Crypto Custody Rules for Funds Explained: Who Holds the Keys

What Are Crypto Custody Rules for Funds, and Why Do They Matter

Crypto custody is simply the method of safeguarding digital assets. The key question is who is in control of the private keys, as whoever possesses these controls the coins.  

Security measures, legal protection, insurance, auditing, and record-keeping all factor into this equation. The rules of crypto custody for funds apply to the money of investors. 

On October 1, 2026, the SEC presented its proposal for the regulation of custodians by investment advisers and regulated investment vehicles. 

In simple terms, this proposal establishes rules regarding custodians, the separation between client assets and those of a manager, and the necessary documentation.

Crypto Custody Rules for Funds: How Regulators Protect Investors

The SEC proposal is 760 pages long and would update both the Investment Advisers Act and the Investment Company Act of 1940. It covers registered advisers, registered investment companies, and business development companies. 

Two changes stand out. First, state trust companies could act as custodians, which means several firms that already offer custody under state charters could gain clear federal recognition. 

Second, advisers may hold crypto assets directly, but only in limited cases, such as when no approved custodian is available and the firm has the required skills. 

The plan also refreshes record-keeping and disclosure duties. SEC Chair Paul Atkins said it gives advisers and managers a compliant path where none existed before. Commissioner Hester Peirce added that self-custody here means advisers acting as custodians, not investors holding their own coins. 

The Advisers Act changes would apply only to crypto assets that are funds or securities. The proposal follows the SEC's Regulation Crypto Assets plan, and Atkins has hinted that more crypto proposals are coming. For now, it's only a proposal, so public comment and a final vote come next.

Why Fund Regulators Care So Much About Crypto Custody

Crypto can be lost for good if keys are stolen or misplaced, and transfers can't be undone. These firms also manage other people's money, so one custody failure can hurt many investors at once. 

The older custody rules were written long before digital assets existed, which left gaps and unclear duties. Many advisers have held back from crypto services because the path wasn't clear. 

Regulators want clear rules so managers can offer more crypto strategies without leaving client assets at risk. Clear rules also help custodians know what duties they carry.

Are Investor Assets Really Safe?

Although custody is safer, it can never be free of risks. The risk of loss can be reduced with appointing a custodian company, separate accounts for all investors, and auditing the account regularly. 

While insurance plays a role, many insurance policies impose limits and exceptions in the process. Even though the storage of cryptocurrencies is severely regulated, it still does not protect from hacking, people's mistakes, or mismanagement. 

The self-custody of the adviser raises additional concerns that are the reason the SEC allows it only under certain conditions. Investors have to ask about the places where assets are kept, who is able to get the keys, and what to do in case of custodial failure.

Step-by-Step Checklist for Choosing a Crypto Custodian

Step 1: Verify the license: Ensure that the custodian operates under regulatory authority, such as banks, trust companies, or a registered entity.

Step 2: Check key management: Find out how private keys are generated, separated, and kept safe.

Step 3: Look for separate accounts: Make sure client funds are not combined with the custodian's money.

Step 4: Read the audit reports: Find independent audits and verify reserves.

Step 5: Ask about insurance: Check what is included and what is missing.

Step 6: Try to withdraw funds: Make sure the assets can be transferred swiftly if necessary.

Step 7: Go through the agreement: Review the liability, fees, and exit conditions.

A good custodian answers each of these questions clearly and in writing.

How Crypto Custody Rules Differ Across the US, EU and India

In the US, the SEC proposal is still taking shape, and it would add state trust companies and limited self-custody. In the EU, MiCA regulation already asks approved providers to keep client assets separate, and it makes them liable for losses they cause. India has no full custody framework for funds so far. 

Crypto platforms mostly follow anti-money-laundering and tax rules, so investment managers there should rely on strong contracts and trusted custodians. Rules keep changing, so each region needs a fresh check.

Common Custody Failures and What Funds Learned From Them

In 2014, Mt. Gox's client coins were hacked, making it bankrupt. QuadrigaCX liquidated due to the death of its founder in 2019 when it was impossible to access investors' assets. 

FTX tanked in 2022 after misusing customer funds. The takeaways are simple: asset segregation, no reliance on single persons for keys, independent audits, and never use the trading venues with client funds commingled with traders'. 

Trust cannot become an assurance. Trustworthy structure can. Several firms spread the assets between several custodians and demand proof of reserves.

Inside Crypto Custody Rules for Funds: Risks, Rules, and Safeguards

The main risks are hacks, lost keys, insider theft, simple mistakes, and custodian failure. Safeguards aim to cover each one. 

Common steps include an approved custodian, separate client accounts, strong key control with several approvals, regular audits, clear records, and plain disclosure to investors. 

Under the SEC proposal, self-custody would also need proof that no permitted custodian is available, and the rules would apply only to the same limited set of crypto assets. 

Funds should still add their own checks, because a rule on paper doesn't stop a breach.

Conclusion

The guidelines for crypto custody for funds are progressing from vague concepts towards more concrete measures. 

The SEC draft may broaden the scope of secure solutions, but it is not confirmed yet. Investors and funds must participate in the comment-making process and consult their controllers closely before deciding on custodians. 

All elements, like solid rules, trustworthy custodians, and precise reporting, are needed for the highest security possible.

Disclaimer

This article is for information purposes only. It isn't financial, legal, tax, or investment advice. Crypto assets carry risk, and investors can lose money. Past events do not predict future results. Laws can change quickly. The SEC proposal may change before it becomes final, so official SEC updates should be checked first. Readers should do their own research or speak with a licensed advisor.