01
What is Bitcoin, in one page
Bitcoin is a fixed-supply, bearer digital asset settled on a public ledger that no single institution controls. For a traditional-finance audience, the useful frame is not 'internet money', it is a monetary asset with a verifiable, credibly capped supply of 21 million, final settlement in minutes to hours, and no issuer, no balance-sheet counterparty, and no redemption claim on anyone.
Why the supply cap matters
Every other asset a bank holds, deposits, Treasuries, gold, equities, has a supply that responds to price or policy. Bitcoin's issuance schedule is enforced by the network's consensus rules and cannot be changed by any issuer or government. That scarcity is the entire investment thesis; everything else is implementation detail.
Why it is not a tech stock
There is no company, no earnings, no management team, and no cash flow to discount. Valuation frameworks built on discounted cash flow do not apply. The closer analogies are monetary commodities and network-based settlement assets, which is why boards should evaluate it in the treasury and product committees, not the technology committee.
Settlement and finality
Bitcoin transactions settle with probabilistic finality that becomes economically irreversible within roughly an hour. There are no chargebacks, no correspondent intermediaries, and no operating hours. For institutions used to T+1 or T+2 settlement windows and weekday cutoffs, this is a genuinely different settlement asset.
What it is not
Bitcoin is not 'crypto' in the generic sense, not a payments rail competing with ACH today, and not a yield instrument. Conflating it with the broader token market is the single most common analytical error we see in boardrooms, and the source of most policy mistakes in both directions.
Questions to bring to your next board or ALCO meeting
- Do we treat Bitcoin as a monetary asset in our investment policy, or is it still filed under 'emerging technology'?
- Who owns the Bitcoin conversation internally, treasury, product, or innovation, and is that the right owner?
- What would we need to believe about supply scarcity to justify even a small allocation or client product?
- Are we conflating Bitcoin with the broader token market in our risk assessments?
Bitcoin is a fixed-supply monetary asset with no counterparty. Evaluate it on those terms, not as a technology bet and not as 'crypto.'
02
Qualified custody for institutions
Custody is the decision everything else depends on. Whoever controls the private keys controls the asset, so the custody model determines your counterparty risk, your regulatory treatment, your insurance posture, and your client's legal claim. For regulated institutions, the question is not 'hot vs. cold', it is which custody structure satisfies your prudential regulator and your fiduciary duty.
Qualified custodian models
A qualified custodian, a bank, trust company, or registered broker-dealer meeting the SEC's Custody Rule or state trust frameworks, holds client assets segregated from its own balance sheet. Several OCC-chartered trust companies now offer Bitcoin custody under this umbrella, which gives advisors and funds a familiar legal wrapper: assets are bankruptcy-remote and off the custodian's balance sheet.
Sub-custody and agency models
Most banks will not build key management in-house. The common pattern is an agency or sub-custody arrangement: your institution keeps the client relationship and the regulatory interface, while a specialist custodian holds keys. The tradeoffs are fee stack, operational dependency, and how examiner questions about third-party risk management get answered.
Multi-signature and multi-institution schemes
Multi-sig distributes key control across multiple parties or geographies so no single compromise moves funds. Multi-institution custody splits key shards between independent entities. Both reduce single-point-of-failure risk but add operational complexity, and both need to be explained to examiners in terms of your existing vendor-risk and BCP frameworks.
Insurance and examination
FDIC deposit insurance does not cover Bitcoin, full stop, and client disclosures must say so. What exists instead is crime/specie insurance at the custodian level, which varies widely in scope. Expect examiners to ask about key-management controls, SOC reports, insurance limits, and your exit plan if the custodian fails.
Questions to bring to your next board or ALCO meeting
- Would we custody directly, partner under a sub-custody model, or refer clients out, and what does each do to our regulatory posture?
- Does our chosen custodian qualify under the SEC Custody Rule or a state trust charter relevant to our clients?
- How do our client disclosures state, unambiguously, that FDIC insurance does not apply?
- What is our documented exit plan if a custody partner is impaired or acquired?
Custody is a regulatory and fiduciary decision before it is a technical one. Pick the model your examiner and your counsel can both defend.
03
Regulatory landscape (OCC, SEC, Fed)
There is no single Bitcoin regulator, which is precisely why institutions stall. The honest summary: banking regulators have moved from discouragement to conditional permission, securities regulators have approved and normalized spot Bitcoin ETPs, and the remaining uncertainty is about capital treatment and supervisory expectations, not about whether regulated institutions may touch the asset at all.
OCC and the banking agencies
Interpretive letters from the OCC have affirmed that national banks may provide crypto custody and related services, and the FDIC has rescinded its prior notification requirement for crypto activities, replacing it with a supervisory-engagement approach. State-chartered institutions face a patchwork, several states have explicit frameworks, others rely on existing trust powers.
SEC and client-facing products
The approval of spot Bitcoin ETPs in 2024 gave institutions a regulated, exchange-traded wrapper, which is now the default distribution path for wealth and advisory channels. The SEC's posture on custody (the Custody Rule, SAB 121's repeal and replacement) directly shapes which custodians advisors can use.
Capital and prudential treatment
Under the Basel framework, unhedged Bitcoin exposure sits in the most conservative capital bucket, effectively dollar-for-dollar capital. That treatment shapes what is economical: client-facing custody and ETP distribution carry very different balance-sheet consequences than proprietary holdings.
BSA/AML and sanctions
FinCEN's expectations apply in full: Travel Rule compliance, sanctions screening on counterparties and, where relevant, on-chain analytics for source-of-funds. Institutions already fluent in correspondent-banking AML will find the concepts familiar; the tooling is new but the obligations are not.
Questions to bring to your next board or ALCO meeting
- Which of our regulators has spoken on the specific activity we are considering, custody, ETP distribution, or balance-sheet exposure?
- What capital treatment would apply to each activity under current Basel-aligned rules?
- Do our BSA/AML policies name digital assets explicitly, or are we relying on general language?
- Who monitors new guidance, and how does it reach the board within one meeting cycle?
The question has shifted from 'is this permitted' to 'under what conditions.' Institutions that map each activity to its specific regulator move first.
04
Client-facing product playbook
Clients are already buying Bitcoin, the only question is whether they do it through you or around you. The institutions that win this do not 'sell Bitcoin'; they offer regulated access with institutional-grade disclosures, suitability gates, and education. That framing keeps you on the right side of both compliance and client trust.
The product ladder
Most institutions climb the same ladder: first education and research, then referral or ETP distribution through existing brokerage/advisory rails, then custody-backed access, and only then direct execution. Each rung has a different licensing, disclosure, and suitability profile, skipping rungs is where programs get into trouble.
Suitability and segmentation
Apply the same discipline you would to any volatile, non-income asset: concentration limits, client-level appropriateness gates, and clear segmentation between advisory, self-directed, and institutional channels. Reg BI and fiduciary standards apply to recommendations involving crypto ETPs just as they do to any other security.
Disclosures that actually protect you
Three disclosures do most of the work: not FDIC-insured, not guaranteed by the institution, and may lose value. Beyond that, volatility, custody, and tax-treatment disclosures should be written in plain language and acknowledged, not buried in a PDF. Examiners read these documents; so do plaintiffs' attorneys.
Education without endorsement
The language pattern that works: explain mechanics and risks, never price trajectories. 'Here is how custody works' is education; 'here is why it goes up' is a recommendation. Train client-facing staff on the line between the two, and give them approved materials so they are not improvising.
Questions to bring to your next board or ALCO meeting
- Which rung of the product ladder matches our client demand and our compliance capacity today?
- Do our crypto-product disclosures state the FDIC position as clearly as our deposit disclosures do?
- What concentration limits and appropriateness gates apply before a client can transact?
- Are client-facing staff trained on the education-vs-endorsement line, with approved materials?
Offer access, not advice on price. Suitability gates, plain-language disclosures, and trained staff are the product.
05
Bitcoin vs. crypto vs. stablecoins
Boards routinely approve or reject 'crypto' as a single line item, which is like approving or rejecting 'the internet' in 1998. Bitcoin, stablecoins, and the broader token market are three different asset categories with different risk profiles, different regulators, and different institutional use cases. A shared taxonomy is the cheapest risk-management tool available.
Bitcoin: the monetary asset
Fixed supply, no issuer, no cash flow, no counterparty. The institutional questions are treasury allocation, custody, and client access. Primary regulatory touchpoints: prudential banking regulators for custody and capital, SEC for ETP distribution.
Stablecoins: the payments instrument
Fiat-referenced tokens designed to hold a peg. The institutional questions are operational: settlement, treasury operations, reserves, and redemption rights. Primary regulatory touchpoints: the GENIUS Act framework, state money-transmission law, and BSA/AML. This is a payments conversation, not an investment conversation.
The broader token market: venture risk
Thousands of tokens with issuer risk, protocol risk, and in many cases unregistered-securities risk. For most regulated institutions this category is a venture-capital or enforcement-risk conversation, not a treasury or payments one. Treating it as such keeps the other two categories clean.
Why the taxonomy protects you
When a board minutes entry says 'we evaluated crypto,' it is unfalsifiable and indefensible. When it says 'we evaluated a client-facing Bitcoin ETP distribution program under Reg BI, and separately a stablecoin settlement pilot under our payments risk framework,' every stakeholder, examiner, auditor, counsel, knows exactly what was decided and under what authority.
Questions to bring to your next board or ALCO meeting
- Does our policy language distinguish Bitcoin, stablecoins, and other tokens, or does it say 'crypto'?
- Which committee owns each category: treasury, payments, or venture?
- Do our risk assessments assign the right regulator and framework to each category?
- Would our board minutes survive an examiner reading them on this topic?
Three categories, three frameworks, three committees. The taxonomy is the risk management.
06
An institutional treasury thesis
A treasury allocation to Bitcoin is a governance exercise before it is an investment one. The institutions that do this well start from policy: what the asset is for, how much is defensible, who can change the decision, and how it will be reported. The allocation itself is the last step, not the first.
Start with the policy question
Is the objective inflation hedging, diversification, client demand signaling, or return-seeking? Each objective implies a different size, horizon, and reporting cadence. An allocation without a stated objective cannot be evaluated, which means it cannot be defended to a board, an auditor, or an examiner.
Sizing and risk budgeting
Institutional allocations that survive drawdowns are sized to be irrelevant to the franchise: typically basis points, not percent. The risk-budget question is 'what drawdown can we hold through without a forced sale or a governance crisis?', because a 50% drawdown is a scenario to plan for, not a tail event.
Governance and custody
Who can initiate, rebalance, or exit? Under what conditions? With what custody arrangement and what capital treatment? Under Basel-aligned rules, direct exposure is capital-intensive, which is why many institutions express treasury views through regulated ETPs instead, same exposure, different balance-sheet mechanics.
Disclosure and reporting
Fair-value accounting (ASU 2023-08) now applies to Bitcoin holdings, removing the old impairment-only asymmetry. Public companies disclose; private institutions report to boards and regulators. Decide the reporting cadence and the narrative before the position exists, not after the first volatile quarter.
Questions to bring to your next board or ALCO meeting
- What is the stated objective of an allocation, and how will we measure success against it?
- What size is small enough that a 50% drawdown changes nothing about our franchise?
- Direct custody or regulated ETP, and what does each do to our capital position?
- Who has authority to exit, and under what pre-agreed conditions?
Objective, sizing, governance, disclosure, in that order. The allocation is the easy part.