Custody Risk: When the Custodian Fails or Errs

Key Takeaways

• Custody risk is operationally distinct from market risk: a portfolio of US Treasuries held at a failed custodian is still worth par, but may be inaccessible for months.
• Cash held at a custodian is an unsecured deposit liability, not client property, a large uninvested balance creates credit exposure most investors overlook.
• A common mistake is confusing a prime brokerage account with a custody account; prime accounts typically include rehypothecation rights that create much weaker recovery claims in a default.
• The 2008 Lehman Brothers International Europe collapse showed that even large, well-known custodians can trap client assets for years, changing how institutional allocators conduct custody due diligence.

What It Is

Custody risk covers the full set of exposures a client faces when a third party holds its assets. The OCC's Comptroller's Handbook on Custody Services groups these into safekeeping, settlement, corporate actions, income collection, reporting, and regulatory risk. The FDIC's Risk Management Manual of Examination Policies addresses custody controls under internal routine and controls, with particular attention to joint custody, segregation of duties, and reconciliations.

The risk is distinct from the market risk of the assets themselves. A portfolio of US Treasuries held at a failed custodian is still a set of Treasuries, but the client may be unable to access, transfer, or sell them for weeks or months. That operational and legal exposure is custody risk.

The Intuition

Modern portfolios depend on a long chain of intermediaries: the global custodian, one or more sub-custodians in each local market, a central securities depository (CSD), a paying agent, and the transfer agent. Each link can break. A sub-custodian can fail, a CSD can have a technology outage, a corporate action can be mishandled, or a cross-border settlement can fail on one side.

The 2008 collapse of Lehman Brothers International Europe showed how severe custody risk can be at an unsegregated or rehypothecated account. Client assets held in commingled form at LBIE were tied up in administration for years. Since then, institutional allocators have treated custody as a due diligence topic rather than a procurement one.

How It Works

Custody risk breaks into a handful of concrete exposures.

• Safekeeping risk. The risk that assets go missing through fraud, operational error, or unauthorized movement. Controls include dual authorization, segregated accounts, daily reconciliation between custodian records and CSD records, and independent audits (SSAE 18, ISAE 3402).
• Settlement risk. The risk that securities are delivered without payment being received, or payment is made without securities arriving. Delivery versus payment (DVP) eliminates principal risk in well-functioning markets. In frontier markets that do not settle DVP, the custodian may take credit risk on behalf of the client.
• Contractual settlement risk. Some custodians credit client accounts on contractual settlement date even if the underlying settlement has not yet occurred. This is a convenience for the client but creates credit exposure to the custodian.
• Sub-custodian credit risk. Sub-custodians hold assets in local markets. If a sub-custodian fails, the global custodian must pursue recovery under local insolvency law.
• Cash risk. Cash held at the custodian is typically an unsecured deposit liability of the custodian bank. In a resolution scenario, client cash can be bailed in or suffer haircuts unlike held-in-custody securities, which are client property.
• Corporate action and income risk. Missed coupons, unclaimed tenders, or mispriced rights issues can leak value even without any failure event.
• Legal and jurisdictional risk. Title rules for securities vary. Book-entry systems, nominee arrangements, and beneficial ownership treatment differ across jurisdictions.

Contractual protections include segregation, restricted or prohibited rehypothecation, indemnities for custodian negligence, and a clear legal opinion on client asset status under insolvency law.

Worked Example

A US public pension holds 5 billion in global equities across 30 countries through a single global custodian. The custodian uses local sub-custodians in each market.

• Developed markets (US, UK, Japan, Germany, Canada): DVP settlement, central depositories with strong legal regimes, high-grade sub-custodians. Residual custody risk is mostly operational.
• Select emerging markets (Brazil, India, South Korea, China A-shares): DVP in most, but additional layers (QFI quotas, foreign-investor accounts, Stock Connect nominees). Operational and legal risk rises.
• Frontier markets (a few African and Middle Eastern names): non-DVP in some cases. The custodian may advance cash or securities on a free-of-payment basis to meet local conventions, creating explicit counterparty exposure.

The pension's custody due diligence covers sub-custodian creditworthiness in each market, local insolvency law, segregation status, rehypothecation rights (usually none on traditional custody, unlike prime brokerage), and the custodian's SSAE 18 report. A 2 percent capital call that cannot settle because of a sub-custodian outage is a real operational tail risk, not a theoretical one.

Common Mistakes

1. Confusing prime brokerage with custody. Prime brokerage accounts typically include rehypothecation rights and unsecured claim status. Traditional custody accounts hold assets as client property. Treating a prime account as custody can produce nasty surprises in a default.

2. Ignoring cash treatment. Uninvested cash at the custodian is a deposit liability. A large balance at a single custodian bank creates credit exposure that many allocators overlook until stress.

3. Trusting the SSAE 18 report without reading it. The report is scoped by the custodian. Carve-outs and user control considerations matter. A clean opinion on an irrelevant scope is not comfort.

4. Underweighting sub-custodian risk. The global custodian is often a large, well-rated bank. Sub-custodians can be smaller, local, and less scrutinized. A failure at that level still hits the client.

5. Assuming segregation solves everything. Segregation protects title but does not eliminate operational delays. In a custodian failure, even fully segregated assets can be immobilized for months while administrators work through the book.

Frequently Asked Questions

Q: What is custody risk in simple terms? It is the risk that assets held at a third-party custodian become inaccessible, lost, or delayed due to the custodian's failure, operational error, settlement breakdown, or fraud. Even if the underlying securities are sound, the investor may be unable to sell or transfer them during a custody event.

Q: How does custody risk affect investment decisions? It influences which custodian a fund selects, how much uninvested cash is left on deposit, whether accounts are segregated or omnibus, and whether rehypothecation rights are granted. For frontier market investments, custody risk can be the dominant risk in a position, not price volatility.

Q: What is a real-world example of custody risk? The 2008 collapse of Lehman Brothers International Europe trapped client assets in insolvency proceedings for years. Assets held in commingled accounts were treated differently from those in segregated custody, and recovery rates and timelines varied dramatically based on the account structure the client had agreed to.

Q: How can investors reduce custody risk? Request segregated accounts rather than omnibus. Restrict or prohibit rehypothecation. Obtain the custodian's SSAE 18 report and read the scope carefully. For frontier markets, ask the global custodian for the specific sub-custodians used and their credit ratings. Keep uninvested cash minimized or swept daily to reduce unsecured deposit exposure.

Q: How is custody risk different from counterparty risk on a trade? Counterparty risk on a trade is the risk that the party on the other side of a transaction fails to deliver. Custody risk is the risk that the institution holding your assets after settlement fails to safeguard or return them. Both involve a third party default, but custody risk arises after the trade has settled and covers assets already in possession.

Sources

1. FDIC. "Risk Management Manual of Examination Policies." https://www.fdic.gov/risk-management-manual-examination-policies
2. FDIC. Risk Management Manual of Examination Policies (complete PDF). https://www.fdic.gov/resources/supervision-and-examinations/examination-policies-manual/risk-management-manual-complete.pdf
3. Office of the Comptroller of the Currency. "Comptroller's Handbook: Custody Services." https://www.occ.gov/publications-and-resources/publications/comptrollers-handbook/files/custody-services/pub-ch-custody-services.pdf
4. International Securities Services Association (ISSA). "Inherent Risks within the Global Custody Chain." https://issanet.org/content/uploads/2013/04/ISSA_Report_Inherent_Risk_February_2017.pdf

Disclaimer

This article is educational content only and is not financial advice. Nothing here is a recommendation to buy, sell, or hold any security. Consult a licensed advisor before making investment decisions.