Crypto Custody Options for Offshore Trusts

Cryptocurrency held in an offshore trust is typically owned through a Cook Islands LLC, and the custody model determines how much legal separation exists between the settlor and the assets. That separation matters because U.S. courts can order a person to surrender private keys or initiate on-chain transfers, and refusal can result in contempt sanctions including fines or incarceration.

The four main custody approaches (exchange accounts, hardware wallets, institutional custodians, and multi-signature wallets) each resolve the tension between the settlor’s need for day-to-day access and the trustee’s ability to secure the assets when a legal threat arises. The strongest legal protection comes from arrangements where no single party, including the settlor, can move the cryptocurrency unilaterally.

How Custody Models Compare Across Key Dimensions

Exchange accounts, hardware wallets, institutional custodians, and multi-signature wallets differ across six dimensions that affect both legal protection and practical usability.

Dimension	Exchange Custody	Hardware Wallet	Institutional Custody	Multi-Signature
Legal separation	Moderate	Moderate	Strong	Strongest
Counterparty risk	High (exchange failure)	None	Low (regulated custodian)	None
Settlor flexibility	Full trading access	Full wallet control	Limited	Moderate
Trustee takeover ease	Easy (account credentials)	Requires physical access	Already in trustee’s control	Requires key coordination
DeFi/staking access	Exchange staking only	Full	Limited	Possible with configuration
Annual cost	Minimal	Minimal	$1,000–$5,000+	Minimal to moderate
Best for	Active traders	Long-term holders	Large portfolios ($1M+)	Maximum legal protection

Exchange Custody Under the LLC

Exchange custody means the offshore LLC holds accounts on regulated exchanges such as Coinbase, Kraken, or Interactive Brokers. The settlor, serving as LLC manager, retains full trading authority. The exchange holds the cryptocurrency in its own custody infrastructure, and the LLC is the account holder of record.

The legal separation is moderate. The LLC owns the account, not the settlor personally, and a creditor cannot garnish the LLC’s exchange account through a standard writ served on the exchange because the account belongs to a foreign entity. But the settlor’s day-to-day access creates an argument that the settlor retains practical control. Documentation of the LLC’s management structure and the trust’s ownership chain strengthens the position that the assets belong to the trust, not the settlor.

The primary risk is exchange failure. The FTX collapse in 2022 destroyed over $8 billion in customer assets. Cryptocurrency held on any exchange is exposed to the exchange’s solvency, cybersecurity practices, and internal controls. The offshore trust protects against creditors, not against an exchange going bankrupt.

When a creditor threat triggers the duress provisions in the trust deed, the trustee takes over as LLC manager and changes the account credentials. This transition is operationally simple because exchange accounts use standard login credentials and API access. The trustee can freeze trading, move assets to a different exchange, or withdraw to a wallet under the trustee’s direct control.

Exchange custody works best for settlors who trade actively and need exchange-based tools for spot trading, derivatives, or exchange-native staking. The tradeoff is counterparty risk and weaker legal separation compared to models where no exchange holds the assets.

Hardware Wallet Custody

Hardware wallet custody eliminates exchange counterparty risk by holding cryptocurrency directly on devices such as Ledger or Trezor. The LLC owns the wallets, and the seed phrases and recovery keys are stored according to a custody protocol documented in the LLC’s operating agreement. The settlor manages the wallets as LLC manager during normal operations.

Because the cryptocurrency exists on the blockchain and only the person holding the private keys can move it, no exchange, custodian, or third party can freeze, seize, or lose the assets through institutional failure.

The legal analysis mirrors exchange custody: the settlor holds the keys in a fiduciary capacity as LLC manager, not as a personal asset. This distinction is stronger when the operating agreement explicitly addresses digital asset custody, the hardware devices are inventoried as LLC property, and the seed phrases are stored consistently with the LLC’s ownership.

The practical challenge is trustee takeover during duress. The trustee must obtain physical custody of the hardware wallets or access the backup seed phrases. If the seed phrases sit in a domestic safe deposit box that only the settlor can access, the transition stalls at the worst possible moment. The custody protocol should place backup seed phrases where the trustee can access them independently. Options include a secure vault in the Cook Islands, a safety deposit facility in the trustee’s jurisdiction, or a designated third-party custodian outside the United States.

Hardware wallets work best for long-term holders who do not trade frequently and want to eliminate counterparty risk entirely. The settlor accepts responsibility for physical security and must commit to a documented handoff procedure that actually functions under pressure.

Institutional Custody

Institutional custody places the cryptocurrency with a regulated digital asset custodian that holds private keys in segregated cold storage on behalf of the LLC or trust. Custodians in this space include firms like BitGo (which received an OCC national trust bank charter in 2025), Fireblocks, and Fidelity Digital Assets. Some Cook Islands trustee companies have partnerships with institutional custodians that integrate directly into the trust’s administration.

The legal separation is the strongest of any single-entity custody model. The settlor has no direct access to the private keys. The LLC or trust is the account holder, and the custodian follows the trustee’s instructions. If a U.S. court orders the settlor to turn over the cryptocurrency, the settlor cannot comply because the settlor does not control the keys—and the foreign custodian or trustee is not subject to U.S. court jurisdiction.

The tradeoff is flexibility. Institutional custodians are designed for security and compliance, not active trading or DeFi participation. Transactions require approval workflows, and withdrawals may take hours or days rather than minutes. Settlors who want to trade actively, stake tokens, or provide liquidity will find institutional custody restrictive.

Annual fees range from $1,000 to $5,000 or more depending on the custodian, asset value, and service level. For portfolios above $1 million, the cost is proportional to the security benefit. For smaller portfolios, institutional custody fees may not be justified when hardware wallets or multi-signature arrangements provide strong protection at lower cost.

Multi-Signature and Multi-Party Computation Custody

Multi-signature custody requires multiple private keys to authorize any transaction on the blockchain. A common configuration assigns one key to the settlor, one to the trustee, and one to a third party such as an attorney, a second trustee entity, or a secure vault provider. A two-of-three threshold means any two keyholders can authorize a transaction, but no single party can move the assets alone.

Multi-signature arrangements provide the strongest legal protection of any custody model. The settlor cannot unilaterally transfer the cryptocurrency, which means a court cannot compel the settlor to hand over assets the settlor does not independently control. The trustee holds one key but also cannot act alone. The structure demonstrates genuine shared control that no party can override—a fact that matters if a court later evaluates whether the settlor truly relinquished dominion over the assets.

Multi-party computation (MPC) is a newer approach that achieves a similar result through cryptography rather than blockchain-level key management. MPC splits the private key into encrypted fragments distributed across multiple parties or devices. No single party ever holds the full key. When a transaction is needed, the parties compute a valid signature together without reconstructing the complete key.

MPC eliminates the on-chain footprint of multisig transactions and supports easier key rotation if a keyholder needs to be replaced. That flexibility matters when the trust’s management structure changes during duress. Custodians like Fireblocks use MPC architecture for their institutional offerings.

The operational complexity of both multisig and MPC is real. Every transaction requires coordination between keyholders. Routine rebalancing, staking, or trading becomes slower. The third keyholder must be reliable, responsive, and technically capable. If the third party becomes unavailable, the remaining two parties must coordinate directly, which can create complications during duress if the settlor is no longer authorized to act as LLC manager.

Multi-signature and MPC custody work best for settlors who prioritize legal defensibility above operational convenience and hold large positions they do not need to trade frequently.

Which Custody Model Fits Which Portfolio

A settlor with $500,000 in cryptocurrency who trades weekly and participates in DeFi staking will usually choose exchange custody or hardware wallets. The operational flexibility outweighs the incremental legal benefit of more restrictive models, and the trust structure still provides substantial protection even with the settlor managing day-to-day access.

A settlor with $2 million or more in Bitcoin held for long-term appreciation, with no active trading, should consider institutional custody or a multi-signature arrangement. The assets do not require daily access, and the stronger legal separation justifies the reduced flexibility.

A blended approach is common. The LLC can hold some assets on an exchange for active management and other assets in a hardware wallet or institutional custody for long-term storage. The operating agreement should document which assets are held where and what custody protocol applies to each category. The trustee should receive regular reporting on custody allocation so the trust’s records match the actual holdings.

Every custody model provides some legal separation, but the real test comes when a creditor tries to reach the assets. If the settlor can move the cryptocurrency alone, a court has leverage to compel cooperation. If the settlor cannot move it alone, because a trustee, custodian, or co-signer outside U.S. jurisdiction must participate, the Cook Islands trust’s legal protections have the structural backing to function as designed.