Investment-adviser custody of client assets

Custody matters because an adviser that can access client money or securities presents a different risk from an adviser that only recommends investments. The SEC custody rule seeks to reduce the chance of loss or misuse by requiring independent safekeeping and verification. For CFP exam questions, distinguish discretionary trading authority from authority that allows an adviser to withdraw or possess client assets.

When an adviser has custody

Under Rule 206(4)-2, custody generally includes holding client funds or securities, having possession of them, or having an arrangement that gives the adviser legal ownership or access to them. Authority to withdraw assets can create custody even when the adviser never physically touches the money. Ordinary authority to trade securities in the client's account, without authority to withdraw assets, is generally treated differently.

Use a qualified custodian

An adviser with custody generally must maintain client funds and securities with a qualified custodian, such as a bank, registered broker-dealer or another institution that meets the rule's definition. The adviser must have a reasonable basis for believing the custodian sends account statements to clients at least quarterly, or the adviser must provide the required statements. Clients should receive notice describing where and how their assets are held.

Verification and exceptions

The rule includes independent verification requirements, including surprise examinations in applicable circumstances. It also contains exceptions. For example, an adviser to a pooled investment vehicle may avoid the surprise examination requirement when the vehicle meets the annual audit and distribution conditions in the rule. This is not a blanket exemption from custody safeguards; identify which specific requirement the exception addresses.

Example: trading authority versus withdrawal authority

An adviser may buy and sell investments in a client's brokerage account under a discretionary mandate while the client retains control over transfers and withdrawals. That trading authority alone generally does not create custody. If the adviser can direct the custodian to send client money to the adviser's own account or to a third party without the client's authorization, custody concerns arise and the rule's safeguards apply.

Exam checklist

• Ask whether the adviser can possess, withdraw or direct transfer of client assets.
• Separate trading discretion from access to money or securities.
• If custody exists, identify qualified-custodian and client-notice duties.
• Check whether an exception applies to a specific safeguard, not to the rule as a whole.

Custody includes access, not just physical possession

Under SEC Rule 206(4)-2, an adviser may have custody if it or a related person holds client funds or securities, has authority to obtain possession, or can withdraw assets on the adviser’s instruction. Fee-deduction authority can create custody even without handling checks or securities. Review advisory agreements, custodial forms, standing letters, online permissions and related-person arrangements. A title such as “investment manager” does not resolve the rule analysis.

Qualified custodian and account statements

With exceptions in the rule, client funds and securities in an adviser’s custody must be maintained with a qualified custodian, such as a bank or registered broker-dealer. The adviser generally must have a reasonable basis, after due inquiry, to believe the custodian sends account statements directly to clients at least quarterly. If the adviser also sends statements, clients should be urged to compare them with the custodian’s statements. Direct independent reporting helps clients detect unauthorized activity.

Surprise examination and audited-pool alternatives

Advisers with custody are generally subject to an annual surprise examination by an independent public accountant, subject to exceptions in the rule. An adviser to a pooled investment vehicle can use an annual audit approach if the rule’s conditions are met and audited financial statements are distributed to investors within the required period. Advisers with custody solely because they deduct fees have a specific exception from the surprise-exam requirement, but other custody obligations may still apply.

Related-person and operational details

Custody by an adviser’s related person can be attributed to the adviser depending on the facts. If the adviser or related person serves as qualified custodian, additional internal-control reporting obligations may apply, and surprise-exam requirements can differ. Do not assume that an outside brand name means the custodian is independent if it is affiliated. Document the ownership relationship, account control, withdrawal authority and required examinations or reports.

Operational compliance workflow

Inventory every client asset arrangement; classify whether the adviser has custody; identify the qualified custodian; confirm statement delivery after due inquiry; satisfy surprise-exam or pooled-audit requirements where applicable; make Form ADV and client disclosures; and report discrepancies. Reassess whenever permissions, related-party roles or advisory contracts change. The custody rule is distinct from fiduciary duties and state custody requirements, and a planner should consult current SEC rules and staff guidance for the exact facts.

Discretion and custody are different questions

An adviser may select investments and place trades without having authority to withdraw client property. Conversely, a seemingly narrow ability to move money, sign checks or redirect distributions can create custody under the SEC rule. Map each permission separately: trade, transfer between client-owned accounts, withdraw to a third party, deduct fees and hold assets. Review the custodian’s forms and online entitlements, not only the advisory agreement. If a client grants new authority, reassess custody before using it.

Key takeaway

Custody is about access to assets. Independent safekeeping, client statements and verification help make that access visible and accountable.