How Protected Are Your Investments? A Crisis Scenario Guide for Households and Businesses

Executive Summary

TL;DR: 8 Key Insights

Understanding Your Protection Layer: FDIC, SIPC, CIPF, and Beyond

Financial protection frameworks exist at multiple levels. Deposit insurance programs like FDIC and CDIC protect cash held at banks. Investor protection programs like SIPC and CIPF protect securities and cash held at broker-dealers. Neither type of program covers market losses, fraud by the investor's own adviser (absent broker-dealer insolvency), or assets held at unregulated platforms.

The FDIC was established in 1933 in response to the bank failures of the Great Depression. It has since resolved over 4,000 bank failures without any insured depositor losing a single cent. SIPC was created in 1970 to restore investor assets when a broker-dealer becomes insolvent. SIPC does not function like the FDIC; it is not a government agency and does not use taxpayer funds. Instead, it is funded by assessments on member broker-dealers.

In Canada, CDIC was created in 1967 and has handled 43 member institution failures. CIPF was established in 1969 and has managed over 20 insolvencies. Both operate independently of government budgets and are funded by member assessments. The EU equivalent is the Investor Compensation Scheme Directive (97/9/EC), which requires member states to provide minimum coverage of 20,000 euros per investor, though many national schemes exceed this minimum.

The UK Financial Services Compensation Scheme (FSCS) covers investments up to 85,000 pounds per person per firm, and bank deposits up to 85,000 pounds. These limits apply per eligible person per firm, meaning assets spread across multiple regulated firms multiply the effective coverage.

Account Types and Their Vulnerability Profile

Not all accounts carry the same risk during a financial institution failure. Cash brokerage accounts holding fully paid securities in segregated custody represent the lowest-risk profile. Under SEC Rule 15c3-3, broker-dealers must segregate customer securities and maintain a reserve of cash or qualified securities equal to the net amount owed to customers. If the broker fails, these segregated assets are returned to clients outside the insolvency estate.

Margin accounts are fundamentally different. When an investor borrows against securities, the broker retains a security interest in the pledged assets and is legally permitted to rehypothecate them, meaning the broker can use them as collateral for its own borrowing. Under SEC Rule 15c3-3, a broker may rehypothecate customer margin securities up to 140% of the customer's debit balance. If the broker fails while holding rehypothecated assets, the client becomes an unsecured creditor for the rehypothecated portion.

Retirement accounts, including 401(k) plans, IRAs, and Canadian RRSPs, receive additional legal protections. Under ERISA, 401(k) assets must be held in trust and are legally separated from the employer's and the plan administrator's assets. IRA custodians are similarly required to segregate client assets. In Canada, RRSPs and TFSAs held at CDIC member institutions receive separate coverage categories. The underlying investments within these accounts, however, remain subject to market risk regardless of the custody structure.

Bank savings and chequing accounts are covered by deposit insurance (FDIC in the US, CDIC in Canada) up to the applicable limits. Amounts exceeding these limits at a single institution represent genuine exposure in a bank failure. The FDIC's preferred resolution method, purchase and assumption transactions, typically results in all deposits (including uninsured amounts) being transferred to an acquiring institution, but this outcome is not guaranteed.

The Rehypothecation Blindspot

Rehypothecation is the practice by which a broker-dealer or bank uses client-pledged securities as collateral for its own financing. In the United States, Regulation T and SEC Rule 15c3-3 limit rehypothecation to 140% of the customer's debit balance. In the United Kingdom, there is no statutory limit, meaning a UK prime broker could theoretically rehypothecate the full value of a client's margin portfolio.

The collapse of MF Global in 2011 provided a real-world demonstration of rehypothecation risk. The firm used customer funds and securities to cover its own losses on European sovereign debt positions, ultimately creating a $1.6 billion shortfall in customer accounts. While customers eventually recovered approximately 93 cents on the dollar through the SIPC liquidation process, the recovery took over three years and involved significant litigation.

The Lehman Brothers failure in 2008 created similar issues for prime brokerage clients. Hedge funds and institutional investors with assets at Lehman's UK subsidiary faced extended freezes because UK insolvency law treats rehypothecated assets differently than US law. Some clients waited years to recover portions of their assets.

For individual investors, the practical implication is straightforward: assets held in cash accounts with no margin activity and no securities lending participation face minimal rehypothecation risk. Assets held in margin accounts, particularly those with high debit balances, face measurable risk if the broker becomes insolvent. Investors can check their account agreements for securities lending disclosures and rehypothecation authorizations.

What Happens During a Broker Failure: Step by Step

When a SIPC member broker-dealer fails, the process follows a structured sequence. First, SIPC applies to a federal court for appointment of a trustee to conduct a liquidation proceeding under the Securities Investor Protection Act (SIPA). The court issues a protective order that freezes the firm's operations and prevents creditors from seizing assets.

The trustee's first task is to identify and return customer property. Fully paid securities held in segregated accounts are returned directly to customers, typically within one to three months. Cash balances and securities that cannot be located (because they were rehypothecated, used in proprietary trading, or otherwise misappropriated) are covered by SIPC up to the statutory limits.

In practice, SIPC has handled the liquidation of over 300 broker-dealers since its creation. In the vast majority of cases, customer assets were returned in full because they were properly segregated. The Madoff liquidation, which remains the largest SIPC proceeding in history, ultimately recovered over $14 billion for customers, though the process took more than a decade.

In Canada, CIPF operates similarly. When a CIRO-regulated dealer becomes insolvent, CIPF works with the insolvency trustee to return customer property. If shortfalls exist, CIPF provides coverage up to $1 million per account category. The categories include general accounts, registered retirement accounts (RRSP, RRIF, LIRA), and registered education savings plans (RESP), each receiving separate coverage.

Household Liquidity During a Financial Freeze

During a broker-dealer failure, customer accounts are typically frozen for a period ranging from days to weeks. During this period, clients cannot trade, withdraw funds, or transfer securities. For households that maintain their primary liquid reserves in brokerage accounts, this creates an immediate cash flow challenge.

The 2008 financial crisis demonstrated this dynamic. When Bear Stearns and Lehman Brothers failed, clients experienced account freezes lasting from several days (Bear Stearns, where JP Morgan acquired the brokerage operations quickly) to several weeks (Lehman Brothers UK, where the insolvency process was protracted). While US clients of Lehman's broker-dealer subsidiary were largely protected by the rapid SIPC-facilitated transfer to Barclays, the transition was not instantaneous.

The educational takeaway is that liquidity planning should account for the possibility that brokerage assets may be temporarily inaccessible. Financial planners generally recommend maintaining three to six months of essential expenses in bank accounts (covered by FDIC or CDIC insurance) separate from investment accounts. This provides a buffer during any institutional transition period.

The 30-Day Liquidity Freeze Simulator, available as a companion tool to this article, allows readers to model their own liquidity resilience by entering household expenses, liquid reserves, and brokerage concentration. The tool generates an educational assessment of how many days of essential spending could be covered if brokerage accounts became temporarily inaccessible.

Business Cash and Treasury Exposure

Businesses face a distinct set of custody and protection challenges. Corporate treasury operations typically involve larger cash balances, often exceeding deposit insurance limits at a single institution. A business maintaining $5 million in operating cash at a single bank has $4.75 million in uninsured deposits (FDIC limit: $250,000). While the FDIC's Transaction Account Guarantee Program temporarily provided unlimited coverage for non-interest-bearing transaction accounts from 2008 to 2012, that program has expired.

The Silicon Valley Bank failure in March 2023 highlighted this exposure. Approximately 93.8% of SVB's deposits were uninsured, primarily held by technology companies, venture-backed startups, and nonprofits. While the FDIC, Federal Reserve, and Treasury Department ultimately invoked the systemic risk exception to protect all depositors, this intervention was discretionary and is not guaranteed in future failures.

Canadian businesses face similar concentration risk. CDIC coverage of $100,000 per category means that a business with $2 million in operating deposits has significant uninsured exposure. The IntraFi (formerly CDARS) deposit placement service in the US and similar programs in Canada allow businesses to spread deposits across multiple institutions to maximize insurance coverage, though these services involve additional operational complexity.

For businesses, the Counterparty Concentration Calculator provides an educational framework for assessing single-institution exposure. The tool models concentration risk by asset type, jurisdiction, and percentage of total assets, generating a diversification awareness profile without providing specific financial advice.

Retirement Account Protections: What Is Actually Safe

Retirement accounts receive multiple layers of legal protection that distinguish them from standard brokerage and bank accounts. In the United States, 401(k) plans are governed by the Employee Retirement Income Security Act of 1974 (ERISA), which requires plan assets to be held in trust, legally separated from the employer's own assets. This means that if a company goes bankrupt, its employees' 401(k) assets cannot be claimed by the company's creditors.

Individual Retirement Accounts (IRAs) are held by custodians (banks, brokerages, or trust companies) in segregated accounts. If the custodian fails, the assets are still the property of the IRA holder and are protected by SIPC (if held at a broker-dealer) or FDIC (if held in bank deposits). Traditional and Roth IRAs also receive federal bankruptcy protection up to approximately $1.5 million (adjusted periodically for inflation), meaning creditors cannot seize IRA assets in bankruptcy proceedings.

In Canada, Registered Retirement Savings Plans (RRSPs) and Tax-Free Savings Accounts (TFSAs) held at CDIC member institutions receive separate coverage categories, each with its own $100,000 limit. RRSPs and TFSAs held at CIRO-regulated dealers are covered by CIPF up to $1 million per registered account category. Provincial legislation in most Canadian provinces also provides creditor protection for RRSPs, RRIFs, and certain insurance-based retirement products.

The critical distinction is that all of these protections address custody and institutional failure risk. They do not protect against investment losses. A 401(k) invested in equity index funds will decline in value during a market downturn regardless of the custody structure. The protection framework ensures that the assets remain the property of the account holder even if the custodian or plan administrator becomes insolvent.

Cryptocurrency Custody: The Unregulated Frontier

Cryptocurrency custody represents the most significant gap in the investor protection framework. No government-backed insurance program in any major jurisdiction currently covers cryptocurrency held on exchanges or in custodial wallets. The collapse of FTX in November 2022, which resulted in approximately $8 billion in customer losses, demonstrated the consequences of this gap.

When FTX filed for bankruptcy, customer cryptocurrency became part of the bankruptcy estate. Unlike a SIPC liquidation, where customer securities are identified and returned first, the FTX bankruptcy treated customer assets as unsecured claims against the estate. While the eventual recovery exceeded expectations (with some customers receiving more than 100% of their claim value due to cryptocurrency price appreciation during the bankruptcy process), the outcome was uncertain and the process took over two years.

Self-custody, where the investor holds their own private keys using hardware wallets or other cold storage solutions, eliminates institutional counterparty risk entirely. However, self-custody introduces operational risks including key loss, theft, and the absence of account recovery mechanisms. There is no "forgot password" option for a lost private key.

Some cryptocurrency exchanges and custodians maintain private insurance policies, but these are typically limited in scope and do not provide the same level of coverage as FDIC or SIPC. Coinbase, for example, maintains crime insurance for a portion of its custodial holdings, but the exact coverage amount relative to total customer assets is not publicly disclosed. Investors should review the specific insurance and custody disclosures of any exchange or custodian they use.

Canada Section: CDIC, CIPF, OSFI Framework

Canada's financial protection infrastructure is distinct from the US system in several important ways. The Office of the Superintendent of Financial Institutions (OSFI) serves as the primary prudential regulator for federally regulated financial institutions, including banks, trust companies, and insurance companies. OSFI's supervisory framework is widely regarded as among the most conservative in the world, which contributed to Canada's avoidance of major bank failures during the 2008 financial crisis.

CDIC protection has expanded significantly in recent years. As of 2024, CDIC covers eligible deposits in seven separate categories: deposits held in one name, joint deposits, deposits held in trust, RRSP deposits, RRIF deposits, TFSA deposits, and deposits held for paying taxes on mortgaged properties (FHSA). Each category receives $100,000 in coverage per depositor per member institution, meaning a depositor who maximizes all categories at a single institution could have over $700,000 in total coverage.

CIPF coverage applies to clients of dealer members regulated by the Canadian Investment Regulatory Organization (CIRO, formerly IIROC and MFDA). CIPF covers customer losses up to $1 million per account category resulting from the insolvency of a CIRO dealer member. Coverage categories include general accounts, registered retirement accounts, and registered education savings plans. CIPF does not cover losses resulting from market fluctuation, unsuitable investments, fraud by the dealer's representatives (absent insolvency), or dealings with non-CIRO members.

Canada's Big Six banks (Royal Bank of Canada, Toronto-Dominion Bank, Bank of Nova Scotia, Bank of Montreal, Canadian Imperial Bank of Commerce, and National Bank of Canada) are designated as Domestic Systemically Important Banks (D-SIBs) by OSFI. They are subject to higher capital requirements, enhanced stress testing, and recovery and resolution planning requirements. The Canadian bail-in regime, implemented through amendments to the Bank Act in 2018, applies only to these D-SIBs and targets specific prescribed shares and liabilities, not retail deposits or segregated securities accounts.

Building Awareness Without Building Panic

Financial crisis preparedness is an exercise in structural awareness, not a response to imminent threat. The investor protection frameworks described in this article have functioned effectively through multiple institutional failures, including the 2008 financial crisis, the MF Global collapse, the SVB failure, and dozens of smaller broker-dealer and bank insolvencies. In the overwhelming majority of cases, insured and segregated client assets have been returned in full.

The purpose of understanding these frameworks is not to generate fear but to enable informed decision-making. An investor who understands the difference between a segregated cash account and a margin account with full rehypothecation authorization can make more informed choices about where and how to hold assets. A business treasurer who understands deposit insurance limits can structure treasury operations to minimize uninsured exposure.

The three interactive tools accompanying this article, the Asset Protection Awareness Analyzer, the 30-Day Liquidity Freeze Simulator, and the Counterparty Concentration Calculator, are designed to facilitate this awareness. They do not predict outcomes, score institutions, or provide financial advice. They translate regulatory frameworks into personalized educational context.

The Cabier Perspective: Preparedness as Intelligence

From a systemic risk governance perspective, the investor protection frameworks discussed in this article represent the outermost layer of a multi-tiered safety architecture. The inner layers include capital adequacy requirements (Basel III/IV), central bank lending facilities (lender of last resort), fiscal backstops (deposit insurance funds), and resolution frameworks (FDIC receivership, BRRD resolution, Canadian bail-in regime).

Cabier Intelligence approaches these structures through the lens of operational resilience: the ability of financial systems and their participants to absorb shocks without cascading failures. For households and businesses, operational resilience translates to structural preparedness: diversified custody, adequate liquidity buffers, clear understanding of insurance limits, and documented contingency plans for institutional disruption scenarios.

For institutional regulatory mapping and systemic risk treatment, see the companion analysis: Custody Integrity and Bail-In Regimes (CABIER Intelligence). For structural portfolio resilience planning, see: Building a Crisis-Resilient Portfolio (FINANCETRACKERiQ).

Frequently Asked Questions

Explore the Full Series