Control is not ownership: UCC Article 12 and digital assets

A wallet can be controlled without being owned, and owned without being controlled by the owner. When a lender, a buyer, a bankruptcy trustee, and a theft victim all claim the same cryptocurrency, the question is rarely who holds the private key. It is who has which right, created by which transaction, and whether a later taker took free of the others. UCC Article 12, the 2022 amendments' framework for "controllable electronic records," makes control a legally operative fact, but it stops short of collapsing possession, title, and priority into one fact. The adjacent articles on wallet ownership evidence and self-custody vs. custodial wallets address factual attribution and custody architecture; this one addresses the commercial-law contest among competing claimants.

Why Technical Control Is Not Legal Ownership

The person who holds the private key can sign transactions and move the asset. That is factual dominion. The legal question is which rights that fact creates, and the answer comes from the transaction that put the key in the holder's hands, not from the key itself.

Illustrative scenario: an employee signs a company wallet's transactions under a written instruction from the CEO; a spouse holds the seed phrase to an account opened before marriage; an exchange holds custody keys while crediting thousands of user balances. In each case the keyholder is factually dominant, but the property analysis is different: agency, marital property, and custody are governed by other law. Control is evidence of those arrangements; it is not a substitute for the analysis.

Article 9 distinguishes possession from title. A secured party's possession can perfect a security interest, but possession alone does not resolve ownership. Article 12 similarly makes control relevant to perfection and priority while other law determines what right was acquired.

What Article 12 Actually Is

Article 12 (Controllable Electronic Records) was part of the amendments the Uniform Law Commission approved in July 2022. The ULC project page carries the drafting and enactment materials. The amendments are model law: they become binding only when a state enacts its own version, and enacted versions differ in numbering and detail, so the governing text is always the enacting state's statute.

A "controllable electronic record" is a record stored in an electronic medium that can be subjected to control under the statute's functional test. The definition excludes assets that already have a UCC home: deposit accounts, an electronic copy of a record evidencing chattel paper, electronic documents of title, investment property, transferable records, and a government-authorized electronic medium of exchange that did not exist as a medium of exchange before that authorization. The ULC's example is virtual currency. Whether a particular token or NFT is a controllable electronic record turns on the statute and the system that records it. The Maine enacted text (Me. Rev. Stat. tit. 11, Art. 12) is a clean, freely readable enactment for reference.

The Functional Control Test

Section 12-105 sets out what control requires. The electronic record, a record attached or logically associated with it, or the system in which it is recorded must give the person power to avail itself of substantially all the benefit from the record and, subject to subsection (2), exclusive power both to prevent others from doing the same and to transfer control to another person or to cause another person to obtain control of another controllable electronic record as a result of the transfer. The same record or system must also enable the person readily to identify itself as having those powers, including by name, identifying number, cryptographic key, office, or account number. The identification element must be tested against the record and system, not assumed from the ability to sign a transaction. Control is measured at a point in time: how the keys, wallet software, multisig, and any custodian arrangement actually operated on that date. Subsection (5) recognizes control through another person, typically a custodian, who has control and acknowledges that it has control, or will obtain control, on behalf of the claimant, so long as that other person is not the transferor of the interest. Subsections (2) and (3) address shared power. A multisig arrangement can satisfy exclusivity, but the answer depends on each signer's powers and the transferor's role.

What Control Does Not Mean

The enacted texts are explicit that other law decides the rest. Maine's section 12-104(3), tracking the uniform text, provides that except as otherwise provided, other law determines whether a person acquires a right in a controllable electronic record and what right the person acquires. The take-free rule protects a qualifying purchaser against claims of a property right in the record itself; it does not resolve trademark, copyright, tax, securities, or trust questions that attach through other law. Courts have applied ordinary trademark law to NFT-linked art; see Hermès Int'l v. Rothschild, 654 F. Supp. 3d 268 (S.D.N.Y. 2023) (No. 1:22-cv-00384-JSR).

Qualifying Purchasers and Priority

Article 12's reward for control is negotiability-like protection for the "qualifying purchaser": a purchaser of a controllable electronic record, or of an interest in one, that obtains control for value, in good faith, and without notice of a claim of a property right in the record. "Value" tracks Article 3, which is narrower than the value needed for a security interest to attach; an unperformed promise to pay later may attach a lien, but it does not make a qualifying purchaser. Filing a financing statement is not itself notice of a property-right claim. A qualifying purchaser takes free of a claim of a property right in the record. The same take-free rule extends to a controllable account or controllable payment intangible evidenced by the record. For other rights to payment or performance, or other property the record is said to evidence, the qualifying purchaser takes subject to those claims unless other law provides otherwise.

The 2022 amendments also rewired Article 9. Security interests in controllable electronic records, controllable accounts, and controllable payment intangibles can be perfected by filing or by control, and a secured party with control generally outranks one that perfected only by filing. Acknowledgment by a custodian is a path to control under section 12-105(5), not a third perfection method. Electronic money is treated separately: if it is not credited to a deposit account, a security interest in it may be perfected only by control. A buyer of a controllable electronic record who gives value and obtains control without knowledge of a security interest and before it is perfected takes free of it. A buyer, other than a secured party, of a controllable account or controllable payment intangible takes free on the same conditions. The ULC's official summary of the 2022 amendments describes the architecture; Wilson Sonsini's analysis works through the qualifying-purchaser and buyer-versus-secured-party rules.

If a digital asset is held by a securities intermediary as a financial asset credited to a securities account, the transaction stays in Article 8. Determine at the threshold whether the asset is held directly (Article 12) or through an intermediary (Article 8).

Control in the Disputes That Actually Arise

When an exchange holds the keys and credits user balances, it may have control. That does not make the exchange the owner of user assets. Contract, jurisdiction, and segregation practices govern who owns what between the parties; against third parties, perfection depends on control or filing under the state's enacted Article 9. On platform insolvency, the customer-versus-estate contest is a contract and property-law argument with control evidence on both sides, which is why our bankruptcy checklist treats custody documentation as a first-class evidence category.

A 2-of-3 arrangement in which a debtor, a lender, and a custodian each hold one key makes the same point. No single party can move funds. In that arrangement, the lender does not have control merely by holding its key: it can act only with another signer, and either other signer can act without the lender. A different allocation of signing power or an acknowledgment by a qualifying custodian may produce a different result. Who owns what is a question of the multisig agreement and the loan documents. A thief who steals a seed phrase gains factual control and no ownership right: the thief is not a purchaser for value in good faith without notice. A later qualifying purchaser can take the record free of the victim's claim. The victim's practical route is tracing the asset and attacking the transfer under other law, which is where blockchain tracing becomes the operative work product and where timing, price, and notice must be reconstructed under our methodology. An agent with signing authority over a corporate wallet creates a visible control fact; whether the company owns the underlying rights, and whether the agent misused authority, depend on agency and fiduciary law.

The Insolvency Interaction

Bankruptcy respects state-law property rights. Under Butner v. United States, 440 U.S. 48 (1979), property interests are created and defined by state law. Section 541 reaches the debtor's legal or equitable interests in property as of the petition date. Control of a wallet starts that inquiry; it does not, without more, make the coins estate property. The interest may be full ownership, a security interest, or a bare possessory or custodial right. For a secured creditor, perfection by control and its timing can affect priority and avoidance analysis, alongside attachment and the other applicable requirements. State-law take-free protection does not by itself defeat a federal avoidance action, and good-faith transferees for value may have defenses under the Bankruptcy Code itself, for example 11 U.S.C. § 548(c).

The Forensic Facts Counsel Needs

Proving or disputing control at a specific date requires a date-stamped record. Assemble key-custody artifacts against the transaction date; custody agreements naming who holds keys and on whose behalf; permission history; a signed message or transaction from the disputed address at or near the critical date; and a single timeline of the financing-statement filing, the control date, the purchase date, and the value paid. Continuity evidence often decides the abandoned-or-transferred argument.

The gap between technical capability and legal right is where an expert witness has to explain the mechanics without overstating what they determine. Attribution and legal property questions in digital tokens are examined further in NFT ownership disputes and evidence.

Check the State Before You Opine

The 2022 amendments are not in force everywhere. As of October 2025, Wilson Sonsini reported that 31 states and the District of Columbia had enacted them. The ULC project page carries drafting and enactment materials. Neither is an authoritative registry. Confirm the governing state's statute and session law.

Two dates matter in every enacting state. The effective date starts the new rules. The "adjustment date," described in the amendments and in Duane Morris's summary, is the later of a uniform fixed date (July 1, 2025 in the model) or one year after the state's effective date, and is when priority adjustments for pre-existing security interests take effect. Maine used an effective date of July 1, 2025 and a fixed adjustment date of July 1, 2026, as set in the 2023 session law. Section 12-107 looks to the local law of the record's jurisdiction, determined by a statutory waterfall that often defaults to the District of Columbia when the record and the system do not designate a jurisdiction. Purchaser and qualifying-purchaser rights under section 12-104 are tested under that law as of the time of purchase.

There is little appellate interpretation of Article 12 in the states that have enacted it. Treat the statutory text and its official summary as the authority, and any secondary analysis, including this one, as a map of the questions.

Frequently Asked Questions

Q: Does controlling a wallet make the controller its legal owner?

A: No. Control under section 12-105 is the power to avail itself of substantially all the benefit of the record, exclusive power to prevent others from doing so and to transfer control or to cause another person to obtain control of another record as a result of the transfer, and the ability to be readily identified as the person with those powers. Whether the controller owns the record, holds it for another, or holds a security interest is decided by the transaction that created the relationship and by other law.

Q: What is a qualifying purchaser, and why does it matter?

A: A qualifying purchaser of a controllable electronic record, or of an interest in one, obtains control for value, in good faith, and without notice of a claim of a property right in the record. The Article 12 take-free rule lets that purchaser acquire its rights free of claims of a property right in the record. Value is the narrower Article 3 standard, so an unperformed promise to pay is not enough, and a filed financing statement is not notice of a claim.

Q: How does a lender perfect a security interest in cryptocurrency or other digital assets?

A: Under the 2022 amendments as enacted, a security interest in a controllable electronic record, controllable account, or controllable payment intangible can be perfected by filing or by control, including by a custodian's acknowledgment of control. Control generally has priority over filing. A security interest in electronic money that is not credited to a deposit account may be perfected only by control. Check the state's enacted Article 9 and its effective and adjustment dates before relying on a particular method.

Q: Is UCC Article 12 in effect everywhere in the United States?

A: No. The amendments are model law approved by the Uniform Law Commission in July 2022. Each state must enact its own version. An October 2025 advisory reported that 31 states and the District of Columbia had enacted the amendments. Verify the governing state's enactment, effective date, adjustment date, and transition rules.

Q: If a thief controls a stolen wallet, does a later buyer keep the coins?

A: Possibly, if the buyer qualifies. The thief gains factual control but no ownership right, and is not a purchaser for value in good faith without notice. A later buyer who obtains control for value, in good faith, and without notice of the victim's claim can take free under Article 12 as enacted. The victim's remedies then run through tracing the asset and attacking the transfer under other law. The outcome depends on the facts and the state's enacted text.

If a matter turns on who controlled a wallet, when, and with what right, the evidence must be assembled before the legal conclusion is drawn. Contact ConsensusIntel to discuss the specific fact pattern.