SEC Shifts to Investor Education With Crypto Custody Guidance

The US Securities and Exchange Commission (SEC) has issued new guidance to help retail investors better safeguard their cryptocurrency holdings.

On December 12, the SEC’s Office of Investor Education and Advocacy published an Investor Bulletin. The document outlines standard crypto custody models and the risks associated with holding digital assets.

SEC Warns Retail Investors About Hidden Crypto Custody Risks

The SEC’s emphasis comes as the business of safeguarding digital assets continues to expand.

Notably, industry estimates show the crypto custody sector is growing at nearly 13% annually and will reach $6.03 billion by 2030.

This growth highlights the scale of assets now held outside traditional financial infrastructure and the stakes involved in how those assets are managed.

Against that backdrop, the agency urged investors to scrutinize third-party custodians and understand how platforms handle customer funds.

“If the third-party custodian is hacked, shuts down, or goes bankrupt, you may lose access to your crypto assets,” the SEC warned.

The bulletin notes that some firms may rehypothecate, or lend out, client holdings, while others pool customer assets rather than segregate them.

According to the SEC, such practices have, in past episodes of market stress, magnified losses by spreading risk across institutions.

As a result, the SEC encourages investors to determine whether custodians maintain clear ownership records. It also urges investors to assess how platforms would treat their assets in the event of a failure.

The guidance stresses that custody arrangements can materially affect an investor’s outcome during disruptions, even when underlying market prices are unchanged.

The bulletin also addresses self-custody, acknowledging its appeal to investors seeking direct control over their holdings.

At the same time, the SEC warned that managing one’s own wallet transfers full responsibility for safeguarding private keys to the investor. Lost credentials, the agency noted, typically result in permanent loss of assets, with little prospect of recovery.

“Self-custody also means that you have sole responsibility for the security of your crypto assets’ private keys. If your crypto wallets are lost, stolen, damaged, or hacked, you may permanently lose access to your crypto assets,” SEC stated.

Meanwhile, this focus reflects a broader change in tone at the regulator.

With retail crypto ownership already widespread, the SEC is prioritizing education over enforcement, emphasizing operational risks over debates about whether digital assets belong in investment portfolios.