Qualified crypto custody is a regulatory status, not simply a secure way to store private keys. In the United States, the question most directly affects SEC-registered investment advisers that have custody of client funds or securities: they generally must use a qualified custodian under the applicable custody rule. That does not mean every company holding cryptocurrency is legally required to hire one. The answer depends on the entity, its activities, the assets involved and the rules that apply.
What “qualified crypto custody” means
A crypto wallet does not usually hold coins like a physical wallet holds cash. It stores or manages private keys that authorize transactions. A business may control those keys itself, or it may use a third-party provider to control or manage access to them. Those are custody arrangements in the operational sense; they do not, by themselves, establish that a provider is a “qualified custodian” under a particular regulatory rule.
As an Amazon Associate I earn from qualifying purchases.
| Arrangement | Who controls access to the keys? | Does this establish qualified-custodian status? |
|---|---|---|
| Self-custody, including a hardware wallet | The business controls the keys. | No. A hardware wallet can support self-custody, but secure key storage alone does not establish that a regulatory custodian requirement is met. |
| Third-party custody | A provider controls or manages access to the keys. | Not necessarily. The provider’s eligibility depends on the governing regime, the assets and the facts. |
In the investment-adviser context, “qualified custodian” refers to eligibility under the applicable U.S. regulatory framework. It is not a general certification that a wallet, exchange or service is safe, and a provider’s use of the word “custody” does not settle the legal question.
When a business may need a qualified custodian
SEC-registered investment advisers
Start by determining whether the adviser has “custody” of client funds or securities under the applicable rule. Access to client assets or authority to withdraw them can matter. Then assess whether each crypto asset falls within the rule and whether an exception or alternative applies. Do not assume every token is treated the same way.
#1 Best Overall
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Enjoy Bluetooth connectivity, iOS access, and hours of battery use with this mobile-first, secure backup signer. Freedom you can depend on.
- Genuine Check: confirm your signer is authentic during setup with the Ledger Wallet app.
- Protect your signer: keep it in mint condition at all times with a bespoke Pod or Case to avoid scratches and everyday wear and tear.
SEC Chair Gary Gensler offered a simplified explanation in a February 21, 2023, educational segment: “The rule requires that any adviser who can access your funds must use a qualified custodian to protect your funds.” That is a historical summary, not a substitute for the rule’s text or an analysis of the adviser’s authority and assets.
Registered funds
Registered investment companies and business development companies have their own custody requirements. The SEC’s October 2026 proposal addresses regulated funds as well as advisers, but proposed changes are not effective merely because they have been published. Confirm the requirements currently applicable to the particular fund.
Rank #2
- Proven security at scale: Over 9 years and millions of cards issued with no known remote hacks, while military‑grade EAL6+ security keeps your private keys locked inside the chip. Your cryptocurrencies stay strongly protected from online attackers.
- Tap once to manage your entire crypto wallet across 90 blockchains - no USB cables or Bluetooth, no batteries, no setup. Access 14,100+ coins & tokens, DeFi, NFTs, and staking instantly from your phone
- Smart backup: Use your second Tangem Wallet as your Backup keys with end‑to‑end encryption; no more papers, pictures. If one card is lost, the remaining can still restore full access, with an optional seed phrase available for advanced users.
- Engineered to last up to 25 years: Waterproof (IP69K), shockproof and tested for extreme temperatures from −25°C to 50°C. A durable cold wallet with long‑term protection and independently audited security.
- Trusted by 6 million users worldwide - buy, sell, swap, stake, and spend cryptocurrency directly. The secure offline storage wallet designed for how people actually use crypto wallets
Other companies and organizations
There is no universal requirement established here that every business holding crypto must use a qualified custodian. A company holding crypto for its own treasury, for example, should identify the laws and obligations that apply to its entity, jurisdiction and activity rather than assume the adviser custody rule applies to it. Even without a specific legal mandate, a business may choose institutional custody for governance, contractual, financing, banking or operational-risk reasons.
The useful first question is: Does this entity have a regulatory duty to safeguard these particular assets with a custodian eligible under the governing rule? Answer that before comparing wallet features or provider marketing.
Rank #3
- UNPARALLELED SECURITY: Protect your assets with Trezor Safe 5's NDA-free EAL 6+ Secure Element, offering robust defense and complete transparency.
- EFFORTLESS NAVIGATION: Experience seamless crypto management with the vibrant color touchscreen, designed for intuitive and user-friendly interactions.
- ENHANCED USER EXPERIENCE: Enjoy tactile confirmation with Trezor Touch Haptic Engine, making each interaction precise and engaging.
- SUPPORTS 1000s OF COINS & TOKENS: Securely handle thousands of assets, including Bitcoin, Ethereum, and more, all in one wallet.
- EASY ASSET MANAGEMENT: Monitor and transact seamlessly with Trezor Suite, our user-friendly desktop and mobile app
What the latest SEC and OCC developments change—and what they do not
SEC proposal for advisers and regulated funds
As of October 7, 2026, the SEC has proposed a tailored framework for crypto custody by investment advisers and regulated funds. It is a proposal, not an adopted final rule. It would create a separate route for qualifying state trust companies to act as custodians for crypto assets and related cash or cash equivalents, subject to proposed eligibility, diligence, recordkeeping and other conditions.
The proposal describes a current complication: some state trust companies are not among the enumerated categories, so whether a particular company qualifies as a “bank” under existing definitions may require fact-specific legal analysis. A proposed route is not proof that a particular trust company qualifies today. SEC commissioner remarks in 2025 also discussed uncertainty around state-chartered limited-purpose trust companies and crypto-asset classification; those remarks reflect policy debate, not binding Commission rules.
Rank #4
- Dual-chip architecture for maximum protection: The next-gen, fully auditable TROPIC01 chip works alongside a certified EAL6+ Secure Element—completely NDA-free—to deliver radically transparent, industry-leading defense against physical attacks.
- Quantum-ready security: Get protection against future threats with the first-ever hardware wallet designed with quantum-ready architecture.
- See every detail with confidence: Our largest high-resolution color touchscreen makes it easy to navigate your assets, review transactions and manage your coins with clarity.
- Wireless freedom with encrypted Bluetooth control: Manage, buy, swap and stake securely using Trezor Suite on desktop or mobile. Qi2-compatible wireless charging keeps your Trezor powered up. No cables required—security meets convenience.
- Works seamlessly with Android, iOS and desktop: Connect wirelessly or via USB-C to your phone or computer. Manage your crypto anywhere with our companion Trezor Suite app.
OCC-supervised banks
In May 2025, the Office of the Comptroller of the Currency stated that national banks and federal savings associations may provide crypto-asset custody, buy and sell assets held in custody at a customer’s direction, and outsource bank-permissible activities to third parties. That authority remains subject to applicable law, safe-and-sound operation and appropriate third-party risk management. It does not automatically establish that a particular bank is eligible for a particular adviser, fund or asset under the applicable custody rule.
Free tools Windows power users keep installed
One-click scans. No signup required.
How to evaluate a prospective custodian
After identifying the rule that applies, assess the provider against the business’s actual assets and operating needs. Ask for specific answers and supporting documentation rather than relying on a general claim of regulatory approval or security.
Quick Recap
- Confirm regulatory fit. What charter, registration or authorization does the provider rely on? Is it eligible under the exact regime applicable to your entity and assets? For a state trust company, identify its supervising state authority and the legal basis for treating it as eligible under current rules.
- Check asset and service coverage. Confirm support for each relevant token and network, as well as forks, staking or other services, and the withdrawal paths the business will need. Availability differs by provider and asset.
- Understand key control and security. Establish who can authorize transactions, how key management and physical and cyber security work, whether storage is hot, cold or mixed, and whether the provider uses a sub-custodian.
- Review treatment of client assets and failure scenarios. Ask how assets are recorded and segregated; whether they may be lent, pledged, rehypothecated or commingled; and what happens during insolvency or an interruption of service. Review the scope, exclusions and limits of any insurance rather than treating insurance as a blanket guarantee.
- Map the operating process and costs. Document approvals, recovery, withdrawals, settlement, reporting, service levels, transfers and termination. Compare setup, account, transaction, asset-based and transfer fees.
- Plan ongoing oversight. Decide who will monitor the provider, review its controls and subcontractors, and check that authorization and supported services remain current. OCC guidance emphasizes third-party risk management for bank activities. If the SEC proposal is adopted, its proposed state-trust-company route would include specified written diligence and annual determinations.
Common mistakes to avoid
- Equating security with regulatory eligibility: strong key controls do not, on their own, make a provider a qualified custodian.
- Assuming the adviser rule covers every business: first establish the entity’s regulatory status, activity and relationship to the assets.
- Treating a proposal as current law: the SEC’s October 2026 framework remains proposed, and its contemplated state-trust-company pathway is not yet an effective rule.
- Assuming bank authority answers every eligibility question: the OCC’s statement about permissible bank activities does not decide whether a specific provider qualifies for a specific client, fund or asset.
- Choosing a provider before defining the requirement: determine which assets and services need custody, who must retain transaction authority, and what rules apply before comparing providers.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
