TLDR
The SEC guidance that clarified crypto custody is the Division of Trading and Markets staff statement on Dec 17, 2025, addressing broker?dealer custody of crypto asset securities under Rule 15c3?3.
- It says broker?dealers must have exclusive control of private keys to claim possession or control of crypto asset securities under customer protection rules, per a regulator statement.
- The clarification applies to crypto asset securities only; non?security crypto is outside those protections and SIPC coverage, according to coverage of the update.
- The SEC also issued a retail investor bulletin on crypto wallet and custody basics on Dec 1213 to explain self?custody vs third?party custody and related risks.
Deep Dive
1. Staff Statement
The SECs Trading and Markets division issued a staff statement clarifying how broker?dealers can custody crypto asset securities under Rule 15c3?3. The statement explains that firms must maintain exclusive control of the private keys and be able to transfer the assets on the relevant ledger to satisfy possession or control requirements, with formal risk assessments of the underlying blockchain required. See the SEC staff statement for details.
For tokenized stocks and other crypto asset securities, custody compliance hinges on concrete operational controls (key control, transfer ability, and documented risk management) rather than abstract concerns about blockchain design.
2. Scope and Key Requirements
The guidance focuses on crypto asset securities, not all crypto. It reinforces that brokers must be prepared for blockchain?specific risks (for example, 51% attacks, forks, airdrops) and that adherence to the standards provides an assurance against enforcement action, though it is a staff statement rather than binding rulemaking. Industry coverage summarizes the conditions and notes the assurance posture for compliant broker?dealers.
If a broker cannot ensure exclusive key control or mitigate material network risks, it should not treat itself as having custody. Coverage protections like SIPC apply only to securities, so classification still matters.
3. Retail Bulletin Complements It
Days earlier, the SEC published an investor bulletin explaining custody trade?offs for retail users, including hot versus cold wallets and the risks of rehypothecation and commingling by third?party custodians. The bulletin stresses that losing private keys can permanently forfeit assets and urges investors to scrutinize custodial policies.
Operational clarity for institutions and practical guidance for individuals arrived together. Institutions get a path to compliant custody of crypto asset securities; retail investors get a checklist for safer custody choices.
Conclusion
Answer: the Dec 17, 2025 Trading and Markets staff statement clarified how broker?dealers can custody crypto asset securities. Paired with the investor bulletin, it sets expectations for institutional custody controls and educates retail investors on wallet choices and custodial risks. Watch for any follow?on rulemaking or ATS trading guidance to convert these staff positions into durable, binding frameworks.
