How to Evaluate Bitcoin Custodians 2026: 7 Questions to Ask Before Trusting Anyone With Your BTC

Choosing a Bitcoin custodian is one of the most consequential financial decisions you can make. Get it wrong and you could lose everything — not through hacking, but through counterparty failure, insolvency, or simply choosing a service that doesn't meet your needs.

This guide is for individuals and businesses who are evaluating managed Bitcoin custody — either because full self-custody is impractical for their situation, or because they want institutional-grade security with a managed component.

First principle: The best Bitcoin custodian is no custodian. If you can safely self-custody your Bitcoin with a hardware wallet and proper backups, you should. Custody services introduce counterparty risk that doesn't exist when you control your own keys. But for certain amounts, legal structures, or situations, managed custody makes sense — and when it does, choose carefully.

7 Questions to Ask Any Bitcoin Custodian

1. Who Controls the Keys?

This is the foundational question. There are three models:

Full custodian: The custodian holds all keys. Your Bitcoin is stored on their infrastructure. You have a claim, not keys. Examples: Coinbase Prime, Gemini Custody, BitGo.

Collaborative multisig: You hold one or more keys; the custodian holds others. No single party controls funds. Examples: Unchained, Casa. This is meaningfully different from full custody — even if the custodian disappears, you retain control if you hold enough keys.

Non-custodial with services: The custodian provides software, tooling, or insurance but you hold all keys. Example: Unchained's Vault plan with their key as an emergency backup only.

The risk hierarchy: Full custodian (highest counterparty risk) → Collaborative multisig → Non-custodial. Choose the model that gives you the most key control your situation allows.

2. What Is Their Regulatory Status?

For institutional and high-net-worth custody, regulatory status matters for protection and legal clarity:

Qualified custodian: Under SEC rules, a "qualified custodian" has specific capital, insurance, and operational requirements. Many Bitcoin ETF custodians (Coinbase Prime, Fidelity Digital Assets, Gemini Custody) are qualified custodians. This status matters if you're a registered investment advisor or fiduciary.

NYDFS BitLicense: The New York BitLicense is the most rigorous US crypto license, covering custody operations. Coinbase and Gemini hold it; fewer others do.

Wyoming SPDI bank: Wyoming's Special Purpose Depository Institution charter allows Bitcoin-only banks with full reserve requirements. Custodia Bank was the first applicant (its Fed master account application was denied, but it operates under Wyoming charter).

Money Services Business (MSB): Most states require an MSB license for Bitcoin custody. Check that your custodian is properly licensed in your state.

Red flag: A custodian that cannot tell you clearly what licenses they hold and in which jurisdictions should not be trusted with significant funds.

3. What Is Their Proof of Reserves?

Proof of reserves (PoR) is a cryptographic attestation that a custodian holds the Bitcoin they claim to hold. After the FTX collapse (which involved fabricated reserves), this became a baseline expectation.

What good PoR looks like:

• Regular attestations (at minimum quarterly; best-in-class is real-time)
• Third-party auditor (not self-reported)
• Merkle tree proof that allows individual users to verify their specific balance is included
• Liabilities also disclosed (total customer balances match or exceed holdings)

What weak PoR looks like:

• "We have conducted an internal review"
• Annual attestation by an unknown or small accounting firm
• Holdings disclosed but no individual verification mechanism
• No liabilities disclosure (can hide fractional reserves)

Major custodians with strong PoR: Kraken (Armanino audits with user verification), Gemini (monthly attestation), Coinbase (public company with full financial reporting).

4. How Is Cold Storage Managed?

The custody industry standard is holding the vast majority of customer Bitcoin in offline cold storage — typically 95-100% for reputable custodians. Ask:

• What percentage is in cold storage vs. hot wallets?
• What hardware security modules (HSMs) or air-gapped systems are used?
• What is the signing procedure for withdrawals (multisig, time delays, human approval)?
• Where are physical keys stored? Are there geographically distributed backups?
• What happens if your primary data center is destroyed?

Industry standard: 95%+ cold storage. Top custodians quote 98-100%. Any custodian with less than 90% cold storage should be viewed skeptically.

5. What Insurance Do They Have?

Bitcoin custody insurance is a real product, though coverage varies significantly. Ask specifically:

• Do you carry commercial crime insurance covering employee theft?
• Do you carry specie insurance covering physical destruction of keys?
• Do you carry cyber insurance covering hack losses?
• Who is the underwriter? (Lloyd's of London, Aon, etc.)
• What is the coverage limit vs. your total AUM?
• Does coverage apply to cold storage as well as hot wallets?

Red flag: "We have insurance" without details. A custodian with $10 billion AUM and $250 million in insurance coverage is effectively uninsured for a total loss.

For individual self-custody, services like AnchorWatch offer Bitcoin-specific custody insurance that complements a hardware wallet setup.

6. What Are the Withdrawal Terms?

Even if a custodian holds your Bitcoin honestly, withdrawal restrictions can trap your funds:

• How long does a withdrawal take? (1 hour? 24 hours? 48 hours?)
• Are there withdrawal limits? (daily, weekly)
• Is there a notice period for large withdrawals?
• What documentation is required for withdrawals?
• Has the custodian ever delayed or suspended withdrawals?

Historical example: Gemini's lending product froze customer withdrawals for months during the 2022-2023 Genesis crisis. While the exchange itself remained functional, customers in the yield product could not access funds.

For primary custody (not lending), withdrawal terms should be clean — your Bitcoin, available within 24-48 hours, with no surprise conditions.

7. What Are the Full Fees?

Custody fees vary widely and are often quoted incompletely. Get the full picture:

Fee Type	What to Ask
Annual custody fee	% of AUM per year
Setup/onboarding fee	One-time
Withdrawal fee	Per transaction or per address
Network fees	Who pays on-chain fees?
Minimum balance	Required to maintain custody
Exit fee	Is there a cost to leave?

Typical ranges:

• Institutional custody: 0.05–0.5% annually on AUM
• Consumer-grade collaborative custody (Unchained, Casa): $10–$250/month depending on plan
• ETF custody (indirect): 0.20–0.25% expense ratio (embedded in ETF fees)

Custodian Comparison: Top Options

Full Institutional Custody

Coinbase Prime — Largest US custodian by AUM. Used by Bitcoin ETFs. Publicly traded (NASDAQ: COIN). Full regulatory compliance, insurance, qualified custodian status. Best for: funds, ETFs, large institutions.

Gemini Custody — NYDFS-regulated qualified custodian. SOC 2 Type 2 certified. Used by several institutional clients. Best for: New York-regulated entities, family offices.

Fidelity Digital Assets — Subsidiary of Fidelity Investments. Custodian for FBTC ETF. Full institutional backing of one of the world's largest asset managers. Best for: institutional clients with existing Fidelity relationships.

BitGo — Institutional custodian since 2013. Multi-signature architecture. Strong regulatory coverage. Best for: trading desks, exchanges needing custody.

Collaborative Multisig Custody

Unchained — 2-of-3 multisig where you hold 2 keys, Unchained holds 1 (or 1-of-3 where Unchained is emergency backup only). Collaborative signing, you can independently sign without them. Also offers IRAs. Best for: individuals and families who want self-custody with expert assistance.

Casa — Similar collaborative model. 2-of-3 or 3-of-5 multisig. Inheritance planning built in. Mobile app for signing. Best for: individuals who want white-glove service and mobile-friendly key management.

For a detailed comparison, see our Unchained vs Casa guide.

When Self-Custody Is the Right Answer

For most individuals, proper self-custody is better than any managed custodian. A hardware wallet like the Coldcard Mk4 or Foundation Passport, combined with proper seed phrase storage (metal backup) and a multisig setup, provides security that no custodian can match — because there's no counterparty to fail.

Managed custody makes sense when:

• Regulatory requirement (IRA, 401k, pension fund)
• Legal structure requires qualified custodian (RIA, family office)
• Amount is too large to manage personally with confidence
• Estate planning requires professional key management
• Corporate treasury needs institutional audit trails

Red Flags: Custodians to Avoid

• No proof of reserves or refuses to disclose
• Offers yield on your Bitcoin (requires lending = counterparty risk)
• Cannot name specific insurance underwriter and coverage limits
• Withdrawal restrictions tighter than 24-48 hours without clear reason
• No regulatory licenses disclosed
• Founded recently with no track record through a bear market
• Promises above-market returns on "custodied" funds

Frequently Asked Questions

What is the difference between a custodian and an exchange? An exchange facilitates buying and selling. A custodian specializes in holding assets securely. Some companies (Coinbase, Gemini) do both, but their custody divisions are separate entities with different regulatory status from their exchanges.

Is it safe to use a Bitcoin custodian? Reputable custodians with proper licensing, insurance, and proof of reserves are reasonably safe for custodial risk. But custodial risk is never zero. The safest option for most individuals remains self-custody with a hardware wallet.

What is collaborative custody? Collaborative custody uses multisig wallets where multiple parties each hold keys — typically you and the custodian. Neither party can move funds alone. This gives you the security assistance of a professional service while maintaining control: if the custodian disappears, you can still recover your Bitcoin using your own keys.

How do I know a custodian actually holds my Bitcoin? Look for proof of reserves with individual verification — a Merkle tree proof that your specific balance is included in the total. Major custodians like Kraken provide this. Without individual verification, proof of reserves can be gamed.

What happens to my Bitcoin if a custodian goes bankrupt? This depends on the legal structure. Bitcoin held in segregated accounts at properly structured custodians should be returnedto clients in bankruptcy (not treated as creditor assets). However, this is not guaranteed everywhere — legal proceedings can delay access for months or years. Collaborative multisig is safer because you retain keys regardless of the custodian's financial status.