What the OCC’s new guidance actually changes
The U.S. Office of the Comptroller of the Currency (OCC) has issued updated guidance confirming that national banks and federal savings associations are permitted to engage in crypto-asset custody and related trading services. The clarification appears in Interpretive Letter 1184, which lays out a clearer regulatory framework for how banks may interact with digital assets on behalf of customers.
At the center of the letter is a practical point: banks are not limited to merely holding crypto. They may also buy and sell digital assets that are already held in custody, as long as those transactions are carried out at the direction of customers. That gives regulated banks a more defined role in the crypto market and reduces uncertainty around the scope of services they can legally provide.
The move matters because many traditional financial institutions have been cautious about entering crypto due to unclear compliance boundaries. With the OCC now stating its position more explicitly, banks have stronger regulatory footing if they want to expand into digital-asset services. This is especially relevant in a market that, according to the article, now includes more than 50 million Americans.
Rather than treating crypto as a separate or fringe activity, the OCC’s approach suggests that digital assets are increasingly being folded into the regulated banking environment. The agency’s broader message is that emerging financial technologies can be supported by banks, but only within established legal and supervisory standards.
What services banks are now allowed to provide
The OCC’s clarification goes beyond simple storage. Acting Comptroller Rodney Hood said in a video statement that regulated banks may provide custody services, including the safekeeping and secure storage of Bitcoin and other digital assets on behalf of customers. That alone is important, because custody is one of the foundational services needed for broader institutional participation in crypto.
But the guidance also extends to customer-directed transactions. In Hood’s words, the banks supervised by the OCC may buy and sell cryptocurrencies they hold in custody when acting on customer instructions. In practical terms, that means banks can support not just passive custody, but also execution tied to assets already under their control.
The letter further states that banks may provide supporting operational services that are critical in real-world asset management. These include recordkeeping, tax reporting, and compliance services. Those capabilities are especially relevant because crypto ownership creates obligations and documentation needs that many retail and institutional clients struggle to manage on their own.
This combination of custody, transaction support, reporting, and compliance means banks can potentially offer a more complete digital-asset service stack. For customers, that could make crypto holdings easier to manage within a regulated financial institution rather than through a patchwork of separate crypto-native providers.
Third-party providers and sub-custodians are allowed — with conditions
Another major part of Interpretive Letter 1184 is the OCC’s confirmation that banks may outsource certain crypto-related functions to third parties. The article specifically notes that this can include custody and execution services. That flexibility is important because many banks do not yet have in-house systems for digital-asset security, private-key management, or specialized transaction infrastructure.
The OCC also made clear that banks may use sub-custodians to provide these services. In other words, a bank does not need to build every layer of crypto operations internally. It can rely on outside firms for some of the technical or operational heavy lifting, which may speed up market entry for institutions that want to offer crypto products but lack native expertise.
However, the regulator tied that flexibility to a strict condition: such arrangements must remain “subject to appropriate third-party risk management practices.” This means outsourcing is allowed, but accountability does not disappear. Banks are still expected to assess vendor reliability, operational resilience, security controls, compliance capabilities, and the overall quality of outsourced service providers.
That condition reflects one of the central realities of crypto custody. Risks do not vanish just because a specialized provider is involved. In fact, third-party dependence can add its own vulnerabilities, whether related to cybersecurity, execution errors, legal exposure, data integrity, or service continuity. The OCC’s message is therefore permissive, but not lax.
Rodney Hood’s view: digitalization is a transformation, not a trend
Rodney Hood framed the OCC’s position in broader terms by arguing that “this digitalization of financial services is not a trend. It is a transformation.” That statement is more than a sound bite. It signals that the regulator sees digital assets and financial technology as part of a structural evolution in banking rather than a short-lived market experiment.
Hood also emphasized that the shift is not only changing how people interact with money. In his view, it is transforming the financial landscape itself. That framing helps explain why the OCC’s updated rules cover multiple operational layers of crypto services — custody, customer-directed trading, recordkeeping, tax reporting, compliance, and third-party arrangements — instead of focusing on a single narrow question.
For banks, this is an invitation to think beyond isolated pilot programs. The guidance suggests that digital assets may become another category of client service that regulated institutions can support, alongside more traditional offerings. Banks could eventually help customers manage crypto portfolios in a way that resembles how they already support conventional asset administration.
At the same time, Hood’s comments do not imply a free-for-all. The transformation narrative is paired with a strong insistence that banks remain within supervisory expectations. The OCC is recognizing a changing market, but it is doing so through the lens of regulated participation rather than deregulated expansion.
Why “safe and sound” remains the non-negotiable standard
Although the guidance opens more doors for banks, the OCC repeatedly stressed that crypto activities must be conducted in a safe and sound manner and in compliance with applicable law. Hood explicitly said that while banks and their third parties may perform a range of cryptocurrency and digital-asset activities, the agency expects those activities to meet that standard at all times.
This is a crucial qualifier. The OCC is not saying that banks should chase crypto opportunities at any cost. Instead, it is making clear that the traditional principles of prudent banking still apply. If a bank wants to enter crypto custody or facilitate customer-directed trading, it must do so with strong controls, clear governance, and legal compliance built into the service model.
Crypto custody is not just about market exposure. It also involves key management, secure storage architecture, transaction processing, record retention, reporting obligations, and potential anti-money-laundering or other regulatory requirements. Each of those areas can create operational and supervisory risk if handled poorly.
That is why the OCC’s policy update is best understood as conditional permission. Banks are being given greater authority to participate, but they are also being held to a high bar. The institutions that can combine technical capability with disciplined compliance are the ones most likely to benefit from the new clarity.
What this means for banks, customers, and the regulated crypto market
From an industry perspective, the OCC’s updated guidance marks an important step in integrating digital assets into the regulated financial system. With clearer rules in place, national banks are in a better position to respond to growing demand for crypto-related services instead of remaining on the sidelines due to uncertainty.
For customers, regulated bank involvement could make crypto services feel more familiar and more accessible. Some clients may prefer to hold digital assets through institutions that already provide other financial services, especially when those institutions can also help with tax reporting, transaction records, and compliance-related administration.
For banks, the opportunity is strategic. They may be able to broaden their product offerings by adding digital-asset custody and related support services to traditional banking and wealth-management functions. If demand continues to grow, crypto services could become a meaningful extension of mainstream financial infrastructure rather than a separate niche market.
Overall, the OCC’s message is balanced but consequential. It recognizes that the crypto market has grown too large for regulated banks to ignore, while also insisting that participation must remain secure, responsible, and lawful. In that sense, Interpretive Letter 1184 does not simply permit new services — it helps define how digital assets can move deeper into the banking system without abandoning the standards of regulated finance.