On September 1, the SEC proposed the first substantive overhaul of its transfer agent rules since the early 1980s.

One sentence in the announcement deserves attention. SEC Chairman Paul Atkins said the proposal reflects the use of electronic communications and blockchain technology in securities offerings and the transfer of shares.

The 421 page proposal goes much further than acknowledging blockchain as an available technology. It asks how an onchain transfer should update the official record of ownership, how wallet addresses should connect to investor identity, how transfer agents should safeguard tokenized securities, and how regulators should examine records that exist on a distributed ledger.

That is a meaningful change in the regulatory conversation.

In January, SEC staff described the principal models for tokenized securities. The September proposal begins addressing the operating rules for the firms that maintain the ownership record.

The token can move in seconds. The harder question is whether the legal record, investor rights, transfer restrictions, and regulatory evidence move with it.

The Transfer Agent Is Moving to the Center

Transfer agents maintain the official record of who owns an issuer's securities. They process issuances, cancellations, and transfers. They also support distributions, communications, and the records that allow an issuer to know who its securityholders are.

That role becomes more important when ownership is represented through a crypto network.

The proposal says market participants are developing blockchain native transfer agent models for recordkeeping, tokenized fund administration, cross chain interoperability, and smart contract driven processes. It also says transfer agents using these systems must manage risks involving blockchain data integrity, tokenized asset security, and distributed ledger operations.

The SEC is proposing to collect far more information about that activity. Form TA 2 would ask registered transfer agents to report how many issues use distributed ledger technology for the master securityholder file. It would also collect the number of tokenized issues they service, separated by issuer sponsored and third party sponsored models. Transfer agents would identify tokenization agents and distributed ledger platforms that support their work.

Regulators are moving from describing tokenization to measuring how it operates.

That matters because market infrastructure becomes easier to supervise when the responsible parties, systems, records, and service providers are visible. It also makes comparison possible. Issuers will be able to ask more precise questions about where the official record sits, who controls it, which systems support it, and what happens when something fails.

A Wallet Address Is Becoming Part of the Ownership Record

The proposal gives the wallet address a concrete role inside securities recordkeeping.

For a tokenized security, the proposed definition of position detail would include the securityholder's full name and other relevant identifying information, including a digital wallet address. Elsewhere, the SEC asks whether the rules should continue to require a physical mailing address or allow other contact information, including email and wallet addresses.

A wallet address is only one part of a larger ownership record. Legal identity and contact information still matter.

SEC staff described this architecture clearly in January. In an issuer sponsored model, the issuer or its agent can integrate a crypto network into the master securityholder file. Onchain information such as the wallet address, quantity owned, and issue date can be associated with offchain information such as the holder's legal name and address. A transfer on the network can then update the official ownership record.

The staff also described another model in which the master securityholder file remains offchain. In that structure, an onchain transfer notifies the issuer or its agent to update the official record.

Those two models may look similar to an investor moving a token between wallets. Operationally, they are different. In one, the network forms part of the official register. In the other, the network provides an instruction that must be reflected somewhere else.

The new proposal asks whether the rules can support both approaches. It asks how onchain records should connect with offchain identity data, how a token transfer should produce a corresponding change in the master securityholder file, and what should happen when the ledger is not controlled exclusively by the transfer agent.

Those are the questions that determine whether tokenization can support real securities ownership at scale.

Programmability Does Not Remove Accountability

Smart contracts can automate instructions. They cannot decide whether a security was validly issued, whether a holder is eligible, whether a transfer qualifies for an exemption, or whether the official record accurately reflects the transaction.

The proposal treats that gap as an operational and compliance responsibility.

The SEC would require transfer agents to adopt written compliance policies and procedures. It would turn the existing safeguarding rule into a broader risk management requirement covering funds, securities, business operations, and continuity planning. Transfer agents holding funds for issuers or securityholders would need a separate bank account, and firms would need a business continuity plan.

The proposal also adds requirements for restrictive legends. A transfer agent could not process an unregistered securities transaction without a reasonable basis to believe the transaction complies with the Securities Act.

For tokenized securities, this is central. A technically valid wallet transfer is not automatically a legally valid securities transfer. The system needs controls that connect the movement of the token to the rights and restrictions attached to the security.

This is the compliance first model I have argued for throughout my work in tokenized capital formation. The chain can improve speed, auditability, and coordination. The underlying security still needs valid rights, accurate ownership records, defined authority, and accountable market participants.

The Rulebook Is Becoming Technology Neutral

Much of the existing transfer agent framework still uses language built around paper certificates, mailed documents, and manual processing.

The proposal replaces certificate specific terms with language that applies to both certificated and uncertificated securities. It updates references to mailing and dispatch so electronic communication can fit within the same framework. It also aligns posting and turnaround expectations with the modern settlement cycle.

For uncertificated securities, the SEC makes an important point: updating the master securityholder file is the transfer. The proposal would generally require the relevant position details to be posted within one business day, consistent with the current settlement cycle.

The recordkeeping rules would also recognize records that exist on a blockchain or another distributed ledger. A transfer agent using a third party system would need independent access that allows regulators to examine the records and receive complete, current copies.

This is technology neutral regulation with operational specificity. The rules do not need to name every network or software design. They do need to establish what the record must show, who can access it, how quickly it must update, and who remains responsible for its integrity.

That is a better foundation than regulating one technical implementation at a time.

What Issuers and Infrastructure Builders Should Do Now

The rules are proposed, not final. The comment period will remain open for 60 days after publication in the Federal Register. The final requirements may change.

The direction is still clear enough for issuers and infrastructure providers to prepare.

First, identify the authoritative ownership record. If a token moves, define exactly when the legal record changes and which system controls in a conflict.

Second, connect wallets to identity and rights. The architecture should show who controls a wallet, what the holder owns, which restrictions apply, and how the issuer can communicate with that holder.

Third, design the control layer before the transaction layer. Eligibility, approvals, legends, recovery, exceptions, and corporate actions need an operating model before volume arrives.

Fourth, make the record examinable. A public ledger can provide transparency, but regulatory access also requires complete records, associated identity data, readable copies, and clear responsibility for third party systems.

Fifth, choose the tokenization model deliberately. An issuer sponsored token whose network record forms part of the master securityholder file is different from a token that represents a custodial entitlement or provides synthetic exposure to another security. The rights and risks are not interchangeable.

At Deal Box, we have learned to begin with the security, the issuer, and the ownership architecture before selecting the technology. A blockchain can move a token. The complete system must also preserve investor rights and issuer control while improving how capital is issued, held, and transferred.

The Operating Manual Is Finally Taking Shape

The SEC press release points to blockchain. The fact sheet adds electronic recordkeeping, risk management, compliance, and restrictive legends. The full proposal goes further by asking how onchain records, wallet addresses, offchain identity, and the master securityholder file should work together.

That combination is why this proposal matters.

The tokenization debate has advanced from whether a security can exist onchain to who maintains the official record, how ownership changes become legally effective, what controls protect investors, and how the system can be inspected when something goes wrong.

Those are the operating questions that turn a technical demonstration into capital markets infrastructure. The serious work now is to help ensure the final rules support onchain markets without weakening the accuracy, accountability, and investor protections that make securities ownership credible.

Sources: SEC transfer agent rule proposal, SEC modernization fact sheet, SEC press release, SEC staff statement on tokenized securities, Commissioner Hester M. Peirce's statement, and Commissioner Mark T. Uyeda's statement.

‍