The depository question.
What happens to allocated and segregated bullion if the depository fails. The structural answer is in the bankruptcy code, the historical precedent, and the depository agreement language — not in marketing copy. Each is examined below.
The question is structural, not theoretical.
A reserve held in allocated and segregated custody at an institutional US depository is a position on which a household is, by structure, dependent on the depository remaining solvent and operationally functional. That dependency is real. It is also bounded — bounded by the legal characterization of allocated bullion under the bankruptcy code, by the contractual standing the depository agreement creates, and by the failure-mode history of the precedent insolvency proceedings. This note reads each.
The note does not assert that depository failure is unlikely or impossible. It establishes what changes structurally if a failure occurs — and what does not change — for a holder of allocated and segregated bullion specifically, as distinct from a holder of unallocated or pooled-allocation positions.
A serious counterparty diligence is a reading of the bankruptcy code first, the agreement language second, and the marketing copy not at all.
Allocated bullion is the client’s property, not the depository’s asset.
An allocated holding is, in the institutional custody framework, the client’s property held by the depository as bailee. The client owns specific bars, identified by serial number where individually numbered and by lot number where not, recorded against the client’s account. The depository’s role is custodial; the depository does not have a balance-sheet claim on the bars and does not encumber them.
Under US bankruptcy code, customer property held by an insolvent custodian is generally not part of the custodian’s estate. Section 541(d) of the Bankruptcy Code excludes property in which the debtor holds only legal title, not equitable title; allocated bullion is the canonical example. The trustee’s task in such an insolvency is identification and return of customer property — not redistribution of it among general creditors.
This characterization is not unique to bullion. The same framework treats customer securities held in street name at a custodian, customer commodities held in segregated accounts under CFTC rules, and customer cash held in trust at certain regulated entities. Allocated bullion custody sits inside this established framework. The particulars vary by depository jurisdiction; the structural logic is consistent across the major US precedents.
Customer-property law worked. Customer cash didn’t.
MF Global Holdings Ltd. filed for Chapter 11 protection on October 31, 2011. In the wind-down, the SIPC trustee identified customer commodities held at MF Global — including allocated precious-metals positions — as customer property under CFTC segregation rules. Those holdings were not pulled into the general estate. They were returned to customers as customer property, on the timeline the trustee’s identification and the bankruptcy court’s approval set.
The headline of the MF Global failure is the customer- cash shortfall — approximately $1.6 billion at the peak of the crisis — that emerged because customer-segregated cash had been used inappropriately to fund proprietary positions in the days before the failure. That shortfall was a violation of the segregation rules, not a feature of them. Allocated customer commodities (where the segregation discipline was in fact maintained operationally) returned to customers; non-segregated funds did not.
Two structural lessons sit inside the MF Global record. First: the customer-property framework works, where the segregation discipline is in fact maintained. Second: the operational verification that segregation is maintained is the binding constraint — not the contractual language that says it is.
The customer-property framework is sound. The operational discipline that keeps the framework intact is the variable a client’s diligence verifies.
Allocated client assets returned. The mechanism took years.
Lehman Brothers International (Europe) entered administration on September 15, 2008. The administrators inherited an enormous book of customer assets, including allocated securities, custody accounts, and some allocated commodities holdings. Under the UK Financial Services and Markets Act 2000 framework and successive court rulings (notably the 2010 Supreme Court decision in Re Lehman Brothers International (Europe) (in administration)), client assets held under the FCA Client Asset Sourcebook (CASS) were ultimately returned to clients as their property, separate from the estate.
Two factual notes from the proceedings are worth carrying into the diligence read on a depository. First: the legal characterization of client property as property of the client (not the estate) was upheld at the highest level of UK appellate review — the framework worked under stress. Second: the operational pathway from filing to return of property took approximately five to six years from the September 2008 filing through the bulk of the asset-return process, with material distributions running to clients across that window.
A client whose worst-case scenario is “the depository fails and my position is gone” should read the LBIE record carefully. The position is not gone. The position is, under the legal framework, recoverable as customer property. The cost is time and legal-process administration. That distinction matters.
Counsel reviews. The Office coordinates around counsel’s instruction.
The depository storage agreement is signed between the client (or the client’s named entity) and the depository directly. The Office is not a counterparty to that agreement and does not opine on its specific provisions. The Office’s engagement places the agreement in counsel’s hands before any metal is purchased so that counsel can review it under counsel’s retainer.
Where counsel has redlines that the depository cannot accommodate, the Office surfaces that constraint and proposes a different facility from the panel. Operational treatment of the custody mechanics — allocated and segregated structure, documentation chain, all-risk insurance posture, inspection and transfer rights — lives on the Custody page.
The structural framework is sound. The operational discipline is the variable.
A diligence read of the failure modes that have actually occurred in the institutional custody record points consistently at three categories. None is inherent to allocated structure. All three are operational integrity questions a client’s diligence verifies upstream.
- ·Operational segregation discipline. Was the segregated account in fact segregated, or were customer assets commingled in violation of the written framework? MF Global is the canonical case. The verification is regular third-party audit, not the agreement language alone.
- ·Insurance backstop adequacy. If a physical-loss event occurs (theft, fire, in-transit loss), is the insurance structure sufficient to make the client whole, and on what timeline? The institutional standard is all-risk coverage, typically Lloyd’s-underwritten, with named per-account and per-event limits.
- ·Successor-counterparty pathway. If the depository ceases operations in an orderly way (sale of business to a peer institutional facility), what is the operational pathway for transferring the client’s allocated holdings? The agreement should name it; the Office’s engagement memo references it.
The Office’s panel of three US-domestic facilities — the Utah-based Precious Metals Vault, IDS, and Brinks — is selected with these three operational criteria as the binding constraints, alongside the allocated-and-segregated structural posture.
Bounded risk, named explicitly.
A directly-titled allocated and segregated reserve carries depository-counterparty exposure. That exposure is bounded by the customer-property framework, by the three-clause depository agreement, by the operational audit discipline of the facility, and by the standing insurance posture. Each of these is named in writing in §03 of the Office’s brief, supported by the documentation chain the engagement produces, and verifiable by counsel and CPA before any metal is purchased.
The frequently-encountered alternative answers to the depository question — offshore custody (different legal framework, additional cross-border coordination), ship-to-home (the household becomes the custodian, with full operational responsibility), pooled allocation (different bankruptcy-code treatment), prime-broker custody (omnibus structure inside the broker’s balance sheet) — each shifts the failure-mode exposure rather than removing it. The Office’s position is that the institutional US-domestic allocated and segregated framework, paired with the operational discipline at the named facilities, is the best-defended structure available for a US-domiciled client at $250,000 and above.
The exposure is bounded, named, verifiable, and comparable. A reserve held outside this framework is not less exposed; it is differently exposed.
The next note steps to the discipline of writing the exit before the entry.
Office Note 09 examines why the plan to sell is a brief section — written before purchase — rather than a later conversation. The argument is structural: what the discipline costs to write, what it protects against, and the categories of access that operate without it.