The SEC has sent a revised custody rule to the Office of Information and Regulatory Affairs for review. This aims to modernize how investment advisers handle client assets, including crypto. This is a shift from the 2023 Safeguarding Advisory Client Assets proposal that would've made crypto custody nearly impossible for most advisers.
Regulatory changes often lead to misconceptions. Compliance officers are already repeating myths that could derail their preparation. Here's what you need to stop believing.
Myth 1: The New Rule Means Crypto Custody Is Now "Approved"
Reality: Regulatory review doesn't mean regulatory approval. The rule addresses infrastructure gaps that made existing custody requirements unworkable for crypto assets. This doesn't declare crypto safe or suitable for all client portfolios.
Your fiduciary duty remains unchanged. You must evaluate whether crypto assets align with each client's investment objectives and Impact Tolerance. The rule clarifies how you can custody these assets if you choose to offer them, not whether you should.
What changes: The compliance pathway becomes clearer. What doesn't: Your obligation to assess suitability, liquidity risk, and counterparty exposure for every crypto position you hold.
Myth 2: Infrastructure Problems Will Solve Themselves
Reality: The SEC acknowledges that "much of the infrastructure is not set up" for advisers to comply with custody rules for crypto assets. Sending a rule to OIRA doesn't create qualified custodians, insurance products, or audit trails.
You're responsible for building or contracting the infrastructure you need. This means:
- Identifying custodians that can segregate client crypto assets and provide independent verification
- Establishing procedures for wallet key management that satisfy both the custody rule and your cybersecurity obligations
- Creating reconciliation processes that work with blockchain transaction records, not just traditional account statements
- Documenting your evaluation of each custodian's financial stability, insurance coverage, and operational controls
The 2021 Risk Alert on Digital Asset Securities made clear that the SEC expects you to assess custodian qualifications as you would for traditional assets. A revised rule doesn't lower that bar.
Myth 3: This Reverses the 2023 Proposal, So We're Back to the Old Rules
Reality: You're not reverting to the 2013 Safeguarding Advisory Client Assets rule. You're moving to a third framework that's still being written.
The 2023 proposal created compliance requirements so strict they'd have made most alternative asset custody impractical. This revision swings back, but it's creating new requirements, not restoring old ones.
Don't assume your pre-2023 custody procedures will satisfy the new rule. You need to:
- Wait for the actual rule text to publish
- Map your current custody arrangements against the new requirements
- Identify gaps in your policies, contracts, and operational procedures
- Budget for the changes you'll need to implement
Treating this as a return to 2013 means you'll miss new obligations entirely.
Myth 4: Crypto Assets Are Just Another Alternative Investment
Reality: Crypto custody presents unique operational risks that don't exist for private equity, hedge funds, or real estate. You can't apply your alternative asset playbook without modification.
Consider key management. Traditional custodians hold securities in book-entry form with transfer agents or depositories. Crypto assets require private keys. Lose the key, lose the asset. No SIPC insurance, no recovery mechanism.
Your custody procedures need to address:
- Multi-signature wallet requirements and key holder identification
- Succession planning if key holders leave or become incapacitated
- Cold storage protocols and the trade-offs between security and liquidity
- Fork management and how you'll handle chain splits
- Staking arrangements and whether they create custody issues under the rule
The SEC's focus on modernizing custody rules for crypto assets signals they recognize these differences. Your compliance program needs to as well.
Myth 5: Small Advisers Don't Need to Worry About This Yet
Reality: The custody rule applies to all registered investment advisers, regardless of assets under management. If you hold client assets or have authority to access them, you're subject to custody requirements.
Smaller advisers often face bigger compliance challenges with crypto because you lack the resources to build custom infrastructure. You're more dependent on third-party custodians, which means you need to conduct thorough due diligence on providers you can't control.
The rule revision might create new compliance pathways, but it won't exempt you from custody obligations. Start preparing now:
- Document your current custody arrangements for all asset types
- Identify which clients hold or want to hold crypto assets
- Research qualified custodians that serve advisers your size
- Calculate the compliance cost before you promise crypto custody to clients
Waiting until the rule is final means you'll be implementing changes under deadline pressure.
What to Do Instead
Stop guessing about what the rule will require. Start building the foundation you'll need regardless of the final text:
Document your risk assessment. Before you custody any crypto assets, create a written analysis of the operational, cybersecurity, and market risks specific to each type of crypto you'll hold. Update it quarterly.
Audit your service providers. If you're using a third-party custodian, review their SOC 2 report, insurance coverage, and business continuity plan. Confirm they can provide the account statements and confirmations the custody rule requires.
Test your reconciliation process. Can you independently verify client crypto holdings at least quarterly? Can you reconcile blockchain records with custodian statements? If not, you're not ready.
Review your advisory agreements. Make sure your client contracts clearly describe how crypto assets will be custodied, what risks clients bear, and what happens if the custodian fails or assets are lost.
The SEC's move toward a workable crypto custody rule is a step forward, but it doesn't eliminate your responsibility to protect client assets. Build your compliance infrastructure on what you know, not what you hope the rule will say.
