[{"data":1,"prerenderedAt":2098},["ShallowReactive",2],{"article-sec-proposed-crypto-custody-rules-evidence":3,"content-query-yzSFu7tbFj":470,"related-sec-proposed-crypto-custody-rules-evidence":803},{"_path":4,"_dir":5,"_draft":6,"_partial":6,"_locale":7,"title":8,"description":9,"slug":10,"date":11,"lastUpdated":11,"author":12,"readingTime":13,"category":14,"tags":15,"ogImage":19,"featured":6,"body":20,"_type":464,"_id":465,"_source":466,"_file":467,"_stem":468,"_extension":469},"\u002Farticles\u002F43-sec-proposed-crypto-custody-rules-evidence","articles",false,"","The SEC's crypto custody proposal and its evidence trail","The SEC's October 2026 proposal would create new crypto custody records. Counsel should know what they could prove, and what they could not.","sec-proposed-crypto-custody-rules-evidence","2026-10-12","Nick Kampe",11,"Legal Reference",[16,17,18],"crypto-custody","blockchain-evidence","investment-advisers","\u002Fog\u002Fsec-proposed-crypto-custody-rules-evidence.png",{"type":21,"children":22,"toc":447},"root",[23,31,36,41,48,73,78,83,88,94,108,113,118,123,128,133,138,151,156,162,167,172,177,182,188,193,198,211,224,230,235,240,245,250,255,260,266,271,276,281,287,292,297,332,345,351,356,361,366,372,378,389,395,404,410,419,425,434],{"type":24,"tag":25,"props":26,"children":27},"element","p",{},[28],{"type":29,"value":30},"text","A wallet address can show where crypto assets sat and when they moved. It cannot identify the custody agreement, the people authorized to approve a transfer, the controls they followed, or the client whose assets the address held. Those facts usually live in offchain records.",{"type":24,"tag":25,"props":32,"children":33},{},[34],{"type":29,"value":35},"The Securities and Exchange Commission's October 2026 custody proposal would create a much denser record around certain crypto assets held by registered investment advisers and regulated funds. If adopted, the proposal would require written custody determinations, address-level account information, control reports, approval procedures, board oversight records, and new regulatory disclosures. Those records could become important in a theft, misappropriation, insolvency, or fiduciary dispute.",{"type":24,"tag":25,"props":37,"children":38},{},[39],{"type":29,"value":40},"The proposal is not current law, and its scope is narrower than its name may suggest. Counsel should treat it as a proposed federal framework and a useful evidence map, not as a present duty for every crypto custodian.",{"type":24,"tag":42,"props":43,"children":45},"h3",{"id":44},"what-the-sec-proposed",[46],{"type":29,"value":47},"What the SEC proposed",{"type":24,"tag":25,"props":49,"children":50},{},[51,53,62,64,71],{"type":29,"value":52},"On October 1, 2026, the SEC issued ",{"type":24,"tag":54,"props":55,"children":59},"a",{"href":56,"rel":57},"https:\u002F\u002Fwww.federalregister.gov\u002Fdocuments\u002F2026\u002F10\u002F06\u002F2026-20466\u002Fadviser-and-regulated-fund-custody-rules-crypto-custody-rules",[58],"nofollow",[60],{"type":29,"value":61},"proposed adviser and regulated fund custody rules",{"type":29,"value":63},". The proposal was published in the Federal Register on October 6. Comments are due December 7, 2026. The SEC's ",{"type":24,"tag":54,"props":65,"children":68},{"href":66,"rel":67},"https:\u002F\u002Fwww.sec.gov\u002Frules-regulations\u002F2026\u002F10\u002Fs7-2026-35",[58],[69],{"type":29,"value":70},"rulemaking page",{"type":29,"value":72}," identifies File No. S7-2026-35 and labels the release as proposed.",{"type":24,"tag":25,"props":74,"children":75},{},[76],{"type":29,"value":77},"The proposal would permit two custody paths subject to conditions. An adviser could self-custody certain client crypto assets when a permitted custodian is unavailable. An adviser or regulated fund could also use a state trust company that satisfies the proposed inquiry, review, control, and segregation conditions. Regulated funds could self-custody through their advisers with added board oversight.",{"type":24,"tag":25,"props":79,"children":80},{},[81],{"type":29,"value":82},"The scope matters. The proposed Advisers Act amendments concern client crypto assets that are funds or securities. The proposed Investment Company Act rules concern crypto assets that are securities or similar investments. The release does not create a general custody code for every token, wallet, exchange, or service provider.",{"type":24,"tag":25,"props":84,"children":85},{},[86],{"type":29,"value":87},"Nothing in the proposal is binding merely because it was published. The Commission may change it, adopt part of it, or decline to adopt it. Existing law and custody rules remain the starting point until any final rule becomes effective.",{"type":24,"tag":42,"props":89,"children":91},{"id":90},"self-custody-would-produce-an-evidence-trail",[92],{"type":29,"value":93},"Self-custody would produce an evidence trail",{"type":24,"tag":25,"props":95,"children":96},{},[97,99,106],{"type":29,"value":98},"The proposed self-custody route would turn several operational decisions into required records. The SEC's ",{"type":24,"tag":54,"props":100,"children":103},{"href":101,"rel":102},"https:\u002F\u002Fwww.sec.gov\u002Ffiles\u002Fia-7023-fact-sheet.pdf",[58],[104],{"type":29,"value":105},"fact sheet",{"type":29,"value":107}," provides a shorter summary, while the proposing release supplies the conditions and requested comments.",{"type":24,"tag":25,"props":109,"children":110},{},[111],{"type":29,"value":112},"An adviser would first have to determine in writing that a permitted custodian is unavailable for the crypto asset. It would make that determination before taking self-custody and repeat it quarterly. In a later dispute, those dated determinations could show what alternatives the adviser considered, when it considered them, and whether the stated reason matched the market at the time. They would not prove that the conclusion was reasonable without the underlying inquiry and supporting material.",{"type":24,"tag":25,"props":114,"children":115},{},[116],{"type":29,"value":117},"The adviser would also document its safeguarding expertise and maintain systems intended to protect each asset against loss, theft, misuse, and misappropriation. The proposed systems would address private key management and require at least two people to authorize a crypto asset transaction jointly. The adviser would review the safeguarding systems and cybersecurity controls at least annually and document that review in writing.",{"type":24,"tag":25,"props":119,"children":120},{},[121],{"type":29,"value":122},"That difference between policy and execution matters. A written two-person approval rule shows what should have happened. Access logs, signing-device records, wallet configuration, approval messages, and the transaction itself show what happened. Counsel should preserve both.",{"type":24,"tag":25,"props":124,"children":125},{},[126],{"type":29,"value":127},"The proposal would require each client's self-custodied assets to be maintained in one or more addresses corresponding only to that client. It would also require quarterly account information identifying the address and network, the period-end amounts, and all transactions from the address during the period. The client would be urged to compare the statement with the balances and transactions recorded at the address.",{"type":24,"tag":25,"props":129,"children":130},{},[131],{"type":29,"value":132},"This creates a direct reconciliation point. An address can be compared with the adviser statement, client ledger, and transaction history for the same period. A mismatch would not explain itself, but it would identify the period and record set that need investigation.",{"type":24,"tag":25,"props":134,"children":135},{},[136],{"type":29,"value":137},"An adviser would obtain an internal control report from an independent public accountant within six months after taking self-custody and annually afterward. The proposal describes an opinion on whether custody controls were suitably designed, implemented, and operating effectively during the covered period. A control report is evidence about the reviewed controls. It is not proof that every transfer was authorized or that no compromise occurred outside the test period or scope.",{"type":24,"tag":25,"props":139,"children":140},{},[141,143,149],{"type":29,"value":142},"The adviser and client would also agree in writing to treat each self-custodied crypto asset as a \"financial asset\" and the adviser as a securities intermediary under the applicable state's enacted version of UCC Article 8. That election may affect the legal structure of the holding relationship. It does not make a wallet balance conclusive proof of title. The governing agreement and state law still matter, as discussed in ",{"type":24,"tag":54,"props":144,"children":146},{"href":145},"\u002Fresources\u002Fucc-article-12-digital-asset-control",[147],{"type":29,"value":148},"Control is not ownership: UCC Article 12 and digital assets",{"type":29,"value":150},".",{"type":24,"tag":25,"props":152,"children":153},{},[154],{"type":29,"value":155},"For regulated fund assets, the fund board would review the adviser's custodian-unavailability determination initially and quarterly. The board would also determine before self-custody, and annually afterward, that the fund asset would receive reasonable care. Minutes, board materials, written determinations, and the information presented to directors could become central evidence if the custody decision is later challenged.",{"type":24,"tag":42,"props":157,"children":159},{"id":158},"state-trust-company-custody-would-create-a-different-record-set",[160],{"type":29,"value":161},"State trust company custody would create a different record set",{"type":24,"tag":25,"props":163,"children":164},{},[165],{"type":29,"value":166},"A state trust company label would not be enough. Before engagement and annually afterward, the adviser or regulated fund would need a reasonable basis, after due inquiry, to believe that the company was authorized by its state banking authority to provide crypto custody. It would also need a reasonable basis to believe that the company maintained and implemented written policies designed to protect crypto assets and related cash from theft, loss, misuse, and misappropriation.",{"type":24,"tag":25,"props":168,"children":169},{},[170],{"type":29,"value":171},"The adviser or fund would receive and review the trust company's most recent audited annual financial statements and internal control report. Client crypto assets would be segregated from the trust company's proprietary assets. A regulated fund would put that segregation term in its custody agreement.",{"type":24,"tag":25,"props":173,"children":174},{},[175],{"type":29,"value":176},"Those records answer different questions. The authorization inquiry concerns the custodian's legal authority. Policies and control reports concern process. Financial statements concern the company and covered period. The custody agreement states the promised allocation of rights and duties. Wallet records and internal ledgers show asset movement and account treatment. None should be used as a substitute for the others.",{"type":24,"tag":25,"props":178,"children":179},{},[180],{"type":29,"value":181},"Segregation also needs operational proof. Contract language may require separate treatment while wallet architecture, omnibus accounts, subledgers, or reconciliation records show how the custodian implemented it. In an insolvency or shortfall dispute, counsel may need the agreement, address inventory, client ledger, general ledger, reconciliation history, and records of transfers between client and proprietary accounts.",{"type":24,"tag":42,"props":183,"children":185},{"id":184},"the-proposal-rejects-the-explorer-only-theory",[186],{"type":29,"value":187},"The proposal rejects the explorer-only theory",{"type":24,"tag":25,"props":189,"children":190},{},[191],{"type":29,"value":192},"The SEC would allow an adviser or regulated fund to satisfy some ledger recordkeeping duties with onchain records if the network held a true, accurate, and current record of the required information. The same section says the firm would have to supplement the chain with offchain records when required information was not available onchain.",{"type":24,"tag":25,"props":194,"children":195},{},[196],{"type":29,"value":197},"The release gives a direct example. Public transaction information may need an offchain record to connect an address with a client or regulated fund and identify beneficial ownership. Names, investor identifiers, contact information, and other nonpublic data may also remain offchain. The firm would have to produce onchain records to the SEC in a human-readable, reasonably usable electronic format and maintain access during the applicable retention period.",{"type":24,"tag":25,"props":199,"children":200},{},[201,203,209],{"type":29,"value":202},"That is the evidentiary problem in plain terms. A public chain may preserve the transfer, but it does not preserve the complete business record. ",{"type":24,"tag":54,"props":204,"children":206},{"href":205},"\u002Fresources\u002Fcftc-blockchain-regulatory-records",[207],{"type":29,"value":208},"A public blockchain is not a records archive",{"type":29,"value":210}," explains the same distinction in the CFTC recordkeeping context. The proposed SEC rules apply it to adviser and regulated fund custody.",{"type":24,"tag":25,"props":212,"children":213},{},[214,216,222],{"type":29,"value":215},"For litigation, the useful unit is the reconciled record set: chain data, address-to-client mapping, custody ledger, account statement, approval record, control evidence, and agreement. ConsensusIntel's ",{"type":24,"tag":54,"props":217,"children":219},{"href":218},"\u002Fmethodology",[220],{"type":29,"value":221},"methodology",{"type":29,"value":223}," separates source data from inference so a later reader can test each link.",{"type":24,"tag":42,"props":225,"children":227},{"id":226},"how-these-records-could-matter-in-a-dispute",[228],{"type":29,"value":229},"How these records could matter in a dispute",{"type":24,"tag":25,"props":231,"children":232},{},[233],{"type":29,"value":234},"A custody case often starts with an outcome, such as missing assets, an unauthorized transfer, a frozen account, or a claimed shortfall. The proposed records would let counsel test distinct parts of that account instead of asking the blockchain to answer all of them.",{"type":24,"tag":25,"props":236,"children":237},{},[238],{"type":29,"value":239},"Address assignments and account statements could connect a client account to a specific chain, contract, and address during a defined period. That is stronger than relying on a ticker symbol or screenshot, but the mapping still needs authentication.",{"type":24,"tag":25,"props":241,"children":242},{},[243],{"type":29,"value":244},"Approval logs and key-management records could show which credentials and people participated in a transfer. They may support an inference about process compliance. They do not identify a natural person from blockchain data alone.",{"type":24,"tag":25,"props":246,"children":247},{},[248],{"type":29,"value":249},"Quarterly custodian determinations and board materials could show who made the custody decision and what information was available. Whether that decision met a legal standard is a question for counsel and the court, not a conclusion supplied by the transaction graph.",{"type":24,"tag":25,"props":251,"children":252},{},[253],{"type":29,"value":254},"Segregation and reconciliation records could test whether assets attributed to clients were kept apart from proprietary assets in the books and wallet system. A shared address does not necessarily prove commingling of legal interests, and separate addresses do not prove that the custodian honored every contractual restriction.",{"type":24,"tag":25,"props":256,"children":257},{},[258],{"type":29,"value":259},"Annual reviews and control reports could identify known weaknesses, remediation work, test scope, and periods not examined. A report with a clean opinion is not a guarantee against loss. Its terms, exceptions, testing period, and reliance limits need to be read.",{"type":24,"tag":42,"props":261,"children":263},{"id":262},"hypothetical-an-adviser-reports-a-wallet-compromise",[264],{"type":29,"value":265},"Hypothetical: an adviser reports a wallet compromise",{"type":24,"tag":25,"props":267,"children":268},{},[269],{"type":29,"value":270},"Hypothetical example: an adviser self-custodies a client's crypto asset and later reports that an attacker transferred the balance to an unknown address. The blockchain proves that a transaction was included and shows the source, destination, time, amount, and contract effects. It does not prove how the attacker obtained authority or whether the adviser's controls were followed.",{"type":24,"tag":25,"props":272,"children":273},{},[274],{"type":29,"value":275},"Under the proposed framework, counsel could compare the transaction with the client's address assignment, quarterly statement, two-person approval records, key-management design, cybersecurity review, incident response records, and accountant's control report. If the fund owned the asset, board materials could show the basis for accepting self-custody and the information reviewed before the loss.",{"type":24,"tag":25,"props":277,"children":278},{},[279],{"type":29,"value":280},"A gap may matter as much as a match. If the policy required two approvals but the system accepted one credential, the policy and transaction evidence point to a control failure. If two approvals appear, counsel still needs to determine whether the records are authentic, whether credentials were compromised, and whether either approver acted with authority. The evidence narrows the question. It does not decide intent or liability.",{"type":24,"tag":42,"props":282,"children":284},{"id":283},"what-counsel-can-request-now",[285],{"type":29,"value":286},"What counsel can request now",{"type":24,"tag":25,"props":288,"children":289},{},[290],{"type":29,"value":291},"The proposal does not entitle a litigant to records or make its proposed categories mandatory today. Discovery depends on the forum, claims, defenses, possession, custody, control, proportionality, and applicable orders. Still, the release identifies records that many current custody programs may already create.",{"type":24,"tag":25,"props":293,"children":294},{},[295],{"type":29,"value":296},"A targeted request can seek:",{"type":24,"tag":298,"props":299,"children":300},"ol",{},[301,307,312,317,322,327],{"type":24,"tag":302,"props":303,"children":304},"li",{},[305],{"type":29,"value":306},"The custody agreement, account-opening documents, financial-asset election, and amendments in effect during the disputed period.",{"type":24,"tag":302,"props":308,"children":309},{},[310],{"type":29,"value":311},"The complete address inventory by chain and asset, with creation dates, client mappings, wallet type, signing threshold, and change history.",{"type":24,"tag":302,"props":313,"children":314},{},[315],{"type":29,"value":316},"Native approval, access, device, and key-management logs for the disputed transactions, including timestamps and user or system identifiers.",{"type":24,"tag":302,"props":318,"children":319},{},[320],{"type":29,"value":321},"Client statements, subledgers, general-ledger entries, and reconciliations tied to the same addresses and dates.",{"type":24,"tag":302,"props":323,"children":324},{},[325],{"type":29,"value":326},"Custodian due-diligence files, audited financial statements, internal control reports, annual custody reviews, incident records, and remediation evidence.",{"type":24,"tag":302,"props":328,"children":329},{},[330],{"type":29,"value":331},"Filed Form ADV or Form N-CEN records relevant to the custody arrangement, together with the working papers used to prepare them.",{"type":24,"tag":25,"props":333,"children":334},{},[335,337,343],{"type":29,"value":336},"Request native fields and identifier mappings, not screenshots alone. A production should preserve timezone, source system, record version, export method, and any correction history. If the matter involves an exchange, adviser, or trust company, ",{"type":24,"tag":54,"props":338,"children":340},{"href":339},"\u002Fservices#exchange-custody",[341],{"type":29,"value":342},"exchange and custody analysis",{"type":29,"value":344}," can reconcile the produced records with the chain.",{"type":24,"tag":42,"props":346,"children":348},{"id":347},"what-the-proposal-would-not-prove",[349],{"type":29,"value":350},"What the proposal would not prove",{"type":24,"tag":25,"props":352,"children":353},{},[354],{"type":29,"value":355},"The proposed records would improve the available evidence without eliminating its limits. A chain record does not establish beneficial ownership by itself. A written policy does not prove compliance. A control report does not cover events or systems outside its scope. A state authorization does not establish that every asset was handled correctly. A regulatory filing may report aggregate information without resolving a client's individual position.",{"type":24,"tag":25,"props":357,"children":358},{},[359],{"type":29,"value":360},"Federal custody rules also do not decide every property, contract, agency, fiduciary, or insolvency question. Applicable state law and the parties' agreements may determine rights that the blockchain cannot. Technical analysis should state what each record shows and leave the legal conclusion to counsel and the court.",{"type":24,"tag":25,"props":362,"children":363},{},[364],{"type":29,"value":365},"This article describes an SEC proposal published on October 6, 2026. It is for informational purposes and is not legal advice. Check the final rulemaking record and applicable law before relying on any proposed requirement.",{"type":24,"tag":42,"props":367,"children":369},{"id":368},"frequently-asked-questions",[370],{"type":29,"value":371},"Frequently Asked Questions",{"type":24,"tag":42,"props":373,"children":375},{"id":374},"q-are-the-secs-october-2026-crypto-custody-rules-already-in-effect",[376],{"type":29,"value":377},"Q: Are the SEC's October 2026 crypto custody rules already in effect?",{"type":24,"tag":25,"props":379,"children":380},{},[381,387],{"type":24,"tag":382,"props":383,"children":384},"strong",{},[385],{"type":29,"value":386},"A:",{"type":29,"value":388}," No. The SEC issued a proposed rule. It was published in the Federal Register on October 6, 2026, and comments are due December 7, 2026. The Commission must complete any later adoption process before new requirements become effective.",{"type":24,"tag":42,"props":390,"children":392},{"id":391},"q-would-the-proposal-apply-to-every-crypto-asset-held-by-an-adviser",[393],{"type":29,"value":394},"Q: Would the proposal apply to every crypto asset held by an adviser?",{"type":24,"tag":25,"props":396,"children":397},{},[398,402],{"type":24,"tag":382,"props":399,"children":400},{},[401],{"type":29,"value":386},{"type":29,"value":403}," No. The proposed Advisers Act amendments concern client crypto assets that are funds or securities. The proposed Investment Company Act rules concern crypto assets that are securities or similar investments. Classification and account type affect the scope.",{"type":24,"tag":42,"props":405,"children":407},{"id":406},"q-would-an-onchain-transfer-prove-which-client-owned-the-asset",[408],{"type":29,"value":409},"Q: Would an onchain transfer prove which client owned the asset?",{"type":24,"tag":25,"props":411,"children":412},{},[413,417],{"type":24,"tag":382,"props":414,"children":415},{},[416],{"type":29,"value":386},{"type":29,"value":418}," No. The transfer can establish activity at an address. Client identity and beneficial ownership may require the adviser's address mapping, account records, agreement, and other offchain evidence.",{"type":24,"tag":42,"props":420,"children":422},{"id":421},"q-would-an-internal-control-report-prove-that-a-disputed-transfer-was-authorized",[423],{"type":29,"value":424},"Q: Would an internal control report prove that a disputed transfer was authorized?",{"type":24,"tag":25,"props":426,"children":427},{},[428,432],{"type":24,"tag":382,"props":429,"children":430},{},[431],{"type":29,"value":386},{"type":29,"value":433}," No. It may show whether specified custody controls were designed, implemented, and operating effectively during the reviewed period. Authorization of a particular transfer requires transaction-specific approval, access, and identity evidence.",{"type":24,"tag":25,"props":435,"children":436},{},[437,439,445],{"type":29,"value":438},"If a custody dispute turns on the gap between the wallet record and the firm's books, ",{"type":24,"tag":54,"props":440,"children":442},{"href":441},"\u002Fcontact",[443],{"type":29,"value":444},"contact ConsensusIntel",{"type":29,"value":446}," to scope the technical record set before discovery closes.",{"title":7,"searchDepth":448,"depth":448,"links":449},2,[450,452,453,454,455,456,457,458,459,460,461,462,463],{"id":44,"depth":451,"text":47},3,{"id":90,"depth":451,"text":93},{"id":158,"depth":451,"text":161},{"id":184,"depth":451,"text":187},{"id":226,"depth":451,"text":229},{"id":262,"depth":451,"text":265},{"id":283,"depth":451,"text":286},{"id":347,"depth":451,"text":350},{"id":368,"depth":451,"text":371},{"id":374,"depth":451,"text":377},{"id":391,"depth":451,"text":394},{"id":406,"depth":451,"text":409},{"id":421,"depth":451,"text":424},"markdown","content:articles:43-sec-proposed-crypto-custody-rules-evidence.md","content","articles\u002F43-sec-proposed-crypto-custody-rules-evidence.md","articles\u002F43-sec-proposed-crypto-custody-rules-evidence","md",{"_path":4,"_dir":5,"_draft":6,"_partial":6,"_locale":7,"title":8,"description":9,"slug":10,"date":11,"lastUpdated":11,"author":12,"readingTime":13,"category":14,"tags":471,"ogImage":19,"featured":6,"body":472,"_type":464,"_id":465,"_source":466,"_file":467,"_stem":468,"_extension":469},[16,17,18],{"type":21,"children":473,"toc":788},[474,478,482,486,490,506,510,514,518,522,532,536,540,544,548,552,556,565,569,573,577,581,585,589,593,597,601,610,619,623,627,631,635,639,643,647,651,655,659,663,667,671,675,702,711,715,719,723,727,731,735,743,747,755,759,767,771,779],{"type":24,"tag":25,"props":475,"children":476},{},[477],{"type":29,"value":30},{"type":24,"tag":25,"props":479,"children":480},{},[481],{"type":29,"value":35},{"type":24,"tag":25,"props":483,"children":484},{},[485],{"type":29,"value":40},{"type":24,"tag":42,"props":487,"children":488},{"id":44},[489],{"type":29,"value":47},{"type":24,"tag":25,"props":491,"children":492},{},[493,494,499,500,505],{"type":29,"value":52},{"type":24,"tag":54,"props":495,"children":497},{"href":56,"rel":496},[58],[498],{"type":29,"value":61},{"type":29,"value":63},{"type":24,"tag":54,"props":501,"children":503},{"href":66,"rel":502},[58],[504],{"type":29,"value":70},{"type":29,"value":72},{"type":24,"tag":25,"props":507,"children":508},{},[509],{"type":29,"value":77},{"type":24,"tag":25,"props":511,"children":512},{},[513],{"type":29,"value":82},{"type":24,"tag":25,"props":515,"children":516},{},[517],{"type":29,"value":87},{"type":24,"tag":42,"props":519,"children":520},{"id":90},[521],{"type":29,"value":93},{"type":24,"tag":25,"props":523,"children":524},{},[525,526,531],{"type":29,"value":98},{"type":24,"tag":54,"props":527,"children":529},{"href":101,"rel":528},[58],[530],{"type":29,"value":105},{"type":29,"value":107},{"type":24,"tag":25,"props":533,"children":534},{},[535],{"type":29,"value":112},{"type":24,"tag":25,"props":537,"children":538},{},[539],{"type":29,"value":117},{"type":24,"tag":25,"props":541,"children":542},{},[543],{"type":29,"value":122},{"type":24,"tag":25,"props":545,"children":546},{},[547],{"type":29,"value":127},{"type":24,"tag":25,"props":549,"children":550},{},[551],{"type":29,"value":132},{"type":24,"tag":25,"props":553,"children":554},{},[555],{"type":29,"value":137},{"type":24,"tag":25,"props":557,"children":558},{},[559,560,564],{"type":29,"value":142},{"type":24,"tag":54,"props":561,"children":562},{"href":145},[563],{"type":29,"value":148},{"type":29,"value":150},{"type":24,"tag":25,"props":566,"children":567},{},[568],{"type":29,"value":155},{"type":24,"tag":42,"props":570,"children":571},{"id":158},[572],{"type":29,"value":161},{"type":24,"tag":25,"props":574,"children":575},{},[576],{"type":29,"value":166},{"type":24,"tag":25,"props":578,"children":579},{},[580],{"type":29,"value":171},{"type":24,"tag":25,"props":582,"children":583},{},[584],{"type":29,"value":176},{"type":24,"tag":25,"props":586,"children":587},{},[588],{"type":29,"value":181},{"type":24,"tag":42,"props":590,"children":591},{"id":184},[592],{"type":29,"value":187},{"type":24,"tag":25,"props":594,"children":595},{},[596],{"type":29,"value":192},{"type":24,"tag":25,"props":598,"children":599},{},[600],{"type":29,"value":197},{"type":24,"tag":25,"props":602,"children":603},{},[604,605,609],{"type":29,"value":202},{"type":24,"tag":54,"props":606,"children":607},{"href":205},[608],{"type":29,"value":208},{"type":29,"value":210},{"type":24,"tag":25,"props":611,"children":612},{},[613,614,618],{"type":29,"value":215},{"type":24,"tag":54,"props":615,"children":616},{"href":218},[617],{"type":29,"value":221},{"type":29,"value":223},{"type":24,"tag":42,"props":620,"children":621},{"id":226},[622],{"type":29,"value":229},{"type":24,"tag":25,"props":624,"children":625},{},[626],{"type":29,"value":234},{"type":24,"tag":25,"props":628,"children":629},{},[630],{"type":29,"value":239},{"type":24,"tag":25,"props":632,"children":633},{},[634],{"type":29,"value":244},{"type":24,"tag":25,"props":636,"children":637},{},[638],{"type":29,"value":249},{"type":24,"tag":25,"props":640,"children":641},{},[642],{"type":29,"value":254},{"type":24,"tag":25,"props":644,"children":645},{},[646],{"type":29,"value":259},{"type":24,"tag":42,"props":648,"children":649},{"id":262},[650],{"type":29,"value":265},{"type":24,"tag":25,"props":652,"children":653},{},[654],{"type":29,"value":270},{"type":24,"tag":25,"props":656,"children":657},{},[658],{"type":29,"value":275},{"type":24,"tag":25,"props":660,"children":661},{},[662],{"type":29,"value":280},{"type":24,"tag":42,"props":664,"children":665},{"id":283},[666],{"type":29,"value":286},{"type":24,"tag":25,"props":668,"children":669},{},[670],{"type":29,"value":291},{"type":24,"tag":25,"props":672,"children":673},{},[674],{"type":29,"value":296},{"type":24,"tag":298,"props":676,"children":677},{},[678,682,686,690,694,698],{"type":24,"tag":302,"props":679,"children":680},{},[681],{"type":29,"value":306},{"type":24,"tag":302,"props":683,"children":684},{},[685],{"type":29,"value":311},{"type":24,"tag":302,"props":687,"children":688},{},[689],{"type":29,"value":316},{"type":24,"tag":302,"props":691,"children":692},{},[693],{"type":29,"value":321},{"type":24,"tag":302,"props":695,"children":696},{},[697],{"type":29,"value":326},{"type":24,"tag":302,"props":699,"children":700},{},[701],{"type":29,"value":331},{"type":24,"tag":25,"props":703,"children":704},{},[705,706,710],{"type":29,"value":336},{"type":24,"tag":54,"props":707,"children":708},{"href":339},[709],{"type":29,"value":342},{"type":29,"value":344},{"type":24,"tag":42,"props":712,"children":713},{"id":347},[714],{"type":29,"value":350},{"type":24,"tag":25,"props":716,"children":717},{},[718],{"type":29,"value":355},{"type":24,"tag":25,"props":720,"children":721},{},[722],{"type":29,"value":360},{"type":24,"tag":25,"props":724,"children":725},{},[726],{"type":29,"value":365},{"type":24,"tag":42,"props":728,"children":729},{"id":368},[730],{"type":29,"value":371},{"type":24,"tag":42,"props":732,"children":733},{"id":374},[734],{"type":29,"value":377},{"type":24,"tag":25,"props":736,"children":737},{},[738,742],{"type":24,"tag":382,"props":739,"children":740},{},[741],{"type":29,"value":386},{"type":29,"value":388},{"type":24,"tag":42,"props":744,"children":745},{"id":391},[746],{"type":29,"value":394},{"type":24,"tag":25,"props":748,"children":749},{},[750,754],{"type":24,"tag":382,"props":751,"children":752},{},[753],{"type":29,"value":386},{"type":29,"value":403},{"type":24,"tag":42,"props":756,"children":757},{"id":406},[758],{"type":29,"value":409},{"type":24,"tag":25,"props":760,"children":761},{},[762,766],{"type":24,"tag":382,"props":763,"children":764},{},[765],{"type":29,"value":386},{"type":29,"value":418},{"type":24,"tag":42,"props":768,"children":769},{"id":421},[770],{"type":29,"value":424},{"type":24,"tag":25,"props":772,"children":773},{},[774,778],{"type":24,"tag":382,"props":775,"children":776},{},[777],{"type":29,"value":386},{"type":29,"value":433},{"type":24,"tag":25,"props":780,"children":781},{},[782,783,787],{"type":29,"value":438},{"type":24,"tag":54,"props":784,"children":785},{"href":441},[786],{"type":29,"value":444},{"type":29,"value":446},{"title":7,"searchDepth":448,"depth":448,"links":789},[790,791,792,793,794,795,796,797,798,799,800,801,802],{"id":44,"depth":451,"text":47},{"id":90,"depth":451,"text":93},{"id":158,"depth":451,"text":161},{"id":184,"depth":451,"text":187},{"id":226,"depth":451,"text":229},{"id":262,"depth":451,"text":265},{"id":283,"depth":451,"text":286},{"id":347,"depth":451,"text":350},{"id":368,"depth":451,"text":371},{"id":374,"depth":451,"text":377},{"id":391,"depth":451,"text":394},{"id":406,"depth":451,"text":409},{"id":421,"depth":451,"text":424},[804,1232,1654],{"_path":805,"_dir":5,"_draft":6,"_partial":6,"_locale":7,"title":806,"description":807,"slug":808,"date":809,"lastUpdated":809,"author":12,"readingTime":810,"category":14,"tags":811,"ogImage":816,"featured":6,"body":817,"_type":464,"_id":1229,"_source":466,"_file":1230,"_stem":1231,"_extension":469},"\u002Farticles\u002F44-crypto-actual-delivery-exchange-evidence","Crypto actual delivery: what exchange records must prove","The CFTC's October 2026 proposal puts possession, control, internal ledgers, staking rights, and withdrawal records at the center of crypto delivery.","crypto-actual-delivery-exchange-evidence","2026-10-26",12,[812,813,814,815],"crypto-evidence","cftc","actual-delivery","exchange-records","\u002Fog\u002Fcrypto-actual-delivery-exchange-evidence.png",{"type":21,"children":818,"toc":1214},[819,824,829,834,848,854,859,864,869,874,879,885,899,904,918,923,929,934,939,944,949,972,977,983,988,993,998,1011,1017,1022,1027,1032,1037,1042,1048,1062,1067,1073,1078,1083,1088,1093,1098,1118,1124,1129,1134,1139,1143,1149,1158,1164,1173,1179,1188,1194,1203],{"type":24,"tag":25,"props":820,"children":821},{},[822],{"type":29,"value":823},"A customer buys cryptocurrency on an exchange and sees the balance in an account. Has the exchange delivered the asset?",{"type":24,"tag":25,"props":825,"children":826},{},[827],{"type":29,"value":828},"For an ordinary cash purchase, that question may sound academic. The answer matters when the exchange offered margin, financed the purchase, retained control of the asset, or later froze withdrawals. Under section 2(c)(2)(D) of the Commodity Exchange Act, some retail commodity transactions conducted on a leveraged, margined, or financed basis are regulated as if they were futures contracts unless an exception applies. One exception covers a sale that results in actual delivery within 28 days.",{"type":24,"tag":25,"props":830,"children":831},{},[832],{"type":29,"value":833},"The phrase \"actual delivery\" turns a regulatory issue into an evidence problem. An account balance may prove what the exchange represented on its books. It may not prove that the customer obtained possession or control of the crypto asset.",{"type":24,"tag":25,"props":835,"children":836},{},[837,839,846],{"type":29,"value":838},"The Commodity Futures Trading Commission put that distinction back on the agenda in October 2026. Its ",{"type":24,"tag":54,"props":840,"children":843},{"href":841,"rel":842},"https:\u002F\u002Fwww.federalregister.gov\u002Fdocuments\u002F2026\u002F10\u002F13\u002F2026-20888\u002Fregulation-crypto-asset-transactions-and-regulation-crypto-asset-markets",[58],[844],{"type":29,"value":845},"advanced notice of proposed rulemaking",{"type":29,"value":847}," was issued on October 8 and published in the Federal Register on October 13. Comments are due December 14, 2026. The notice is an early rulemaking document. It requests public comment and states preliminary interpretations; it does not create a final crypto market regime.",{"type":24,"tag":42,"props":849,"children":851},{"id":850},"why-the-october-proposal-matters-to-disputes-now",[852],{"type":29,"value":853},"Why the October proposal matters to disputes now",{"type":24,"tag":25,"props":855,"children":856},{},[857],{"type":29,"value":858},"The proposed framework reaches farther than a simple question about whether a transfer appeared on a blockchain. It asks when an exchange's offer of leverage can bring a transaction within section 2(c)(2)(D), what possession and control mean for different token functions, and whether an internal book entry can amount to delivery.",{"type":24,"tag":25,"props":860,"children":861},{},[862],{"type":29,"value":863},"The CFTC preliminarily reads the statutory word \"offer\" to include financing terms presented through onboarding documents, exchange terms, credit documents, or margin documents. Under that reading, a covered offer could attach to all transactions available through an account or product class. A customer who declines financing and pays in full could still have a \"fully paid, open\" transaction within the provision if the other statutory criteria are met. The agency has requested comment on that interpretation.",{"type":24,"tag":25,"props":865,"children":866},{},[867],{"type":29,"value":868},"That makes document versioning important. A dispute may turn on the terms shown when the account opened, the products enabled for that account, whether margin was offered, and whether an exchange or connected party arranged the financing. The customer's final choice to pay in full would not answer every coverage question under the proposal.",{"type":24,"tag":25,"props":870,"children":871},{},[872],{"type":29,"value":873},"The notice's preliminary view treats an exchange's internal ledger as constructive delivery, not actual delivery, while the transaction remains open. It states that actual delivery of a crypto asset involves a transfer from the exchange to the wallet address or account associated with the asset. The agency separately asks whether onchain trading protocols typically provide actual delivery because purchased assets generally arrive directly in a purchaser's wallet.",{"type":24,"tag":25,"props":875,"children":876},{},[877],{"type":29,"value":878},"Those are preliminary agency views. They are useful now because they identify the records that will matter if the interpretation survives rulemaking. The possession, control, custody, and book-entry questions also track the facts examined in Monex.",{"type":24,"tag":42,"props":880,"children":882},{"id":881},"current-law-starts-with-meaningful-possession-or-control",[883],{"type":29,"value":884},"Current law starts with meaningful possession or control",{"type":24,"tag":25,"props":886,"children":887},{},[888,890,897],{"type":29,"value":889},"The main appellate authority is ",{"type":24,"tag":54,"props":891,"children":894},{"href":892,"rel":893},"https:\u002F\u002Fcdn.ca9.uscourts.gov\u002Fdatastore\u002Fopinions\u002F2019\u002F07\u002F25\u002F18-55815.pdf",[58],[895],{"type":29,"value":896},"CFTC v. Monex Credit Co.",{"type":29,"value":898},", a 2019 Ninth Circuit case involving leveraged precious metals rather than crypto assets. The court held that the actual delivery exception is an affirmative defense on which the commodity trader bears the burden of proof. It also held that actual delivery requires at least some meaningful degree of possession or control by the customer.",{"type":24,"tag":25,"props":900,"children":901},{},[902],{"type":29,"value":903},"Monex did not hold that a buyer must always take personal physical possession. A third party depository can hold the commodity. The actual delivery defense did not support dismissal at the pleading stage because, accepting the CFTC's allegations as true, the metals remained in the broker's chosen depository, the broker retained exclusive control, the metals never changed hands, and the customers lacked substantial, noncontingent interests. The court stressed that a transfer of title alone does not establish actual delivery.",{"type":24,"tag":25,"props":905,"children":906},{},[907,909,916],{"type":29,"value":908},"The CFTC's ",{"type":24,"tag":54,"props":910,"children":913},{"href":911,"rel":912},"https:\u002F\u002Fwww.cftc.gov\u002FLawRegulation\u002FFederalRegister\u002Ffinalrules\u002F2020-11827.html",[58],[914],{"type":29,"value":915},"2020 final interpretive guidance",{"type":29,"value":917}," applied that reasoning to virtual currency used as a medium of exchange. It described two central features: the customer obtained possession and control of the entire quantity and could use it freely in commerce away from the execution venue, and the offeror and counterparty seller did not retain an interest, legal right, or control after 28 days. It also used a functional test that looked beyond contract language to how the transaction was marketed, managed, and performed.",{"type":24,"tag":25,"props":919,"children":920},{},[921],{"type":29,"value":922},"The Commission withdrew that guidance in December 2025. The 2026 notice says current law on actual delivery is derived primarily from court decisions, then offers new preliminary interpretations for comment. Counsel should analyze the statute, controlling authority in the relevant jurisdiction, and the transaction's actual operation. The notice is a proposal, not current law.",{"type":24,"tag":42,"props":924,"children":926},{"id":925},"a-private-key-is-evidence-not-the-whole-answer",[927],{"type":29,"value":928},"A private key is evidence, not the whole answer",{"type":24,"tag":25,"props":930,"children":931},{},[932],{"type":29,"value":933},"The CFTC preliminarily suggests that possession and control may require possession of the credentials, including private keys, associated with the relevant wallet address or account. That is stronger language than a general statement that the customer may request a withdrawal.",{"type":24,"tag":25,"props":935,"children":936},{},[937],{"type":29,"value":938},"The notice does not say credential possession ends the inquiry. It says possession and control may require credentials and may depend on the asset's specific characteristics. Monex also recognizes that a buyer's agent can hold the commodity, so custody arrangements and retained control still require a fact-specific analysis.",{"type":24,"tag":25,"props":940,"children":941},{},[942],{"type":29,"value":943},"The token itself can add another layer. The proposal says that possession and control may depend on the asset's characteristics. If a token conveys governance or staking rights, actual delivery may require unfettered access to those rights. The agency gives direct governance participation and staking without an intermediary's fee as examples, then asks for comment.",{"type":24,"tag":25,"props":945,"children":946},{},[947],{"type":29,"value":948},"Counsel should separate four propositions:",{"type":24,"tag":298,"props":950,"children":951},{},[952,957,962,967],{"type":24,"tag":302,"props":953,"children":954},{},[955],{"type":29,"value":956},"The blockchain records a balance at an address.",{"type":24,"tag":302,"props":958,"children":959},{},[960],{"type":29,"value":961},"A person or system can satisfy the signing conditions for that address.",{"type":24,"tag":302,"props":963,"children":964},{},[965],{"type":29,"value":966},"The customer has a legal and operational right to direct use of the asset.",{"type":24,"tag":302,"props":968,"children":969},{},[970],{"type":29,"value":971},"The customer can exercise the asset's relevant functions without an exchange retaining a veto, lien, forced sale right, or economic restriction.",{"type":24,"tag":25,"props":973,"children":974},{},[975],{"type":29,"value":976},"One proposition does not automatically prove the others. Wallet control also does not identify the natural person who operated the wallet. Attribution still requires corroboration such as exchange records, device evidence, authentication logs, or an admissible signed message.",{"type":24,"tag":42,"props":978,"children":980},{"id":979},"what-an-internal-balance-can-and-cannot-prove",[981],{"type":29,"value":982},"What an internal balance can and cannot prove",{"type":24,"tag":25,"props":984,"children":985},{},[986],{"type":29,"value":987},"The October notice says crypto exchanges typically maintain customer property in omnibus accounts. When customer entitlements are recorded only on an internal ledger, the blockchain can show assets entering or leaving the exchange's custody perimeter. It generally cannot identify the customer credited on the private ledger, the terms governing that credit, or whether the customer could withdraw the full amount.",{"type":24,"tag":25,"props":989,"children":990},{},[991],{"type":29,"value":992},"The October notice reflects this split. Its preliminary view treats an internal book entry as constructive delivery while the transaction remains open. It also asks whether a future crypto asset market should reconcile internal ledgers to public blockchain systems and asks for comment on proof of reserves for omnibus custody. The notice defines proof of reserves as a third-party audit attesting that reserve assets cover aggregate customer liabilities. It does not say such an attestation proves delivery to a particular customer.",{"type":24,"tag":25,"props":994,"children":995},{},[996],{"type":29,"value":997},"Proof of reserves addresses an aggregate question: whether the intermediary's identified assets cover stated customer liabilities at a point in time under the method used. Actual delivery asks a transaction level question about the customer's possession and control. A venue can have sufficient aggregate reserves while restricting one customer's withdrawal. It can also complete a genuine withdrawal without publishing any reserve attestation.",{"type":24,"tag":25,"props":999,"children":1000},{},[1001,1003,1009],{"type":29,"value":1002},"This is the same architecture problem discussed in ",{"type":24,"tag":54,"props":1004,"children":1006},{"href":1005},"\u002Fresources\u002Fcrypto-perpetual-futures-evidence",[1007],{"type":29,"value":1008},"evidence in crypto perpetual futures disputes",{"type":29,"value":1010},". Public transfers and private account records answer different questions. Counsel needs both when the claim crosses the boundary between the blockchain and the exchange's books.",{"type":24,"tag":42,"props":1012,"children":1014},{"id":1013},"hypothetical-a-paid-purchase-remains-on-the-exchange",[1015],{"type":29,"value":1016},"Hypothetical: a paid purchase remains on the exchange",{"type":24,"tag":25,"props":1018,"children":1019},{},[1020],{"type":29,"value":1021},"Hypothetical example: A retail customer opens an account with a centralized exchange. The onboarding terms make margin available for approved assets. The customer declines margin, pays the full purchase price for 20 units of Token X, and leaves the displayed balance on the exchange. Token X carries onchain governance and staking rights. Six months later, the exchange suspends withdrawals. The customer argues that the exchange had already delivered the tokens. The exchange points to its trade confirmation and internal account statement.",{"type":24,"tag":25,"props":1023,"children":1024},{},[1025],{"type":29,"value":1026},"The trade confirmation shows that the exchange recorded a purchase. It does not establish actual delivery by itself. Counsel would need the versioned onboarding and margin terms, the customer's account eligibility, and evidence showing how the financing offer was presented. Those records address whether the fully paid transaction could fall within the CFTC's proposed covered offer analysis.",{"type":24,"tag":25,"props":1028,"children":1029},{},[1030],{"type":29,"value":1031},"The custody evidence would include the exchange's wallet map, the address or omnibus wallet holding Token X, internal ledger entries, and reconciliation records tying the customer liability to onchain assets. Withdrawal policies and attempt logs would show when and under what conditions the customer could remove the full balance. Key management records would show who could sign, while access controls and administrative policies would show who could block a transfer.",{"type":24,"tag":25,"props":1033,"children":1034},{},[1035],{"type":29,"value":1036},"Token function matters too. Staking records, governance delegation, reward entries, and fee schedules would show whether the customer could exercise Token X's rights directly or only through the exchange on terms set by the exchange. Any lien, security interest, clawback term, forced liquidation right, or account freeze authority would need separate analysis.",{"type":24,"tag":25,"props":1038,"children":1039},{},[1040],{"type":29,"value":1041},"No single record decides the hypothetical. The conclusion depends on the applicable law and the functional relationship among the customer, exchange, custodian, wallet, and token.",{"type":24,"tag":42,"props":1043,"children":1045},{"id":1044},"the-enforcement-history-explains-why-records-matter",[1046],{"type":29,"value":1047},"The enforcement history explains why records matter",{"type":24,"tag":25,"props":1049,"children":1050},{},[1051,1053,1060],{"type":29,"value":1052},"The CFTC has already used section 2(c)(2)(D) against crypto trading platforms. In a 2021 consent order, ",{"type":24,"tag":54,"props":1054,"children":1057},{"href":1055,"rel":1056},"https:\u002F\u002Fwww.cftc.gov\u002Fmedia\u002F6651\u002Fenfbfxnaincorder101521\u002Fdownload",[58],[1058],{"type":29,"value":1059},"In the Matter of iFinex Inc., BFXNA Inc., and BFXWW Inc.",{"type":29,"value":1061},", the Commission found that Bitfinex offered off exchange leveraged, margined, or financed digital asset transactions to noneligible U.S. retail customers and operated as an unregistered futures commission merchant. The order described margin wallets, peer funding, account terms, customer location controls, forced liquidation, and the platform's role as counterparty.",{"type":24,"tag":25,"props":1063,"children":1064},{},[1065],{"type":29,"value":1066},"The order was a settled administrative matter. The respondents consented without admitting or denying the findings, so counsel should not describe it as a judicial holding. Its value here is practical: regulatory analysis depended on platform records and operating facts, not a token symbol or transaction hash.",{"type":24,"tag":42,"props":1068,"children":1070},{"id":1069},"records-to-preserve-before-the-story-changes",[1071],{"type":29,"value":1072},"Records to preserve before the story changes",{"type":24,"tag":25,"props":1074,"children":1075},{},[1076],{"type":29,"value":1077},"Counsel investigating a delivery dispute should preserve records by function. A generic request for an account history will miss the relationships the legal test examines.",{"type":24,"tag":25,"props":1079,"children":1080},{},[1081],{"type":29,"value":1082},"Start with the account and offer record: every version of the onboarding flow, terms of service, margin agreement, credit terms, product eligibility, disclosures, customer acknowledgments, and interface screens shown during the relevant period. Request the data that establishes which version the customer received and when.",{"type":24,"tag":25,"props":1084,"children":1085},{},[1086],{"type":29,"value":1087},"Then collect the transaction record: order, fill, trade confirmation, internal ledger postings, fees, timestamps, asset identifier, network, and account or subaccount. Preserve the venue's schema and field definitions so the export can be interpreted.",{"type":24,"tag":25,"props":1089,"children":1090},{},[1091],{"type":29,"value":1092},"Map custody and control separately. Request deposit and withdrawal addresses, omnibus wallet mappings, wallet ownership records, signing policies, key custody arrangements, approval thresholds, transfer restrictions, freeze events, withdrawal attempts, rejection codes, and manual review notes. Obtain internal to onchain reconciliation records and any proof of reserves materials with the underlying method and snapshot time.",{"type":24,"tag":25,"props":1094,"children":1095},{},[1096],{"type":29,"value":1097},"For functional tokens, add governance, delegation, staking, reward, slashing, and intermediary fee records. If the venue asserts a lien or right to liquidate, obtain the agreement, collateral records, margin calculations, notices, and each exercise of that right.",{"type":24,"tag":25,"props":1099,"children":1100},{},[1101,1103,1109,1111,1116],{"type":29,"value":1102},"A ",{"type":24,"tag":54,"props":1104,"children":1106},{"href":1105},"\u002Fservices#evidence-review",[1107],{"type":29,"value":1108},"blockchain evidence review",{"type":29,"value":1110}," should preserve raw chain data at identified blocks and document the provider, method, parameters, network, timestamps, and file hashes. The exchange production should be preserved in native form with audit fields and version history. The ",{"type":24,"tag":54,"props":1112,"children":1113},{"href":218},[1114],{"type":29,"value":1115},"ConsensusIntel methodology",{"type":29,"value":1117}," explains why provenance and reproducibility matter when private records must be reconciled with public chain state.",{"type":24,"tag":42,"props":1119,"children":1121},{"id":1120},"jurisdiction-and-limits",[1122],{"type":29,"value":1123},"Jurisdiction and limits",{"type":24,"tag":25,"props":1125,"children":1126},{},[1127],{"type":29,"value":1128},"Section 2(c)(2)(D) is a federal commodity law provision. The threshold analysis concerns transactions entered into with or offered to persons who are not eligible contract participants or eligible commercial entities, on the leveraged, margined, or financed bases described in the statute. Different rules may govern institutional counterparties, securities, swaps, genuine cash market purchases, or transactions outside the United States.",{"type":24,"tag":25,"props":1130,"children":1131},{},[1132],{"type":29,"value":1133},"The October notice expressly limits its preliminary actual delivery interpretation to section 2(c)(2)(D) and crypto asset transactions. It does not state how delivery works under federal securities law. It also does not decide ownership under state law, contractual entitlement, agency, bankruptcy priority, or whether a specific wallet belongs to a particular person.",{"type":24,"tag":25,"props":1135,"children":1136},{},[1137],{"type":29,"value":1138},"Actual delivery is therefore one legal issue, not a substitute for the rest of the case. The evidence may show that an exchange recorded a liability, that assets existed in an omnibus wallet, or that a customer could initiate a withdrawal. Counsel must still connect those facts to the governing claim and the controlling jurisdiction.",{"type":24,"tag":42,"props":1140,"children":1141},{"id":368},[1142],{"type":29,"value":371},{"type":24,"tag":42,"props":1144,"children":1146},{"id":1145},"q-does-an-exchange-account-balance-prove-actual-delivery",[1147],{"type":29,"value":1148},"Q: Does an exchange account balance prove actual delivery?",{"type":24,"tag":25,"props":1150,"children":1151},{},[1152,1156],{"type":24,"tag":382,"props":1153,"children":1154},{},[1155],{"type":29,"value":386},{"type":29,"value":1157}," Not by itself. It shows that the exchange recorded a balance for the customer. Actual delivery under the authorities discussed here turns on meaningful possession or control and the transaction's operation, not the ledger label alone.",{"type":24,"tag":42,"props":1159,"children":1161},{"id":1160},"q-must-the-customer-personally-hold-the-private-key",[1162],{"type":29,"value":1163},"Q: Must the customer personally hold the private key?",{"type":24,"tag":25,"props":1165,"children":1166},{},[1167,1171],{"type":24,"tag":382,"props":1168,"children":1169},{},[1170],{"type":29,"value":386},{"type":29,"value":1172}," Monex does not create a personal key possession rule because it concerns precious metals, not crypto assets. The 2026 CFTC notice preliminarily suggests credentials may be required, while Monex recognizes that a third party can hold an asset for the buyer. The agency relationship, withdrawal rights, retained controls, and asset functions still need proof.",{"type":24,"tag":42,"props":1174,"children":1176},{"id":1175},"q-can-a-lien-exist-after-actual-delivery",[1177],{"type":29,"value":1178},"Q: Can a lien exist after actual delivery?",{"type":24,"tag":25,"props":1180,"children":1181},{},[1182,1186],{"type":24,"tag":382,"props":1183,"children":1184},{},[1185],{"type":29,"value":386},{"type":29,"value":1187}," Possibly. Monex states that collateral status does not necessarily prevent buyer control. The 2026 notice asks for comment on onchain arrangements where an asset remains subject to a lien or liquidation mechanism but can still be used in commerce. The answer is fact specific, and the proposal is not a final rule.",{"type":24,"tag":42,"props":1189,"children":1191},{"id":1190},"q-does-proof-of-reserves-establish-delivery-to-one-customer",[1192],{"type":29,"value":1193},"Q: Does proof of reserves establish delivery to one customer?",{"type":24,"tag":25,"props":1195,"children":1196},{},[1197,1201],{"type":24,"tag":382,"props":1198,"children":1199},{},[1200],{"type":29,"value":386},{"type":29,"value":1202}," No. A reserve review concerns aggregate assets and liabilities under a stated method and snapshot. It does not, without account level records, prove that a particular customer controlled a particular asset or could withdraw it.",{"type":24,"tag":25,"props":1204,"children":1205},{},[1206,1208,1212],{"type":29,"value":1207},"If actual delivery affects jurisdiction, liability, or recovery in a crypto exchange dispute, ",{"type":24,"tag":54,"props":1209,"children":1210},{"href":441},[1211],{"type":29,"value":444},{"type":29,"value":1213}," before discovery closes. The first job is to identify which records can prove control and which records merely repeat the exchange's account balance.",{"title":7,"searchDepth":448,"depth":448,"links":1215},[1216,1217,1218,1219,1220,1221,1222,1223,1224,1225,1226,1227,1228],{"id":850,"depth":451,"text":853},{"id":881,"depth":451,"text":884},{"id":925,"depth":451,"text":928},{"id":979,"depth":451,"text":982},{"id":1013,"depth":451,"text":1016},{"id":1044,"depth":451,"text":1047},{"id":1069,"depth":451,"text":1072},{"id":1120,"depth":451,"text":1123},{"id":368,"depth":451,"text":371},{"id":1145,"depth":451,"text":1148},{"id":1160,"depth":451,"text":1163},{"id":1175,"depth":451,"text":1178},{"id":1190,"depth":451,"text":1193},"content:articles:44-crypto-actual-delivery-exchange-evidence.md","articles\u002F44-crypto-actual-delivery-exchange-evidence.md","articles\u002F44-crypto-actual-delivery-exchange-evidence",{"_path":1233,"_dir":5,"_draft":6,"_partial":6,"_locale":7,"title":208,"description":1234,"slug":1235,"date":1236,"lastUpdated":1236,"author":12,"readingTime":1237,"category":14,"tags":1238,"ogImage":1241,"featured":6,"body":1242,"_type":464,"_id":1651,"_source":466,"_file":1652,"_stem":1653,"_extension":469},"\u002Farticles\u002F41-cftc-blockchain-regulatory-records","CFTC staff said it would not object to blockchain recordkeeping, but a public explorer alone may not satisfy existing retention and production rules.","cftc-blockchain-regulatory-records","2026-09-28",10,[813,17,1239,1240],"regulatory-records","e-discovery","\u002Fog\u002Fcftc-blockchain-regulatory-records.png",{"type":21,"children":1243,"toc":1637},[1244,1249,1263,1268,1274,1288,1293,1298,1303,1308,1314,1326,1331,1336,1348,1353,1359,1364,1369,1383,1396,1402,1407,1412,1417,1451,1456,1470,1476,1481,1486,1491,1496,1502,1507,1512,1517,1522,1528,1533,1538,1543,1561,1565,1571,1580,1586,1595,1601,1610,1616,1625],{"type":24,"tag":25,"props":1245,"children":1246},{},[1247],{"type":29,"value":1248},"A transaction may remain visible on a public blockchain for years. That does not mean the chain preserves the complete record a regulated firm must keep, or the evidence counsel will need in a dispute.",{"type":24,"tag":25,"props":1250,"children":1251},{},[1252,1254,1261],{"type":29,"value":1253},"On September 24, 2026, three divisions of the Commodity Futures Trading Commission added new recordkeeping answers to their ",{"type":24,"tag":54,"props":1255,"children":1258},{"href":1256,"rel":1257},"https:\u002F\u002Fwww.cftc.gov\u002Fmedia\u002F14671\u002FFAQ_CryptoAsset092426\u002Fdownload",[58],[1259],{"type":29,"value":1260},"crypto assets and blockchain technologies FAQ",{"type":29,"value":1262},". The staff position is practical: a covered entity may use blockchain technology to create and maintain regulatory records. The technology does not displace the recordkeeping obligation.",{"type":24,"tag":25,"props":1264,"children":1265},{},[1266],{"type":29,"value":1267},"That distinction matters when a trading venue, clearing organization, swap dealer, futures commission merchant, or swap counterparty says the responsive record is \"on the blockchain.\" The public transaction may be one part of the record. The entity's metadata, account mapping, correction history, system controls, and production capability may be separate evidence.",{"type":24,"tag":42,"props":1269,"children":1271},{"id":1270},"what-cftc-staff-changed-on-september-24",[1272],{"type":29,"value":1273},"What CFTC staff changed on September 24",{"type":24,"tag":25,"props":1275,"children":1276},{},[1277,1279,1286],{"type":29,"value":1278},"The ",{"type":24,"tag":54,"props":1280,"children":1283},{"href":1281,"rel":1282},"https:\u002F\u002Fwww.cftc.gov\u002FPressRoom\u002FPressReleases\u002F9303-26",[58],[1284],{"type":29,"value":1285},"CFTC release announcing the update",{"type":29,"value":1287}," says staff added guidance on tokenized investments of customer funds and the use of blockchain technology for recordkeeping. Questions 13 through 15 address records.",{"type":24,"tag":25,"props":1289,"children":1290},{},[1291],{"type":29,"value":1292},"Question 13 says CFTC Regulation 1.31 is technology neutral. Staff would not object if a records entity used blockchain technology to create and maintain onchain records, provided the entity fully satisfies the rule.",{"type":24,"tag":25,"props":1294,"children":1295},{},[1296],{"type":29,"value":1297},"Question 14 applies the same position to swap records under Regulation 45.2. It names swap execution facilities, designated contract markets, derivatives clearing organizations, swap dealers, major swap participants, and certain other counterparties.",{"type":24,"tag":25,"props":1299,"children":1300},{},[1301],{"type":29,"value":1302},"Question 15 addresses a narrower point. Staff would not object solely because one of those entities chose not to maintain an offchain version of a record. If the entity uses a public and permissionless network, staff said it should establish systems and controls that allow it to retain and produce the record during an emergency or disruption, including an outage affecting the network or its associated block explorer.",{"type":24,"tag":25,"props":1304,"children":1305},{},[1306],{"type":29,"value":1307},"The FAQ is staff guidance, not a Commission rule. Footnote 2 says the answers represent the views of the named divisions, create no enforceable rights, do not amend existing rules, and do not supply a no-action position. Counsel should cite the underlying regulation for the obligation and use the FAQ to understand how staff currently applies it to blockchain systems.",{"type":24,"tag":42,"props":1309,"children":1311},{"id":1310},"the-regulatory-record-is-larger-than-the-transaction",[1312],{"type":29,"value":1313},"The regulatory record is larger than the transaction",{"type":24,"tag":25,"props":1315,"children":1316},{},[1317,1324],{"type":24,"tag":54,"props":1318,"children":1321},{"href":1319,"rel":1320},"https:\u002F\u002Fwww.ecfr.gov\u002Fcurrent\u002Ftitle-17\u002Fchapter-I\u002Fpart-1\u002Fsection-1.31",[58],[1322],{"type":29,"value":1323},"Regulation 1.31",{"type":29,"value":1325}," defines a regulatory record to include books and records required by the Commodity Exchange Act or CFTC regulations. For electronically stored books and records, the definition also reaches data needed to access, search, or display them, plus electronically stored data describing how and when they were created, formatted, or modified.",{"type":24,"tag":25,"props":1327,"children":1328},{},[1329],{"type":29,"value":1330},"That text matters in discovery. A block explorer page may display a transaction hash, addresses, an amount, a block reference, and emitted events. It usually does not identify the firm's customer account, the order or position that caused the transfer, the employee or automated process that approved it, the source used to decode contract data, or a later internal correction.",{"type":24,"tag":25,"props":1332,"children":1333},{},[1334],{"type":29,"value":1335},"Regulation 1.31 also requires systems and controls that support the authenticity and reliability of electronic regulatory records. Electronic records must remain accessible for the required retention period. Upon a CFTC request, the entity must promptly produce them in the form and medium specified by the Commission, unless the Commission directs otherwise.",{"type":24,"tag":25,"props":1337,"children":1338},{},[1339,1346],{"type":24,"tag":54,"props":1340,"children":1343},{"href":1341,"rel":1342},"https:\u002F\u002Fwww.ecfr.gov\u002Fcurrent\u002Ftitle-17\u002Fchapter-I\u002Fpart-45\u002Fsection-45.2",[58],[1344],{"type":29,"value":1345},"Regulation 45.2",{"type":29,"value":1347}," requires covered entities to keep full, complete, and systematic swap records with pertinent data and memoranda. It also makes those records available for inspection by designated government authorities and addresses the form in which copies must be provided.",{"type":24,"tag":25,"props":1349,"children":1350},{},[1351],{"type":29,"value":1352},"Neither rule treats public visibility as completeness. The chain can show that a particular network accepted a transaction at a particular place in its history. Whether that transaction settled a customer's obligation, changed a firm's books, satisfied a margin call, or corresponded to an authorized instruction may depend on records outside the chain.",{"type":24,"tag":42,"props":1354,"children":1356},{"id":1355},"immutability-does-not-solve-production",[1357],{"type":29,"value":1358},"Immutability does not solve production",{"type":24,"tag":25,"props":1360,"children":1361},{},[1362],{"type":29,"value":1363},"People often use \"immutable\" as shorthand for permanent, complete, and self-explaining. Those are different propositions.",{"type":24,"tag":25,"props":1365,"children":1366},{},[1367],{"type":29,"value":1368},"A public chain may preserve transaction data while an explorer changes its interface, removes decoded fields, loses an API feature, or becomes unavailable. Contract interpretation can also change when an ABI is corrected or a proxy begins using a new implementation. The underlying bytes may remain, but the means used to search and explain them may not.",{"type":24,"tag":25,"props":1370,"children":1371},{},[1372,1374,1381],{"type":29,"value":1373},"The CFTC addressed this point when it revised Regulation 1.31 in 2017. The ",{"type":24,"tag":54,"props":1375,"children":1378},{"href":1376,"rel":1377},"https:\u002F\u002Fwww.federalregister.gov\u002Fdocuments\u002F2017\u002F05\u002F30\u002F2017-11014\u002Frecordkeeping",[58],[1379],{"type":29,"value":1380},"final recordkeeping rule",{"type":29,"value":1382}," was intended to make the form and manner of retention technology neutral while preserving authenticity, reliability, retention, and production requirements. The 2026 FAQ applies that existing design to blockchain systems.",{"type":24,"tag":25,"props":1384,"children":1385},{},[1386,1388,1394],{"type":29,"value":1387},"For counsel, an explorer URL should be treated as a locator, not the whole acquisition. ",{"type":24,"tag":54,"props":1389,"children":1391},{"href":1390},"\u002Fresources\u002Freproducible-blockchain-evidence",[1392],{"type":29,"value":1393},"Reproducible blockchain evidence",{"type":29,"value":1395}," requires the network, block and transaction identifiers, collection time, raw response, query method, and source provenance. When the producing party is a regulated entity, the request should also reach the internal records that give the public transaction business meaning.",{"type":24,"tag":42,"props":1397,"children":1399},{"id":1398},"ask-which-system-holds-each-fact",[1400],{"type":29,"value":1401},"Ask which system holds each fact",{"type":24,"tag":25,"props":1403,"children":1404},{},[1405],{"type":29,"value":1406},"\"Produce the blockchain records\" is too vague for most contested matters. It invites a stack of explorer PDFs and leaves the important systems untouched.",{"type":24,"tag":25,"props":1408,"children":1409},{},[1410],{"type":29,"value":1411},"Start by separating the facts in dispute. If the issue is whether a transfer executed, request the raw transaction, receipt, relevant logs, block reference, and the decoding materials used by the entity. If the issue is authorization, request the instruction, account mapping, approval record, access logs, and applicable role or policy data. If the issue is valuation or margin, request the price source, timestamp, haircut, calculation inputs, and the ledger entry that used them.",{"type":24,"tag":25,"props":1413,"children":1414},{},[1415],{"type":29,"value":1416},"A focused request may seek:",{"type":24,"tag":1418,"props":1419,"children":1420},"ul",{},[1421,1426,1431,1436,1441,1446],{"type":24,"tag":302,"props":1422,"children":1423},{},[1424],{"type":29,"value":1425},"the canonical network identifier, transaction hash, block number, and raw node or provider response retained by the entity;",{"type":24,"tag":302,"props":1427,"children":1428},{},[1429],{"type":29,"value":1430},"data needed to search, access, display, and decode the record, including the contract address, ABI version, proxy implementation, token decimals, and relevant internal schema;",{"type":24,"tag":302,"props":1432,"children":1433},{},[1434],{"type":29,"value":1435},"the mapping between blockchain addresses and the firm's customer, account, order, position, wallet, or custody records;",{"type":24,"tag":302,"props":1437,"children":1438},{},[1439],{"type":29,"value":1440},"corrections, annotations, reversals, exception records, and modification metadata associated with the transaction;",{"type":24,"tag":302,"props":1442,"children":1443},{},[1444],{"type":29,"value":1445},"policies, architecture documents, control tests, and outage procedures for the blockchain recordkeeping system; and",{"type":24,"tag":302,"props":1447,"children":1448},{},[1449],{"type":29,"value":1450},"records showing whether the firm could produce the material when its normal explorer, provider, or network path was unavailable.",{"type":24,"tag":25,"props":1452,"children":1453},{},[1454],{"type":29,"value":1455},"The correct scope depends on the claim, the entity, and the governing retention rule. Regulation 1.31 does not make every system artifact relevant to every case. It does make it harder to defend a blanket response that the explorer page is all that exists.",{"type":24,"tag":25,"props":1457,"children":1458},{},[1459,1461,1468],{"type":29,"value":1460},"In federal civil litigation, ",{"type":24,"tag":54,"props":1462,"children":1465},{"href":1463,"rel":1464},"https:\u002F\u002Fwww.uscourts.gov\u002Fsites\u002Fdefault\u002Ffiles\u002Fdocument\u002Ffederal-rules-of-civil-procedure.pdf",[58],[1466],{"type":29,"value":1467},"Rule 34",{"type":29,"value":1469}," allows a request to specify the form of electronically stored information and requires requests to describe items with reasonable particularity. The rule does not create routine direct access to an opponent's systems. A request for raw JSON, native audit records, and the data dictionary may be more useful and less intrusive than asking to inspect a production database.",{"type":24,"tag":42,"props":1471,"children":1473},{"id":1472},"hypothetical-an-onchain-margin-transfer",[1474],{"type":29,"value":1475},"Hypothetical: an onchain margin transfer",{"type":24,"tag":25,"props":1477,"children":1478},{},[1479],{"type":29,"value":1480},"Assume, hypothetically, that a futures commission merchant accepts an eligible crypto asset as customer margin and records the movement on a public EVM network. A later dispute concerns whether the firm credited the correct account before liquidation.",{"type":24,"tag":25,"props":1482,"children":1483},{},[1484],{"type":29,"value":1485},"The transaction receipt can show that tokens moved from one address to another and that execution succeeded. It cannot, by itself, establish which customer account the destination represented in the firm's books. It also may not show when the firm's risk engine recognized the deposit, which price and haircut the firm applied, whether a confirmation threshold delayed credit, or who handled an exception.",{"type":24,"tag":25,"props":1487,"children":1488},{},[1489],{"type":29,"value":1490},"Counsel should preserve the public transaction immediately. The production request should then connect it to the firm's account ledger, address registry, margin calculation, confirmation policy, exception queue, and system timestamps. If the firm says its blockchain record is the regulatory record, questions 13 and 15 of the FAQ make its authenticity, reliability, and outage-production controls fair subjects for examination.",{"type":24,"tag":25,"props":1492,"children":1493},{},[1494],{"type":29,"value":1495},"This does not prove misconduct. A timing difference may follow a disclosed confirmation policy or another valid control. The point is narrower: the public transaction and the firm's legal or operational treatment of it are separate facts.",{"type":24,"tag":42,"props":1497,"children":1499},{"id":1498},"what-the-new-faq-does-not-decide",[1500],{"type":29,"value":1501},"What the new FAQ does not decide",{"type":24,"tag":25,"props":1503,"children":1504},{},[1505],{"type":29,"value":1506},"The update does not turn every onchain record into a CFTC regulatory record. The underlying Commodity Exchange Act provision or regulation must first require the entity to keep the record.",{"type":24,"tag":25,"props":1508,"children":1509},{},[1510],{"type":29,"value":1511},"It does not make a blockchain entry self-authenticating in litigation, prove that a decoded explorer page is accurate, or establish who controlled an address. Those questions depend on the offered evidence, the governing evidentiary rules, and any supporting testimony.",{"type":24,"tag":25,"props":1513,"children":1514},{},[1515],{"type":29,"value":1516},"Staff said it would not object solely because a covered entity did not maintain an offchain duplicate. For a public and permissionless network, staff said the entity should establish systems and controls that enable retention and production during a disruption. An internal archival node, redundant provider, permissioned replica, export process, or another control might serve that purpose. The FAQ does not prescribe one architecture.",{"type":24,"tag":25,"props":1518,"children":1519},{},[1520],{"type":29,"value":1521},"Finally, the FAQ does not resolve state discovery rules, contractual record duties, or preservation obligations created by pending or anticipated litigation. Those questions need separate analysis in the governing forum.",{"type":24,"tag":42,"props":1523,"children":1525},{"id":1524},"questions-for-the-records-witness",[1526],{"type":29,"value":1527},"Questions for the records witness",{"type":24,"tag":25,"props":1529,"children":1530},{},[1531],{"type":29,"value":1532},"A Rule 30(b)(6) notice, records-custodian deposition, or informal technical conference should test the path from the business event to the produced file.",{"type":24,"tag":25,"props":1534,"children":1535},{},[1536],{"type":29,"value":1537},"Ask which application created the record and which system is authoritative. Identify the network, node or provider, explorer, indexer, decoding source, and internal database involved. Determine how the entity maps an address to an account and how it records corrections without rewriting chain history.",{"type":24,"tag":25,"props":1539,"children":1540},{},[1541],{"type":29,"value":1542},"Then test production. What happens if the primary provider or explorer is unavailable? Can the entity reproduce the exact record and its metadata from another source? Which timestamps come from the blockchain, the provider, and the firm's own systems? Can the witness explain why those times differ?",{"type":24,"tag":25,"props":1544,"children":1545},{},[1546,1547,1552,1554,1559],{"type":29,"value":1278},{"type":24,"tag":54,"props":1548,"children":1549},{"href":1105},[1550],{"type":29,"value":1551},"technical evidence review service",{"type":29,"value":1553}," examines those links instead of treating an explorer display as the final record. The same separation appears in ConsensusIntel's ",{"type":24,"tag":54,"props":1555,"children":1556},{"href":218},[1557],{"type":29,"value":1558},"published methodology",{"type":29,"value":1560},": source data, processing, and conclusions are documented independently.",{"type":24,"tag":42,"props":1562,"children":1563},{"id":368},[1564],{"type":29,"value":371},{"type":24,"tag":42,"props":1566,"children":1568},{"id":1567},"q-did-the-cftc-authorize-blockchain-recordkeeping",[1569],{"type":29,"value":1570},"Q: Did the CFTC authorize blockchain recordkeeping?",{"type":24,"tag":25,"props":1572,"children":1573},{},[1574,1578],{"type":24,"tag":382,"props":1575,"children":1576},{},[1577],{"type":29,"value":386},{"type":29,"value":1579}," CFTC staff said it would not object to covered entities using blockchain technology to create and maintain records under Regulations 1.31 and 45.2 if they fully satisfy the existing requirements. The FAQ is a staff view, not a new Commission rule or a general safe harbor.",{"type":24,"tag":42,"props":1581,"children":1583},{"id":1582},"q-must-a-regulated-firm-keep-an-offchain-copy",[1584],{"type":29,"value":1585},"Q: Must a regulated firm keep an offchain copy?",{"type":24,"tag":25,"props":1587,"children":1588},{},[1589,1593],{"type":24,"tag":382,"props":1590,"children":1591},{},[1592],{"type":29,"value":386},{"type":29,"value":1594}," The September 24 FAQ says staff would not object solely because a covered entity elected not to keep an offchain version. For a firm using a public and permissionless network, staff said the firm should establish systems and controls that permit retention and production during an outage or other disruption.",{"type":24,"tag":42,"props":1596,"children":1598},{"id":1597},"q-is-a-block-explorer-page-enough-for-discovery",[1599],{"type":29,"value":1600},"Q: Is a block explorer page enough for discovery?",{"type":24,"tag":25,"props":1602,"children":1603},{},[1604,1608],{"type":24,"tag":382,"props":1605,"children":1606},{},[1607],{"type":29,"value":386},{"type":29,"value":1609}," Usually not if the dispute concerns account ownership, authorization, valuation, margin treatment, or the firm's internal response. The explorer may show public transaction data. It may omit the internal records that connect the transaction to the business event.",{"type":24,"tag":42,"props":1611,"children":1613},{"id":1612},"q-does-an-onchain-record-prove-who-authorized-a-transfer",[1614],{"type":29,"value":1615},"Q: Does an onchain record prove who authorized a transfer?",{"type":24,"tag":25,"props":1617,"children":1618},{},[1619,1623],{"type":24,"tag":382,"props":1620,"children":1621},{},[1622],{"type":29,"value":386},{"type":29,"value":1624}," No. It may identify the submitting address or transaction signer at the protocol level. Attribution to a person, customer, employee, or automated process usually requires account records, access logs, key-management evidence, testimony, or other offchain proof.",{"type":24,"tag":25,"props":1626,"children":1627},{},[1628,1630,1635],{"type":29,"value":1629},"If a production stops at an explorer screenshot, the missing question is simple: what records did the firm use to understand and act on that transaction? ",{"type":24,"tag":54,"props":1631,"children":1632},{"href":441},[1633],{"type":29,"value":1634},"Contact ConsensusIntel",{"type":29,"value":1636}," to assess the onchain record, the surrounding systems, and the limits of the resulting evidence.",{"title":7,"searchDepth":448,"depth":448,"links":1638},[1639,1640,1641,1642,1643,1644,1645,1646,1647,1648,1649,1650],{"id":1270,"depth":451,"text":1273},{"id":1310,"depth":451,"text":1313},{"id":1355,"depth":451,"text":1358},{"id":1398,"depth":451,"text":1401},{"id":1472,"depth":451,"text":1475},{"id":1498,"depth":451,"text":1501},{"id":1524,"depth":451,"text":1527},{"id":368,"depth":451,"text":371},{"id":1567,"depth":451,"text":1570},{"id":1582,"depth":451,"text":1585},{"id":1597,"depth":451,"text":1600},{"id":1612,"depth":451,"text":1615},"content:articles:41-cftc-blockchain-regulatory-records.md","articles\u002F41-cftc-blockchain-regulatory-records.md","articles\u002F41-cftc-blockchain-regulatory-records",{"_path":1655,"_dir":5,"_draft":6,"_partial":6,"_locale":7,"title":1656,"description":1657,"slug":1658,"date":1659,"lastUpdated":1659,"author":12,"readingTime":1237,"category":14,"tags":1660,"ogImage":1665,"featured":6,"body":1666,"_type":464,"_id":2095,"_source":466,"_file":2096,"_stem":2097,"_extension":469},"\u002Farticles\u002F21-telegram-evidence-crypto-cases-authentication","Telegram evidence in crypto cases: beyond the screenshot","How attorneys can preserve, authenticate, and test Telegram messages that link users, wallet addresses, and cryptocurrency transactions in litigation.","telegram-evidence-crypto-cases-authentication","2026-09-23",[1661,1662,1663,1664],"telegram-evidence","digital-evidence","authentication","blockchain-tracing","\u002Fog\u002Ftelegram-evidence-crypto-cases-authentication.png",{"type":21,"children":1667,"toc":2082},[1668,1673,1678,1692,1697,1702,1708,1713,1718,1732,1737,1742,1747,1753,1765,1770,1784,1789,1794,1799,1804,1810,1815,1820,1831,1869,1874,1888,1902,1908,1913,1918,1923,1928,1937,1943,1948,1953,1958,1963,1981,1987,1992,1997,2002,2007,2011,2017,2026,2032,2041,2047,2056,2062,2071],{"type":24,"tag":25,"props":1669,"children":1670},{},[1671],{"type":29,"value":1672},"A Telegram screenshot shows what appeared on a screen. It does not necessarily show who controlled the account, who wrote the message, whether surrounding messages were omitted, or whether the author controlled a wallet address pasted into the chat.",{"type":24,"tag":25,"props":1674,"children":1675},{},[1676],{"type":29,"value":1677},"Those distinctions matter in cryptocurrency cases because the message may supply the off-chain link that the public ledger cannot. A transaction can establish that assets moved to an address. A Telegram post can place that address in a conversation. Neither record alone proves that a named person authored the post or controlled the destination.",{"type":24,"tag":25,"props":1679,"children":1680},{},[1681,1683,1690],{"type":29,"value":1682},"A recent federal action puts the problem in practical terms. In a ",{"type":24,"tag":54,"props":1684,"children":1687},{"href":1685,"rel":1686},"https:\u002F\u002Fwww.justice.gov\u002Fusao-dc\u002Fpr\u002Fscam-center-strike-force-conducts-seizures-chinese-run-illicit-scammer-marketplace-and",[58],[1688],{"type":29,"value":1689},"September 9, 2026 announcement",{"type":29,"value":1691},", the Justice Department described Xinbi Guarantee as an alleged Chinese-language marketplace operated on Telegram. DOJ said vendors advertised services in the channel, posted cryptocurrency wallets for payment, and received victim funds traced to specific vendors. The U.S. District Court for the District of Columbia authorized seizure of the Telegram channels on September 7, according to the announcement.",{"type":24,"tag":25,"props":1693,"children":1694},{},[1695],{"type":29,"value":1696},"That is an allegation and an account of court-authorized investigative action. It is not a verdict, a forfeiture judgment, or a finding that every channel participant committed a crime. For private counsel, it is useful for a narrower reason: it shows how a messaging record and a blockchain path may depend on each other.",{"type":24,"tag":25,"props":1698,"children":1699},{},[1700],{"type":29,"value":1701},"This article applies the Federal Rules of Evidence. State evidence rules and the law governing subpoenas, privacy, and access can produce a different answer. Counsel should resolve those issues in the forum where the evidence will be used.",{"type":24,"tag":42,"props":1703,"children":1705},{"id":1704},"separate-the-propositions-before-collecting-evidence",[1706],{"type":29,"value":1707},"Separate the propositions before collecting evidence",{"type":24,"tag":25,"props":1709,"children":1710},{},[1711],{"type":29,"value":1712},"A Telegram exhibit can be offered to prove several different facts. Each needs its own foundation.",{"type":24,"tag":25,"props":1714,"children":1715},{},[1716],{"type":29,"value":1717},"First is content: the exhibit accurately reflects the words, images, wallet address, date, and visible context that appeared in the application.",{"type":24,"tag":25,"props":1719,"children":1720},{},[1721,1723,1730],{"type":29,"value":1722},"Second is account identity: the message came from a particular Telegram account, group, or channel. A username or display name is not enough by itself. Telegram's ",{"type":24,"tag":54,"props":1724,"children":1727},{"href":1725,"rel":1726},"https:\u002F\u002Ftelegram.org\u002Fprivacy",[58],[1728],{"type":29,"value":1729},"privacy policy",{"type":29,"value":1731}," says users provide a mobile number and basic account data, while the public screen name and username can differ from a person's real identity.",{"type":24,"tag":25,"props":1733,"children":1734},{},[1735],{"type":29,"value":1736},"Third is authorship or control: a person or organization operated the account or wrote the message at issue. Shared devices, channel administrators, bots, forwarded posts, and compromised accounts can break a simple account-to-person inference.",{"type":24,"tag":25,"props":1738,"children":1739},{},[1740],{"type":29,"value":1741},"Fourth is the blockchain connection: the address in the message matches the address used in the relevant transaction, and the asserted relationship to that address is supported by evidence. Exact text matching and a transaction hash can establish a ledger connection. They do not establish who held the private key, who owned the assets, or who later received value through an exchange account.",{"type":24,"tag":25,"props":1743,"children":1744},{},[1745],{"type":29,"value":1746},"A sound report states each proposition separately. It should not compress them into a conclusion such as \"the defendant's Telegram wallet.\"",{"type":24,"tag":42,"props":1748,"children":1750},{"id":1749},"what-the-federal-rules-require",[1751],{"type":29,"value":1752},"What the federal rules require",{"type":24,"tag":25,"props":1754,"children":1755},{},[1756,1763],{"type":24,"tag":54,"props":1757,"children":1760},{"href":1758,"rel":1759},"https:\u002F\u002Fwww.uscourts.gov\u002Fsites\u002Fdefault\u002Ffiles\u002Fdocument\u002Ffederal-rules-of-evidence.pdf",[58],[1761],{"type":29,"value":1762},"Rule 901(a)",{"type":29,"value":1764}," requires evidence sufficient to support a finding that an item is what its proponent claims. The same rule lists several possible routes, including testimony from a knowledgeable witness, distinctive characteristics considered with the circumstances, and evidence that a process or system produces an accurate result. No single route fits every Telegram collection.",{"type":24,"tag":25,"props":1766,"children":1767},{},[1768],{"type":29,"value":1769},"A participant who saw and sent the messages may authenticate a conversation through personal knowledge. A forensic examiner may explain how data was acquired from a device or export. Circumstantial evidence may include a stable account identifier, facts known to the alleged author, linked devices, replies from known participants, or records that connect the account to other conduct. The strength of that evidence goes to the particular claim being made.",{"type":24,"tag":25,"props":1771,"children":1772},{},[1773,1775,1782],{"type":29,"value":1774},"Rules 902(13) and 902(14) provide certification routes for records generated by an electronic process and data copied from an electronic device, storage medium, or file. The ",{"type":24,"tag":54,"props":1776,"children":1779},{"href":1777,"rel":1778},"https:\u002F\u002Fwww.law.cornell.edu\u002Frules\u002Ffre\u002Frule_902",[58],[1780],{"type":29,"value":1781},"Rule 902 committee note",{"type":29,"value":1783}," explains that copied electronic data is commonly identified with a hash value. A proper certification may remove the need for a foundation witness to authenticate the record or the copy.",{"type":24,"tag":25,"props":1785,"children":1786},{},[1787],{"type":29,"value":1788},"Certification has limits. It can support the integrity of the acquired file or the operation of the collection process. It does not prove that a named person typed a message, that the message is true, or that a wallet belonged to that person. Authentication also does not answer hearsay.",{"type":24,"tag":25,"props":1790,"children":1791},{},[1792],{"type":29,"value":1793},"Rule 801(d)(2) addresses statements offered against an opposing party. For statements allegedly made by an authorized speaker, agent, employee, or coconspirator, the rule says the statement itself does not establish the required authority, relationship, or conspiracy. Counsel still needs evidence connecting the declarant and the party.",{"type":24,"tag":25,"props":1795,"children":1796},{},[1797],{"type":29,"value":1798},"The original-writing rule does not create a blanket ban on screenshots. Rule 1001 treats an output readable by sight as an original of electronically stored information if it accurately reflects that information. Rule 1003 generally permits a duplicate unless authenticity is genuinely questioned or admission would be unfair. A screenshot may therefore be usable, but accuracy and scope remain factual questions. A cropped image with no collection history is much easier to challenge than a preserved export tied to a device and documented process.",{"type":24,"tag":25,"props":1800,"children":1801},{},[1802],{"type":29,"value":1803},"Context matters too. Under Rule 106, an adverse party may require related statements that fairness calls for considering at the same time, even over a hearsay objection. Collecting only the message that contains the wallet address can leave counsel unable to assess a correction, reply, forwarded-message marker, or explanation immediately beside it.",{"type":24,"tag":42,"props":1805,"children":1807},{"id":1806},"preserve-the-account-and-device-before-building-the-trace",[1808],{"type":29,"value":1809},"Preserve the account and device before building the trace",{"type":24,"tag":25,"props":1811,"children":1812},{},[1813],{"type":29,"value":1814},"Telegram's architecture changes the preservation question. Its policy says cloud-chat messages and media are stored on its servers so users can reach them from multiple devices. Secret chats are different: Telegram says they are not available in the cloud and can be accessed only from the sending or receiving device.",{"type":24,"tag":25,"props":1816,"children":1817},{},[1818],{"type":29,"value":1819},"Deletion risk is also real. Telegram says either participant in a one-on-one chat can clear the entire chat history for both parties without a time limit. An account can also be deleted with its cloud data. Counsel should address lawful preservation promptly and should not assume that a public blockchain preserves the related conversation.",{"type":24,"tag":25,"props":1821,"children":1822},{},[1823,1829],{"type":24,"tag":54,"props":1824,"children":1826},{"href":1825},"\u002Fresources\u002Fpreserving-crypto-native-esi",[1827],{"type":29,"value":1828},"Preserving crypto-native ESI",{"type":29,"value":1830}," explains the broader hold and collection problem. For Telegram evidence, the practical collection package should usually include:",{"type":24,"tag":1418,"props":1832,"children":1833},{},[1834,1839,1844,1849,1854,1859,1864],{"type":24,"tag":302,"props":1835,"children":1836},{},[1837],{"type":29,"value":1838},"the original device or a qualified forensic acquisition when proportional and authorized;",{"type":24,"tag":302,"props":1840,"children":1841},{},[1842],{"type":29,"value":1843},"a native chat or account export, including media, rather than screenshots alone;",{"type":24,"tag":302,"props":1845,"children":1846},{},[1847],{"type":29,"value":1848},"screenshots or video that document how the relevant conversation appeared in the application;",{"type":24,"tag":302,"props":1850,"children":1851},{},[1852],{"type":29,"value":1853},"the visible account, group, or channel identifiers and the participants or administrators available to the collector;",{"type":24,"tag":302,"props":1855,"children":1856},{},[1857],{"type":29,"value":1858},"messages before and after the cited passage, with reply, edit, and forwarding indicators preserved where available;",{"type":24,"tag":302,"props":1860,"children":1861},{},[1862],{"type":29,"value":1863},"collection date and time, displayed time zone, device clock, operating system, Telegram version, export settings, and collector identity; and",{"type":24,"tag":302,"props":1865,"children":1866},{},[1867],{"type":29,"value":1868},"cryptographic hashes for exported files, followed by preservation of the untouched originals.",{"type":24,"tag":25,"props":1870,"children":1871},{},[1872],{"type":29,"value":1873},"These are collection recommendations, not elements imposed in every case. Scope should follow relevance, proportionality, privilege, privacy, and the governing discovery order.",{"type":24,"tag":25,"props":1875,"children":1876},{},[1877,1879,1886],{"type":29,"value":1878},"Telegram's ",{"type":24,"tag":54,"props":1880,"children":1883},{"href":1881,"rel":1882},"https:\u002F\u002Ftelegram.org\u002Fblog\u002Fexport-and-more",[58],[1884],{"type":29,"value":1885},"desktop export documentation",{"type":29,"value":1887}," says a user can export some or all chats, including media, in JSON or HTML. An HTML export is useful for review. JSON may preserve structure that a rendered page hides. Neither format should be treated as self-proving. Record who initiated the export, from which account and device, what options were selected, and whether any filters or date ranges were used.",{"type":24,"tag":25,"props":1889,"children":1890},{},[1891,1893,1900],{"type":29,"value":1892},"NIST's ",{"type":24,"tag":54,"props":1894,"children":1897},{"href":1895,"rel":1896},"https:\u002F\u002Fnvlpubs.nist.gov\u002Fnistpubs\u002FSpecialPublications\u002FNIST.SP.800-101r1.pdf",[58],[1898],{"type":29,"value":1899},"mobile device forensics guidance",{"type":29,"value":1901}," distinguishes manual extraction from logical and physical acquisition. It warns that manual examination can modify data and cannot recover deleted information. It also recommends integrity hashing of acquired evidence. The publication dates to 2014, so it is a source for collection principles, not current Telegram feature behavior.",{"type":24,"tag":42,"props":1903,"children":1905},{"id":1904},"worked-hypothetical-a-wallet-posted-in-a-fraud-channel",[1906],{"type":29,"value":1907},"Worked hypothetical: a wallet posted in a fraud channel",{"type":24,"tag":25,"props":1909,"children":1910},{},[1911],{"type":29,"value":1912},"Assume a plaintiff received a Telegram message directing payment to a USDT address. The plaintiff has a screenshot, an exchange withdrawal receipt, and a transaction hash showing the transfer to the same address. This is a hypothetical, not a client matter.",{"type":24,"tag":25,"props":1914,"children":1915},{},[1916],{"type":29,"value":1917},"The three records can establish a useful sequence. The screenshot can show that the address appeared in the conversation. The exchange record can show that the plaintiff instructed a withdrawal. The blockchain record can show that the transaction reached the matching address.",{"type":24,"tag":25,"props":1919,"children":1920},{},[1921],{"type":29,"value":1922},"The sequence still does not prove who authored the message or controlled the address. Counsel should look for independent links: a native export from the plaintiff's account, testimony from the participant who received the message, account identifiers preserved from the application, device records from the alleged author if obtainable, provider or exchange records produced through lawful process, and later communications showing knowledge of transaction details not visible to the public.",{"type":24,"tag":25,"props":1924,"children":1925},{},[1926],{"type":29,"value":1927},"If funds later enter a custodial exchange, the public chain may show only a transfer to an address associated with that service. Customer attribution then depends on the exchange's internal records. If the wallet is self-custodied, a signed message or device evidence may support control, but the requested proof must be designed so it does not expose a seed phrase or private key.",{"type":24,"tag":25,"props":1929,"children":1930},{},[1931,1935],{"type":24,"tag":54,"props":1932,"children":1933},{"href":1390},[1934],{"type":29,"value":1393},{"type":29,"value":1936}," should accompany the messaging collection. Preserve the full address, network, asset, transaction hash, block reference, raw transaction data, query source, query time, and any third-party attribution. A Telegram message and a transaction table should be cross-referenced, not merged into a single unsupported ownership label.",{"type":24,"tag":42,"props":1938,"children":1940},{"id":1939},"how-to-test-the-opposing-partys-exhibit",[1941],{"type":29,"value":1942},"How to test the opposing party's exhibit",{"type":24,"tag":25,"props":1944,"children":1945},{},[1946],{"type":29,"value":1947},"Start with the claim. Is the exhibit offered to prove that a message existed, that a person authored it, that its contents were true, or that the person controlled a wallet? The necessary proof changes with the answer.",{"type":24,"tag":25,"props":1949,"children":1950},{},[1951],{"type":29,"value":1952},"Then request the material behind the image. Ask for the uncropped file, native export, original device or forensic report, collection notes, hashes, account and channel identifiers, surrounding messages, attachments, and any certification. Identify search terms, date filters, excluded chats, translation steps, and time-zone conversions.",{"type":24,"tag":25,"props":1954,"children":1955},{},[1956],{"type":29,"value":1957},"Check for application-specific context. A forwarded message does not show that the forwarding account wrote the original. A channel post may have more than one administrator. A public username may be changed or imitated. A wallet address can be copied by anyone. These facts do not make the exhibit false, but they narrow the inferences it can support.",{"type":24,"tag":25,"props":1959,"children":1960},{},[1961],{"type":29,"value":1962},"For a non-English conversation, preserve the original text and identify who translated it, the method used, and any disputed slang or technical terms. The Xinbi announcement describes a channel operated primarily in Chinese. Translation can affect the meaning of service descriptions, payment instructions, and speaker identity. A translated exhibit should remain traceable to the source message.",{"type":24,"tag":25,"props":1964,"children":1965},{},[1966,1968,1973,1975,1979],{"type":29,"value":1967},"Finally, compare the address character by character and verify it on the correct network. Similar-looking addresses, address poisoning, tokens with the same symbol on different networks, and omitted memo fields can produce a false match. The ",{"type":24,"tag":54,"props":1969,"children":1970},{"href":1105},[1971],{"type":29,"value":1972},"evidence review service",{"type":29,"value":1974}," is structured around testing the collection, attribution, and transaction analysis as separate workstreams. The ",{"type":24,"tag":54,"props":1976,"children":1977},{"href":218},[1978],{"type":29,"value":1558},{"type":29,"value":1980}," explains how source records and analyst conclusions are documented.",{"type":24,"tag":42,"props":1982,"children":1984},{"id":1983},"what-a-defensible-exhibit-package-looks-like",[1985],{"type":29,"value":1986},"What a defensible exhibit package looks like",{"type":24,"tag":25,"props":1988,"children":1989},{},[1990],{"type":29,"value":1991},"A useful production keeps the source and the courtroom view together. Preserve the native export or forensic image as the source. Create a review copy that counsel can search. Prepare the proposed exhibit from that source, and maintain a manifest linking the exhibit pages to the underlying files and hashes.",{"type":24,"tag":25,"props":1993,"children":1994},{},[1995],{"type":29,"value":1996},"The authentication declaration or testimony should identify the collector, device or account, acquisition method, dates, settings, output files, and integrity checks. Any Rule 902 certification should track the process actually used rather than reciting the rule in general terms.",{"type":24,"tag":25,"props":1998,"children":1999},{},[2000],{"type":29,"value":2001},"The expert analysis should then separate observable facts from opinions. Observable facts may include the displayed account identifier, exact wallet string, message timestamp as rendered, transaction hash, and block data. Opinions may address whether the records are consistent with common control, whether an address attribution is reliable, or whether omitted context changes the analysis. State the assumptions and competing explanations.",{"type":24,"tag":25,"props":2003,"children":2004},{},[2005],{"type":29,"value":2006},"This structure does not guarantee admission. It gives counsel and the court a record that can be tested.",{"type":24,"tag":42,"props":2008,"children":2009},{"id":368},[2010],{"type":29,"value":371},{"type":24,"tag":42,"props":2012,"children":2014},{"id":2013},"q-is-a-telegram-screenshot-admissible-in-federal-court",[2015],{"type":29,"value":2016},"Q: Is a Telegram screenshot admissible in federal court?",{"type":24,"tag":25,"props":2018,"children":2019},{},[2020,2024],{"type":24,"tag":382,"props":2021,"children":2022},{},[2023],{"type":29,"value":386},{"type":29,"value":2025}," It can be. The proponent still must authenticate it for the purpose offered, address hearsay if the message is offered for its truth, and show that the image accurately reflects the relevant content. A screenshot is weaker when it is cropped, lacks context, or has no documented source.",{"type":24,"tag":42,"props":2027,"children":2029},{"id":2028},"q-does-posting-a-wallet-address-prove-the-poster-controls-it",[2030],{"type":29,"value":2031},"Q: Does posting a wallet address prove the poster controls it?",{"type":24,"tag":25,"props":2033,"children":2034},{},[2035,2039],{"type":24,"tag":382,"props":2036,"children":2037},{},[2038],{"type":29,"value":386},{"type":29,"value":2040}," No. The post proves, at most, that the address appeared in the message if the exhibit is authentic. Control needs separate evidence, such as device artifacts, a valid signed message, exchange records, or conduct tied to the address.",{"type":24,"tag":42,"props":2042,"children":2044},{"id":2043},"q-does-a-rule-902-certification-prove-who-wrote-the-message",[2045],{"type":29,"value":2046},"Q: Does a Rule 902 certification prove who wrote the message?",{"type":24,"tag":25,"props":2048,"children":2049},{},[2050,2054],{"type":24,"tag":382,"props":2051,"children":2052},{},[2053],{"type":29,"value":386},{"type":29,"value":2055}," No. Rules 902(13) and 902(14) can authenticate an electronic process or a copied data set through certification. They do not establish authorship, truth, ownership, or wallet control.",{"type":24,"tag":42,"props":2057,"children":2059},{"id":2058},"q-what-should-counsel-preserve-first",[2060],{"type":29,"value":2061},"Q: What should counsel preserve first?",{"type":24,"tag":25,"props":2063,"children":2064},{},[2065,2069],{"type":24,"tag":382,"props":2066,"children":2067},{},[2068],{"type":29,"value":386},{"type":29,"value":2070}," Preserve the available device and account data through lawful means, then capture the full conversation and native export before messages or accounts disappear. Record the collection method and time, retain untouched source files, hash the exports, and keep the messaging evidence separate from the blockchain analysis.",{"type":24,"tag":25,"props":2072,"children":2073},{},[2074,2076,2080],{"type":29,"value":2075},"If a matter turns on a Telegram conversation and a wallet path, start with the evidence that can disappear. ",{"type":24,"tag":54,"props":2077,"children":2078},{"href":441},[2079],{"type":29,"value":1634},{"type":29,"value":2081}," to scope preservation, authentication, or transaction analysis before the record is reduced to screenshots.",{"title":7,"searchDepth":448,"depth":448,"links":2083},[2084,2085,2086,2087,2088,2089,2090,2091,2092,2093,2094],{"id":1704,"depth":451,"text":1707},{"id":1749,"depth":451,"text":1752},{"id":1806,"depth":451,"text":1809},{"id":1904,"depth":451,"text":1907},{"id":1939,"depth":451,"text":1942},{"id":1983,"depth":451,"text":1986},{"id":368,"depth":451,"text":371},{"id":2013,"depth":451,"text":2016},{"id":2028,"depth":451,"text":2031},{"id":2043,"depth":451,"text":2046},{"id":2058,"depth":451,"text":2061},"content:articles:21-telegram-evidence-crypto-cases-authentication.md","articles\u002F21-telegram-evidence-crypto-cases-authentication.md","articles\u002F21-telegram-evidence-crypto-cases-authentication",1793226883011]