains exceptions and alternative treatment for particular arrangements, including certain pooled investment vehicles. Where an adviser or related person acts as custodian, additional internal-control requirements may apply.

These rules form part of the broader investor-protection framework for safeguarding client assets. In crypto asset custody, control of private keys can amount to practical control over the digital asset, making private key management, authorization procedures and asset segregation central compliance issues. A broader explanation of how crypto custody protects digital assets also shows why institutional custody involves more than simply storing tokens.

When Could an Investment Adviser Self-Custody Crypto?

The SEC’s October 2026 proposal would create an explicit pathway for an adviser to self-custody certain client crypto assets, but only under strict conditions. It would not make unrestricted adviser self-custody the default.

Under the proposed adviser self-custody rule, the adviser would first need to determine in writing that a permitted custodian is unavailable for the particular crypto asset. That determination would have to be reassessed quarterly.

The adviser would also need documented expertise and systems for safeguarding the crypto asset against theft, loss, misuse and misappropriation. Required controls would address private key management and joint authorization of crypto transactions by at least two people.

Client crypto assets would have to be held in one or more blockchain addresses containing only that particular client’s crypto assets. This separate-address requirement is designed to reduce commingling and improve asset segregation.

Cybersecurity controls would need to be reviewed at least annually. Within six months after taking self-custody, and annually thereafter, the adviser would also need an internal-control report from an independent public accountant covering custodial services and safeguarding controls. Quarterly account statements would remain required.

Importantly, these are proposed requirements as of October 2, 2026, not currently effective final rules.

Qualified Custodians and State-Chartered Trust Companies

The qualified custodian requirement remains central to crypto asset custody under the Advisers Act.

On September 30, 2025, SEC Division of Investment Management staff issued a no-action position concerning state trust companies. Under specified circumstances, staff said it would not recommend enforcement action when registered advisers or regulated funds treated a qualifying state-chartered trust company as a bank for custody of crypto assets and related cash or cash equivalents.

That relief did not declare every state trust company a qualified custodian. Eligibility remains fact-specific and depends on the institution and applicable state or federal authority.

The October 2026 proposal would go further by expressly allowing state trust companies to serve as permitted custodians for crypto assets subject to defined conditions.

What Changed From the Earlier Safeguarding Proposal?

The SEC proposed a much broader Safeguarding Advisory Client Assets rule in February 2023. That proposal would have expanded custody requirements beyond traditional client funds or securities and had significant implications for crypto assets.

The Commission formally withdrew that proposal in June 2025, meaning it never became an effective safeguarding rule.

The October 2026 crypto custody proposal is therefore a new regulatory initiative. It specifically addresses adviser and regulated fund custody of crypto assets, including self-custody, state trust companies, financial statement audits, recordkeeping and disclosures.

For compliance purposes, advisers should distinguish the current Custody Rule from both the withdrawn 2023 proposal and the newly proposed 2026 framework.

Why Self-Custody Creates Additional Compliance Risk

Self-custody places private key control and safeguarding responsibilities directly with the investment adviser. This can create an inherent conflict because the adviser both manages client assets and controls the credentials capable of transferring them.

SEC Commissioner Mark Uyeda described that conflict when discussing the 2026 proposal, while emphasizing that an adviser’s fiduciary duties continue when client crypto assets are self-custodied.

Written internal policies therefore need to address access controls, transaction authorization, cybersecurity, key recovery, operational continuity and segregation of customer assets. Advisers must also consider whether their custody arrangements satisfy federal securities laws rather than assuming that technical control of a wallet alone makes self-custody permissible.

How Gate Can Help

Institutional investors assessing crypto custody and execution arrangements can compare custody structure separately from trading access. Gate Institutional provides institutional trading and infrastructure services, including arrangements involving third-party custody providers.

A registered investment adviser should independently determine whether any custody provider or account structure meets the applicable Investment Advisers Act, Investment Company Act and SEC requirements. Access to an institutional trading platform does not by itself establish qualified custodian status under U.S. securities law.

Conclusion

Crypto adviser self custody rules are currently governed primarily by the existing Advisers Act Custody Rule, while the SEC’s October 1, 2026 proposal could create a more specific pathway for crypto self-custody. The proposed framework would permit self-custody only with significant controls, including quarterly custodian checks, segregated addresses, private key safeguards, cybersecurity reviews and independent verification. Until final rules are adopted, advisers must distinguish proposed requirements from binding law.

FAQ

Does the SEC currently allow investment advisers to self-custody client crypto?

There is no broad existing exemption allowing registered investment advisers to self-custody all client crypto assets. Current requirements depend partly on whether the crypto asset falls within the Custody Rule’s scope as client funds or securities. The October 2026 SEC proposal would establish a specific conditional pathway for self-custody.

Must investment advisers use a qualified custodian for crypto?

Under current Rule 206(4)-2, advisers with custody of client funds or securities generally must maintain them with a qualified custodian. The rule should not be described as automatically covering every non-security crypto asset.

Can a state-chartered trust company custody crypto for an investment adviser?

Potentially. SEC staff’s September 30, 2025 no-action letter provides conditional relief allowing certain state trust companies to be treated as banks for specified crypto custody arrangements. The October 2026 proposal would provide a more explicit framework subject to conditions.

Does the SEC require separate blockchain addresses for client crypto?

Not as a generally effective rule today. The October 2026 proposed self-custody rule would require an adviser to maintain each client’s self-custodied crypto assets in one or more crypto addresses storing only that client’s crypto assets.

Is an annual surprise examination always required?

No. The current Custody Rule generally requires a surprise examination when an adviser has custody, but specified exceptions or alternative arrangements apply, including for certain pooled investment vehicles and custody circumstances.