SEC Clarifies Crypto Custody Rules for Broker-Dealers

The U.S. Securities and Exchange Commission (SEC) Staff issued a statement, referred to as the 2025 Crypto Custody Statement in the provided material, clarifying how broker-dealers can maintain physical possession of digital asset securities. Issued in 2025, the guidance emphasizes operational security and robust private key protection for firms engaging in the custody of these assets, building on previous regulatory discussions.

The 2025 Crypto Custody Statement provides a framework for broker-dealers aiming to comply with the Customer Protection Rule under the Securities Exchange Act of 1934, specifically concerning fully paid and excess margin digital asset securities. The guidance underscores the critical importance of private key protection, mandating that broker-dealers maintain exclusive control over digital asset securities held in custody. It also advises that if material security or operational risks are identified with the distributed ledger technology (DLT) and associated network used to access and transfer a specific digital asset security, broker-dealers should likely refrain from maintaining custody of that asset through that network.

This latest clarification follows earlier efforts by the SEC Division of Trading and Markets to define control in the digital asset context. A previous joint statement interpreted control to mean exclusive control. However, that statement, which also required broker-dealers custodying digital asset securities not to engage in traditional securities activity, did not offer conclusive clarity on a fully compliant custodial arrangement. Subsequently, the Staff and FINRA issued FAQs, which were considered an incremental step forward. Commissioner Hester M. Peirce noted that this earlier guidance was expressly time-limited to five years, highlighting the ongoing need for more permanent regulatory solutions in the digital asset space.

The 2025 Crypto Custody Statement appears to be a response to the evolving landscape of digital asset markets and the persistent demand for clearer regulatory pathways for traditional financial institutions. The guidance aims to mitigate risks associated with the custody of digital assets by setting expectations for operational security and DLT network integrity. By focusing on the practical aspects of physical possession and private key control, the SEC seeks to ensure broker-dealers can meet their obligations under the Customer Protection Rule while handling novel asset classes.

While the statement clarifies aspects of physical possession, it reportedly does not offer further specific guidance on how broker-dealers can establish control beyond the general requirement of exclusive control. The precise day and month of issuance for the 2025 Crypto Custody Statement were not specified in the provided material. Additionally, details regarding potential user refunds or compensation mechanisms in scenarios involving custody failures remain unaddressed within the scope of this particular statement.

The issuance of this guidance is expected to prompt broker-dealers to review and potentially revise their current digital asset custody practices. Firms will likely need to conduct thorough assessments of their private key management systems and the security of the underlying DLT networks they utilize. Industry participants and legal experts anticipate continued regulatory evolution as the SEC, FINRA, and other bodies adapt existing rules to the unique characteristics of digital asset securities.

Follow us on Bluesky , LinkedIn , and X to Get Instant Updates