Security Token Custody: Models Compared (2025)
Security token custody is the often-overlooked linchpin of any tokenised securities programme. For wealth managers and family offices, choosing the wrong model carries regulatory, operational and fiduciary consequences that can outweigh the efficiency gains of tokenisation itself.
Why Security Token Custody Deserves Dedicated Due Diligence
When a client holds a traditional equity or bond, custody sits inside a well-mapped regulatory perimeter: a licensed depositary, CSD linkage, and decades of case law. Security token custody disrupts that map. The token itself is a cryptographic bearer instrument recorded on a distributed ledger; whoever controls the private key controls the asset. That single shift transfers settlement finality, loss risk, and in some jurisdictions legal title to a layer most wealth managers have never had to underwrite before. ESMA has repeatedly flagged custody arrangements as a primary risk vector in tokenised asset markets, and MiCA Article 70 imposes explicit asset-segregation obligations on crypto-asset service providers. Getting custody right is therefore not a back-office checkbox — it is a core fiduciary decision that must be stress-tested before any client allocation is made.
Model 1 — Self-Custody: Maximum Control, Maximum Responsibility
Self-custody means the investor or their appointed technical agent holds the private keys directly, typically through hardware security modules (HSMs) or multisignature wallet arrangements. Control is absolute and counterparty risk with the issuer or platform is eliminated at the custody layer. However, the risk profile is severe: key loss is permanent and irreversible; key compromise leads to immediate, unrecoverable asset loss; and operational continuity — across staff turnover, corporate restructuring or incapacity — requires formalised key-management governance that few family offices currently have in place. From a regulatory standpoint, MiCA does not prohibit self-custody for professional investors, but national supervisors including the FMA (Liechtenstein) expect documented governance frameworks when beneficial owners are third-party clients. For discretionary mandates, self-custody also raises questions under MiFID II about safeguarding obligations. It is best suited to sophisticated single-family offices with dedicated blockchain operations teams.
Model 2 — Qualified Custodian: Regulatory Comfort, Higher Cost
A qualified custodian — a licensed bank, trust company or crypto-asset service provider authorised under MiCA Title V — holds private keys on behalf of clients under a fiduciary duty and regulatory supervision. Asset segregation is legally mandated, insurance cover is typically available, and the custodian is subject to regular audits, capital requirements and client-money rules. This model maps most cleanly onto existing wealth management compliance frameworks. The trade-offs are cost (annual custody fees on tokenised assets remain higher than traditional CREST or Euroclear fees), speed (some custodians introduce settlement delays through internal approval workflows), and connectivity (not every custodian integrates with every token issuance platform). For multi-family offices and regulated advisors distributing tokenised securities to retail-adjacent clients, a MiCA-licensed qualified custodian is generally the lowest-risk path. ESMA's guidelines on CASP authorisation provide a useful checklist when screening providers.
Model 3 — Platform Custody: Convenience With Concentrated Risk
Many tokenisation platforms, including those operating under Liechtenstein's TVTG (Token and Trusted Technology Service Provider Act), offer integrated custody as part of the issuance and lifecycle-management stack. The appeal is seamless: issuance, transfer, corporate actions and redemption all operate within a single technical environment. Investhub, for instance, facilitates token issuance under the TVTG framework with stablecoin settlement and a secondary bulletin board — infrastructure designed to keep the end-to-end workflow efficient and compliant. The risk, however, is concentration: platform insolvency, regulatory action against the operator, or a technical failure could simultaneously affect issuance records and custody. Advisors should scrutinise whether platform-held tokens are legally segregated from the operator's own assets, how bankruptcy-remoteness is structured, and whether the platform holds a specific TVTG Token Custodian licence or delegates custody to a separately licensed entity.
Regulatory Compass: MiCA, TVTG and ESMA Guidance
The regulatory landscape for security token custody is converging but not yet uniform. MiCA, fully applicable from December 2024, establishes an EU-wide licensing regime for crypto-asset service providers and requires CASPs offering custody to maintain segregated client accounts, implement robust cyber-security controls and maintain adequate own funds. For security tokens that qualify as financial instruments under MiFID II — which most tokenised equities, bonds and fund units do — the stricter MiFID II / AIFMD depositary and safeguarding rules apply in parallel, creating a layered compliance obligation. Liechtenstein's TVTG predates MiCA and offers a tailored domestic framework; the FMA supervises Token Custodians and Token Issuers separately, providing granular role clarity. Advisors operating cross-border must map their token structures against both regimes, since passporting under MiCA does not automatically satisfy TVTG obligations for Liechtenstein-issued tokens.
Due-Diligence Checklist for Wealth Managers
Before recommending any security token custody arrangement to clients, wealth managers should work through the following framework. Licensing: confirm the custodian holds a current MiCA CASP authorisation, a TVTG Token Custodian licence, or an equivalent national licence — and verify status directly with the relevant regulator, not solely from marketing materials. Segregation: obtain written legal confirmation that client assets are segregated from the operator's proprietary assets at both the ledger and legal levels. Insurance: establish whether professional indemnity and crime cover extends to private-key compromise. Business continuity: review the custodian's key-recovery and disaster-recovery procedures, including succession arrangements. Smart-contract audit: where custody relies on on-chain logic, require evidence of an independent security audit. Reporting: confirm clients will receive CSDDD-style holding statements and transaction confirmations compatible with existing portfolio reporting systems.
Choosing the Right Model: A Decision Framework
No single custody model dominates across all client profiles. A structured decision tree helps. Start with client type: if the beneficial owner is a regulated fund or an institution with its own custodian relationships, integrating a qualified custodian is straightforward. If the client is a sophisticated HNWI comfortable with direct asset control, and the ticket size justifies the governance overhead, self-custody with a multisig HSM setup may be appropriate. For smaller allocations or exploratory positions, platform custody via a TVTG-licensed operator provides a practical entry point — provided concentration risk is explicitly disclosed in the investment mandate and reviewed periodically. In all cases, custody arrangements should be documented in the client's Investment Policy Statement, revisited when platforms change ownership or regulatory status, and stress-tested against insolvency scenarios. The efficiency of tokenisation should never be purchased at the price of custodial opacity.
Key Takeaways
- Security token custody transfers settlement finality and loss risk to the key-management layer — a fundamental shift from traditional depositary models that demands dedicated due diligence.
- MiCA Title V and Liechtenstein's TVTG establish parallel but distinct licensing frameworks; cross-border structures must be mapped against both regimes.
- Qualified custodians offer the strongest regulatory alignment for wealth managers with retail-adjacent clients, but platform custody under a TVTG Token Custodian licence can be appropriate for sophisticated investors when concentration risk is properly disclosed.
- Any custody arrangement should be stress-tested against key-loss, insolvency and regulatory-action scenarios before client capital is deployed.
FAQ
What is security token custody and why does it differ from traditional custody?
Security token custody refers to the safekeeping of cryptographic private keys that control ownership of tokenised securities on a distributed ledger. Unlike traditional custody — where a bank or CSD holds a book-entry claim — whoever holds the private key holds the asset. Loss or compromise of that key is permanent and irreversible, making key-management governance a critical fiduciary concern rather than a back-office function.
Is self-custody of security tokens legal for professional investors under MiCA?
MiCA does not prohibit professional investors from holding their own private keys. However, when a wealth manager or advisor holds keys on behalf of clients, MiCA's CASP licensing rules are likely triggered. Additionally, if the underlying token qualifies as a financial instrument under MiFID II, the MiFID II safeguarding regime applies independently. Always seek legal advice specific to the jurisdiction and client classification before implementing self-custody.
What licences should a security token custodian hold in Liechtenstein?
In Liechtenstein, a custodian holding security tokens should hold a Token Custodian registration or licence under the TVTG (Token and Trusted Technology Service Provider Act), supervised by the FMA. Where the tokens qualify as financial instruments, additional authorisation under the AIFMG or banking law may be required. From 2025, alignment with MiCA is also relevant for cross-border EEA activity.
How does platform custody differ from a qualified custodian for tokenised securities?
Platform custody is provided by the tokenisation operator as part of its integrated service stack. It is convenient but concentrates issuance, lifecycle management and safekeeping risk in a single entity. A qualified custodian is a separately licensed, regulated institution whose sole function at the custody layer is safekeeping client assets under fiduciary duty, capital requirements and mandatory segregation rules — providing greater legal separation and regulatory oversight.
What happens to my security tokens if the custody platform becomes insolvent?
The outcome depends on how assets are legally structured. If tokens are held in properly segregated client accounts, they should be recoverable in insolvency proceedings and not form part of the operator's estate. If segregation is contractual only and not mirrored at the ledger level, recovery may be contested. Advisors should obtain a legal opinion on bankruptcy-remoteness before using any platform custody arrangement for client assets.
Can a family office act as its own security token custodian?
A single-family office managing assets exclusively for one family may operate self-custody without triggering CASP licensing in many jurisdictions, provided it does not provide custody services to third parties. However, it must maintain documented key-management governance, succession procedures, and — where the tokens are financial instruments — comply with applicable safeguarding rules. Multi-family offices almost always require a licensed external custodian.
Security token custody is not a technical afterthought — it is the foundation on which every tokenised securities allocation rests. For wealth managers and family offices conducting due diligence, the choice between self-custody, qualified custodian and platform custody must be driven by client classification, regulatory perimeter, concentration-risk tolerance and documented governance capacity. As MiCA and the TVTG framework continue to mature, the regulatory expectations around custody are rising, not falling. Investhub's infrastructure is built within the Liechtenstein TVTG framework, offering a transparent foundation for compliant token issuance and settlement. If you are evaluating a tokenised securities programme for your clients, we welcome a conversation with your compliance and investment team.