Who Regulates Gold IRA Custodians? The Layered Map Nobody Explains

Almost every gold IRA marketing page names a “trusted custodian,” but very few say who supervises that custodian. The answer is neither the Securities and Exchange Commission nor the Federal Deposit Insurance Corporation. It is a layered mix of state banking departments (mostly South Dakota, Nevada, Arizona, and Texas), the Office of the Comptroller of the Currency for the minority chartered as national banks, and the Internal Revenue Service, which decides whether any given entity qualifies to act as an IRA trustee at all. Understanding which regulator watches which piece of the account is the difference between believing a marketing claim and being able to verify it.

The regulatory map in one glance

A self-directed IRA that holds physical precious metals sits at the intersection of two very different bodies of law. One is banking and fiduciary law, which governs the entity acting as custodian. The other is federal tax law, which governs the IRA itself and the substance of what can be held inside it. Both tracks apply at the same time. Neither is a substitute for the other.

The IRS trustee gate: IRC 408(a)(2) and Treas. Reg. 1.408-2(e)

The IRA statute at Internal Revenue Code Section 408(a) sets out the basic requirements for an individual retirement account. Paragraph (a)(2) is the eligibility gate for the trustee: the account must be held by a bank as defined in Section 408(n), or by another person who demonstrates to the satisfaction of the Secretary of the Treasury that the person will administer the trust in a manner consistent with the requirements of Section 408 (26 U.S. Code Section 408).

Section 408(n) defines “bank” as (A) any bank as defined in Section 581, (B) an insured credit union within the meaning of the Federal Credit Union Act, or (C) a corporation which, under the laws of the State of its incorporation, is subject to supervision and examination by the Commissioner of Banking or other officer of such State in charge of the administration of the banking laws of such State. That last leg is what qualifies most state-chartered trust companies. A trust company chartered and supervised by a state banking authority meets the statutory definition of “bank” for IRA purposes without needing a further Internal Revenue Service ruling.

Any entity that is not a bank under Section 408(n) must qualify as a nonbank trustee under Treasury Regulation 26 CFR Section 1.408-2(e). The regulation lays out a detailed application and approval process. Applicants must demonstrate continuity of the business, an established location, fiduciary experience or expertise, adequate capital sufficient to meet reasonably anticipated liabilities, an audit program, separation of trust and non-trust operations, and specific bonding and recordkeeping capacity. Written approval from the Internal Revenue Service is required before the entity can act as a trustee. The Service periodically publishes a list of approved nonbank trustees and custodians (IRS Approved Nonbank Trustees and Custodians).

State-chartered trust companies: where most metals custodians live

The population of self-directed IRA custodians that accept physical precious metals is concentrated in a small number of state charters. The reasons are practical: certain state trust company statutes are well suited to non-traditional assets, have modernized fiduciary powers, and have supervisors experienced with alternative custody. In the metals segment, four state banking regulators appear most often on custodian license pages:

Each of these regulators conducts periodic safety-and-soundness examinations, approves changes of control, sets minimum capital, and enforces fiduciary conduct standards. Public license lookup tools are available on each department’s website. A prospective account holder can typically confirm in one search that a named custodian holds an active charter, when it was granted, whether any enforcement actions are outstanding, and who to contact with a complaint.

The state charter is not a rubber stamp. Under Section 408(n)(3), the entity must be a “corporation which, under the laws of the State of its incorporation, is subject to supervision and examination by the Commissioner of Banking or other officer of such State in charge of the administration of the banking laws of such State.” That means an unsupervised registered agent shell company is not a bank for IRA purposes even if it uses “trust” in its name. Verifying the charter type on the state supervisor’s own website closes that gap.

Federal banking charters: the minority path

A minority of gold IRA custodians operate through federally chartered banking entities. The Office of the Comptroller of the Currency (OCC) is an independent bureau of the U.S. Department of the Treasury and is the primary federal supervisor of national banks and federal savings associations. National bank fiduciary activities, including acting as trustee or custodian for retirement accounts, are governed by 12 CFR Part 9. The OCC publishes a Financial Institution Search that lets a user confirm the charter and fiduciary powers of any national bank (occ.treas.gov).

A national trust bank or a national bank with fiduciary powers meets the definition of “bank” under IRC Section 408(n)(1) and needs no further IRS nonbank trustee approval to serve as an IRA trustee. The tradeoff is that most large national banks and their trust departments do not build the specialty systems required to hold non-traditional assets like physical bullion, so the federal-charter branch of the map is thin in the metals segment. The Federal Reserve is the primary federal supervisor of state member banks with fiduciary powers, and the FDIC is the primary federal supervisor of state nonmember banks; both are relevant to a very small number of metals custodians that operate as bank trust departments rather than as standalone trust companies.

Depository regulation runs on a separate track

The custodian is not the depository. Internal Revenue Code Section 408(m) forbids IRA-owned bullion from being held by the account owner directly. In practice, the metals are shipped to and stored in a third-party depository under the custodian’s control. The depository is a different legal entity, often supervised by a different regulator, and covered by a different insurance program.

A depository may be chartered as a state trust company, a state-regulated depository under a specific state statute, or a bonded warehouse. Delaware Depository, for example, operates under Delaware statutes and holds a state license. The Texas Bullion Depository is a state-owned facility created by Texas House Bill 483 in 2015 and administered under Texas Government Code Chapter 2116. International Depository Services and Brink’s Global Services operate as private commercial custodians with their own regulatory footprints. Every one of them relies on private insurance rather than a government guarantee, which is the point covered in the insurance section below.

What the FDIC does not cover

Federal Deposit Insurance Corporation coverage applies to deposits at insured banks up to standard maximum deposit insurance amounts. The insurance scope is defined by 12 U.S.C. Section 1815 and by FDIC regulations at 12 CFR Part 330. Deposits are checking accounts, savings accounts, money market deposit accounts, and certificates of deposit. IRAs holding deposit products at insured banks are eligible for FDIC coverage on the deposit portion.

Physical precious metals are not deposits. A gold or silver bar held by a trust company custodian on behalf of an IRA does not become an FDIC-insured deposit because the custodian happens to be a bank. The FDIC’s own consumer materials are explicit that safe deposit box contents, precious metals, and other non-deposit items are outside insurance scope (FDIC Deposit Insurance).

Two implications follow. First, marketing that implies FDIC coverage on IRA-owned bullion is misleading. Second, the cash portion of a gold IRA held temporarily at an insured bank in a pending-purchase or pending-distribution posture is FDIC-covered under standard rules while it remains a deposit, and stops being covered as soon as it is converted to bullion.

What SIPC does not cover

The Securities Investor Protection Corporation was established by the Securities Investor Protection Act of 1970 (15 U.S.C. Sections 78aaa through 78lll). It is a nonprofit membership corporation whose members are broker-dealers registered with the SEC. When a SIPC member firm fails and is unable to return customer property, SIPC steps in to return securities and cash from a customer account, subject to statutory limits.

Two features of the SIPC statute matter for gold IRAs. First, SIPC coverage runs to customer accounts at broker-dealer members. A trust company acting as an IRA custodian is not typically a broker-dealer, and physical bullion sitting at a depository is not a security. Second, even if a broker-dealer holds an IRA account with securities in it, SIPC coverage extends to those securities and cash but not to physical precious metals. SIPC’s own consumer materials state that “commodities” and “precious metals” are not covered (SIPC What We Protect).

What depository insurance actually is

Because federal deposit and securities insurance programs do not reach the metals, protection against physical loss depends on the depository’s commercial insurance program. The dominant pattern is an all-risk policy underwritten in the Lloyd’s of London market, sometimes stacked with additional domestic carrier layers. Coverage typically addresses loss, theft, mysterious disappearance, damage, and employee dishonesty, subject to a per-occurrence limit and a program aggregate limit.

Two structural features are worth understanding before assuming a headline insurance number equals the account holder’s protection. Sub-limits often apply for specific perils, and exclusions vary by policy. Second, the insurance covers the depository, not each individual account. In the event of a total loss, the total policy limit is shared across all account holders’ metals at that location, subject to the policy’s allocation rules. Reviewing the depository’s Statement of Insurance and its most recent audit report gives a clearer picture than a marketing headline number. For a walk-through of what to look for, see insurance coverage at gold IRA depositories.

A separate layer of assurance is periodic third-party audit. Reputable depositories retain an independent auditor to verify physical inventory against custodian records and to publish an attestation. The frequency (annual, semi-annual, or continuous), the scope (test count versus 100 percent count), and the auditor’s identity all vary by depository. A statement that “metals are audited” is a starting question, not a conclusion.

Where the SEC, FTC, and CFTC fit in

Several federal agencies touch the gold IRA ecosystem without regulating custodians as such. Their reach is worth understanding because their enforcement activity is where much of the public record on precious metals fraud lives.

The Securities and Exchange Commission regulates the offer and sale of securities, broker-dealers, and investment advisers. Physical bullion is not a security. However, the SEC has jurisdiction over adviser conduct that touches self-directed IRAs, and the SEC’s Office of Investor Education and Advocacy publishes investor alerts specifically about self-directed IRA fraud and about precious metals schemes marketed as retirement solutions (SEC Investor.gov: self-directed IRAs and fraud risk).

The Commodity Futures Trading Commission (CFTC) regulates commodity futures and swap markets. Physical precious metals held for an IRA are not futures contracts. However, the CFTC’s enforcement authority reaches leveraged retail commodity transactions and certain financed metals transactions, and it has brought cases against dealers who use IRA rollovers as a funnel for prohibited schemes (CFTC Press Room).

The Federal Trade Commission enforces general consumer protection law and the FTC Act, including the affiliate endorsement guides and the 2024 rule on fake reviews. The FTC has brought precious metals fraud cases against dealers who make misleading claims to older investors about coin premiums, “home storage” IRA schemes, or the safety of specific coin products (FTC Business Guidance).

State attorneys general also play a real role. Many precious metals cases are brought at the state level under state consumer protection statutes, and state securities regulators (through the North American Securities Administrators Association coordination) participate in multistate actions.

How to verify a custodian’s regulator in five minutes

A prospective account holder can complete a first-pass verification of any advertised gold IRA custodian in under five minutes with three lookups.

What regulation does and does not protect against

Charter supervision, IRS trustee qualification, and depository insurance together are meaningful protections, but they are not a guarantee against every loss. A realistic account of what regulation covers and where it stops helps calibrate the diligence questions worth asking.

The regulatory map is the reason the diligence sequence in a gold IRA is not the same as the diligence sequence in a brokerage account. In a brokerage account, SIPC and SEC oversight cover many of the “am I going to lose the whole thing to fraud” risks by default. In a self-directed IRA holding physical bullion, that default coverage does not exist. The compensating controls are the layered supervision above, plus disciplined selection of the custodian and the depository. For the scenario where a custodian fails despite the safeguards, the mechanics are covered in what happens if a gold IRA custodian fails.

Frequently asked questions

Sources and methodology