Crypto Custody Options for Offshore Trusts

Cryptocurrency held in an offshore trust is typically owned through a Cook Islands or Nevis LLC, and the custody model determines how much legal separation exists between the settlor and the assets. U.S. courts can order a person to surrender private keys or initiate on-chain transfers, and refusal can result in contempt sanctions including fines or incarceration.

The four main custody approaches (exchange accounts, hardware wallets, institutional custodians, and multi-signature wallets) each strike a different balance between the settlor’s need for day-to-day access and the trustee’s ability to secure the assets when a legal threat arises. The strongest legal protection comes from arrangements where no single party, including the settlor, can move the cryptocurrency unilaterally.

How Custody Models Compare Across Key Dimensions

Exchange accounts, hardware wallets, institutional custodians, and multi-signature wallets differ across six dimensions that affect both legal protection and practical usability.

Dimension	Exchange Custody	Hardware Wallet	Institutional Custody	Multi-Signature
Legal separation	Moderate	Moderate	Strong	Strongest
Counterparty risk	High (exchange failure)	None	Low (varies by custodian)	None
Settlor flexibility	Full trading access	Full wallet control	Limited	Moderate
Trustee takeover ease	Easy (account credentials)	Requires physical access	Already in trustee’s control	Requires key coordination
DeFi/staking access	Exchange staking only	Full	Limited	Possible with configuration
Annual cost	Minimal	Minimal	Separate custodian fee	Minimal to moderate
Best for	Active traders	Long-term holders	Large long-term holdings	Maximum legal protection

Exchange Custody Under the LLC

Exchange custody means the offshore LLC holds accounts on regulated exchanges such as Coinbase or Kraken. The settlor, serving as LLC manager, retains full trading authority. The exchange holds the cryptocurrency in its own custody infrastructure, and the LLC is the account holder of record.

The legal separation is moderate. The LLC owns the account, not the settlor personally. A U.S. exchange can be served with a writ of garnishment, but a writ enforcing a judgment against the settlor reaches only the settlor’s property, and this account is the LLC’s. Even so, the settlor’s day-to-day access creates an argument that the settlor retains practical control. Documentation of the LLC’s management structure and the trust’s ownership chain strengthens the position that the assets belong to the trust.

The primary risk is exchange failure. The FTX collapse in 2022 locked customers out of their accounts. Cryptocurrency held on any exchange is only as safe as the exchange’s solvency, cybersecurity practices, and internal controls. The offshore trust protects against creditors, not against an exchange going bankrupt.

When a creditor threat triggers the duress provisions in the trust deed, the trustee takes over as LLC manager and changes the account credentials. This transition is operationally simple because exchange accounts use standard login credentials and API access. The trustee can freeze trading, move assets to a different exchange, or withdraw to a wallet under the trustee’s direct control.

Exchange custody works best for settlors who trade actively and need exchange-based tools for spot trading, derivatives, or exchange-native staking. The tradeoff is counterparty risk and weaker legal separation compared to models where no exchange holds the assets.

Hardware Wallet Custody

Hardware wallet custody eliminates exchange counterparty risk by holding cryptocurrency directly on devices such as Ledger or Trezor. The LLC owns the wallets, and the seed phrases and recovery keys are stored according to a custody protocol documented in the LLC’s operating agreement. The settlor manages the wallets as LLC manager during normal operations.

Because the cryptocurrency exists on the blockchain and only the person holding the private keys can move it, no exchange or other custodian can freeze, seize, or lose the assets through institutional failure.

The legal analysis is the same as for exchange custody. The settlor holds the keys in a fiduciary capacity as LLC manager, not as a personal asset. This distinction is easier to defend when the operating agreement explicitly addresses digital asset custody, the hardware devices are inventoried as LLC property, and the seed phrases are stored consistently with the LLC’s ownership.

The practical challenge is trustee takeover during duress. The trustee must obtain physical custody of the hardware wallets or access the backup seed phrases. If the seed phrases sit in a domestic safe deposit box that only the settlor can access, the transition stalls at the worst possible moment. The custody protocol should place backup seed phrases where the trustee can access them independently. Options include a secure vault in the Cook Islands, a safety deposit facility in the trustee’s jurisdiction, or a designated third-party custodian outside the United States.

Hardware wallets work best for long-term holders who do not trade frequently and want to eliminate counterparty risk entirely. The settlor accepts responsibility for physical security and must commit to a documented handoff procedure that actually functions under pressure.

Institutional Custody

Institutional custody places the cryptocurrency with a regulated digital asset custodian that holds private keys in segregated cold storage on behalf of the LLC or trust. Custodians in this space include firms like BitGo, Fireblocks, and Fidelity Digital Assets. Some Cook Islands trustee companies have partnerships with institutional custodians that integrate directly into the trust’s administration.

The legal separation is the strongest of any single-entity custody model. The LLC or trust is the account holder, the custodian follows the trustee’s instructions, and the settlor holds no keys.

An order to produce the cryptocurrency still runs against the settlor personally. Inability is something the settlor must prove in detail rather than assert, and courts hold asset protection settlors to a demanding standard. The defense collapses entirely for a settlor who surrendered the keys to frustrate a creditor. Custodian location is a separate question, because a custodian organized in the United States is subject to a U.S. court’s orders.

The tradeoff is flexibility. Institutional custodians are designed for security and compliance, not active trading or DeFi participation. Transactions require approval workflows, and withdrawals may take hours or days rather than minutes. Settlors who want to trade actively, stake tokens, or provide liquidity will find institutional custody restrictive.

The custodian bills its own charge on top of the trustee’s fee, and the amount turns on the custodian, the asset value, and the service level. On a large long-term position that charge buys security the settlor would otherwise have to provide personally. On a smaller position it may not be justified when hardware wallets or multi-signature arrangements protect the assets at lower cost.

Multi-Signature and Multi-Party Computation Custody

Multi-signature custody requires multiple private keys to authorize any transaction on the blockchain. A common configuration assigns one key to the settlor, one to the trustee, and one to a third party. A two-of-three threshold means any two keyholders can authorize a transaction, but no single party can move the assets alone. The third key can be held by an attorney, a second trustee entity, or a secure vault provider.

Multi-signature arrangements provide the strongest legal protection of any custody model. The settlor cannot move the cryptocurrency alone, and the trustee holds one key but also cannot act alone. An order aimed at the settlor alone produces nothing by itself. A court can still order the settlor to make the transfer happen, and the settlor’s answer is an inability the settlor must prove in detail against a standard courts set high for asset protection arrangements. A settlor who engineered the key split to defeat a known creditor has no defense.

Multi-party computation (MPC) is a newer approach that achieves a similar result through cryptography rather than blockchain-level key management. MPC splits the private key into encrypted fragments distributed across multiple parties or devices. No single party ever holds the full key. When a transaction is needed, the parties compute a valid signature together without reconstructing the complete key.

MPC eliminates the on-chain footprint of multisig transactions and makes it easier to rotate keys when a keyholder has to be replaced, as happens when the trust’s management structure changes during duress. Custodians like Fireblocks use MPC architecture for their institutional offerings.

Every transaction under multisig or MPC requires coordination between keyholders. Routine rebalancing, staking, or trading becomes slower. The third keyholder must be reliable, responsive, and technically capable. If the third party becomes unavailable, the remaining two parties must coordinate directly, which can create complications during duress if the settlor is no longer authorized to act as LLC manager.

Multi-signature and MPC custody work best for settlors who prioritize legal defensibility above operational convenience and hold large positions they do not need to trade frequently.

Which Custody Model Fits Which Portfolio

A settlor with $500,000 in cryptocurrency who trades weekly and participates in DeFi staking will usually choose exchange custody or hardware wallets. The operational flexibility outweighs the incremental legal benefit of more restrictive models, and the trust structure still provides substantial protection even with the settlor managing day-to-day access.

A settlor with $2 million or more in Bitcoin held for long-term appreciation, with no active trading, should consider institutional custody or a multi-signature arrangement. The assets do not require daily access, and the stronger legal separation justifies the reduced flexibility.

A blended approach is common. The LLC can hold some assets on an exchange for active management and other assets in a hardware wallet or institutional custody for long-term storage. The operating agreement should document which assets are held where and what custody protocol applies to each category. The trustee should receive regular reporting on custody allocation so the trust’s records match the actual holdings.

Every custody model provides some legal separation, but the test comes when a creditor tries to reach the assets. A settlor who can move the cryptocurrency alone gives a court the leverage to compel cooperation. If the settlor cannot move it alone, because a trustee, custodian, or co-signer outside U.S. jurisdiction must participate, the Cook Islands trust’s legal protections have the structural backing to function as designed.