SEC and FINRA Staff Mapped the Crypto-Custody Obstacle for Broker-Dealers

A custody line hardens

On July 8, 2019, staff from the U.S. Securities and Exchange Commission’s Division of Trading and Markets and the Financial Industry Regulatory Authority’s Office of General Counsel issued a joint statement that exposed a central obstacle to regulated trading in digital asset securities: broker-dealers had not yet shown the staffs when blockchain-based custody would satisfy the federal Customer Protection Rule.

The statement did not ban broker-dealers from handling digital asset securities, approve a custody model or create a new rule. It said the circumstances in which a broker-dealer could custody such assets consistently with Rule 15c3-3 remained under discussion. By contrast, the staffs said noncustodial models generally raised less concern if firms still complied with securities laws, self-regulatory rules and other requirements.

That distinction mattered because firms were seeking new FINRA memberships or permission to expand existing broker-dealer businesses into digital asset securities. On July 8, 2019, the practical regulatory path looked materially clearer for matching or introducing transactions that settled away from the broker-dealer than for a business that held customer tokens itself.

Why a private key was not enough

Rule 15c3-3 is designed to separate customer assets from a broker-dealer’s own property and improve the chance that customer cash and securities can be returned if the firm fails. Traditional securities systems rely on recognized control locations, transfer agents, depositories, property-law conventions and procedures for correcting mistaken or unauthorized transfers.

The staffs identified a mismatch between that framework and some blockchain systems. Possession of a private key could enable a transfer without proving that the broker-dealer had exclusive control: another person might possess a copy. A lost key could make an asset inaccessible, while an unauthorized or mistaken blockchain transfer might not be reversible. The statement also flagged difficulties proving that digital asset securities existed for books, records, financial statements and independent audits.

This was more than a narrow wallet-security question. It connected technical design to customer protection, insolvency administration and the broker-dealer’s ability to demonstrate control to regulators and auditors. The staffs also warned that some assets treated as securities under federal securities law might fall outside the Securities Investor Protection Act’s definition of a security. For those assets, the familiar customer-protection expectations surrounding a failed broker-dealer might not apply in the same way.

The noncustodial route

The statement described three noncustodial patterns: a broker-dealer transmitting trade details while an issuer settled directly with a buyer; an over-the-counter transaction settled directly between buyer and seller; and an alternative trading system matching parties while they or their custodians completed settlement.

Those examples were not safe harbors. The staffs expressly withheld a conclusion that the models complied with every other applicable law. Still, they supplied an institutional design signal: separating trade matching from possession of assets could reduce the specific custody problem, although it could introduce settlement and counterparty risks of its own. That is interpretation based on the operating structures described, not a finding that any named platform was compliant.

For the market on July 8, 2019, the statement’s importance was structural rather than price-based. It explained why a regulated venue could obtain permission for limited noncustodial activity while a full-service securities platform combining execution and custody remained harder to approve. No claim is made here that the statement caused a move in bitcoin, any token or a publicly traded security; this reconstruction uses no market-price series.

What the record did—and did not—settle

The July 8 document represented staff views, not an SEC rule, Commission order or FINRA Board action. It imposed no new legal obligation and did not decide whether any particular digital asset was a security. Its verified contribution was to identify the custody questions regulators expected applicants to solve and to outline models that avoided taking possession.

Later context

On May 15, 2025, SEC and FINRA staff withdrew the July 8, 2019 statement effective immediately. That later action changes the document’s present status; it does not change what the statement communicated on July 8, 2019.