SEC-registered broker-dealers serve as the essential intermediaries in the security token ecosystem — facilitating token offerings under Reg D and Reg A+, operating ATS platforms for secondary trading, providing custody through qualified custodian or special purpose frameworks, and executing trades on behalf of institutional and retail clients. As of Q1 2026, approximately 85 FINRA-member broker-dealers have disclosed digital asset securities activities, up from 52 in 2024, with FINRA’s ATS equity firms list showing approximately two dozen firms with approved digital asset business lines and roughly two dozen more applications pending. The SEC’s Crypto Task Force issued 2025 guidance clarifying that broker-dealers may hold crypto and tokenized assets subject to prescribed requirements, reducing one of the key regulatory uncertainties that had constrained broker-dealer participation in tokenized securities. The broker-dealer function is mandatory for virtually every stage of a security token’s lifecycle: from initial distribution under offering exemptions through secondary market trading, Rule 144 resale facilitation, and ongoing market-making activities. Without a registered broker-dealer intermediary, security token transactions cannot legally occur in the United States, making broker-dealer registration a prerequisite for any tokenized securities platform.
Registration Requirements
SEC Registration
Broker-dealer registration with the SEC requires filing Form BD (Uniform Application for Broker-Dealer Registration) and satisfying the Commission’s financial responsibility, organizational, and operational requirements. The registration process typically takes 4-8 months and involves:
- Form BD filing through the Central Registration Depository (CRD) system.
- FINRA membership application and review.
- State registrations in each state where the broker-dealer will conduct business.
- Net capital compliance — meeting minimum net capital requirements before commencing operations.
- Supervisory system establishment — documented compliance and supervisory procedures.
FINRA Membership
All SEC-registered broker-dealers must become members of FINRA, the self-regulatory organization responsible for examining and supervising broker-dealer conduct. FINRA’s membership application process includes a detailed review of the firm’s business model, supervisory procedures, compliance infrastructure, and personnel qualifications.
For broker-dealers focused on digital asset securities, FINRA has established a dedicated review team that evaluates the firm’s understanding of blockchain technology, custody arrangements, and the specific risks associated with tokenized securities.
Net Capital Requirements
The SEC’s net capital rule (Rule 15c3-1) requires broker-dealers to maintain minimum levels of liquid capital. The applicable minimum depends on the firm’s activities:
- $5,000 for broker-dealers that do not hold customer funds or securities.
- $250,000 for broker-dealers that hold customer funds or securities (the “alternative standard”).
- $500,000 for broker-dealers operating an ATS.
For security token broker-dealers, the treatment of digital assets as “allowable” or “non-allowable” for net capital purposes creates additional complexity. The SEC’s 2021 Statement on special purpose broker-dealers established a framework for computing net capital when the firm holds digital asset securities in custody, though the SAB 121 accounting treatment adds balance sheet considerations.
Customer Protection Rule
Rule 15c3-3 (the Customer Protection Rule) requires broker-dealers holding customer securities to maintain a reserve of funds equal to the net amount owed to customers and to segregate fully paid customer securities from the firm’s proprietary holdings.
For security tokens, customer protection compliance requires:
Segregation. Customer token holdings must be maintained in wallets separate from the firm’s proprietary wallets, with clear on-chain attribution of ownership.
Possession or control. The broker-dealer must maintain “possession or control” of customer tokens — a requirement that intersects with the choice of custody framework and the technical architecture of the firm’s token management systems.
Reserve computation. The firm must perform a weekly reserve computation to ensure adequate funding for customer token obligations. The volatility of digital asset prices makes this computation particularly dynamic for firms holding crypto-denominated customer assets.
Books and Records
Rules 17a-3 and 17a-4 require broker-dealers to create and maintain extensive records of their business activities. For security token operations, these records include:
- Trade blotters recording every token transaction.
- Customer account records including KYC, accredited investor verification, and suitability assessments.
- Communication records including emails, chat logs, and recorded phone calls.
- Blockchain transaction records providing on-chain audit trails.
The dual-record nature of tokenized securities — with both blockchain records and traditional books and records — creates reconciliation obligations that broker-dealers must address through integrated compliance systems.
Special Purpose Broker-Dealer Framework
The SEC’s 2021 Statement on special purpose broker-dealers created a conditional framework for broker-dealers that limit their activities to digital asset securities. These firms benefit from modified custody and net capital treatment but must limit their operations to digital asset securities and comply with additional conditions during a five-year evaluation period.
For firms considering broker-dealer registration for security token activities, the choice between traditional and special purpose registration involves tradeoffs between operational flexibility and regulatory certainty. Our entity profiles of tZERO, Securitize, and Prometheum illustrate different approaches to broker-dealer compliance in the security token ecosystem.
Supervisory and Compliance Systems
FINRA Rule 3110 requires broker-dealers to establish and maintain a system of supervisory procedures reasonably designed to ensure compliance with applicable securities laws and FINRA rules. For security token operations, written supervisory procedures (WSPs) must address areas unique to digital assets:
Digital asset-specific training. All registered representatives and compliance personnel must complete training covering blockchain technology, smart contract functionality, custody key management, and the specific risks associated with tokenized securities. FINRA expects firms to document this training and update it as the technology and regulatory landscape evolve.
Smart contract due diligence. Before listing or facilitating trades in any security token, the broker-dealer must evaluate the token’s smart contract architecture — verifying that transfer restrictions are properly coded, that Rule 144 holding periods are enforced at the contract level, and that the transfer agent maintains override capabilities for regulatory actions.
Cybersecurity procedures. Broker-dealers must implement cybersecurity controls specific to their digital asset activities: multi-factor authentication for all systems with access to token wallets, penetration testing at least annually, incident response plans for blockchain-specific threats (51% attacks, smart contract exploits, phishing attacks targeting private key holders), and business continuity plans addressing blockchain network disruptions.
Transaction surveillance. FINRA rules require broker-dealers to monitor for suspicious trading activity. For security tokens, surveillance must cover both on-platform activity (trades executed on the firm’s ATS) and on-chain activity (token transfers between wallets). Integration with blockchain analytics tools (Chainalysis, Elliptic) is increasingly expected by FINRA examiners.
Suitability and Regulation Best Interest
Broker-dealers recommending security tokens to retail customers must comply with the SEC’s Regulation Best Interest (Reg BI), which requires that recommendations be in the customer’s best interest and not place the firm’s interest ahead of the customer’s.
For security token recommendations, Reg BI analysis must consider:
- Liquidity risk. Security tokens have significantly lower secondary market liquidity than traditional securities. Average daily volume per token is $42K, and market-making participation is limited. Customers must be able to tolerate potential difficulty exiting positions.
- Technology risk. Smart contract vulnerabilities, blockchain network disruptions, and key management risks are unique to digital securities. The customer’s understanding of these risks must be evaluated.
- Accreditation requirements. For Reg D tokens, the broker-dealer must verify that customers meet accredited investor standards through approved verification methods.
- Holding period restrictions. Reg D tokens are restricted securities subject to Rule 144 holding periods. Customers must understand that tokens may be untradable for 6-12 months regardless of price movements.
Anti-Money Laundering Obligations
The Bank Secrecy Act and FINRA Rule 3310 require all broker-dealers to implement AML compliance programs. For security token operations, AML programs must address:
Blockchain-specific monitoring. The pseudonymous nature of blockchain addresses creates AML challenges that traditional securities do not present. Broker-dealers must maintain complete mappings between customer identities, KYC records, and blockchain wallet addresses. Any token transfers to unverified addresses must be flagged for investigation.
Sanctions compliance. OFAC sanctions screening must include blockchain addresses associated with sanctioned parties. Blockchain analytics tools can cross-reference wallet addresses against sanctions lists in real time, integrating with the smart contract’s transfer validation to prevent sanctioned transfers.
SAR filing. Suspicious activity reports must be filed for security token transactions that exhibit red flags: rapid accumulation of tokens by unknown wallets, transfers to high-risk jurisdictions, patterns suggesting wash trading or market manipulation, and unusual correlations between on-chain and off-chain activity.
Broker-Dealer Models in the Security Token Market
Three distinct broker-dealer models have emerged in the security token ecosystem:
Full-service digital asset broker-dealer. Firms like tZERO operate as full-service broker-dealers providing ATS operation, custody (through third-party arrangements), and execution services. These firms serve both issuers (facilitating primary offerings) and investors (providing secondary market access).
Integrated platform broker-dealer. Securitize operates as a broker-dealer integrated with transfer agent and technology platform services, creating a vertically integrated model where issuance, compliance, custody, and trading are provided through a single ecosystem.
Special purpose digital asset broker-dealer. Prometheum operates under the SPBD framework through its Prometheum Capital subsidiary (approved 2024 as the first SEC-registered SPBD and Qualified Custodian), with additional subsidiaries including Prometheum Ember ATS, Prometheum Coinery LLC (digital transfer agent, registered May 2025), and ProFinancial Inc. (capital formation), limiting its activities exclusively to digital asset securities but benefiting from modified custody and net capital treatment designed specifically for blockchain-based assets.
Placement agent broker-dealer. Republic and similar firms operate as placement agents for primary offerings — facilitating Reg A+ and Reg D token offerings without necessarily operating their own ATS. These firms handle investor onboarding, subscription processing, and compliance verification.
FINRA Examination Priorities for Digital Asset Broker-Dealers
FINRA’s annual examination priorities have included digital asset activities since 2019. Key examination focus areas include:
- Adequacy of supervisory systems for digital asset activities.
- Customer suitability assessments for security token recommendations.
- AML program effectiveness for blockchain-based transactions.
- Form ATS-N disclosure accuracy and amendment timeliness.
- Cybersecurity controls for custody and key management systems.
- Communications with the public regarding digital asset securities, including social media and website content.
- Best execution documentation for security token customer orders.
Broker-Dealer Technology Infrastructure Requirements
Digital asset broker-dealers face technology infrastructure requirements beyond those applicable to traditional firms:
Blockchain node operation. Broker-dealers that settle trades on-chain must maintain blockchain node infrastructure (or reliable access through third-party node providers) to monitor transaction confirmations, verify settlement finality, and maintain connectivity to the security token networks they support.
Smart contract integration. Order management systems must integrate with token smart contracts to check transfer eligibility before executing trades. A buy order for a Reg D 506(c) token must verify the buyer’s accredited investor status through the token’s compliance module before submission.
Key management systems. Broker-dealers custodying security tokens (whether through the traditional or SPBD framework) must implement enterprise-grade key management systems including hardware security modules, multi-party computation protocols, and geographic key distribution. These systems must comply with FINRA’s cybersecurity standards and be subject to annual independent examination.
Interoperability support. As security tokens increasingly deploy on multiple blockchain networks (Ethereum, Polygon, Avalanche, Stellar), broker-dealers must support cross-chain operations including multi-chain wallet management, cross-chain compliance verification, and network-specific gas fee management.
Disaster recovery. FINRA Rule 4370 requires broker-dealers to maintain business continuity plans. For digital asset broker-dealers, these plans must address blockchain network outages, key compromise scenarios, and smart contract vulnerability events — risks that traditional business continuity plans do not contemplate.
Regulatory reporting automation. Broker-dealers must report transactions to FINRA and maintain customer records under SEC Rule 17a-3. For security token transactions, this requires translating on-chain transaction data (block number, transaction hash, gas costs) into the standardized reporting formats that FINRA’s trade reporting facilities expect. Several broker-dealers have built automated pipelines that extract blockchain data and generate compliant transaction reports, reducing the manual reconciliation burden that characterized early digital asset broker-dealer operations. Firms like tZERO and Securitize have developed proprietary reporting integrations that serve as models for the industry.
The broker-dealer framework intersects with every other aspect of market structure regulation — ATS registration, transfer agent coordination, clearing and settlement, and investor protection under Reg BI. For a comprehensive compliance planning framework, see our offering timeline checklist. For the ATS platform comparison analyzing broker-dealer models, see our comparisons section. For enforcement actions involving broker-dealer violations, see our tracker. For the Howey test analysis that determines broker-dealer obligations for specific tokens, see our framework guide. For FINRA’s official broker-dealer guidance, see FINRA Broker-Dealer Registration. For the SEC’s broker-dealer framework, see SEC Guide to Broker-Dealer Registration.