Which Broker-Dealers Can Custody Tokenized Securities?
Broker-dealer custody of tokenized securities is now available to ordinary carrying broker-dealers under SEC staff's reading of Rule 15c3-3, provided the firm can control transfers, assess the ledger, protect private keys and preserve customer access through disruption or failure. The 17 December 2025 statement removes the special purpose broker-dealer framework as the only practical path, but it does not relax the Customer Protection Rule or create a binding safe harbour.
TL;DR — Key Takeaways
- ✓Who Qualifies: Any broker-dealer carrying crypto asset securities may use the staff position; special purpose broker-dealer status is not mandatory.
- ✓Five Conditions: Transfer control, ledger assessment, no known material custody weakness, private-key protection, and tested disruption and wind-down arrangements.
- ✓Two Routes: Direct physical possession under the December 2025 statement, or control through an otherwise qualifying Rule 15c3-3(c) location.
- ✓Sharp Edge: Awareness of a material security or operational problem can make the firm unable to deem the asset possessed.
- ✓Legal Weight: This is non-binding staff interpretation, not a Commission rule; FINRA and the remaining financial-responsibility rules still apply.
The Custody Route Opened; the Control Test Stayed
SEC staff no longer treats the 2020 special purpose broker-dealer, or SPBD, framework as the mandatory route for custody of tokenized equity and debt. An ordinary carrying broker-dealer can rely on Rule 15c3-3 if its actual custody design satisfies the possession or control requirement.
The change came in two steps. In May 2025, staff said a broker-dealer could establish control by holding a crypto asset security at an otherwise qualifying location under Rule 15c3-3(c). On 17 December 2025, the Division of Trading and Markets described when a firm directly holding the asset could deem itself to have physical possession under paragraph (b)(1).
“The SPBD Statement did not amend Rule 15c3-3 or any other rule.”
— SEC Division of Trading and Markets FAQ 3, updated 17 December 2025
The distinction matters to issuers because the custodian's legal label is no longer a sufficient screening question. The useful diligence framework is set out in our institutional RWA custody guide: identify the legal route, then test the operational controls that make it true.
Five Conditions Turn a Private Key Into Possession
The staff statement defines possession through five operational conditions, not through ownership of a hardware wallet. A firm must prove exclusive transfer capability, network diligence, risk-based suspension, key protection and continuity through distress.
| Condition | Evidence an issuer should request |
|---|---|
| Access and transfer | Key architecture, signing policy and proof no customer or affiliate can transfer alone |
| Ledger assessment | Approved-network file covering performance, governance, security and upgrades |
| Material-risk gate | Severity thresholds and the authority to halt new custody or transfers |
| Private-key protection | Written controls for theft, loss and unauthorized or accidental use |
| Continuity | Runbooks for forks, freezes, lawful orders and transfer during insolvency |
These controls are asset-specific. A review of Ethereum does not automatically approve every smart contract deployed on it, because the SEC's definition of the relevant technology includes protocols, smart contracts and applications integral to the security.
Awareness Is the Point Where Custody Can Fail
A known material security or operational weakness can stop a broker-dealer from deeming the tokenized security to be in its possession. Incident detection therefore changes regulatory status, not merely technical risk.
That creates a difficult but useful sequence. Monitoring detects a chain halt, faulty upgrade or compromised application. The firm classifies materiality. If the weakness affects access or transfer, the custody team must suspend the relevant representation and preserve evidence of when it learned what. A vague escalation process leaves a gap between the technical alert and the legal conclusion.
“A broker-dealer does not deem itself to possess” an asset when it knows of a material custody weakness.
— SEC staff custody statement, condition 3
An issuer should require the custodian's incident taxonomy to name the regulatory consequence of each severity level. A red alert that pauses signing but leaves the custody representation untouched is only half a control.
Physical Possession and Control Are Separate Routes
Direct key custody under Rule 15c3-3(b)(1) and custody at a qualifying control location under paragraph (c) are alternative legal routes. The December statement addresses only physical possession and leaves the control route described in the staff FAQs intact.
Direct possession gives the broker-dealer immediate signing authority but also makes it responsible for all five conditions. A control location can separate the keys from the carrying firm, which may simplify technical operations, but it introduces dependency on a bank or other qualifying location and on the legal agreements that preserve customer access.
Neither route proves that the issuer's ownership record is correct. Custody answers who can move the asset; transfer agency answers who owns the security. The boundary is explained in the master securityholder file for tokenized securities.
What the Staff Position Does Not Solve
The statement does not amend Rule 15c3-3, approve a business model, guarantee SIPC coverage or replace FINRA review. It is an interim staff view limited to physical possession of customer crypto asset securities.
- No Commission rule: staff says the statement has no legal force and can be modified or withdrawn.
- No blanket SIPC answer: registered tokenized equity or debt fits the security analysis; non-security crypto assets generally do not receive SIPC protection.
- No vendor approval: using a named wallet, cloud or chain provider does not satisfy the broker-dealer's own assessment duty.
- No transfer-agent shortcut: possession does not replace the official ownership register or its recordkeeping duties.
The result is wider market access without a lower control burden. More firms can enter, but every one of them must turn a principles-based staff test into evidence that an examiner can reproduce.
A Six-Question Procurement Test for Issuers
An issuer can test a broker-dealer custodian with six evidence requests that map directly to the SEC staff conditions. A yes-or-no claim of compliance is weaker than a dated network assessment, signing diagram and exercised wind-down plan.
- Which paragraph of Rule 15c3-3 supports possession or control for this exact token?
- Who can sign, who can recover, and can any affiliate move the asset without the broker-dealer?
- When was the ledger, smart contract and governance process last assessed?
- Which observable events make the firm stop deeming the asset possessed?
- How are a freeze, burn or transfer restriction executed after a lawful order?
- Has the transfer-to-successor plan been tested with the issuer's actual token controls?
The new policy broadens the set of possible custodians. It does not make them interchangeable. The best provider is the one whose legal route, key design and incident response describe the same system.
Frequently Asked Questions
Must a broker-dealer become a special purpose broker-dealer to custody tokenized securities?
No. SEC staff FAQ 3 says compliance with the 2020 special purpose broker-dealer statement is not mandatory. A broker-dealer may use a qualifying control location under Rule 15c3-3(c), or rely on the December 2025 staff position on physical possession if it satisfies the stated conditions. The position is staff-level and does not amend the rule.
What assets does the December 2025 SEC custody statement cover?
It covers crypto asset securities carried for customers, including tokenized versions of equity and debt securities. It does not turn every crypto asset into a security. Rule 15c3-3 possession requirements apply to securities; separate SEC FAQs state that non-security crypto assets fall outside paragraph (b), and customer claims to them generally lack SIPC protection.
What must a broker-dealer do to claim physical possession?
The firm must control access and transfer capability, assess the ledger and network before custody and at reasonable intervals, refuse to deem an asset possessed when material security or operational weaknesses are known, protect private keys under written controls, and maintain disruption and wind-down arrangements that preserve access to customer assets.
Does a blockchain incident automatically violate Rule 15c3-3?
Not automatically. The staff test turns on material problems or weaknesses that affect possession and on what the broker-dealer knows. Once a firm becomes aware of a material custody risk, the statement says it should not deem itself to possess that asset. The escalation record and the decision to suspend custody therefore become central evidence.
Is the SEC staff statement a binding rule?
No. The SEC states that the document reflects Division of Trading and Markets staff views, has no legal force, creates no new obligations, and is an interim step while the Commission considers custody issues. Firms still must satisfy Rule 15c3-3, financial responsibility rules, FINRA requirements and any approval needed for a material business change.
What should an RWA issuer ask a broker-dealer custodian?
Ask which Rule 15c3-3 route supports possession or control, who can move the keys, how each ledger is approved and reviewed, which events suspend custody, how freezes or burns are executed under lawful orders, and how assets transfer during insolvency. A registration label alone does not answer any of those operational questions.
Related Articles
What Do OCC Trust Charters Let a Custodian Do?
The bank control-location route and its limits.
Who Controls an ERC-3643 Token's Agent Keys?
The privileged-key risk on the issuer side.
How Does Atomic Settlement Work for Tokenized Securities?
The settlement process around the custodied asset.
How Do Institutions Onboard RWA Investors?
The identity controls before custody begins.