Bank Brand Is Not Enough: Due Diligence for Institutional Crypto Trading Desks

A familiar banking name can create a powerful sense of institutional comfort. But when an institution evaluates a crypto trading desk, the bank’s reputation is only one part of the diligence process.

The more useful question is not simply whether a bank is regulated. It is what entity provides the service, what activity it performs, where assets and cash are held, how trades settle, which third parties are involved, and what happens if a transaction fails.

That distinction matters because bank involvement does not make every crypto activity identical. In May 2025, the Office of the Comptroller of the Currency clarified that national banks and federal savings associations may provide certain crypto-asset custody and execution services, including buying and selling assets held in custody at a customer’s direction. The OCC also emphasized appropriate third-party risk management.

For institutions conducting investing in cryptocurrencies at meaningful scale, the bank’s name should therefore be the starting point for diligence, not the conclusion.

Start With the Exact Legal Entity

The first step is identifying the exact legal entity providing the service. A financial group may contain multiple subsidiaries, branches, technology companies, custodians, and service providers. The institution interacting with the trading desk may not be the same entity that ultimately holds an asset, executes a transaction, or processes settlement.

The diligence file should record the legal name, jurisdiction, applicable banking status, contractual counterparty, and precise services being provided. It should also establish whether another entity is being used for custody, settlement, technology, or liquidity.

This distinction becomes particularly important when assessing digital asset investment solutions. A description such as “institutional crypto trading” can cover several different operational arrangements, each creating a different set of dependencies and risks.

Separate Execution From Custody

Trading and custody are related, but they are not the same function.

An institution should establish whether the trading desk merely executes transactions at the customer’s direction or whether it also controls assets or cash. If custody is involved, diligence should examine account structure, authorization procedures, withdrawal controls, asset segregation, recordkeeping, and the use of sub-custodians.

The federal banking agencies issued a joint statement in July 2025 specifically addressing crypto-asset safekeeping. The agencies highlighted risks involving third-party service providers and emphasized that banks providing crypto-asset safekeeping should consider the risks associated with those arrangements.

For institutions evaluating security in digital asset management, this means asking who can move an asset, under what conditions, and how those actions are independently recorded.

Image filename: crypto-custody-security
Alt-text: Bitcoin coin with combination padlocks on a wooden surface, symbolizing cryptocurrency security and encryption.
Image Caption: Crypto custody diligence should examine authorization, asset segregation, withdrawal controls, recordkeeping, and third-party dependencies.

Examine Settlement as Its Own Risk

A trade is not complete simply because an execution confirmation appears on a screen.

Diligence should map the entire transaction lifecycle. That includes order submission, execution, confirmation, settlement, reconciliation, and final asset or cash movement. Institutions should determine when ownership or control changes and what happens if one side of the transaction is delayed.

The OCC’s 2025 guidance illustrates why this distinction matters. Its discussion of bank-permitted crypto-asset activities recognizes execution, custody, and related third-party arrangements as connected operational processes rather than isolated functions.

A useful diligence exercise is to document a hypothetical failed transaction from beginning to end. Who notices the failure? Who has authority to resolve it? Which entity carries the exposure while the transaction remains unsettled?

These questions are central to risk management in crypto investments, particularly where multiple service providers participate in a single transaction.

Review Counterparty Exposure, Not Just Brand Recognition

A major institution can still have exposure to other counterparties. The relevant question is how that exposure is structured.

For example, an institution may interact with a bank while the bank relies on a sub-custodian, technology provider, liquidity venue, or other service provider. Each additional dependency can introduce another operational or credit exposure.

The Basel Committee’s cryptoasset framework, effective from January 2026, explicitly includes counterparty credit risk, market risk, operational risk, and liquidity risk in its prudential treatment of bank cryptoasset exposures.

This is why hedge fund risk management concepts such as exposure mapping, concentration analysis, liquidity assessment, and scenario testing can be useful analytical frameworks, even when the institution is evaluating a bank trading desk rather than a fund.

Test Operational Resilience

Institutional trading depends on more than market connectivity. A desk must continue functioning through outages, unusual transaction volumes, cybersecurity incidents, system failures, and periods of market stress.

Diligence should therefore cover business continuity, disaster recovery, system redundancy, incident response, access controls, transaction monitoring, and reconciliation procedures.

The question is not whether a provider says it has resilient systems. The useful question is what happens when those systems are unavailable.

Institutions evaluating digital asset management services should request enough operational information to understand critical dependencies without assuming that the presence of a large bank eliminates technology risk.

Image filename: crypto-operational-resilience
Alt-text: Digital asset operations team monitoring transaction systems and cybersecurity alerts across multiple screens
Image Caption: Operational resilience is a core consideration when institutions evaluate digital asset trading and management infrastructure.

Understand the Asset Universe

A trading desk should clearly define which crypto-assets and transaction types it supports.

The distinction between altcoins vs. major cryptocurrencies can matter operationally because different assets may have different liquidity profiles, market structures, custody arrangements, blockchain characteristics, and settlement considerations.

Diligence should therefore avoid treating “crypto” as one uniform market. Institutions should identify the specific assets available through the desk and understand the operational requirements attached to each.

This becomes especially relevant when developing cryptocurrency investment strategies, because asset selection can interact with liquidity, execution, custody, and settlement considerations.

Ask How Liquidity Is Actually Accessed

Liquidity deserves its own section in any institutional diligence file.

A desk may describe itself as having deep market access, but an institution should establish how orders are actually sourced and executed. Questions can include which venues are used, how fragmented liquidity is handled, what happens during periods of reduced market depth, and whether execution depends on third parties.

The objective is not to assume that one arrangement is superior to another. It is to understand the mechanics well enough to identify where execution could become constrained.

This is particularly relevant when navigating the digital asset market, where market structure can vary considerably between assets and venues.

Verify the Bank’s Current Regulatory Position

Banking status should be verified through the relevant regulator and current documentation rather than inferred from branding.

This point is especially important because the regulatory treatment of bank crypto activities has evolved. In April 2025, the Federal Reserve announced the withdrawal of several earlier crypto-specific supervisory documents and said banks’ crypto activities would instead be monitored through the normal supervisory process.

The FDIC likewise clarified in March 2025 that FDIC-supervised institutions may engage in permissible crypto-related activities without prior FDIC approval, while still being expected to manage associated risks.

Therefore, diligence should focus on the current legal and regulatory basis for the specific service being evaluated rather than relying on broad statements about a bank’s reputation.

Image filename: bank-regulatory-due-diligence
Alt-text: Institutional analyst reviewing banking documentation and regulatory records alongside cryptocurrency market information
Image Caption: Regulatory diligence should verify the specific bank entity, service, and legal framework supporting institutional crypto activity.

Explore Further Digital Asset Research

Institutions and businesses seeking educational resources on digital asset markets can explore Kenson Investments’ knowledge center for general market information and digital asset topics. Readers can also review its digital asset investment materials for additional educational information.

For organizations seeking more information directly from Kenson Investments, contact their team and begin that conversation.

About the Author

Michael Rowan is an independent financial markets writer specializing in digital assets, institutional market structure, trading operations, custody infrastructure, and financial technology. His work focuses on explaining complex market mechanics through documented sources, regulatory publications, and publicly available institutional disclosures. He does not provide individualized financial recommendations.

Disclaimer: The information provided on this page is for educational and informational purposes only and should not be construed as financial advice. Crypto currency assets involve inherent risks, and past performance is not indicative of future results. Always conduct thorough research and consult with a qualified financial advisor before making investment decisions.

“The crypto currency and digital asset space is an emerging asset class that has not yet been regulated by the SEC and US Federal Government. None of the information provided by Kenson LLC should be considered as financial investment advice. Please consult your Registered Financial Advisor for guidance. Kenson LLC does not offer any products regulated by the SEC, including equities, registered securities, ETFs, stocks, bonds, or equivalent.”