Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Short answer: There is no single legal status called “crypto.” In the United States, classification depends on the particular asset, the transaction or activity, and the firm’s role. A token can fall within securities rules in one context and commodity or other rules in another. That determination drives custody, supervision, disclosure, insolvency protection, and tax reporting.
For an adviser, the practical process is to identify the asset and activity, document who controls the private keys, determine whether a broker-dealer or investment adviser custody rule applies, verify FINRA obligations, and build tax records that can support basis and fair-market-value calculations. The guidance below reflects U.S. federal rules and agency positions available in 2026; state law, product documents, and counsel can change the answer for a specific client or firm.
As an Amazon Associate I earn from qualifying purchases.
1. Is crypto a security or a commodity?
It can be either, neither, or subject to more than one regulatory regime depending on the facts. FINRA defines crypto assets as assets issued or transferred using distributed-ledger or blockchain technology and says a particular crypto asset may or may not be a security. The name of a token, the blockchain it uses, or the fact that it trades on a platform does not settle the question.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Start with three questions
- What is the asset? Identify the token’s rights, governance features, redemption terms, supply, and relationship to an issuer or promoter.
- What is happening? Analyze the original sale, a secondary trade, airdrop, protocol mining, staking, wrapping, lending, payment, or another activity. The same token can present different legal issues in different transactions.
- Who is acting? The obligations differ for an issuer, adviser, broker-dealer, trading venue, custodian, fund, and client.
The 2026 SEC-CFTC interpretation
A CFTC release dated March 17, 2026 describes an SEC interpretation that uses a token taxonomy covering digital commodities, digital collectibles, digital tools, stablecoins, and digital securities. It also discusses when an investment contract can begin or end and addresses airdrops, protocol mining, staking, and wrapping. These labels are analytical categories, not a blanket exemption from securities, commodities, consumer-protection, or state-law requirements.
#1 Best Overall
CFTC Chairman Michael S. Selig said on March 17, 2026: “For far too long, American builders, innovators, and entrepreneurs have awaited clear guidance on the status of crypto assets under the federal securities and commodity laws.” The statement explains the policy rationale for clearer guidance; it is not a safe harbor for a particular token or business model.
Why classification changes an advice engagement
- A digital security can trigger securities registration, broker-dealer, trading-venue, disclosure, and custody analysis.
- A digital commodity can implicate commodities rules and anti-fraud or anti-manipulation provisions even when it is not a security.
- Stablecoins, digital tools, collectibles, and other categories may have distinct facts, state-law treatment, and operational risks.
- An adviser must analyze the asset and the activity rather than rely on a marketing label or a platform’s description.
2. What custody questions should an adviser ask?
Custody is a control question, not simply a question of where an asset is displayed in an account. Separate four arrangements before deciding which rule applies: a client holding keys directly, an adviser that can access or transfer keys, a broker-dealer holding a crypto-asset security, and an independent third-party custodian.
Direct ownership and adviser control
If a client holds a token in a personal wallet, the client generally bears the operational burden: key generation, backups, transaction authorization, recovery, and protection against theft or loss. If an adviser or its personnel can withdraw, transfer, or unilaterally move the client’s assets, that control can create custody and fiduciary issues even when the adviser never takes legal title. Written authority, multi-person approval, transaction limits, segregation, and an auditable recovery process should be documented.
Broker-dealer control of crypto-asset securities
The SEC staff FAQ says a broker-dealer may establish control of a crypto-asset security under Exchange Act Rule 15c3-3(c) at an otherwise qualifying control location. “Control” therefore requires a fact-specific analysis of the asset, the wallet or account arrangement, the broker-dealer’s exclusive control, and the location’s qualification under the customer-protection rule.
Rank #2
The SEC’s 2020 special-purpose broker-dealer statement is a temporary staff position or safe harbor. It did not amend Rule 15c3-3. A firm should not treat that statement as a permanent change to the rule or as approval of every custody model.
October 1, 2026 custody proposal
The SEC Crypto@SEC page records an October 1, 2026 proposal concerning adviser and regulated-fund custody. If finalized, the proposal would, subject to conditions, permit adviser self-custody and custody by state-chartered trust companies, modernize custody provisions, and update related books, records, and disclosures. It is a proposal, not a final rule. Firms must check for subsequent Commission action and continue applying the rules currently in force.
Operational custody checklist
- Map every wallet, omnibus account, sub-custodian, exchange account, and signing device.
- Record who can initiate, approve, and complete a transfer, and whether one person can do all three.
- Reconcile on-chain balances to books and client statements at a defined frequency.
- Use documented key backup, recovery, incident-response, and employee-departure procedures.
- Assess insurance, exclusions, bankruptcy treatment, audit evidence, service-provider oversight, and geographic access restrictions.
- Describe the arrangement and its limits plainly in advisory agreements, Form ADV disclosures, and client communications.
3. Is crypto covered by SIPC?
Usually not if the asset is not a security. The SEC FAQ explains that SIPC protection generally extends to “securities” under the Securities Investor Protection Act (SIPA) and answers no for customer claims involving non-security crypto assets. It warns that non-security crypto assets may not be protected by any other specific insolvency regime, leaving customers exposed if a broker-dealer fails.
Recommended Free Tools
The ordinary SIPC limit cited by the SEC is $500,000 for securities and cash, including a $250,000 cash-only limit. That is not crypto insurance. The asset must first qualify for SIPA protection, and the customer’s account and insolvency facts must satisfy SIPC rules. A platform’s reference to “SIPC” should therefore be checked against the legal status of the asset actually held, not just the account interface.
A crypto exchange failure can involve separate questions about title, rehypothecation, commingling, withdrawal rights, and the estate’s treatment of customer property. Those questions are not answered by the existence of a trading account or by a general statement that a company is regulated.
4. How should crypto taxes and basis be reported?
The IRS treats digital assets as property, not currency, for U.S. federal tax purposes. Taxpayers must report digital-asset transactions even when a particular transaction does not produce a gain or loss. An adviser should make tax-record quality part of the investment review rather than wait until a year-end tax package arrives.
Records every client should preserve
- Date and time of acquisition, receipt, sale, exchange, or other disposition.
- Number of units and the asset’s identifying information.
- Fair market value in U.S. dollars at the relevant event and the method or source used.
- Cost basis, including fees when applicable, and the wallet or account involved.
- Transaction IDs, exchange statements, transfer records, and evidence of airdrops, rewards, or staking income.
- Records showing whether a transfer was an internal wallet move or a taxable disposition.
Form 1099-DA timing
The IRS states that broker Form 1099-DA reporting is required for covered transactions on or after January 1, 2025. Brokers report gross proceeds for transactions from that date and report basis for certain transactions beginning January 1, 2026. A client should compare the form with personal wallet and exchange records; a form may not capture every address, transfer, or basis lot.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Clear out junk files and repair common Windows errors3Scan for outdated or missing drivers - takes under a minuteEvents that can require a “Yes” answer
The IRS identifies staking, mining, rewards, airdrops, exchanges, payments, and digital-asset fees among events that can require a “Yes” answer to the digital-assets question on the tax return. The tax result depends on the facts and the applicable form, not simply on whether cash was withdrawn.
Wrapping, liquidity-provider transactions, lending, short sales, and notional-principal transactions require particular care. The IRS page identifies temporary reporting exceptions for some of these transactions while further guidance is pending. An exception to a reporting instruction is not a blanket statement that the transaction has no tax consequences; preserve complete records and obtain tax advice for the client’s facts.
5. What does FINRA require if a member firm offers crypto?
FINRA rules can apply to a member firm’s crypto activities even when a particular asset is not a security. FINRA says both its securities rules and rules that do not depend on securities status may impose obligations on member firms and associated persons.
Notification, membership filings, and supervision
- FINRA has encouraged firms to notify it when the firm or an affiliate engages in crypto activities, including activities involving non-security assets.
- A prospective member firm seeking a crypto business line may need a New Membership Application.
- An existing member making a material crypto-related business change may need a Continuing Membership Application.
- Associated persons’ outside-business activities and private-securities transactions can create approval, disclosure, recordkeeping, and supervision requirements.
The exact filing depends on the firm’s current membership agreement, the proposed activity, affiliates, compensation, customer contact, and whether securities are involved. Compliance should involve FINRA counsel before launch, not after a product is marketed.
Risk controls FINRA-style supervision should address
- Written supervisory procedures covering approved assets, venues, communications, valuation, and trade review.
- Suitability or best-interest analysis that addresses volatility, liquidity, leverage, concentration, and loss capacity.
- Review of advertising, social-media statements, performance illustrations, and descriptions of regulatory status.
- Cybersecurity, access control, vendor due diligence, business continuity, and incident escalation.
- Books and records that allow the firm to reconstruct orders, transfers, approvals, and client disclosures.
6. How much weight should an adviser give SEC FAQs?
SEC FAQs are useful statements of current staff views, but they are not statutes or final rules. The SEC Division of Trading and Markets staff stated on May 15, 2025: “These responses, like all staff statements, have no legal force or effect: they do not alter or amend applicable law, and they create no new or additional obligations for any person.”
Best Value
- Easy To Track Your Finances: HAUTOCO accounting ledger book keeps you on top of your expenses and income! Help you keep your money organized, spend well, and set and achieve financial goals
- Premium Material: The A5 accounting ledger book has a total of 120 pages and 2040 lines of entries. It is made of 100gsm thick paper to reduce ink leakage; it is equipped with a waterproof and sturdy PP cover to protect the inner pages
- Practical Design: Compact 8.3 x 6.2'' expense tracker notebook is easy to carry and features information pages, 2025 calendar, yearly financial goals page, and PVC pocket for storing important tickets and loose items
- Manage Your Finances Effectively: Undated accounting books with number, date, description, account, payment or deposit amount, and total balance. You will be able to easily analyze your financial activities and quickly prepare accurate financial statements
- Ideal For Small Business or Personal Use: An accounting log journal can track your business or personal financial status. With a clear record of transactions, you can find unnecessary expenses or fraudulent charges
Use an FAQ to understand staff reasoning and identify issues, then confirm the result against formal rules, Commission releases, court decisions, state law, product documents, and firm counsel. A staff FAQ cannot waive an obligation that a statute or rule imposes, and a later rulemaking or enforcement action can change the practical analysis.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.7. Should a client hold crypto directly or through an ETF or other ETP?
Neither route is universally better. Direct ownership can provide direct exposure and control but requires the client to manage keys, transfers, recovery, and records. An exchange-traded product (ETP) can simplify brokerage access, reporting, and operational handling, but the client owns a security or fund interest rather than the underlying token and pays product-level expenses.
| Issue | Direct crypto ownership | ETF or other ETP exposure |
|---|---|---|
| What the client owns | Units of the crypto asset, subject to its legal classification and network rules. | Shares or interests in a regulated product; the product’s documents define exposure and rights. |
| Custody and recovery | Client, adviser, exchange, or custodian must secure keys and handle transfers and recovery. | Product sponsor, custodian, broker, and market infrastructure handle the product’s assets and records. |
| SIPC and insolvency | Non-security crypto generally is not protected by SIPC; treatment depends on the asset and holder. | SIPC analysis applies to the brokerage security interest and account, while the product’s own custody and insolvency risks remain relevant. |
| Trading and valuation | May trade continuously on venues with differing prices, spreads, and withdrawal rules. | Trades on an exchange during market hours and can trade at a premium or discount to underlying value. |
| Fees and conflicts | Network fees, spreads, withdrawal charges, custody fees, and platform conflicts can apply. | Expense ratio, brokerage costs, creation/redemption mechanics, tracking differences, and sponsor conflicts can apply. |
| Tax records | Wallet transfers, lots, staking, rewards, and exchange history can require substantial reconstruction. | Broker statements may simplify records, but the client must still review basis, distributions, and any transactions outside the account. |
| Best fit | Clients who understand key management, operational risk, and direct-asset responsibilities. | Clients who prioritize brokerage integration, standardized statements, and no direct key handling. |
The SEC FAQ notes that crypto ETP activity remains subject to federal anti-fraud and anti-manipulation provisions. FINRA emphasizes both traditional investment risks and crypto-specific risks. Compare the two routes using the client’s time horizon, liquidity needs, loss tolerance, tax-record capacity, and willingness to manage custody—not just expected return.
Quick Recap
8. A practical compliance workflow for an advisory firm
- Inventory the proposal. Name the asset, protocol, issuer or promoter, venue, product wrapper, jurisdictions, and every party touching client property.
- Classify the asset and activity. Apply the SEC-CFTC taxonomy and analyze sales, staking, airdrops, wrapping, lending, and secondary trading separately.
- Map regulatory roles. Decide whether the firm, affiliate, broker-dealer, adviser, fund, custodian, or venue is performing a regulated function.
- Test custody and insolvency exposure. Document control, segregation, recovery, withdrawal rights, bankruptcy treatment, and whether SIPA can apply.
- Confirm FINRA status. Determine whether notification, a New Membership Application, a Continuing Membership Application, or associated-person supervision is required.
- Build the tax-data pipeline. Capture dates, units, dollar values, fees, basis, wallet addresses, and transaction IDs before the first trade or transfer.
- Disclose and monitor. Explain volatility, liquidity, fees, conflicts, valuation, custody, tax uncertainty, and changes in law; review the arrangement as guidance and product terms evolve.
9. Questions to resolve before approving a recommendation
- Can the firm explain, in writing, why the asset is treated as a security, commodity, or another category for this activity?
- Who can move the client’s assets, and what independent evidence proves the stated balance?
- What happens to the client’s property if the platform, broker, custodian, or product sponsor becomes insolvent?
- Does the client understand that SIPC’s $500,000 limit is not insurance for non-security crypto?
- Can the client produce complete basis and fair-market-value records for every wallet and venue?
- Has compliance determined whether FINRA notification or a membership filing is necessary?
- Are all marketing statements, risk disclosures, and performance examples consistent with the actual product and current law?
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
