The U.S. Securities and Exchange Commission is approaching a December 7, 2026, public comment deadline for proposed changes to cryptocurrency custody rules governing investment advisers and regulated funds.
The SEC proposal, File No. S7-2026-35, issued October 1, would establish a framework for custody of crypto securities and similar investments, and update related reporting and recordkeeping obligations. The rules have not been finalized.
SEC Seeks Feedback on Crypto Custody
The Commission is proposing changes to how registered investment advisers safeguard client crypto funds and securities and how regulated investment companies hold crypto-related investments. It also plans to modernize existing custody requirements in response to changing market practices.
According to the SEC’s October 1 announcement, the proposed framework could permit self-custody under certain circumstances and allow state trust companies to act as custodians.
Institutional Crypto Custody Requirements
Crypto custody involves securing private keys, controlling transaction authorizations and maintaining reliable records of customer assets. These operational differences have complicated the application of some traditional custody practices to cryptocurrencies.
The SEC says its proposed amendments seek to modernize requirements while preserving investor safeguards. The proposals also address financial statement audits for advisers and broker-dealer custodial services for regulated funds.
For institutions exploring tokenized assets and cryptocurrency investment products, the eventual framework could affect provider selection and custody operations. Any specific compliance obligations, however, depend on the final text rather than this proposal alone.
December 7 Deadline Approaches
Interested parties can submit comments through the SEC rulemaking page until December 7. The rulemaking is identified as File Number S7-2026-35, and there is no announced final adoption date.
The deadline marks the end of the public comment window, not the effective date of a new crypto custody regulation.
Why the Custody Framework Matters
The distinction between holding a token and safeguarding the legal rights attached to it is central to the proposal. Advisers may need to demonstrate who can authorize transactions, how assets are segregated, what happens if a service provider fails and which records show ownership or control. These questions become especially important when an investment is held through a wallet, custodian or tokenization arrangement rather than in traditional securities accounts.
For investors, a custody provider’s technological claims should not be confused with its legal duties. Strong cryptographic controls can reduce certain operational risks, but they do not by themselves establish insolvency protections, appropriate segregation or regulatory oversight. The rulemaking process gives stakeholders an opportunity to address those distinctions in the context of existing adviser and fund obligations.
Self-Custody and Third-Party Safeguards
One question for commenters is how a regulated institution can demonstrate effective controls when it uses its own key-management systems instead of an outside custodian. Relevant issues include the separation of personnel duties, recovery procedures, access logging, independent oversight and the treatment of assets transferred to smart contracts. Those are practical areas of concern, not a claim that the SEC has already mandated any particular technological design.
Third-party custody raises a different set of questions. Institutions selecting service providers may need to evaluate the provider’s legal status, contractual obligations, security standards and ability to supply records or confirmations. The proposal’s discussion of eligible state trust companies could have implications for competition among custody businesses, depending on the final regulatory language.
How to Follow the Rulemaking
The SEC’s public docket is the authoritative place to review the proposal and submitted comments. Market participants should reference File Number S7-2026-35 and separate proposed requirements from any existing rules that remain in effect. Once the comment window closes, the agency can review the record, revise its approach or take further action; the deadline does not itself establish when any amendment would become binding.
