If a bank acts in a fiduciary capacity, it must follow federal fiduciary rules under parts 9 or 150, depending on the charter. All crypto-related activity must be conducted in a safe, sound, and lawful manner. This applies to both direct and third-party services.