SEC Proposes Self-Custody Framework for Crypto Investment Advisers

Registered investment advisers (RIAs) may soon have a formal regulatory path to hold crypto assets directly, without routing client funds through a third-party custodian. The SEC this week published proposed guidance that would allow RIAs to use self-custody arrangements for digital assets, while also establishing conditions under which state trust companies could qualify as custodians, a meaningful expansion of the options available to firms navigating crypto asset management.

The proposal marks a notable departure from the posture the SEC has maintained since at least 2021, when guidance effectively required advisers to use "qualified custodians" for client assets, a standard that most crypto-native custody solutions struggled to meet. That requirement created a structural bottleneck for traditional asset managers seeking exposure to digital assets and drew sustained criticism from the industry for being both technically misaligned with how blockchain assets work and practically unworkable at scale. The new proposal acknowledges those frictions and attempts to address them directly.

Self-custody in this context means an adviser holds the private keys controlling client crypto assets, rather than delegating that function to a bank, broker-dealer, or other regulated third party. The operational implications are substantial. Firms pursuing self-custody would need to demonstrate robust key management infrastructure, including hardware security modules, multi-signature signing schemes, and documented recovery procedures. The SEC has not yet published the full technical conditions attached to the proposal, but the 60-day public comment window that opens upon Federal Register publication will give industry participants the opportunity to push back on, or reinforce, whatever standards the agency sets.

State trust company custody represents a significant alternative pathway. Several states, including Wyoming and South Dakota, have built regulatory frameworks specifically designed to accommodate crypto custodians, and trust companies chartered under those regimes have long argued they should qualify for federal advisory purposes. If the SEC formalizes that recognition, it would validate years of state-level regulatory work and potentially accelerate competition among custody providers, which could benefit advisers and their clients through lower fees and more product choice. Critics, however, point to the risk of regulatory fragmentation: a patchwork of state trust standards could create uneven investor protections depending on where a firm's custodian is chartered.

The counterarguments to expanded self-custody are substantial. Smaller advisory firms may lack the technical expertise and capital to build custody infrastructure that genuinely protects client assets. Third-party custodians provide segregation of duties, insurance coverage, and regulatory oversight that self-custody arrangements replicate only with significant investment. There is also a subtler risk: if self-custody standards are materially less stringent than those applied to qualified custodians, the proposal could open a regulatory arbitrage channel that sophisticated actors exploit at retail investors' expense.

The SEC's move fits within a broader pattern of regulatory recalibration across major jurisdictions. The UK Financial Conduct Authority recently opened its crypto authorization window with a February 2027 deadline for firms seeking to operate legally under its new regime, and European regulators are facing public pressure to revisit elements of MiCA, the bloc's landmark crypto framework. The SEC's willingness to engage substantively on custody, one of the most technically and legally complex corners of crypto regulation, suggests the agency is moving from an enforcement-led posture toward something closer to structured rulemaking.

For RIAs, the practical stakes are clear. Firms that have been sitting on the sidelines of crypto asset management, deterred by custodial ambiguity, now have a formal comment process to engage with. Those that already hold digital assets under existing qualified custodian arrangements will want to monitor whether the proposal changes the competitive calculus for their custody providers. The 60-day comment window is the critical near-term date. Whatever shape the final guidance takes, it will define the compliance baseline for an advisory industry that has been waiting years for the SEC to draw a clear line.