Third-party custody of client securities

A securities intermediary may use a custodian to hold client assets. The arrangement can be permissible, but the client assets must remain identifiable and protected under the Client Securities Rules. An exam question may test whether the custodian is an eligible intermediary, whether the account is properly designated, or whether the regulated firm still has obligations after delegating custody.

The safe-custody route

The SFC explains that client securities and securities collateral may be deposited in safe custody with another intermediary licensed or registered for dealing in securities. The Rules also address securities collateral registered in the name of the intermediary that holds or receives it. Do not generalize this permission into a claim that any third party, account type, or overseas location receives identical protection. The detailed application depends on the security, its location, the account structure, and the relevant rule provisions.

Safeguards still apply

The Client Securities Rules establish custody and segregation requirements. In broad terms, securities received or held for clients must be kept in an appropriate segregated account or registered in a way allowed by the Rules. The account's title and records should make the client-asset capacity clear. The intermediary needs systems to reconcile holdings, identify entitlements, control transfers, and detect shortages or unauthorised use.

Outsourcing does not transfer away accountability

Using a custodian changes who performs the physical or book-entry safekeeping; it does not turn client securities into the intermediary's proprietary assets. The regulated firm needs a suitable custody arrangement, accurate books, reconciliation controls, and clear procedures for instructions and corporate actions. If securities are held outside Hong Kong or through a chain of sub-custodians, identify the precise location and legal arrangement instead of assuming the domestic protections apply unchanged.

Distinguish securities custody from standing authority

Safe custody means holding assets for safekeeping under the applicable account controls. Standing authority is a separate permission to deal with securities or collateral for specified purposes. A custody account does not itself grant a broker permission to lend, pledge, or otherwise use client assets. For any use beyond safekeeping, identify the authority and apply its formalities and limits.

Exam traps

• Assuming that hiring a custodian removes the licensed intermediary's obligations.
• Treating every third-party custodian as eligible under the rule.
• Confusing safekeeping with authority to use securities.
• Assuming foreign custody has the same enforceability and protections as custody in Hong Kong.
• Ignoring account designation, segregation, records, and reconciliation.

Key takeaway

Third-party custody can be permitted when the rule's conditions are met. Check custodian eligibility, account status, location, and records. The intermediary remains responsible for protecting and accounting for client assets.

Understand where the assets actually sit

Using a third-party custodian does not end an intermediary’s responsibility to understand how client securities are held. The firm should identify each custodian and sub-custodian, the account title, the relevant market, the legal and operational protections, and whether assets are segregated from the provider’s proprietary holdings. The customer-facing firm should be able to explain the custody chain and retrieve evidence of positions. A chain with several providers can create delays, mismatches and uncertainty if one participant fails.

Selection and contractual safeguards

Assess regulatory status, financial strength, internal controls, settlement capability, asset segregation, record quality, cyber and continuity controls, and the provider’s use of further delegates. Contract terms should address client-asset treatment, access to books, reconciliation, reporting, loss events, notice, transfer assistance and termination. A custodian’s standard agreement may not resolve all local insolvency questions, so legal and compliance review should consider the market and asset type. The firm should retain a reasoned approval record and periodically refresh it.

Reconciliation and client disclosure

Positions held externally should be reconciled with internal client ledgers and custodian statements at a frequency suited to risk and legal requirements. Breaks should be assigned, aged and escalated; unexplained differences should not be netted away or allowed to persist. Customer disclosures should accurately describe when assets are held by a third party or in an overseas market and explain material implications required by the rules. Staff should not imply that a third-party custodian guarantees principal or eliminates all loss risk.

Operational scenario

If a custodian reports fewer shares than the intermediary’s ledger, the firm should freeze affected movements where appropriate, verify settlement instructions and corporate actions, contact the provider, preserve records, assess client impact and escalate under incident procedures. It should determine whether reporting or customer notification is required. This is both a reconciliation issue and a possible client-asset breach. On the exam, distinguish use of a third-party custodian from lawful use of client securities; outsourcing safekeeping does not by itself authorize a transfer, pledge or securities borrowing.

Implementation and review

Business continuity planning should address loss of access to the custodian, not just outage of the intermediary’s own systems. Keep current contact and escalation routes, know how to obtain statements and confirm positions through an alternate channel, and test the ability to move assets if the provider is unavailable. The firm should understand any local holiday, settlement or insolvency constraints that affect access. A documented recovery plan is useful only if operations staff know their roles and the plan is exercised against realistic scenarios.