Law Firms Holding Crypto for Clients: The Rules That Apply
Client money obligations do not change because the asset is crypto. What structure satisfies them and what will not.
What this covers
For a law firm, the question is not whether crypto can be handled. It is whether the arrangement satisfies the rules about client money and the body that supervises the firm. Have a look at a licensed crypto payment processor alongside this, because seeing the actual numbers helps more than any explanation.
The obligations, unchanged
Client money must be kept apart from the firm’s own. It must be identifiable as belonging to a particular client. It must be available to that client when they ask. And it must be reconciled regularly against records someone can inspect.
All four are achievable with crypto. None happens by accident.
The arrangement that works
Client assets held with a regulated custodian, in an account structure that identifies the client, with the firm able to give instructions but not owning the assets.
That mirrors how a client account at a bank works: the custodian holds, the firm instructs, the client owns. The paperwork has to say so explicitly.
The arrangement that does not
The firm keeping keys in a wallet it controls, with a spreadsheet showing which client owns what.
The problem is not the records. It is that the firm has complete control over client assets, which is exactly what the rules exist to prevent. And a compromised key becomes a breach of client money obligations rather than an IT incident.
Some firms do this. It is hard to defend.
Source of funds is the harder half
A client paying in crypto creates an obligation to understand where it came from, to a standard that satisfies anti money laundering supervision. Property purchases raise this more sharply, and a provider handling crypto settlement for property transactions is set up for it.
That is genuinely harder than for a bank transfer, because the equivalent of a statement is a chain of transactions needing interpretation.
What works: analytics on the source address, documentary evidence from the client of how they acquired it, and where it came from an exchange, a statement showing the client’s ownership.
What does not work: accepting the funds and forming a view afterwards.
A simple rule that removes most of the difficulty
Accept crypto only from a regulated venue in the client’s own name, not from a private wallet where provenance is harder to establish.
That single rule eliminates most of the problem.
Converting
Convert to ordinary money on receipt unless the engagement specifically requires holding crypto. Holding introduces valuation and market risk into a client account, which is a separate problem nobody asked for.
Escrow
A real use case, particularly across borders. The requirement is that the release condition is unambiguous and the mechanism does not depend on the firm’s judgement at the moment of release.
Arrangements where the firm holds one key of three, with the parties holding the others, work. So does a regulated custodian releasing on a documented condition.
Before the first engagement
Ask your professional body directly: is holding client crypto with a regulated custodian acceptable, what reconciliation do you expect, and is there a preferred structure.
Most supervisors have a view. Getting it in writing before relying on your own reading is the difference between a compliant arrangement and a disciplinary matter. For buying and selling specifically, a crypto exchange with published fees publishes its fees and its account terms in full.