Account Segregation
The requirement that broker-dealers keep client funds and securities strictly separate from firm assets under Rule 15c3-3 — enforced through the reserve formula, the Special Reserve Bank Account, and good control location requirements.
Definition
What is account segregation in securities?
Account segregation in securities is the foundational client protection mechanism of the US broker-dealer regulatory framework — the structural requirement that client funds and securities be kept legally and operationally distinct from the firm's own proprietary assets at all times. The requirement originates from the Securities Exchange Act and is primarily enforced through SEC Rule 15c3-3, the Customer Protection Rule, which imposes specific possession, control, and reserve funding obligations on carrying broker-dealers. Segregation is not a disclosure requirement or a contractual protection — it is a structural mandate that determines how assets are held, titled, and accounted for from the moment they arrive at the firm.
The history of account segregation explains its urgency. During the paperwork crisis of the late 1960s, broker-dealer failures — driven by failed record-keeping, securities not in actual possession, and widespread reconciliation breakdowns — left clients unable to recover their securities because firms' records and custody controls could not show that the securities existed or were properly held. The Securities Exchange Act amendments of the early 1970s and the adoption of Rule 15c3-3 in 1972 were a direct legislative response: segregation became a legal requirement, not just a best practice. Today, SIPC — the Securities Investor Protection Corporation — provides a backstop for customers of failed broker-dealers, but it is account segregation under Rule 15c3-3 that determines which assets are available for return through the SIPA customer property pool in the first place. Customer property still passes through SIPC liquidation proceedings, but it does so separately from the general bankruptcy estate rather than as an unsecured creditor claim.
The anti-commingling principle
The core prohibition underlying account segregation is the ban on commingling: the firm cannot use client assets — client cash, client securities, client digital assets — for its own business purposes. Commingling occurs when client funds are deposited in firm operating accounts, when client securities are pledged as collateral for firm borrowings without proper authorization, or when client digital assets are transferred to addresses controlled by the firm for firm liquidity. Commingling converts client assets into firm assets from a legal standpoint — and when the firm fails, commingled assets are reachable by the firm's general creditors rather than being returned through the SIPA customer property pool.
FTX illustrates the consequences of operating without segregation protections comparable to those required of regulated US broker-dealers: client assets were moved from customer accounts to fund firm operations rather than held in a segregated structure. FTX was not a registered broker-dealer subject to Rule 15c3-3, but the collapse demonstrates precisely what the rule exists to prevent — client assets treated as firm capital, irrecoverable through a simple return process when the firm failed.
Regulatory enforcement treats commingling as among the most serious violations in the securities industry. The SEC and FINRA do not distinguish sharply between intentional misappropriation and negligent record-keeping failures that produce the same structural result: both leave clients exposed to losses that segregation was designed to prevent.
Omnibus vs. fully segregated account structures
Broker-dealers and custodians use two primary structural models to maintain client asset segregation.
In the omnibus account model, the broker-dealer holds a single account at the central securities depository — typically a DTC participant account — in which all client securities are held collectively under the firm's name. The CSD records securities at the broker-dealer participant level rather than at the individual client level: no individual client's name appears on the DTC account. The firm maintains an internal sub-ledger that maps each client's beneficial ownership to a specific quantity of each security held in the omnibus pool. The sub-ledger is the source of truth for individual client positions; it must reconcile perfectly to the DTC account balance at all times. Carrying broker-dealers operating under the omnibus model must apply the Rule 15c3-3 reserve formula — because the CSD cannot allocate to individual beneficial owners, the firm's internal records and the reserve calculation are the only mechanism proving that no client securities are being used for firm purposes.
In the fully segregated model, each client has a legally distinct account at the custodian, titled in the client's name or in the adviser's name as agent or trustee for that specific client. The client's identity appears on the custodian's books — not just on the firm's internal sub-ledger. In an insolvency, assets in fully segregated accounts are directly identifiable as belonging to the named client without reference to the firm's internal records. Fully segregated accounts are more common in the RIA context under Rule 206(4)-2 (the Custody Rule) than in the carrying broker-dealer context, where the volume of accounts typically makes individual custodian accounts operationally prohibitive. The qualified custodian framework requires that RIA client assets be held either in a separate account for each client in the client's name, or in an account under the adviser's name as agent or trustee — a form of structural segregation that ensures client assets are identifiable without reliance on the adviser's records.
The daily segregation calculation
The Rule 15c3-3 reserve formula is the operational mechanism by which a carrying broker-dealer proves — on every required computation date — that it has not commingled client cash with firm operating capital. The formula computes total credits (amounts the firm owes to customers: free credit balances in customer cash and margin accounts, amounts payable from unsettled transactions, the market value of securities borrowed from customers) against total debits (amounts customers owe the firm, primarily margin loan balances). If total credits exceed total debits, the net amount must be deposited into the Special Reserve Bank Account within one business day after the computation. Funds in the reserve account cannot be used for firm operations and may only be withdrawn when the reserve formula shows that the current balance exceeds the required amount.
Separate from the customer reserve formula, broker-dealers must also compute a PAB (Proprietary Accounts of Broker-Dealers) reserve formula for assets held on behalf of other broker-dealers in proprietary accounts. PAB accounts carry their own segregation obligation and their own Special Reserve Bank Account — the customer formula and the PAB formula are computed independently and funded into separate accounts. For broker-dealers clearing US Treasury transactions through FICC, Note H of Rule 15c3-3 governs the treatment of margin and clearing deposits for indirect participants and adds specific line items to the reserve formula that must be incorporated into the daily computation.
Under a 2024 SEC rule amendment, carrying broker-dealers with average total credits exceeding $500 million during the previous calendar year must compute and fund both the customer and PAB formulas daily rather than weekly. The transition to daily computation eliminates the five-business-day smoothing window that weekly computation provided and requires real-time data quality: every debit balance, free credit, and unsettled amount must be accurate at the time the formula runs. A reserve account underfunded relative to the formula result is an immediate violation; the cure period is one business day after computation.
The parallel between the reserve formula (cash segregation) and the possession and control review (securities segregation) reflects the two dimensions of Rule 15c3-3: one dimension ensures cash owed to customers is held in segregated bank accounts; the other ensures customer securities are held either in the firm's possession or in a good control location — DTC, Federal Reserve Banks, qualifying clearing organizations, or qualifying bank custodians — from which the firm can retrieve them without restriction.
Digital asset segregation and on-chain transparency
Digital assets create a structurally new form of account segregation that the current Rule 15c3-3 framework was not designed to address explicitly. The principle remains identical — client digital assets must not be used for firm purposes and must be recoverable in the firm's insolvency — but the implementation mechanism is different.
For digital assets held in an omnibus structure, the broker-dealer maintains a single custodian wallet (or set of wallets) with an internal sub-ledger mapping each client's beneficial ownership to an on-chain balance. For digital assets held in a fully segregated structure, each client receives a unique wallet address — typically generated and managed through MPC key architecture — whose on-chain balance directly corresponds to that client's holding.
Blockchain transparency provides an auditability advantage over traditional securities custody: an independent auditor, examiner, or regulator can query the on-chain balance of any wallet address in real time. This allows public verification of wallet balances without relying solely on the firm's custodian statements. However, a wallet balance alone does not establish beneficial ownership — ownership of a given on-chain balance still depends entirely on the firm's internal sub-ledger records associating that address with a specific client. An entity could demonstrate a wallet with a large on-chain balance that belongs to a counterparty entirely; the balance itself proves nothing about segregation without the corresponding sub-ledger mapping. Digital asset custody remains an evolving regulatory area. SEC and FINRA guidance has emphasized that broker-dealers must demonstrate that digital assets are held in structures consistent with the possession or control requirement of Rule 15c3-3, but the rule itself does not yet explicitly define how blockchain custody arrangements satisfy good control location standards. FINRA's 2023 examination program explicitly flagged that firms engaging in digital asset transactions must have analyzed their Rule 15c3-3 controls against the specific risks of digital asset custody.
T+0 settlement and real-time segregation
In a T+1 settlement environment, the daily segregation calculation is inherently one cycle behind: the reserve formula captures credits and debits that reflect positions from trade date through the following settlement date. For carrying broker-dealers processing high volumes of unsettled transactions, this lag is structural and expected.
In a hybrid T+0 settlement environment, digital assets and stablecoins settle at the moment of on-chain confirmation — a trade that confirms on-chain changes the position state in seconds, not hours. This compresses the segregation cycle from a 24-hour batch calculation to an event-driven, continuous update: every on-chain settlement event changes the segregation picture, and a system designed for daily batch reserve calculations must adapt to continuous position monitoring. DLT's round-the-clock execution means positions change asynchronously at any hour, making off-chain batch updating harder while simultaneously making on-chain balance verification easier — the transparency advantage exists precisely because the blockchain is always available, but the operational challenge is that the reserve formula must reflect a position state that changes without business-day boundaries.
Looking ahead, the GENIUS Act's framework for payment stablecoins — requiring that regulated stablecoins be backed 1:1 by high-quality liquid assets including short-term Treasury obligations and demand deposits at insured institutions — creates the regulatory architecture that could eventually support stablecoin instruments as part of a broker-dealer's reserve framework. Under current Rule 15c3-3, digital currencies are explicitly ineligible for the Special Reserve Bank Account. Whether GENIUS Act-compliant stablecoins change this analysis is an area of active regulatory development, but the direction of policy points toward treating regulated stablecoin liquidity held in a statutory trust as economically equivalent to cash for compliance purposes.
Omnibus vs fully segregated — structural comparison
| Attribute | Omnibus Account | Fully Segregated Account |
|---|---|---|
| Account structure | Single custodian account for all clients | Legally distinct account per client |
| Beneficial owner tracking | Internal sub-ledger — client not named at CSD | Client named on custodian account directly |
| Reserve formula obligation | Full Rule 15c3-3 reserve formula required | Full Rule 15c3-3 reserve formula required |
| Insolvency recovery | SIPC trustee allocates from customer property pool via sub-ledger | Direct return — client identified on account |
| Digital asset equivalent | Single firm wallet with sub-ledger ownership map | Unique MPC wallet address per client |
Account segregation — commingling vs compliant structure
Devancore Glossary · devancore.com
Account segregation — commingling vs compliant structure
Devancore Glossary · devancore.com
How it works
1. End-of-day position capture.
At each business day close, the firm captures the full position state: every customer free credit cash balance, every margin debit balance, the market value of all securities borrowed from customers, and all amounts payable from unsettled transactions. For firms subject to the 2024 daily computation requirement — average total credits exceeding $500 million during the previous calendar year — this capture runs each business day with no weekly averaging window. For digital assets, the position capture includes on-chain balance queries to confirm custodied wallet balances match internal records. The accuracy of this data set is the foundation of the reserve formula — any error in credit or debit coding produces an incorrect formula result, either locking up excess capital or creating a violation.
2. Reserve formula computation.
The firm runs the Rule 15c3-3 customer reserve formula: total credits minus total debits. Credits include free credit balances in customer cash and margin accounts, amounts payable from unsettled transactions, the market value of securities borrowed from customers, and other amounts owed to customers. Debits include customer margin debit balances and other amounts customers owe the firm. For broker-dealers also holding proprietary accounts of other broker-dealers, the PAB reserve formula is computed separately and funded into a separate Special Reserve Bank Account for PAB accounts. For broker-dealers clearing US Treasury transactions through FICC, Note H of Rule 15c3-3 governs the treatment of margin and clearing deposits for indirect participants — those line items must be incorporated into the formula model. The 2024 Item 15 addition also captures net Treasury clearing obligations for firms subject to the FICC mandatory clearing requirement.
3. Comparison against current reserve balance.
The formula result is compared against the current balance in the Special Reserve Bank Account. If the current balance meets or exceeds the formula result, the firm is in compliance — no deposit is required. If the current balance is below the formula result, a deposit must be made within one business day after computation. If the prior calculation resulted in a deposit that now exceeds the formula result, the firm may withdraw the excess — but withdrawals must be carefully timed to confirm the withdrawal does not create a subsequent under-funded position before the next formula run.
4. Reserve deposit or withdrawal execution.
The required deposit is wired to the Special Reserve Bank Account at the qualifying bank by the compliance deadline. The bank must acknowledge that the account is maintained for the exclusive benefit of customers and that the firm has no right to direct withdrawals for proprietary use. Assets eligible for the reserve account include cash and qualified securities (US Treasury obligations and certain agency securities); digital currencies are explicitly ineligible under current rule text. Looking ahead, GENIUS Act-compliant stablecoins held in statutory trust structures may eventually qualify — the reserve composition requirements for permitted payment stablecoin issuers under the GENIUS Act (short-term Treasuries, central bank reserves, insured deposits) parallel the high-quality liquid asset profile the reserve account requires — but that analysis is regulatory development, not current law.
5. Possession and control review.
In parallel with the cash reserve calculation, the firm reviews its possession and control of customer securities. Every fully paid and excess margin security held for customers must be accounted for in a good control location: DTC participant accounts, Federal Reserve Bank accounts, qualifying bank custodian accounts, registered clearing organizations, or other SEC-approved locations. Securities not in a good control location represent a possession or control deficit. The firm must resolve deficits within one business day — through market purchase, NSCC Stock Borrow Program engagement, or custodian transfer. Critically, the re-selection or substitution of securities to resolve a deficit cannot itself create a new deficit in another security: FINRA interpretations require that each substitution be documented and verified to confirm it does not shift the control problem to a different position. A verifiable, daily audit trail of all substitution activity is required to demonstrate compliance with this constraint.
6. Sub-ledger reconciliation and exception reporting.
The firm reconciles its internal sub-ledger against the custodian records for every client account. For omnibus accounts, the total of all client sub-ledger positions must equal the DTC participant account balance. For digital asset accounts, the total of all client sub-ledger positions must equal the on-chain wallet balance for each custodied address. Discrepancies — positions appearing in the sub-ledger but not confirmed by the custodian, or custodian positions not reflected in the sub-ledger — are flagged as segregation exceptions. Open exceptions at the time of the next reserve formula run must be explained; unresolved exceptions that produce an undercount of client positions represent a potential segregation violation requiring immediate escalation under the firm's written supervisory procedures.
Daily segregation calculation — reserve formula workflow
Devancore Glossary · devancore.com
Daily segregation calculation — reserve formula workflow
Devancore Glossary · devancore.com
In Devancore™
Devancore sub-account ledger
Devancore Glossary · devancore.com
Devancore's sub-account ledger is the operational spine of the account segregation framework — maintaining client-level position records in real time across traditional DTC-held securities and digital assets, generating the reserve formula inputs, and surfacing segregation exceptions before they become regulatory violations.
Automated reserve formula engine — $500M daily mandate.
Devancore pulls position data from the investment book of record continuously: free credit balances, margin debit balances, unsettled transaction amounts, and securities borrowed from customers. The reserve formula runs in real time against live IBOR data, not only at end of day, so any intraday position change that affects the formula result is reflected immediately. This is the critical differentiator: most legacy systems run the reserve formula as a next-day batch against static snapshots. Devancore runs against the live position, meaning the operations team sees a potential under-segregation condition before the compliance deadline rather than discovering it after the wire must already be sent. When the formula result exceeds the current reserve account balance at any point, Devancore flags an under-segregation alert with the dollar shortfall, the position items driving it, and the time remaining before the deposit deadline. For firms subject to the 2024 daily computation requirement — average total credits exceeding $500 million during the previous calendar year — Devancore generates the daily segregation report as a regulatory artifact, formatted to the reserve formula template and archived for examination. The PAB reserve formula and the Note H FICC clearing adjustments are computed as separate modules within the same engine, with each Special Reserve Bank Account monitored independently.
On-chain segregation mapping.
For digital assets, Devancore maps each client to one or more designated wallet addresses maintained through the custodian's MPC key architecture. Each wallet address is tagged in the sub-ledger with the client identifier, the asset type, and the chain ID. On-chain balance queries run continuously, confirming that the custodian's reported balance for each wallet address matches the Devancore sub-ledger record for that client. When the on-chain balance and the sub-ledger record diverge — the custodian reports a lower balance than the sub-ledger, or an unauthorized transfer event appears in the transaction history — Devancore flags a segregation discrepancy in real time and routes it to the maker-checker workflow for CCO review. For auditors, Devancore provides a verifiable mapping of omnibus balances to on-chain addresses — the wallet address, the on-chain balance, and the sub-ledger allocation to each beneficial owner — as a single exportable package that surpasses what traditional custodian statements can provide, because the on-chain balance is independently queryable rather than self-reported. This does not replace the sub-ledger as the source of beneficial ownership truth, but it provides a cryptographically anchored checkpoint that traditional custody infrastructure cannot match.
Cross-rail segregation view.
For broker-dealers operating in a hybrid environment — traditional securities in a DTC omnibus participant account alongside digital assets in custodied wallets — Devancore provides a unified segregation compliance view across both rails. The DTC omnibus position (sub-ledger ownership map against the participant account balance) and the digital asset custody positions (sub-ledger map against on-chain wallet balances) are consolidated into a single dashboard showing the firm's total client asset inventory, the total reserve formula result, and the current reserve account balance. Segregation compliance status — compliant, under-funded, control deficit — is displayed as a single operational signal covering both rails simultaneously. DLT's continuous, 24-hour settlement rhythm means digital asset positions can change outside traditional business hours; Devancore monitors on-chain state continuously and surfaces any position change that affects the reserve formula, regardless of when on-chain settlement occurs.
Sub-ledger reconciliation and exception workflow.
Devancore runs continuous reconciliation between the internal sub-ledger and each custodian record — DTC, prime broker, digital asset custodian. Any position present in the sub-ledger but not confirmed by the custodian, or any custodian balance not allocated to a client in the sub-ledger, surfaces as a segregation exception with the position size, age, and expected source. Exceptions that remain unresolved within the same settlement session are escalated to the trade break management workflow with the segregation context attached — the operations team sees not just that there is an unmatched position, but that the unmatched position affects the reserve formula and has a regulatory resolution deadline. Possession and control deficits are flagged with the one-business-day cure clock visible from the moment the deficit is identified, preventing the temporary commingling that arises when a firm operates with an unresolved deficit past its cure window. This exception-first architecture replaces the end-of-day manual reconciliation that most broker-dealers still run against custodian statements, surfacing issues while cure is still practical.