Insights on Crypto Payments, Infrastructure, and Operations

Sub-Custodian

Pronunciation: SUB kus-TOH-dee-un

Also known as: Subcustodian, Secondary Custodian

Definition

Sub-Custodian is a third party appointed by a primary custodian to hold or safeguard some assets, keys, accounts, or records within the custody chain.

Overview

How it works and why it matters

A sub-custodian holds or safeguards assets on behalf of another custodian or principal. The merchant might contract with the primary provider while an additional company controls some underlying wallets, keys or market infrastructure. This changes the chain of responsibility for loss, access, sanctions, recovery and insolvency. Operational due diligence should identify who actually holds keys, where assets are recorded, whether balances are segregated and how a customer can withdraw if either service fails.

Technical context

The customer may contract only with the primary custodian even though operational control is delegated to another entity.

Operationally, due diligence traces asset location, delegation rights, legal responsibility, jurisdictions, account segregation, service dependencies, reporting, and exit procedures.

The principal risk is that hidden sub-custody, shared infrastructure, insolvency, legal conflicts, or weak oversight can create risks not visible in the primary agreement.

Practical checks

Ask the primary provider for the legal entity names, service locations, segregation method and recovery process of material sub-custodians. Confirm whether holdings are individually identifiable or omnibus, and who pays if a subcontractor suffers an operational loss. Audit rights and incident notification obligations matter as much as marketing security claims.

Proof of Control; Proof of Reserves; Custodian

Example

A payment provider tells a merchant that customer funds are held securely, but delegates cold-storage operations to a specialist firm. During an outage, the primary provider can show account balances while the sub-custodian cannot execute withdrawals. The merchant needs a clear escalation and liability path.

Comparison

A sub-custodian is not simply another software vendor. Asset-control delegation may create additional legal, counterparty and operational exposure even where the customer sees only one interface.

Key Takeaway

Identify every entity that can prevent or authorize asset movement.

Sources

  1. Investor Advisory: Exercise Caution With Proof of Reserve Reports — Public Company Accounting Oversight Board (2026-08-02)
  2. Custody of Funds or Securities of Clients by Investment Advisers — U.S. Securities and Exchange Commission (2026-08-02)
  3. Recommendation for Key Management: Part 1 – General — NIST (2026-08-02)