Module 1/6: Choose Your Fighter

Strategic Foundations & Operating Models - Leveraging Incumbent Advantages and Mapping Knowledge to the Right Entry Point

1.1 The Incumbent’s Hidden Advantage: You Are Not Starting from Zero

For banks, broker-dealers, trust companies, and wealth managers, the single greatest asset in launching digital asset services is not capital—it is existing client trust and operational infrastructure. Your institution already holds equities, bonds, cash, alternatives, and private fund interests. Your clients already sign custody agreements, receive statements, and call your relationship managers with questions about portfolio allocation.

The strategic question is not whether to enter crypto, but how to bridge your existing competence into a 24/7, natively digital asset class without undermining the trust you have already built.

How to Leverage What You Already Have

Key Insight: Early wins come from treating digital assets as an extension of your current product shelf, not a moonshot division. Clients who trust you with $50M in municipal bonds are more likely to trust you with $2M in Bitcoin than they are to trust a crypto-native startup with no balance sheet history.

1.2 Three Operating Models: From Agent to Fiduciary

The table below maps each operating model to its commercial profile, custody location, and the background topics that deserve the most attention in the current regulatory environment.

1.3 Mapping Background Topics to Model Selection

Below is a focused briefing on the three background areas, tailored to the model you choose.

Regulatory Primer: What You Actually Need to Know

• For Model A (Introducer): You are arranging or referring, not holding. Ensure you do not inadvertently trigger custody status by having unilateral authority to move client assets. Focus on:
  • Form ADV disclosure (if an RIA)
  • FINRA Rule 2060 (referral arrangements with BD/custodian) 
  • State money transmission analysis if you touch fiat rails
  • FATF Travel Rule awareness—you are the front door, but the executing custodian typically handles transmittal data.
• For Model B (Prime-style Executor): You are coordinating execution and settlement. Regulators may view you as effectively handling client assets, even if a third party holds the keys. You must demonstrate that a qualified custodian holds the assets under the Advisers Act Rule 206(4)-2.
  • Post-2025, your custodian options expanded: the SEC’s September 2025 no-action relief confirmed that state-chartered trust companies can serve as qualified custodians (provided they maintain cybersecurity controls, independent audits, and prohibit re-hypothecation without consent). You no longer need to limit your due diligence to federally chartered banks. Also master: 
    • SEC Custody Rule 15c3-3 (if BD-affiliated)
    • Travel Rule compliance on transfers >$1,000 equivalent
    • BSA/AML program for crypto-specific SARs.
• For Model C (Qualified Custodian): You are the regulated entity. Post-2025, you have a viable state trust charter path (e.g., Wyoming, South Dakota, New York) rather than requiring a federal OCC charter. The SEC’s no-action relief allows state-chartered trust companies to be treated as "banks" under the Custody Rule if they meet specified conditions.You must obtain:
  • State banking authority authorisation to custody digital assets.
  • SOC 2 Type II and independent audit infrastructure.
  • Comprehensive cybersecurity and incident response frameworks.
  • Policies prohibiting pledging/re-hypothecation without prior written consent.
  • Note: The 2023 Safeguarding Rule proposal was withdrawn, so you operate under the existing Rule 206(4)-2 framework rather than an expanded crypto-specific regime.

Incumbent Advantage: If you already operate a trust company or broker-dealer, your compliance officers understand how to talk to regulators. The leap is learning blockchain-specific risks, not the concept of being regulated.

Accounting: Bridging FASB to Client Expectations

• For Model A: You are not recognising crypto on your GAAP balance sheet (unless you take it as a fee). However, your clients are. You must be able to explain FASB ASU 2023-08 (measurement at fair value, with changes flowing through income) to clients and ensure your reporting systems can ingest fair value marks from reputable pricing sources (e.g., Coin Metrics, Kaiko, Bloomberg). Your accounting team should validate that third-party custodian statements feed accurately into client tax reporting.
• For Model B: If you hold pre-funded omnibus wallets or receivables to facilitate faster settlement, those balances hit your books. You need clear policies on which wallet belongs to you vs. the client (sub-ledger clarity). The rescission of SAB 121 in January 2025 means that if you are a public company and choose to hold client crypto directly in a future hybrid model, you no longer face the punitive balance-sheet gross-up that previously deterred banks.
• For Model C: Client assets held in custody remain off your balance sheet (analogous to traditional securities custody). However, your fiduciary liability, insurance reserves, and any proprietary staking or lending must be accounted for under GAAP. If you offer commingled pools, you may trigger investment company accounting (ASC 946).Your fund accounting team already produces NAVs and handles sub-ledgers. Train them on 24/7 pricing inputs and blockchain confirmation finality rather than hiring a parallel crypto accounting team.

Incumbent Advantage: Your fund accounting and transfer agency teams already produce NAVs, handle corporate actions, and reconcile sub-ledgers. Train them on blockchain explorers and crypto-specific pricing (24/7 vs. 4pm close), but leverage their existing controls around data integrity.

Risk Taxonomy: Where the Land Mines Are

Incumbent Advantage: Your enterprise risk management (ERM) framework already categorizes credit, market, and operational risk. The board and risk committee speak this language. The task is to append a "Digital Asset Risk Appendix" to your existing ICAAP/ILAAP and op-risk registers, not to invent a new risk discipline from scratch.

1.4 The "Adjacent to Trusted" Go-to-Market Strategy

When presenting this service to your existing client base, frame it as "adjacent to trusted" rather than experimental.

Client Segmentation for Incumbents:

Messaging Framework:

• "You already trust us with your wealth. Bitcoin is simply another asset class that requires the same fiduciary rigour—now applied to private key management."
• "We are not asking you to trust a startup with a phone app. We are applying the same SOC 2, board oversight, and regulatory compliance you expect from your existing custody relationship."

1.5 Decision Framework: Which Model Should You Choose?

Use the following logic tree based on your current institutional type:

1. Are you a bank/trust company with an existing charter and fiduciary culture?
   • Yes → Start with Model B (hybrid custody) to learn operations, then migrate to Model C for core clients.
   • No → Start with Model A to test demand.
2. Do your clients already ask for crypto exposure through their existing RM?
   • Yes → Launch Model A within 90 days to stop leakage to competitors. Use it to gather data on wallet size and trading frequency.
   • No → Begin with education and a Model A pilot for a small subset of alternative-minded clients.
3. Is your board willing to invest in HSMs, key ceremonies, and 24/7 operations within 18 months?
   • Yes → Plan Model C from day one, using Model A only as a temporary bridge.
   • No → Commit to Model A or B as a permanent structure and focus on becoming the best distributor rather than the best custodian.

1.6 Summary Checklist for Module 1

Before proceeding to Modules 2–6, leadership should confirm:

• [ ] We have mapped our existing client base for crypto appetite and identified at least one segment ready to pilot.
• [ ] We have assessed our current licenses and determined which Model (A, B, or C) is achievable within 6–12 months.
• [ ] We have assigned ownership of the Regulatory, Accounting, and Risk Taxonomy workstreams to existing department heads (Legal, CFO, CRO) rather than siloing them in a "crypto skunkworks."
• [ ] We have a board-approved risk appetite statement for counterparty exposure (if Model A/B) and/or key-loss scenarios (if Model C).
• [ ] We understand that our competitive moat is not crypto expertise on day one—it is the trust, balance sheet, and regulatory standing we already possess.

Next Step: With Module 1 complete, proceed to Module 2 to operationalise the fastest path to revenue: execution with third-party custody while your institution learns the behavioural patterns of your existing clients in a 24/7 market.