Safe Harbor, SIPC Limits, and the Creditor Line, Explained
// Segregation, pooling, and pro-rata shortfalls; what investor-protection coverage does and does not reach; and why the cap applies to the gap, not to your account.
Brokerage failures are rare. Nothing on this page predicts one, describes any specific firm's condition, or suggests anyone should act. In the large majority of failures, customer accounts simply transfer to a healthy firm within days and nobody loses anything.
What follows is not a warning. It is the order — who is paid in what sequence when a financial firm is wound down, because that order is written in statute and you are entitled to read it. Rare is not never, and the rules only matter in the case where they matter.
If a brokerage fails, customer securities are supposed to be held apart from the firm's own assets and returned to customers, usually by transferring whole accounts to another firm. Customer holdings sit in a pooled account, not individual boxes, so if the pool is short, customers share the shortfall proportionally. Investor-protection coverage then steps in to fill gaps, up to a per-customer cap.
Separately, certain counterparties — repo, derivatives, and similar financial contracts — sit under safe harbor provisions that let them close out and take collateral outside the normal bankruptcy freeze. Revisions in 2005 broadened that category considerably.
// WHAT YOU WILL LEARN
- What segregated actually means, and what it does not.
- How customer property is divided when a pool comes up short.
- What investor-protection coverage covers, and its three real edges.
- What the 2005 safe-harbor revisions changed about the order of claims.
- Three worked examples showing where the caps do and do not bite.
// THE WALLS THAT ACTUALLY EXIST
It is worth starting with what genuinely protects a customer, because most coverage of this topic skips straight to the scary part.
Segregation rules. Broker-dealers are required to keep fully-paid customer securities in their possession or control, separate from the firm's own trading book, and to maintain a reserve against customer cash. This is a real, audited, enforced requirement — not marketing language.
Customer property is not the firm's property. Under the commercial code governing securities accounts, assets a brokerage holds for its customers are held for the entitlement holders. They are generally not the firm's own assets and generally not reachable by the firm's ordinary unsecured creditors.
Investor-protection coverage. In the U.S. system, a statutory member corporation steps in when a member firm fails and customer property is missing, advancing funds to make customers whole up to defined limits.
Three walls. All real. Now the shape of each.
// READ THE SERIES// WHAT SEGREGATED REALLY MEANS
Segregation does not mean a box in a vault with your name taped to it. It means customer assets are kept apart from the firm's own book. Within that separation, holdings of a given security are pooled across customers.
Pro rata — proportional. If a pool of customer property is short, the shortfall is shared across customers in proportion to their claims, rather than being borne entirely by whoever files last.
That has two consequences, one comforting and one not.
- If the pool is whole, everyone is made whole. This is the ordinary case.
- If the pool is short — through error, misuse, or the fog of a fast collapse — every customer takes a proportional haircut before any other protection applies.
Net equity — the value of a customer's claim, broadly the value of the securities and cash owed to them, used to determine each customer's share of the customer-property pool in a liquidation.
// THE SHIELD AND ITS THREE EDGES
When customer property is missing, investor-protection coverage advances funds to fill the gap. It has worked, repeatedly, and pretending otherwise would be a fear play. But it is a shield with a defined shape, and the shape matters.
Edge one — it is capped. Coverage is limited per customer, per capacity, with a lower internal sub-limit for cash. Hold more than the cap at one failed firm and the coverage fills up to the cap, not up to the pile.
Edge two — it covers missing property, not falling prices. If your holdings drop in value during a panic, that loss is a market loss and it is yours. This protection was never market insurance.
Edge three — not everything is covered. Certain instruments and certain account types fall outside the protected category. What qualifies is defined by statute, not by what feels like it should count.
// OPEN THE BOARD// THE LINE
When a financial firm is wound down, claimants do not arrive together. They arrive in an order set by law. In broad terms, and simplifying considerably:
| Position | Who | On what basis | |---|---|---| | Outside the queue | Qualifying financial-contract counterparties | Safe-harbour close-out and collateral rights | | Ahead of unsecured claims | Secured creditors, to the extent of their collateral | Perfected security interests | | The customer estate | Customers, sharing customer property pro rata | Net equity claims | | Behind | General unsecured creditors | Ordinary claims |
The row that surprises people is the first one.
Safe harbor — provisions in bankruptcy law that exempt certain financial contracts, such as repurchase agreements, securities contracts, swaps and similar derivatives, from parts of the normal bankruptcy process, notably the automatic freeze on creditor action.
Automatic stay — the freeze that normally halts creditors from seizing or liquidating a bankrupt entity's assets while the case is sorted out. Safe-harbour counterparties are largely exempt from it.
// WHAT 2005 CHANGED
Legislation passed in 2005 substantially widened the categories of financial contract that qualify for safe-harbour treatment, and broadened the close-out and netting rights attached to them.
The practical effect: in a large failure, qualifying counterparties can close out positions and take their collateral immediately, without waiting for the bankruptcy process to organise itself. They are not standing in the queue — they are through a side door before the queue forms.
This is worth stating precisely, because it is easy to overstate.
- It does not mean customer securities are pledged to counterparties. Properly-held, fully-paid customer securities are not the firm's to pledge.
- It does mean that where customer property has been improperly commingled or drawn into collateral chains, the untangling happens after the fastest claimants have already moved.
- It does mean speed asymmetry is structural, not incidental.
One note on intent. The book The Great Taking argues this architecture was assembled deliberately — a mechanism waiting for a crisis. That is the book's argument, and it is presented here as the book's argument, not as a claim of this article. The subject here is mechanics, not motives. The mechanics stand on their own: an entitlement is a claim, claims stand in a line, and the line was re-ordered in a bill almost nobody read.
// THREE WORKED EXAMPLES
All three assume a failure where the customer-property pool comes up short. Figures are illustrative, chosen to show where the caps bite. They are not estimates of any real scenario.
| Case | Account | Pool shortfall | Customer's pro-rata gap | Covered by the cap? | |---|---|---|---|---| | A | $60,000 | 8% | about $4,800 | Comfortably — gap is far below the cap | | B | $600,000 | 8% | about $48,000 | Yes — the gap, not the account, is what gets filled | | C | $2,000,000 | 40% | about $800,000 | Partly — the gap exceeds the per-customer cap |
The read: the cap applies to the shortfall being filled, not to the size of your account. This is the single most misunderstood point in the whole topic. A large account at a firm with an intact pool is fine. The cap only becomes the binding constraint in case C — a large account and a severe shortfall.
Illustrative worked examples at assumed rates of shortfall. Real distributions depend on the actual estate, the trustee's determinations, and facts unknown in advance. Nothing here estimates any real firm or event.
// OPEN THE WAR LEDGER// WHAT THE RECORD ACTUALLY SHOWS
The honest counterweight, and it belongs on this page as much as anything above.
- The common failure is boring — accounts transfer to a healthy firm, customers notice a letterhead change and nothing else.
- In the large, messy liquidations of recent decades, customers have generally been made whole in the end, sometimes after a long wait.
- The waiting is itself a real cost. Made whole eventually and available on Tuesday are different things, and the difference can matter enormously depending on what you needed that money for.
That last point is the practical takeaway, and it is not a fear play. It is a statement about liquidity and time, not about loss.
// THE SHORT ANSWER, ONE MORE TIME
- Customer securities are segregated from the firm's assets, and pooled among customers.
- A short pool is shared pro rata; investor-protection coverage then fills gaps up to a per-customer cap, with a lower cash sub-limit.
- The cap applies to the shortfall, not to your account balance.
- Qualifying financial-contract counterparties sit outside the normal freeze under safe-harbour rules widened in 2005, and move first.
- Failures are rare, and the usual outcome is an uneventful account transfer.
// KEEP WALKING
Previously: what the legal object you hold actually is, and why the certificate does not carry your name.
Next: where entitlements end and directly-held assets begin, road by road.
// READ THE FRONT