Rule 15c3-3 Customer Protection Rule
SEC rule requiring broker-dealers to hold customer securities in possession or control and fund the Special Reserve Bank Account through the reserve formula.
Definition
SEC Rule 15c3-3, the Customer Protection Rule, establishes the legal framework under which customer assets held by a broker-dealer are segregated from the firm's own property. A broker-dealer can fail — its net capital can erode, its proprietary positions can collapse — and Rule 15c3-3 is the mechanism designed to ensure that when it does, the customers' assets are ring-fenced and recoverable without dependence on the estate. When a broker-dealer enters a Securities Investor Protection Act (SIPA) liquidation, the segregation of customer assets required by Rule 15c3-3 is what enables SIPC to return securities directly to customers rather than requiring them to wait as general creditors. The rule creates two parallel obligations for carrying broker-dealers: a possession and control requirement for customer securities, and a Special Reserve Bank Account funded through the reserve formula for customer cash.
While the Broker-Dealer Net Capital Rule (Rule 15c3-1) ensures the firm has sufficient liquid capital to operate as a going concern, Rule 15c3-3 ensures that even if the firm fails, customer securities and cash are isolated and protected. The two rules work in tandem: 15c3-1 guards against firm insolvency; 15c3-3 guards against customers bearing the losses of that insolvency. Rule 15c3-3 applies to carrying broker-dealers — firms that hold customer accounts and take custody of customer assets. Introducing firms that execute but do not carry accounts are generally exempt; the obligations flow to the carrying firm.
Possession or Control: The Core Requirement
The first pillar of Rule 15c3-3 is the possession and control requirement: a carrying broker-dealer must maintain physical possession of, or verifiable control over, all fully paid and excess margin securities it holds on behalf of customers. Possession means the firm holds the securities directly — in its DTC participant account, in its own vaults, or in transit through standard clearing mechanisms. Control means the securities are held at a good control location: an SEC-approved location from which the firm can retrieve them promptly and without restriction.
Good control locations under Rule 15c3-3(c) include DTC and DTCC subsidiaries, Federal Reserve Banks, qualifying banks and trust companies acting as custodians, registered clearing organizations, and other registered broker-dealers meeting the applicable criteria. Securities held at any location not on the SEC's approved list — including foreign depositories not specifically designated as good control locations, custodians that fail the qualification criteria, or positions pledged at unauthorized counterparties — are treated as a control deficit. A deficit must generally be resolved within one business day under Rule 15c3-3(d): the firm must take prompt action to obtain possession or control, through a market purchase, Stock Borrow Program engagement, custodian transfer, or — where no other remedy is available — a capital charge. A reporting obligation also arises if the deficit is material.
Rule 15c3-3 reserve formula — principal credits, debits, and T+1 relevance
| Formula Item | Credit / Debit | Description | T+1 Relevance |
|---|---|---|---|
| Free credit balances | Credit (+) | Customer cash not yet invested or withdrawn | Rises when settlement fails delay proceeds to customers |
| Securities borrowed from customers | Credit (+) | Market value of customer securities on loan to the firm | Recall required if control deficit arises |
| Amounts payable to customers | Credit (+) | Unsettled sale proceeds, dividends, and other amounts owed | Accelerates under T+1 — faster fail means immediate credit |
| Customer margin debit balances | Debit (−) | Aggregate margin credit extended to customers; largest offset | Reduced if fails prevent customer margin positions from settling |
| Secured demand notes | Debit (−) | Qualifying notes with pledged collateral meeting SEC criteria | Not directly affected by T+1 cycle |
| Item 15 — Treasury clearing | Debit (−) | Cleared US Treasury transactions per SEC Release 34-99149 | Added 2024; applies to Treasury-active carrying firms |
Fully Paid and Excess Margin Securities
Rule 15c3-3 differentiates customer securities by how much of each position is financed by margin credit. Fully paid securities are owned outright — the customer paid for them in full, with no margin debt outstanding. The carrying firm must maintain 100% possession or control of fully paid securities and has no right to use them for its own financing under any circumstances.
Excess margin securities are held in a margin account whose market value exceeds the threshold required to collateralize the customer's margin debt. Specifically, securities are classified as excess margin to the extent their value exceeds 140% of the customer's aggregate debit balance in the account. Both fully paid and excess margin securities must be in possession or control. The remaining margin securities — within the 140% collateral threshold — may be re-hypothecated: pledged as collateral for the firm's own borrowings in an aggregate amount not to exceed 140% of customers' aggregate debit balances. In elevated interest rate environments, this re-hypothecation capacity becomes a meaningful profit center for broker-dealers with large retail margin books, enabling institutional-rate borrowing against customer securities rather than paying higher open-market funding costs.
The Special Reserve Bank Account and the Reserve Formula
The second pillar is the Special Reserve Bank Account — a segregated account at a qualifying bank maintained exclusively for the benefit of customers. The carrying firm must fund this account through the reserve formula: total credits (amounts owed to customers, including free credit balances, amounts payable from unsettled transactions, and the market value of securities borrowed from customers) minus total debits (amounts customers owe the firm, primarily margin debit balances). If credits exceed debits, the net amount must be deposited into the reserve account by the close of business the following day.
Assets in the reserve account must be cash or qualified securities — per Rule 15c3-3(a)(6), primarily US Treasury securities; digital currencies such as bitcoin or ethereum are explicitly ineligible for reserve deposits. Nothing in the reserve account is available for the firm's proprietary use. Under a 2024 SEC amendment, Item 15 was added to the debit side of the formula to capture purchases, sales, and repo/reverse repo of US Treasury securities that have been cleared, settled, and novated by a registered clearing agency (currently only FICC). Carrying firms active in the cleared Treasury market must incorporate Item 15 into their reserve formula models — failure to do so produces an undercomputed reserve requirement that will surface in examination. Firms should also confirm the current scope of qualified securities eligible for deposit with counsel, as the definition has been subject to regulatory refinement.
The 2024-2026 Daily Computation Mandate
Under December 2024 SEC amendments, carrying broker-dealers with $500 million or more in average total credits — computed across both customer and PAB credits using FOCUS report data from June 2024 through July 2025 — must perform reserve formula computations and make reserve account deposits daily rather than weekly. The compliance deadline is June 30, 2026, extended from the original December 31, 2025 deadline. The SEC estimates approximately 49 firms will cross the threshold, collectively carrying roughly 99.3% of all customer and PAB credit items in the market. Daily computation eliminates the five-business-day smoothing window that weekly computation provided: every business day ends with a fresh formula, an overnight funding decision, and a deposit obligation by the following close.
The operational demands are material. Credit and debit inputs to the formula must reflect accurate end-of-day settled positions — unreconciled trades, late settlements, and position errors each propagate directly into the formula result. For firms computing net capital under the Alternative Method — which describes substantially all large carrying broker-dealers — daily computation reduces the debit reduction applied to aggregate debit items from 3% to 2%, freeing up liquidity by allowing debits to count at a higher value in the formula (debits carried at 98% vs 97% of aggregate value). A "transitory cash" risk accompanies the shift: when a large credit influx arrives after the daily cash sweep cutoff, the cash sweeps the following business day but must be reserved two business days later, creating a short-term timing mismatch that treasury teams must monitor. Firms using the Basic Method are required to compute daily if they cross the threshold but do not receive the 1% debit-reduction benefit. Smaller Alternative Method firms may opt in voluntarily by providing prior written notice to their designated examining authority and receive the same debit-reduction benefit.
T+1 and the Compressed Compliance Window
The T+1 settlement transition compressed the Rule 15c3-3 compliance window on both dimensions simultaneously. On the possession and control side, a trade that fails to settle on T+1 is immediately a P&C deficit — the securities have not arrived at the buying broker's DTC participant account, there is nothing in a good control location to satisfy the P&C test, and the one-business-day resolution clock begins. Under T+2, there was a buffer day before the equivalent fail converted to a compliance event. Under T+1, there is none.
On the reserve formula side, fails under T+1 produce formula credits faster: the sale proceeds the firm owes to the selling customer appear as a credit the night of the fail. For a carrying firm with even a modest fail rate, T+1 means more frequent P&C deficits, more reserve formula volatility driven by fails, and a shorter window to resolve both before they become regulatory exposure. The infrastructure required to comply with T+1 — trade-date processing, automated enrichment, same-day affirmation — is identical to the infrastructure required to maintain Rule 15c3-3 compliance. The two are not separate operational programs; they are the same program.
Digital Assets and the Custodial Control Problem
Rule 15c3-3's good control location framework was designed for traditional securities held at DTC and qualifying banks. Digital assets — crypto assets, tokenized securities, and other blockchain-native instruments — do not fit cleanly within this taxonomy. Private key custody does not correspond to any SEC-approved control location, and the question of whether a broker-dealer custodying digital assets for customers can satisfy the P&C requirement remains an area of active regulatory development. SEC Staff Accounting Bulletin 121 (SAB 121), issued in 2022, required companies safekeeping crypto assets to recognize an equal liability on their balance sheets; SAB 122, issued in January 2025, rescinded it. The underlying P&C questions for digital asset custody — which custodial arrangements qualify as good control locations, how private key custody maps to the control location test — have not been definitively resolved. Broker-dealers building hybrid custody models should treat the digital asset P&C analysis as open regulatory terrain and seek current SEC guidance before treating digital asset custodial arrangements as satisfying Rule 15c3-3 control requirements. [Note: regulatory status of digital asset good control locations should be confirmed against current SEC guidance before publication.]
Rule 15c3-3 — possession or control determination
Devancore Glossary · devancore.com
Rule 15c3-3 — possession or control determination
Devancore Glossary · devancore.com
How it works
1. Securities classification — fully paid, excess margin, and margin
Each business day, the carrying broker-dealer's systems classify all securities in customer accounts. A security is classified as fully paid if the customer has no margin debit balance in the account. It is excess margin to the extent its market value exceeds 140% of the customer's aggregate debit balance — the excess portion must be in possession or control. The remaining margin securities, within the 140% threshold, constitute the firm's re-hypothecation pool. Accurate classification requires a current, reconciled position record for every customer account, maintained in the accounting book of record and confirmed against the settled position at DTC.
2. P&C computation — mapping securities to control locations
After classification, the firm maps each fully paid and excess margin security to its current location: DTC participant account, qualifying bank custodian, clearing organization, or another approved control location. Any security that cannot be mapped to a good control location is a potential deficit item. Large carrying firms with securities held across multiple custodians and foreign depositories must aggregate this mapping daily. The P&C computation identifies not just the aggregate count of securities in control but the specific positions — by CUSIP, account, and location — that satisfy or fail the control test, because deficit remediation must be position-specific.
3. Control deficit identification and resolution
If the P&C computation reveals that any fully paid or excess margin security is not in a good control location, a control deficit exists. The firm must take prompt action to obtain possession or control by the close of business the following day under Rule 15c3-3(d). Remediation paths vary by cause: for settlement fails — the most common source of deficits under T+1 — resolution may involve engaging NSCC's Stock Borrow Program, purchasing securities in the open market, or taking a capital charge; a buy-in is the most common resolution for persistent fails but the rule does not prescribe a single mandatory remedy. For securities at non-qualifying custodians, physical transfer or re-registration is required. Deficit items must be reported in the firm's annual audit under Rule 17a-5 if material and tracked internally with same-day attribution.
4. Reserve formula computation — credits and debits
The reserve formula is computed as of each computation date — daily for qualifying firms under the June 2026 mandate; weekly on Wednesdays for others. Credits are aggregated first:
- Free credit balances: customer cash not yet invested or withdrawn
- Amounts payable to customers: unsettled sale proceeds, dividends payable, and other receivables
- Market value of securities borrowed from customers: the firm's obligation to return these securities must be fully funded in the reserve account
Debits are then computed:
- Customer margin debit balances: the aggregate amount of margin credit extended to customers; typically the largest single offset
- Secured demand notes: qualifying notes with pledged collateral meeting SEC criteria
- Item 15 (for Treasury-active carrying firms): cleared US Treasury transaction amounts per SEC Release 34-99149
If total credits exceed total debits, the net amount is the required reserve deposit.
5. Reserve account deposit or withdrawal
The required deposit — or withdrawal if debits exceed credits — must be completed by the close of business the day following the computation date. Deposits must be in cash or qualified securities; withdrawals are permitted only to the extent the reserve account holds assets in excess of the formula requirement. Most large carrying firms maintain an intraday estimate of the end-of-day formula throughout the trading day, enabling treasury operations to pre-position for the overnight deposit rather than reacting after close. For firms under the daily computation mandate, this intraday visibility is operationally necessary — the overnight window is not sufficient to source the deposit cold.
6. PAB account computation — Proprietary Accounts of Broker-Dealers
Carrying broker-dealers run a separate reserve formula computation for PAB accounts — proprietary securities accounts of other registered broker-dealers (and certain foreign banks acting in a broker-dealer capacity), excluding DVP/RVP accounts and certain subordinated accounts. The PAB formula uses the same credit-minus-debit structure but with distinct eligible components reflecting the counterparty nature of broker-dealer accounts. The PAB reserve is deposited into a separate Special Reserve Bank Account maintained exclusively for PAB, which may not be commingled with the customer reserve account. Under the 2024 amendments, the $500 million daily computation threshold is measured across customer and PAB credits combined — a firm that crosses the combined threshold must compute both the customer reserve and the PAB reserve on a daily basis. Carrying firms with significant inter-dealer business must maintain two separate reserve computations, two separate reserve accounts, and two separate deposit and withdrawal cycles under the daily mandate.
7. FOCUS reporting and regulatory examination
The reserve formula computation, reserve account balance, and possession and control information are reported in monthly FOCUS reports filed with FINRA. Carrying broker-dealers subject to the full Rule 15c3-3 requirements file FOCUS Part II; firms operating under certain Rule 15c3-3 exemptions (primarily smaller introducing or limited-activity firms) file Part IIA, which includes a simplified net capital computation but not a reserve formula. A carrying broker-dealer subject to the daily computation mandate will file FOCUS Part II reflecting daily reserve computations. Regulators use FOCUS data to monitor reserve formula trends, identify firms approaching or breaching the required deposit level, and flag anomalies in credit or debit components. Annual and more frequent examinations review the P&C computation in detail: verifying that all fully paid and excess margin securities are mapped to good control locations, confirming the reserve account balance against the formula requirement, and testing the firm's classification methodology. Understating the reserve requirement by overcounting debit offsets or miscategorizing excess margin securities as margin is among the most frequently cited examination findings in Rule 15c3-3 reviews.
Rule 15c3-3 daily cycle — reserve computation and P&C verification
Devancore Glossary · devancore.com
In Devancore™
Devancore — customer asset protection model
Devancore Glossary · devancore.com
Rule 15c3-3 compliance depends on the same operational foundation as every other post-trade obligation: position accuracy, settlement timeliness, and data quality at the point of trade capture. A position error that overstates a customer's margin debit balance understates the reserve formula credit and understates the required reserve deposit. A settlement fail that leaves customer-owned securities outside a good control location creates a P&C deficit that must be detected and resolved within one business day. Neither problem is visible in time for remediation if the underlying data infrastructure runs on end-of-day batch processes.
Real-Time P&C Deficit Monitoring and Collateral Tagging
Devancore tracks every customer security position against its current custody location in the settlement record. When a trade fails to settle at DTC on T+1, the securities remain at the delivering firm's participant account — outside the receiving firm's good control locations. Devancore surfaces this immediately as a P&C exception: the position is tagged as a control deficit, the one-business-day resolution clock is started, and the exception is routed to the operations queue for buy-in or NSCC Stock Borrow Program engagement. The deficit is identified at the point of settlement failure, not discovered the following morning in an end-of-day report.
At the atomic ledger level, Devancore distinguishes between customer-owned positions (fully paid and excess margin, requiring 100% P&C compliance) and margin positions within the re-hypothecation pool. This collateral tagging — maintained at the account and position level — prevents fully paid securities from being inadvertently included in the firm's hypothecation pool. An accidental pledge of a fully paid security against a firm financing facility is a Rule 15c3-3 violation regardless of intent; the prevention is structural, not procedural. For digital asset positions held at qualified custodians, custody location is mapped against the applicable approval status at the time of position creation, with open flags maintained for asset types where the good control location classification remains a regulatory question. The maker-checker workflow applies to all changes to collateral classification and custody location assignments, satisfying the dual-control requirement expected under FINRA Rule 3110(b)(2) supervisory standards.
Automated Reserve Formula Computation
Devancore's reserve formula module aggregates credits and debits against settled position data continuously throughout the trading day. As trades settle and positions update in the accounting book of record, the formula recomputes. For carrying broker-dealers subject to the June 2026 daily computation mandate — $500 million or more in average total credits — this eliminates the manual spreadsheet cycle and replaces it with a system-generated formula that reflects the actual settled state of customer accounts as of close.
The credits engine aggregates free credit balances, amounts payable to customers from pending settlements, and the market value of securities borrowed from customers. The debits engine incorporates margin debit balances, secured demand notes, and Item 15 Treasury clearing amounts for applicable firms. Both engines pull from the same position and settlement data that feeds the P&C computation, so a single discrepancy surfaces in both places simultaneously rather than appearing in one report but not the other. The reserve formula output is available to treasury operations before end of day, enabling the overnight deposit instruction to be prepared before the close-of-day computation is finalized. Under the daily mandate, this ahead-of-close visibility is the operational standard — not a convenience but a requirement.
PAB Reserve Computation
For carrying broker-dealers with inter-dealer business, Devancore runs the PAB reserve formula alongside the customer reserve computation on the same data infrastructure. Customer credits and PAB credits are tracked separately at the account level — customer free credit balances and amounts payable to customers flow into the customer formula; PAB credits flow into the separate PAB formula — ensuring the two reserve accounts remain cleanly segregated at the source rather than through a post-computation allocation. For firms subject to the 2024 daily computation mandate, both the customer and PAB reserves run daily on the same overnight cycle; the combined threshold ($500 million in customer and PAB credits) is monitored continuously so firms can anticipate the mandatory transition before they cross the threshold.
Audit Trail and FOCUS Reporting
Every P&C computation run, reserve formula result, and reserve account transaction is recorded in an immutable audit log satisfying SEC Rules 17a-3 and 17a-4 WORM retention requirements. The audit log provides the evidentiary basis for FOCUS Part II filings and for examination by FINRA and the SEC — the same WORM-compliant record that demonstrates Rule 15c3-3 possession and control compliance also serves as the "evidenced in writing" documentation FINRA examiners look for when reviewing the firm's P&C computation methodology. For hybrid positions — traditional securities at DTC alongside digital asset positions held through qualified custodians — both the DTC settlement confirmation and the on-chain transaction record are captured in the same audit thread, maintaining consistent audit depth across asset classes. For on-chain positions settled through the Arc Network, settlement finality is confirmed at block commit through Arc Feed's Malachite BFT consensus, updating the accounting book of record without the T+1 settlement lag applicable to traditional securities, while preserving the same P&C classification and control location mapping required under Rule 15c3-3.