Table of Contents
  1. The Custody Spectrum
  2. Institutional Custodians — Head-to-Head
  3. Self-Custody at Scale
  4. The Hybrid Custody Model
  5. Bitcoin Custody Insurance
  6. Custody in Your Trust Documents
  7. Comparison Table
  8. Frequently Asked Questions

Most Bitcoin guides talk about custody in the abstract. This one doesn't. If you hold more than $500,000 in Bitcoin, you've already moved past the "is a Ledger good enough?" phase into territory where the wrong decision — or no decision — could result in losses that can't be undone.

Unlike almost every other asset class, Bitcoin has no safety net. There's no FDIC insurance, no broker-dealer protections, no estate recovery mechanism if keys are lost. A mistake in custody architecture at significant scale is permanent. This guide is about making sure that doesn't happen to you — or your heirs.

We cover the full custodial spectrum, every major institutional option (with real fees and honest limitations), and the hybrid models that most sophisticated family offices actually use.

Section 1: The Custody Spectrum

Bitcoin custody exists on a spectrum from fully custodied (someone else holds the keys) to fully sovereign (only you hold the keys). Understanding where you are on this spectrum — and where you should be given your holding size and risk tolerance — is the foundational question.

Hot Wallet Exchange custody. Maximum convenience, maximum counterparty risk.
Warm Wallet Software multisig. Good for operational funds up to ~$250K.
Cold Storage Hardware multisig. Best for significant self-custody.
Institutional Regulated custodian. Counterparty risk with insurance documentation.

Hot Wallets: Convenient but Categorically Wrong for Significant Holdings

Leaving Bitcoin on an exchange — Coinbase, Kraken, Gemini — is hot custody. You own a claim on Bitcoin, not Bitcoin itself. The exchange holds the keys. If the exchange fails (as FTX did spectacularly in 2022), your claim may be worth far less than your Bitcoin was.

For holdings above $50,000, exchange custody should be limited to Bitcoin actively being traded or deployed, not stored. This is a categorical rule, not a preference. The risk/reward is simply wrong at meaningful holding sizes.

Warm Wallets: The Operational Layer

Warm wallets — typically multi-signature software setups using tools like Sparrow Wallet or Electrum — occupy the middle ground. They're suitable for operational Bitcoin: funds you might need to access in days or weeks, not years. Think of warm wallet custody as your Bitcoin checking account. Everything above that threshold belongs elsewhere.

Cold Storage: The Gold Standard for Most Family Offices

Hardware wallet cold storage — Coldcard, Trezor, Foundation Passport — with properly implemented multisig is the gold standard for most Bitcoin holders under $25M. The keys exist offline, in physical form, and never touch the internet. The security model is well-understood, battle-tested, and doesn't require trusting a third party.

The limitation isn't security — it's operational complexity and succession risk. If you die and your family doesn't know your multisig setup, your Bitcoin may be inaccessible permanently. This is why self-custody at scale requires documented procedures as much as hardware.

The "Not Your Keys, Not Your Coins" Debate

Bitcoin's ethos has long held that only self-custody is real custody. "Not your keys, not your coins" is a mantra — and at smaller holding sizes, it's correct. But at institutional scale, the calculus becomes more nuanced.

The counter-argument: counterparty risk (institutional custody) may be quantifiably lower than key loss risk (self-custody failure) for some families. If your family has limited technical sophistication and you're holding $20M in Bitcoin, the risk of a botched key management setup may genuinely exceed the risk of a regulated, federally chartered custodian failing.

Neither view is universally correct. The answer is almost always a hybrid — and we'll cover exactly how to structure one.

Key Principle

The right custody structure isn't the most secure one in isolation — it's the one that best balances security, succession readiness, regulatory compliance, and operational needs for your specific situation.

Section 2: Institutional Custodians — Head-to-Head

The institutional Bitcoin custody market has matured significantly since 2020. There are now multiple regulated, well-capitalized custodians that can serve family offices. Here's an honest assessment of each.

Anchorage Digital

Regulatory Status OCC National Trust Bank (Federal Charter)
Practical Minimum $5M+ AUM
Typical Fees 0.25–0.5% AUM annually
Key Architecture Proprietary HSM + MPC

Anchorage Digital holds the distinction of being the first and only federally chartered cryptocurrency bank in the United States. The OCC National Trust Bank charter places Anchorage under federal banking supervision — a materially different regulatory framework than state-chartered trust companies or unchartered custodians.

What this means practically: Anchorage operates under federal banking standards for capital requirements, risk management, and fiduciary duties. For a family office whose attorney is concerned about fiduciary defensibility, the OCC charter provides a strong paper trail.

Security architecture: Anchorage uses a proprietary Hardware Security Module (HSM) infrastructure with multi-party computation signing. Clients never hold private keys directly; signing occurs within tamper-resistant hardware. The practical implication is that there's no single point of compromise — neither a Anchorage employee nor a client can unilaterally move funds.

Limitations: Anchorage is US-only, and its regulatory complexity can slow onboarding (expect 4–8 weeks for institutional accounts). The fee structure, while in line with the market, is material at smaller institutional sizes. And critically: this is not self-custody. If Anchorage were acquired, failed, or faced adverse regulatory action, there would be a recovery process — not instant access.

Best for: Family offices with $5M+ who need fiduciary-grade regulatory assurance and are comfortable with the tradeoff of not holding keys directly.

Watch out for: Regulatory complexity for trust-owned accounts; US-only jurisdiction; not suitable as your only custody solution.

Fidelity Digital Assets

Regulatory Status NYDFS Licensed Trust; SOC 2 Type II
Practical Minimum $5M+ AUM
Typical Fees Negotiated; typically 0.15–0.35% AUM
Key Architecture Cold storage + MPC hybrid

Fidelity Digital Assets is a subsidiary of Fidelity Investments — one of the largest financial services companies in the world, with $4+ trillion in AUM across its traditional businesses. That institutional backing is the core value proposition: Fidelity isn't going anywhere, and their institutional relationships across the traditional finance world are unmatched.

Security architecture: Fidelity Digital Assets uses a cold storage architecture with multi-party computation signing for withdrawals. The system is SOC 2 Type II certified, meaning an independent auditor has verified the security controls are operating effectively. For family offices and institutional investors who require third-party security certifications, SOC 2 Type II is the gold standard.

Fee opacity: Unlike BitGo or even Anchorage, Fidelity Digital Assets fees are negotiated on a per-client basis and not publicly disclosed. This is standard in institutional finance but frustrating for comparison shopping. Expect to negotiate, and expect fees to be more competitive at higher AUM tiers.

Ecosystem advantage: If your family already has significant assets at Fidelity — retirement accounts, brokerage accounts, 529 plans — the integration between traditional custody and digital asset custody in a single reporting relationship has real value. Consolidated reporting and simplified counterparty relationships matter for family office administration.

Best for: Families already in the Fidelity ecosystem; institutional investors who require SOC 2 Type II and large institution stability.

Watch out for: Fee negotiation required; limited to large/institutional clients; MPC is newer technology than multi-sig.

BitGo

Regulatory Status Trust Company (SD + NY licensed)
Practical Minimum $1M+ AUM
Typical Fees $2,500–$10,000/year flat + tx fees
Key Architecture 3-of-5 Multi-sig; BitGo holds 1 key

BitGo is one of the oldest and most established Bitcoin custodians in the market. Founded in 2013, it pioneered multi-signature custody and has operated continuously through multiple market cycles — including periods where competitors failed. That track record matters.

Multi-sig architecture: BitGo uses a 3-of-5 multi-signature architecture. Of the five keys, BitGo holds one as backup. The client holds two. A designated "backup key" institution holds the remaining two. To authorize a transaction, three of five keys must sign. This means neither BitGo alone nor the client alone can move funds unilaterally — a genuine check on counterparty risk that MPC-based architectures don't provide in the same way.

Insurance: BitGo carries up to $700M in digital asset insurance through Lloyd's of London syndicates. This is among the highest insurance limits in the industry and is documented in a way that family office counsel can review and reference in estate planning documents.

Lower minimums: BitGo's flat-fee structure and lower minimum AUM ($1M+ practical) make it accessible to mid-market family offices that are too large for consumer custody solutions but not yet at Fidelity's minimum thresholds. At $5M AUM, a $5,000/year flat fee represents 0.1% — highly competitive.

Best for: Mid-market family offices ($1M–$20M) who want institutional insurance documentation, regulatory standing, and a battle-tested multi-sig architecture.

Watch out for: State trust company (not federal bank) charter; still counterparty risk if BitGo were to fail; transaction fees add up for active accounts.

Coinbase Prime

Regulatory Status Publicly traded (NASDAQ: COIN); state-licensed
Practical Minimum Variable; oriented to institutions
Typical Fees Negotiated; 0.1–0.35% AUM typical
Key Architecture Cold vault with geographic distribution

Coinbase Prime is the institutional custody and prime brokerage arm of Coinbase, the largest US cryptocurrency exchange. Being publicly traded (NASDAQ: COIN) adds a layer of transparency and regulatory scrutiny that private custodians don't have: audited financial statements, SEC reporting, and public accountability.

Cold vault architecture: Coinbase Prime's custody system stores the majority of assets in geographically distributed cold storage vaults. Assets are offline by default. Withdrawals require multi-party authorization and have time-locked processes for large amounts.

Insurance: Coinbase maintains up to $320M in commercial criminal insurance (covering theft, fraud, and loss from third-party actions). This is less than BitGo's $700M coverage but from a more recognizable institutional name. Note that Coinbase's own exchange hot wallet insurance is separate from Prime custody insurance.

Programmatic access: Coinbase Prime offers robust API access for programmatic custody management — useful for family offices with treasury management systems that need to integrate custody data into reporting workflows.

Best for: Institutional clients comfortable with Coinbase's brand; those needing programmatic API access; situations where counterparty public company status is a requirement.

Watch out for: Coinbase has faced regulatory pressure; as a public company, its stock performance and regulatory status are publicly visible risks; less Bitcoin-native ethos than BitGo or Anchorage.

Copper, Komainu, and Fireblocks: The MPC Alternatives

A second tier of institutional providers uses MPC (Multi-Party Computation) architecture rather than traditional multi-signature. Key providers include:

MPC vs. Multi-sig — the key distinction: In traditional multi-sig, N complete private keys exist. In MPC, the cryptographic signing process is split across parties, so no complete key ever exists in one place. MPC is more operationally flexible (easier to change key holders without moving Bitcoin) but is a newer cryptographic method with less Bitcoin-specific battle-testing. Multi-sig has a decade of on-chain history and stronger community-level security audit coverage.

For a family office choosing between MPC and multi-sig: multi-sig (BitGo, or self-custody) has stronger long-term auditability. MPC offers operational advantages but requires trusting the MPC implementation — an additional technology risk layer.

Section 3: Self-Custody at Scale

The common assumption is that self-custody becomes untenable at scale. This is wrong. Self-custody with proper architecture is viable and arguably superior for many family offices — particularly those with Bitcoin positions under $25M.

When Self-Custody Wins

Self-custody wins when:

3-of-5 Multisig Architecture at Scale

A proper self-custody setup for a family office holding $1M–$25M in Bitcoin looks like this:

Collaborative Custody: The Middle Path

Between pure self-custody and full institutional custody lies collaborative custody. Services like Unchained Capital and Casa hold one key in a 2-of-3 setup — you hold two keys, they hold one emergency key. You retain full sovereignty over your Bitcoin (you can always transact using your two keys without Unchained or Casa's involvement), but if you lose one of your keys, they can help you recover.

Unchained Capital: Offers Bitcoin-secured lending alongside custody. Their collaborative custody product stores your Bitcoin in a 2-of-3 multisig where Unchained holds one key as backup. Annual fees run $1,500–$5,000 depending on service tier. Unchained is deeply Bitcoin-native and has strong documentation around estate planning integration.

Casa: Focuses on consumer and prosumer Bitcoin holders. Their Gold and Diamond tiers offer 3-of-5 and 5-of-8 setups with Casa holding one or more backup keys. Casa's app-based interface makes multisig more accessible for less technically sophisticated family members.

Liana by Wizardsardine: A newer but compelling option — open-source multisig wallet software with time-locked recovery paths. Liana allows you to configure a primary key setup and a backup recovery path that activates after a specified time period, enabling estate recovery without requiring the backup key holder to be reachable for normal operations.

UTXO Management for Large Positions

At significant holding sizes, how you store Bitcoin within a wallet matters as much as which wallet you use. UTXOs (Unspent Transaction Outputs) are the individual "coins" in your Bitcoin wallet. Proper UTXO management means:

This level of UTXO management is where most consumer Bitcoin holders fall short and where working with a Bitcoin-specialized advisor or custody service becomes tangibly valuable.

Section 4: The Hybrid Custody Model (Recommended for $5M–$50M)

After reviewing every option, the structure we recommend for most family offices with $5M–$50M in Bitcoin is a hybrid model. Here's what it looks like:

60–70% Self-Custody Cold Storage
3-of-5 multisig, hardware diversity, geographic distribution
20–30% Institutional Custodian
For compliance documentation, insurance paper trail, fiduciary comfort
10% Warm Wallet
Operational access for transactions, rebalancing, lending

Why This Structure Works

Sovereignty where it matters most: The majority of your Bitcoin remains under your control, with keys that are fully accessible to your family without requiring any third party. A custodian failure doesn't affect this portion.

Institutional for the documentation layer: The 20–30% in institutional custody serves a specific purpose: creating the insurance documentation, regulatory paper trail, and fiduciary narrative that estate attorneys and trustees need. When your trust documents reference Bitcoin custody, having a portion at a regulated custodian provides a clear, auditable record for your estate.

The warm wallet is not optional: Having a small operational balance ($50K–$500K depending on holding size) in a more accessible warm wallet or collaborative custody setup lets you transact, rebalance, or collateralize Bitcoin without touching your cold storage or institutional accounts. Cold storage should be treated like a savings account — you access it rarely.

Important Nuance

Institutional custody is not a substitute for self-custody — it's a complement to it. Family offices who move everything to institutional custody trade key loss risk for counterparty risk. The hybrid model optimizes both without sacrificing either.

Section 5: Insurance for Bitcoin Custody

Insurance is the most misunderstood aspect of Bitcoin custody. Almost everyone in this space gets it wrong in one direction or another — either over-relying on insurance coverage that doesn't cover what they think it does, or dismissing insurance entirely.

What Institutional Custody Insurance Actually Covers

Bitcoin custody insurance is crime insurance. It covers:

Bitcoin custody insurance does not cover:

This distinction is critical. If you're holding Bitcoin at BitGo because you want insurance against price decline or custodian insolvency, you need to reread the coverage terms. The insurance is specifically crime insurance — it's an important protection, but a narrower one than most clients assume.

Lloyd's Syndicates and Bitcoin Insurance

Most digital asset insurance is underwritten through Lloyd's of London syndicates, which have been the primary insurers of Bitcoin custody since 2014. Lloyd's syndicates evaluate custodians based on their security architecture, operational controls, and historical claims record.

Insurance pricing (which custodians pay, not clients directly) runs approximately 0.5–2% of insured digital asset value annually, depending on the custodian's security rating. This cost is factored into the custodian's AUM fees — when BitGo charges 0.1–0.2% AUM annually, a portion of that is their insurance cost pass-through.

Self-Custody Insurance

Insurance for self-custody Bitcoin is rare but exists. Options include:

For most family offices with significant self-custody positions, the insurance gap is real and should be addressed in your risk planning. This is one tangible reason why holding a documented portion at an institutional custodian is valuable — it provides insured coverage for that portion while you work on insuring your self-custody component.

Section 6: Custody Architecture in Your Trust Documents

How you describe Bitcoin custody in trust documents is one of the more nuanced legal questions in Bitcoin estate planning. Get it right and your trustee can seamlessly manage Bitcoin. Get it wrong and you create ambiguity that could paralyze asset management or enable the wrong person to move Bitcoin.

Vendor-Neutral Language

Never name a specific custodian in your trust documents. Institutions change, merge, fail, and lose regulatory standing. Language that says "Bitcoin held at BitGo" becomes a problem the moment you move custody, BitGo changes its business model, or BitGo no longer exists.

Instead, use vendor-neutral language that describes the type of custody arrangement:

"Digital assets may be held in self-custody using multi-signature arrangements, with qualified digital asset custodians regulated under applicable federal or state trust company laws, or in collaborative custody arrangements with licensed service providers, as directed by the Investment Advisor."

This language allows flexibility as the custody landscape evolves without requiring a trust amendment every time you change custodians.

Directed Trusts: The Right Structure for Bitcoin

A directed trust separates the trustee's legal role (holding title, distributions) from the investment management role (controlling Bitcoin). In a standard trust, the trustee is responsible for investment decisions — which means they need to understand Bitcoin custody. Most corporate trustees don't.

In a directed trust, an "Investment Advisor" (a separate role, often held by a family member or Bitcoin-specialist advisor) has authority over custody decisions, trading, and key management. The trustee simply follows those directions. The trustee has no duty to monitor investment decisions beyond ensuring they're within the trust's investment policy statement.

For Bitcoin-holding trusts, directed trust structures in states like South Dakota, Nevada, and Wyoming make this separation clean and legally documented. The Investment Advisor role can be held by a family member who understands Bitcoin, while the trustee (often a corporate trust company) handles administration.

Emergency Access Protocols

Your trust documents should specify emergency access procedures. What happens if the primary Investment Advisor is incapacitated? Who is the backup? How do they obtain the information needed to access the Bitcoin?

Practically, this means creating a documented emergency access package — often sealed and held by your estate attorney or in a bank safe deposit box — that contains:

Section 7: Custodian Comparison Table

Custodian Min AUM Annual Fees Insurance Key Model Regulatory Status Best For Key Limitation
Anchorage Digital ~$5M 0.25–0.5% AUM Not publicly disclosed HSM + MPC OCC National Trust Bank (Federal) Fiduciary-grade assurance US only; regulatory complexity
Fidelity Digital Assets ~$5M Negotiated (0.15–0.35%) Not publicly disclosed Cold storage + MPC NYDFS Trust; SOC 2 Type II Fidelity ecosystem integration Opaque fees; limited public transparency
BitGo ~$1M $2,500–$10K/yr flat + tx Up to $700M (Lloyd's) 3-of-5 Multi-sig Trust Co. (SD + NY) Mid-market; insurance documentation State (not federal) charter
Coinbase Prime Institutional Negotiated (~0.1–0.35%) Up to $320M commercial criminal Cold vault + geographic dist. Public co. (NASDAQ: COIN); state-licensed API access; public company comfort Regulatory scrutiny on parent company
Fireblocks Institutional Platform fees (B2B) Varies by deployment MPC Technology platform; not direct custodian Institutions using Fireblocks rails Not a direct family office product
Unchained Capital None formal $1,500–$5,000/yr Limited 2-of-3 collab. multi-sig Unlicensed; state money transmission Mid-market self-custody hybrid No regulatory charter; limited insurance
Casa None formal $250–$2,000/yr Limited 2-of-3 or 3-of-5 collab. App-based service Consumer/prosumer self-custody support Not institutional-grade for large holdings
Pure Self-Custody N/A Hardware one-time ($500–$2K) Limited (Coincover, specialty) 3-of-5 multi-sig (DIY) N/A Full sovereignty; no counterparty risk Key loss risk; succession complexity

Section 8: Frequently Asked Questions

Institutional Bitcoin custody refers to professional third-party custodians — typically regulated trust companies or chartered banks — that hold Bitcoin on behalf of large investors, family offices, and institutions. They use advanced security architectures like HSMs and multi-party computation to eliminate single points of failure, and often carry significant insurance coverage for digital assets under their protection.

Practical minimums vary by custodian. BitGo is accessible at $1M+. Fidelity Digital Assets and Anchorage Digital generally require $5M+ to justify their fee structures. Below $1M–2M, collaborative custody solutions like Unchained Capital or Casa typically offer better cost-to-value ratios. For holdings above $5M, the compliance and insurance documentation benefits of institutional custody begin to justify the annual fee.

Institutional custodians typically charge 0.1–0.5% of AUM annually, plus transaction fees. BitGo offers flat-fee structures starting at $2,500–$10,000/year. At $5M AUM, all-in costs typically run $5,000–$25,000/year depending on transaction volume. Self-custody with a service like Unchained runs $1,500–$5,000/year. Pure DIY multisig hardware is a one-time $500–$2,000 with no ongoing fees.

It depends on which risks you're prioritizing. Institutional custody eliminates key loss risk but introduces counterparty and regulatory risk. Self-custody eliminates counterparty risk but concentrates key management risk on the holder. The most resilient strategy for significant holdings ($5M+) is a hybrid: the majority in self-custody multisig (no counterparty risk), with a portion at a regulated custodian for insurance documentation and fiduciary comfort.

Multi-sig (multisignature) requires M-of-N complete private keys to authorize a transaction — each key exists as a whole key held in different locations. MPC (Multi-Party Computation) splits the cryptographic signing process itself across multiple parties so no single party ever holds a complete key. MPC is more operationally flexible but is newer technology. Multi-sig is more battle-tested and has stronger on-chain auditability. BitGo uses multi-sig; Fidelity Digital Assets and Anchorage use MPC.

No. Bitcoin custody insurance is crime insurance — it covers theft, hacking, insider fraud, and physical destruction of hardware. It does not cover market price decline, custodian insolvency (FTX-style failure), regulatory seizure, or your own negligence. Understanding what the insurance actually covers is critical before relying on it as a risk mitigation narrative in estate documents or client conversations.

Yes. Institutional custodians like Anchorage Digital and BitGo can hold Bitcoin in the name of a trust entity. The trust (as a legal entity) is the account holder. This structure separates legal title (the trustee) from custody (the custodian). For family offices using directed trusts, you can further separate investment management authority from the trustee role — so the family or an investment advisor controls Bitcoin decisions while a corporate trustee holds legal title.

Anchorage Digital is the only federally chartered cryptocurrency bank in the US, holding a National Trust Bank charter from the OCC (Office of the Comptroller of the Currency). This means it operates under federal banking regulation — not just state money transmission laws. For family offices, the OCC charter provides stronger regulatory clarity, documented fiduciary frameworks, and institutional credibility versus state-chartered or unchartered custodians. It's a meaningful differentiator for attorneys who need a solid regulatory narrative in fiduciary documents.

A directed trust separates investment direction authority from the trustee. In a standard trust, the trustee controls investment decisions. In a directed trust, a separate "Investment Advisor" role has authority over specific decisions — like Bitcoin custody and trading — while the trustee handles administration and distributions. For Bitcoin, this means a family member or Bitcoin-specialist advisor can direct all custody arrangements without requiring the trustee to understand private key management. Favorable directed trust statutes exist in South Dakota, Nevada, Wyoming, and several other states.

Conclusion: Build Your Custody Architecture Intentionally

Custody is the foundational question in Bitcoin wealth management, and there's no single right answer. The right structure depends on your holding size, technical sophistication, succession planning needs, regulatory requirements, and risk tolerance.

What we know with confidence:

Getting this right is worth the time investment. The alternative — leaving your Bitcoin custody to chance or to a structure that breaks down in an edge case — is a risk that no amount of price appreciation can compensate for.

Custody Architecture Review

Our team works with family offices to design, document, and implement Bitcoin custody structures that are resilient, compliant, and succession-ready. We cover the full spectrum from self-custody setup to institutional custodian selection.

Explore Our Services →
HT
Hal Franklin
The Bitcoin Family Office
Hal Franklin covers Bitcoin custody, estate planning, and wealth management strategy for significant Bitcoin holders and family offices. The Bitcoin Family Office is an independent research and advisory platform focused on Bitcoin wealth management for high-net-worth individuals and families.

Bitcoin Mining: The Most Powerful Tax Strategy Available

Depreciation, OpEx deductions, and bonus depreciation can dramatically reduce your tax burden. Learn how Abundant Mines structures mining operations for maximum tax efficiency.

Explore Bitcoin Mining Tax Strategy →
Disclaimer: This article is for informational and educational purposes only and does not constitute financial, legal, or investment advice. Bitcoin custody decisions involve complex technical and legal considerations. Always consult with qualified legal counsel, a financial advisor, and Bitcoin-specialized professionals before making custody decisions. Fee and coverage information reflects market conditions as of February 2026 and is subject to change. The Bitcoin Family Office is an independent research platform and is not affiliated with any custodian mentioned in this guide.