Build a file showing what you asked, what you investigated, what you compared, and what you told the client, dated to the day the advice was given. My view after reading many of these files: advisers document the trade and skip the reasoning, because the books and records rule enumerates transactions and leaves the reasoning to you.
Documenting a crypto recommendation: the short version
- The rule preserves the transaction and leaves the reasoning to you. 17 CFR 275.204-2 lists orders, communications, agreements and policies, and never asks why the advice fit.
- The file gets read against the duty of care: a reasonable inquiry into the client, a reasonable investigation into the investment (SEC Release IA-5248).
- One paragraph does demand written reasons, for a communication recommending a specific security to ten or more people (17 CFR 275.204-2(a)(11)).
- The file changes shape with the product. An exchange-traded product, a directly held coin, and an outside manager each produce a different record.
- Held-away and self-custodied positions belong in the file as scope, in writing, dated.
What the rule keeps, and what it leaves to you
Section 204 supplies the recordkeeping power and names the audience: an adviser’s records “are subject at any time, or from time to time, to such reasonable periodic, special, or other examinations by representatives of the Commission” (15 U.S.C. § 80b-4(a)). The paragraph of the rule reaching advice is the seventh:
“Originals of all written communications received and copies of all written communications sent by such investment adviser relating to: (i) Any recommendation made or proposed to be made and any advice given or proposed to be given …”
Around it: order and instruction memoranda at (a)(3), discretionary accounts at (a)(8), written agreements at (a)(10), brochure delivery at (a)(14), compliance policies at (a)(17), all held five years from the end of the fiscal year of the last entry, “the first two years in an appropriate office of the investment adviser” (paragraph (e)(1)).
Read that list for what it omits. A crypto recommendation can satisfy every item in paragraph (a) and leave no trace of the client conversation, the investigation, or the alternatives weighed. Emails and order memoranda prove advice happened, and say nothing about why it was defensible.
Written reasons get demanded in one situation, the one advisers walk past:
“If such notice, circular, advertisement, newspaper article, investment letter, bulletin, or other communication recommends the purchase or sale of a specific security and does not state the reasons for such recommendation, a memorandum of the investment adviser indicating the reasons therefor.”
That reaches any advertisement and anything sent to ten or more persons. A quarterly note naming a specific token, or a model change emailed across the client base, sits inside it.
The standard the file gets read against
Section 206 makes fraud by an adviser unlawful (15 U.S.C. § 80b-6), and the Commission’s 2019 interpretation of the fiduciary duty inside it supplies the test. An adviser “should, at a minimum, make a reasonable inquiry into the client’s financial situation, level of financial sophistication, investment experience, and financial goals,” and a reasonable belief that the advice is in the client’s best interest also requires “a reasonable investigation into the investment sufficient not to base its advice on materially inaccurate or incomplete information.” Monitoring then runs at a frequency in the client’s best interest, given the agreed scope (SEC Release IA-5248).
Volatility leaves that standard where it is and raises what the investigation had to cover: what the asset or product is, who sponsors it, how it gets priced for your reports, what a venue or custodian failure does to the position, and how it liquidates under stress. None of that appears on a confirmation.
Your brochure sets the bar. Item 8 of Form ADV Part 2A requires you to describe your methods of analysis and investment strategies, state that investing in securities involves risk of loss which clients should be prepared to bear, and explain the material risks of any significant strategy or any type of security you recommend primarily, in detail where those risks are significant or unusual (Form ADV Part 2). An examiner reads the brochure first and the file second, and divergence is the finding.
Where a broker-dealer sits on the other side of the household, Regulation Best Interest attaches at the recommendation: reasonable diligence, care and skill to understand risks, rewards and costs, and a reasonable basis to believe the recommendation is in that retail customer’s best interest (17 CFR 240.15l-1(a)(2)(ii)), with 17 CFR 240.17a-3(a)(35) requiring a record of the information collected from and given to that customer. Dual registrants should be able to say which capacity produced a recommendation, and so should the file.
The record changes with the product
An exchange-traded product. Shares sit in the brokerage account like any other security, so the custody rule stays put and the work moves to the wrapper: sponsor, the custodian of the underlying coin, the fee, creations and redemptions, and how the share price has tracked the asset. One structural fact belongs in the memo. These products, in the words of the SEC’s investor education staff, “are not subject to the requirements of the Investment Company Act of 1940, such as the legal requirements related to valuation and custody of fund assets” (Investor Bulletin, 9 September 2024).
Directly held coins. Now the custody rule is live. Custody under 17 CFR 275.206(4)-2 covers any capacity giving you or a supervised person “legal ownership of or access to client funds or securities”, and access to a digital asset means key material or a seat in a signing quorum. Record where the asset sits, who can move it, at what threshold, and how the firm reached its custody conclusion. That rule is the operative one: the 2023 Safeguarding proposal was withdrawn on 17 June 2025 (Withdrawal of Proposed Regulatory Actions). The custody hub handles the operational half.
An outside manager. The recommendation is the manager, so the file is a dated diligence record and a monitoring record after it: what you reviewed, what you verified independently, and every review since. Delegation moves the execution and leaves the recommendation with you (sub-advisory, model portfolios).
Held-away positions and self-custody
The duty follows the scope you agreed, which turns scope into a document rather than an understanding. Where a client holds coins on an exchange or a hardware wallet outside the engagement, the file needs three dated items: the agreement language including or excluding them, what the client says they hold and how you saw it, and what you told them. Advising on a position you cannot verify holds up if the file says you could not verify it, and fails when the file is silent and the client has spent two years assuming somebody is watching. Self-custody adds one line, stating either that the firm holds no key material and no signing seat, or exactly what it does hold.
Tax records sit in a different file and get read alongside yours (IRS, Digital assets), so name where they live and who maintains them: record defects surface at the worst moment.
What I actually see with documenting a crypto recommendation
The first pattern is a file documenting the trade and skipping the decision: order memoranda, confirmations, a signed agreement, a risk questionnaire from onboarding, and nothing written on the day the advice was given. That is a complete brokerage file inside a business that gives advice.
The second is the one-to-many note nobody filed. A quarterly commentary naming a specific asset goes to the whole client base, the reasons stay in the writer’s head, and paragraph (a)(11)(i)(C) has been running the entire time. It is the most common recordkeeping miss I see on the adviser side, because the piece felt like marketing while it was written.
The third is the scope gap that behavior outgrew: the agreement excludes digital assets, the review meetings cover them quarterly, and the file records neither the exclusion being explained nor the advice being given.
The check I would run this week takes an hour. Hand your three most recent crypto recommendation files, and nothing else, to a colleague who was not in the room, and ask four questions answerable from paper alone: the client’s objectives on that date, what the firm investigated, which alternatives were set aside, and what the client was told about risk. Every question the paper cannot answer is a memo you owe.
Where documenting a crypto recommendation goes wrong
The file gets built for the transaction and read for the advice.
Specific failures: a memo written after a complaint and dated honestly to the day it was written, which is what makes it useless. A client profile captured at onboarding and never revisited while the position grew into the largest thing the household owns. A checkbox marked “aggressive” standing in for the inquiry the duty of care describes. A brochure saying the firm does not advise on digital assets, sitting above a file showing that it does. Custody acquired when somebody accepted a signing key during a busy week, recorded nowhere. And the costliest: an outside-manager diligence pack dated at hire, produced four years later as evidence of ongoing monitoring.
The decision rule for documenting a crypto recommendation
- Date the record to the advice rather than the execution, and write it the same day.
- Capture the inquiry first: financial situation, sophistication, experience, goals, constraints, and what the client already holds.
- Write the reasonable-basis memo yourself, because paragraph (a) never asks for one and everyone afterward assumes it exists.
- Name the alternatives you set aside, including the wrapper you passed over.
- Settle custody in writing before funding: where the asset sits, who can move it, at what threshold.
- Substantiate every material statement you pass along, or strike it.
- Reconcile the file against Item 8 of your brochure, then amend whichever is wrong.
- Set a review date, keep the review, and log held-away positions as scope.
Where documenting a crypto recommendation fits
Documentation is how every other adviser obligation becomes provable. Qualified custody determines what the file says about location and access, the compliance checklist is the policy layer this record has to match, and the due diligence checklist supplies the investigation the memo cites. Where the work belongs elsewhere, referring the client on is a recommendation documented like any other.
The pieces of this record are made by people who never read each other’s work: counsel drafts the advisory agreement, an operations team signs the custody agreement, a CPA rebuilds basis after the year closes, and the wallet arrangement is known to the client alone. Each seam surfaces in the file as a contradiction, a valuation the accountant would reject or a held-away position appearing in the review deck and nowhere in the scope. Putting all four in front of one reader once a year is cheap, and it starts with whoever keeps the file.
Sources
- 17 CFR 275.204-2, Books and records to be maintained by investment advisers (Cornell Legal Information Institute)
- 15 U.S.C. § 80b-4, Reports by investment advisers (Cornell Legal Information Institute)
- SEC Release No. IA-5248, Commission Interpretation Regarding Standard of Conduct for Investment Advisers (GovInfo, Federal Register, 12 July 2019)
- 17 CFR 240.15l-1, Regulation Best Interest (Cornell Legal Information Institute)
- 17 CFR 240.17a-3, Records to be made by certain exchange members, brokers and dealers (Cornell Legal Information Institute)
- 17 CFR 275.206(4)-2, Custody of funds or securities of clients by investment advisers (Cornell Legal Information Institute)
- SEC Office of Investor Education and Advocacy, Exchange-Traded Products (ETPs) Providing Exposure to Bitcoin and Ether (9 September 2024)
Related
- Qualified custody for RIAs managing digital assets
- Crypto compliance checklist for RIAs
- Crypto due diligence checklist for RIAs
- Crypto held away from advisor: what should RIAs do?
- Can RIAs advise on self-custodied crypto?
- Crypto for advisers and RIAs
Last updated: 3 August 2026.
This article is general education, not legal, tax, or investment advice, and nothing here recommends any asset, product, allocation, or transaction. Documentation practices can reduce certain regulatory and evidentiary risks but do not eliminate them, and your obligations depend on your registration, your engagement documents, and your own facts. Talk to a qualified securities attorney and compliance professional about your own situation.
