Choose a crypto custodian by checking whether its legal and contractual structure, supported assets and networks, security controls, payment workflows, recovery arrangements, reporting and full fees fit your business—not by relying on a marketing label, an affiliation or a general claim of insurance. The contract and operating structure determine who holds or controls assets and what may happen if the custodian or a subcontractor fails. Have qualified counsel assess those terms in every relevant jurisdiction.
Start with the business’s operating requirements
Before comparing providers, document what the service must do. Separate safekeeping from adjacent services such as trade execution, fiat conversion, settlement and liquidity: these may be supplied by different entities, with different responsibilities and fees.
As an Amazon Associate I earn from qualifying purchases.
- Entity and geography: Identify the company using the service, its relevant countries and the jurisdictions where the provider and any custody entities operate.
- Assets and networks: List each token and the exact network your business and counterparties use. Support for a token does not by itself establish support for every network on which it exists.
- Payment patterns: Estimate balances, incoming and outgoing payment frequency, counterparties, typical transfer sizes and any conversion requirements.
- People and controls: Define who initiates, approves and reconciles payments, including what should happen when an approver is unavailable or leaves the company.
- Finance operations: Specify required transaction records, statements, accounting exports or integrations, reconciliation cadence and escalation channels.
- Recovery needs: Decide how the business would restore access or continue essential operations after lost credentials, staff changes, a provider outage or another disruption.
Use these requirements as pass-or-fail checks before weighing convenience or price. A custody service that cannot support the company’s payment workflow may be unsuitable even if its storage arrangements look acceptable.
Recommended Free Tools
Establish who holds the assets and what happens in insolvency
Identify the legal entity that signs the agreement, the entity or entities that actually provide custody, where assets are held, and every sub-custodian or other critical service provider. Ask how client positions and transfers are recorded, whether client assets are kept distinct from the provider’s own assets, and what the contract says happens if a provider or sub-custodian becomes insolvent.
#1 Best Overall
- Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
- Enjoy Bluetooth connectivity, iOS access, and hours of battery use with this mobile-first, secure backup signer. Freedom you can depend on.
- Genuine Check: confirm your signer is authentic during setup with the Ledger Wallet app.
- Protect your signer: keep it in mint condition at all times with a bespoke Pod or Case to avoid scratches and everyday wear and tear.
Do not assume that a provider’s description of assets as “segregated” settles the legal question. Ask counsel to review the contract, governing law, custody locations and operational structure for the business’s specific jurisdictions, including how the company would assert its rights in an insolvency.
For covered EU crypto-asset service providers offering custody and administration, MiCA Article 75 requires a written agreement describing matters including the parties, service, custody policy, communication and authentication systems, security systems, fees and applicable law. It also addresses client-position registers, custody policies and client rights. Determine whether the particular provider and service fall within the relevant scope; the rule is not a substitute for reviewing the company’s agreement. Read MiCA Article 75.
Cross-border custody can add legal complexity. FINMA’s January 12, 2026 guidance highlights the insolvency risks associated with custody abroad and the need to ensure customer crypto-assets do not form part of a custodian’s bankruptcy assets. That supervisory warning is not a guarantee that any particular contract achieves that result. See FINMA’s guidance on custody risks.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallCrashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteRank #2
- Proven security at scale: Over 9 years and millions of cards issued with no known remote hacks, while military‑grade EAL6+ security keeps your private keys locked inside the chip. Your cryptocurrencies stay strongly protected from online attackers.
- Tap once to manage your entire crypto wallet across 90 blockchains - no USB cables or Bluetooth, no batteries, no setup. Access 14,100+ coins & tokens, DeFi, NFTs, and staking instantly from your phone
- Smart backup: Use your second Tangem Wallet as your Backup keys with end‑to‑end encryption; no more papers, pictures. If one card is lost, the remaining can still restore full access, with an optional seed phrase available for advanced users.
- Engineered to last up to 25 years: Waterproof (IP69K), shockproof and tested for extreme temperatures from −25°C to 50°C. A durable cold wallet with long‑term protection and independently audited security.
- Trusted by 6 million users worldwide - buy, sell, swap, stake, and spend cryptocurrency directly. The secure offline storage wallet designed for how people actually use crypto wallets
Test security, approvals and recovery arrangements
Ask the provider to explain its controls in terms the business can evaluate. Avoid treating a particular technology or security label as proof of safety: the relevant question is how the full arrangement controls access, authorizes transfers, detects problems and recovers operations.
- Where is key material held, and which provider staff, subcontractors or other parties can access it or operate critical systems?
- How are withdrawals initiated and approved? Can the business assign distinct roles, require multiple approvals, restrict destinations or use allowlists?
- Which authentication methods are supported, and how are access rights changed or removed after personnel changes?
- How are unusual instructions, suspected account compromise, mistaken addresses or other potentially harmful events handled?
- What incident-notification commitments, continuity arrangements and recovery procedures apply? When were relevant procedures last tested, and what evidence can the provider share?
- Which independent audit or control reports are available, what period do they cover, and what entities and services are in scope?
Ask how the company regains access after lost credentials or a staff departure, and how essential activity would continue through a provider disruption. The U.S. banking agencies’ July 14, 2025 statement addresses safekeeping by banking organizations, emphasizing safe and sound operations and compliance with applicable law; it says it creates no new supervisory expectations. It is not a general licensing rule for every crypto custodian. Read the agencies’ statement.
Strong passwords and multifactor authentication can protect business accounts, but account-level protections do not replace the custodian’s controls over assets and transfers. If the company plans to use a hardware security key, first confirm the custodian supports that device and its authentication protocol. The SEC’s custody bulletin recommends asking how assets and keys are safeguarded and who can access them; it is investor education, not a rule or Commission statement.
Rank #3
- Unparalleled Security: Protect your assets with EAL 6+ Secure Element, offering robust defense and complete transparency
- Simple & Secure Interface: Manage your digital assets easily with a clear OLED screen for secure on-device confirmations
- Supports 1000s of Coins & Tokens: Securely handle thousands of assets, including Bitcoin, Ethereum, and more, all in one wallet
- Effortless Asset Management: Monitor and transact seamlessly with Trezor Suite, our intuitive desktop and mobile app
- Enhanced Backup Solution: Multi-share Backup eliminates single points of failure for secure cold wallet recovery
Walk through the complete payment and treasury workflow
Map one typical payment from funding to accounting close, then ask the provider to show how each step works for the exact asset and network involved.
- Funding: Confirm supported deposit routes, address and network requirements, and how incoming transfers appear in the company’s records.
- Initiation and approval: Establish who can create a payment, what approvals are required, and whether recipient allowlisting or other destination controls are available.
- Signing and broadcast: Clarify which entity authorizes and submits the transaction, what service windows apply, and how the provider handles delayed, rejected or unusual instructions.
- Network confirmation and receipt: Ask how transaction status is reported and how the company and counterparty determine that a payment has completed. Do not assume a universal settlement time.
- Conversion or settlement: If the workflow needs fiat conversion, execution or liquidity, identify which entity supplies it, what charges apply and who is responsible for each step.
- Accounting and reconciliation: Check what transaction-level records and statements are available, how corrections or disputes are handled, and whether the output fits the finance team’s process.
- Failure handling: Ask what happens after a mistaken address, network congestion, a delayed or rejected withdrawal, or a provider outage, and which party handles escalation.
For stablecoins, a target value does not make a token risk-free or interchangeable with bank money. The FCA describes qualifying stablecoins as cryptoassets that seek to maintain stable value by referencing one or more fiat currencies and notes possible payment and cross-border settlement efficiencies. Its page for CP25/14 says final rules and guidance on qualifying stablecoin issuance and cryptoasset safeguarding were published June 30, 2026, and apply to firms authorized under FSMA on or after October 25, 2027. Those dates and rules are UK-specific; check the FCA’s current position and the provider’s status before relying on them. See the FCA’s CP25/14 page.
Verify insurance, fees and the provider’s evidence
Ask whether insurance applies to the particular custody arrangement and get the terms in writing. Establish which assets and loss events are covered, who is insured, applicable limits and sublimits, exclusions, deductibles, the claims process and whether the customer has direct rights. A general statement that a provider is insured does not establish that the company’s assets or a particular loss would be covered.
Rank #4
- UNPARALLELED SECURITY: Protect your assets with Trezor Safe 5's NDA-free EAL 6+ Secure Element, offering robust defense and complete transparency.
- EFFORTLESS NAVIGATION: Experience seamless crypto management with the vibrant color touchscreen, designed for intuitive and user-friendly interactions.
- ENHANCED USER EXPERIENCE: Enjoy tactile confirmation with Trezor Touch Haptic Engine, making each interaction precise and engaging.
- SUPPORTS 1000s OF COINS & TOKENS: Securely handle thousands of assets, including Bitcoin, Ethereum, and more, all in one wallet.
- EASY ASSET MANAGEMENT: Monitor and transact seamlessly with Trezor Suite, our user-friendly desktop and mobile app
Request the complete fee schedule, then model it against the business’s expected balances, transfer frequency, payment count and conversion needs. The SEC bulletin identifies possible annual asset-based, transaction, transfer, setup and account-closure charges; ask which of these apply, how they are calculated and whether other charges may arise. The SEC bulletin also outlines custody questions for customers.
Collect evidence that relates to the actual provider entity and service, not just a corporate group or a different product. Review relevant control reports, operational and financial disclosures, complaint handling, customer support and material service dependencies. A license, audit report, insurance statement or bank affiliation is one piece of diligence, not a complete assessment of the arrangement.
Understand what the jurisdictional materials do—and do not—establish
| Jurisdiction | What the cited material addresses | What the business still needs to verify |
|---|---|---|
| European Union | MiCA Article 75 sets custody-agreement, client-position register, custody-policy and client-rights duties for covered providers offering custody and administration. | Whether the provider and service are within scope, and whether the company’s contract and custody structure protect its rights. |
| United States | The federal banking agencies’ July 14, 2025 statement concerns safekeeping by banking organizations. The OCC’s May 7, 2025 release says national banks and federal savings associations may provide crypto-asset custody and execution, including outsourcing permissible activities subject to appropriate third-party risk management. | These bank-focused materials are not a status check for a nonbank custodian or confirmation that a particular provider is suitable or authorized for the buyer. Verify the provider and service independently. |
| Switzerland | FINMA’s January 12, 2026 announcement highlights technology risks in crypto-asset custody and the complexity of foreign custody in insolvency. | How the particular contract, custody locations and applicable laws affect the company’s rights if a provider fails. |
| United Kingdom | The FCA’s CP25/14 page, updated June 30, 2026, says final stablecoin issuance and cryptoasset safeguarding rules apply to firms authorized under FSMA on or after October 25, 2027. | Current implementation, the provider’s authorization and whether the rules apply to the specific service. |
Sources: ESMA’s MiCA Article 75 text; the Federal Reserve Board, FDIC and OCC statement; the OCC’s May 7, 2025 release; FINMA’s January 12, 2026 announcement; and the FCA’s CP25/14 page.
Make the selection decision
Compare providers against the same written requirements and ask for contract language or evidence where a sales answer is material. A practical shortlist should distinguish essential requirements from preferences, and show who is responsible for each custody, payment, conversion and support function.
- Stop if a core requirement is unclear: for example, the contracting entity, supported network, transfer approval process, asset treatment in insolvency or recovery path.
- Escalate legal and insurance questions: have qualified advisers review the actual agreement, jurisdictional structure and written coverage terms for the company’s situation.
- Compare total operating fit: assess whether the provider can support the transaction path, reporting, approvals, support and fees the business actually needs, not just whether it offers custody.
- Keep a record: save the requirements, provider responses, evidence reviewed, unresolved points and approvals so the decision can be revisited when services, contracts or rules change.
This is a general selection guide, not legal, tax, accounting or investment advice. The cited materials do not determine whether a particular buyer, asset, service or custodian is authorized or suitable; that assessment depends on the buyer’s facts and the provider’s actual arrangement.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Free tools Windows power users keep installed
One-click scans. No signup required.
