Last updated: 25 October 2026 · Charters, audit reports, insurance statements and public prices rechecked on provider pages on 25 October 2026
The best institutional crypto custody providers in 2026 are BitGo for regulated qualified custody at scale, Anchorage Digital for federal bank custody with staking, Fireblocks for MPC wallet infrastructure with a public price, and Coinbase Prime for custody tied to trading. We scored eight providers on six weighted criteria, mapped what each one actually discloses, and priced year one of an MPC treasury stack from public list prices.
Custody is the decision that every other piece of a digital asset program depends on. Get the legal structure wrong and a fund cannot pass its audit; get the key model wrong and one compromised laptop can move the treasury. This guide covers both models, the qualified custodian and the MPC wallet platform, and explains how we score them on our methodology page.
TL;DR
- Ranking: 1. BitGo (9.3), 2. Anchorage Digital (9.0), 3. Fireblocks (8.8), 4. Coinbase Prime (8.4), 5. Copper (7.2), 6. Komainu (7.1), 7. Fidelity Digital Assets (7.0), 8. Utila (6.7).
- Three of the eight hold a US federal charter: BitGo Bank & Trust and Fidelity Digital Assets are OCC national trust banks, and Anchorage Digital Bank is an OCC chartered bank. Coinbase and Fireblocks run New York limited purpose trust companies.
- Only two providers state an insurance figure on their own pages: Copper ($500M specie cover placed through Aon at Lloyd’s) and BitGo ($250M through a Lloyd’s syndicate).
- Software prices are public: Fireblocks Essentials is $999 a month for up to 6 months, Utila Starter is $799 a month and Dfns Basic is $8,000 a year. Porto by Anchorage Digital costs $750 or $1,500 a month, and BitGo offers a free self-service tier. Qualified custody is still quoted in basis points on assets under custody.
- For a treasury moving $2M a quarter, year one costs at least $27,994 on Fireblocks, $9,588 on Utila Starter and $8,000 on Dfns Basic, before any custody add-on.
- Since 30 September 2025, SEC staff let registered advisers and funds treat qualifying state trust companies as banks for crypto custody, which widens the qualified custodian field.
The Decision Kernel
Start with who must legally hold the keys. Registered advisers, funds and many corporates need a qualified custodian, while trading firms, treasuries and builders often prefer to hold MPC key shares themselves. Pick the legal model first and the vendor second, because a great MPC wallet does not satisfy a custody rule on its own.
- Qualified custody across many assets and regions: BitGo, with an OCC trust bank, New York, Singapore, Dubai, EU and Swiss entities and over 1,700 assets.
- Self-custody MPC with policies and a network: Fireblocks, with 80+ chains, 2,000+ counterparties and a trust company if you later need a custodian.
- Custody next to an exchange and prime broker: Coinbase Prime, with 470+ custody assets and staking from cold storage.
- Federal bank oversight with staking and governance: Anchorage Digital, the OCC chartered crypto bank, with about 780 supported assets.
- Off-exchange settlement and stated insurance: Copper, with ClearLoop and $500M of specie cover.
- Lowest public price for an MPC stack: Utila or Dfns, if you can run your own controls.
Verdict: BitGo for most regulated buyers, Fireblocks for teams that want to hold their own keys, and Anchorage Digital or Coinbase Prime when custody must sit next to a bank charter, staking or trading.
Qualified Custodian or MPC Wallet Platform
Institutional custody covers two products. A qualified custodian is a regulated bank or trust company that holds assets apart from its balance sheet. An MPC wallet platform is software that splits each key into shares and lets your approvers sign. A custodian takes key control and adds a legal wrapper, while MPC leaves control and operational risk with you. Our crypto custody models guide compares qualified custody, MPC and self-custody side by side.
| Question | Qualified custodian | MPC wallet platform |
|---|---|---|
| Who controls signing | The custodian, under your instructions | Your approvers, with key shares split between you and the vendor |
| Legal segregation | Bankruptcy-remote accounts under a charter | Assets sit in your own wallets, so no custodian balance sheet is involved |
| Typical buyer | Funds, advisers, ETFs, banks, corporates | Trading firms, treasuries, exchanges, fintechs |
| Pricing | Basis points on assets under custody plus transfer fees | Platform fee, often with volume or signature limits |
| Examples here | BitGo, Coinbase Prime, Anchorage Digital, Fidelity Digital Assets, Komainu | Fireblocks, Utila, Dfns, Copper’s MPC custody |
Most larger programs end up with both: cold assets with a qualified custodian and an MPC hot or warm layer for trading and payments. Our MPC wallets and key management hub covers the self-custody side in more depth, and our MPC wallet providers guide ranks the platforms for institutions.
How We Ranked the Institutional Crypto Custody Providers
We scored each provider from 1 to 5 on six weighted criteria and doubled the sum, using provider pages read on 25 October 2026. A claim we could not find on the provider site scored as not disclosed, even if we have seen it in press coverage. See our methodology page and editorial policy.
- Regulation and segregation, 25%: charters and licences held by the custody entity, bankruptcy-remote segregation and qualified custodian status.
- Security and key control, 20%: cold storage, MPC or multisig design, HSMs, policy engines and recovery.
- Audits and insurance disclosure, 15%: SOC 1 and SOC 2 Type II reports, ISO 27001, other certifications and any stated insurance amount.
- Features, 15%: staking, governance, trading and off-exchange settlement, DeFi access and APIs.
- Coverage, 15%: supported assets and chains, plus the number of regulated regions.
- Pricing transparency, 10%: 5 for a full public price list, 4 for a public entry price with overage terms, 3 for a public price on a secondary product or a free tier, 2 for a billing method only, 1 for nothing.
| Provider | Regulation (25%) | Security (20%) | Audits (15%) | Features (15%) | Coverage (15%) | Pricing (10%) | Score |
|---|---|---|---|---|---|---|---|
 | 5 | 5 | 4 | 5 | 5 | 3 | 9.3 |
 | 5 | 5 | 4 | 5 | 4 | 3 | 9.0 |
 | 3 | 5 | 5 | 5 | 5 | 4 | 8.8 |
 | 4 | 5 | 4 | 5 | 5 | 1 | 8.4 |
 | 3 | 4 | 5 | 5 | 3 | 1 | 7.2 |
 | 4 | 4 | 4 | 4 | 3 | 1 | 7.1 |
 | 5 | 4 | 4 | 3 | 2 | 1 | 7.0 |
 | 2 | 4 | 3 | 4 | 4 | 4 | 6.7 |
BitGo leads because it is the only provider that scores 5 on regulation, security, features and coverage at once. Fireblocks loses points on regulation because most clients self-custody on its software, and its trust company is a separate entity with its own onboarding. Anchorage Digital matches BitGo on regulation and security and trails only on coverage. Utila publishes a low entry price but holds no custody charter.
What Each Institutional Crypto Custody Provider Discloses
Due diligence questionnaires ask the same five things: who holds the charter, which audit reports exist, whether ISO 27001 is in place, what insurance covers and what it costs. We checked each provider’s public pages for each item. Seven of eight providers name their SOC Type II reports, but only two put an insurance figure on their site.
- Insurance silence is common: Coinbase Prime, Anchorage Digital, Fidelity Digital Assets, Komainu and Fireblocks did not state a policy amount on the pages we read, so ask for the certificate, the insurer, the limit and what it excludes.
- SOC types matter: a SOC 1 Type II covers controls relevant to financial reporting, and a SOC 2 Type II covers security and availability controls over a period. BitGo’s security page says SOC attestations without naming the type.
- Charter location matters: Komainu is regulated in Jersey and Dubai and registered with the UK FCA, and Copper’s US entity is a broker-dealer, so US advisers should confirm which entity would hold their assets.
What Custody Costs in 2026
Qualified custodians do not publish rate cards. BitGo’s billing methodology charges basis points on each asset’s monthly average of hourly USD balances, plus basis points on transfers to addresses outside your BitGo enterprise. Every 10 basis points of custody fee on $50M of assets is $50,000 a year, so negotiate the bps tier before anything else.
Two custodians do publish prices for their self-custody software. Porto by Anchorage Digital costs $750 a month for balances under $1M or $1,500 a month under $10M, with a custom Premium tier above that, and paying annually upfront saves 15%. BitGo, Inc. offers a free self-service self-custody tier that it says may change. Neither price covers qualified custody at the bank or trust company.
MPC platforms are the opposite: they publish platform prices and cap usage instead. We modelled year one for a treasury team that moves $1M, $2M or $5M out each quarter, using only public list prices. For business treasuries, our crypto treasury management platforms guide ranks wallet, payout and accounting tools together.
| Plan | Public price | Included usage | Year one at $2M a quarter |
|---|---|---|---|
| $999 a month, up to 6 months | $1M outbound a quarter, 0.20% overage, 5 users | $27,994 (2 quarters of Essentials at $4,997, then Custom from $36,000 a year) |
| From $36,000 a year | Pro, Enterprise or Enterprise+ | $36,000 or more |
| $799 a month, billed quarterly | $3M outbound a quarter, 1,000 wallets, 3 users | $9,588 |
 | $8,000 a year | 3 users, 10,000 wallets, 3 chains, 1,000 signatures a month | $8,000 |
| $35,000 a year | 5 users, 50,000 wallets, all chains, 10,000 signatures a month | $35,000 if you outgrow Basic |
The math: Fireblocks Essentials costs $2,997 a quarter plus 0.20% on outbound volume above $1M, so $2M a quarter adds $2,000 in overage. Because Essentials runs for at most 6 months, the second half of the year moves to Custom at a $36,000 annual floor. At $5M a quarter, Essentials overage alone would reach $8,000 a quarter, so Custom is the cheaper path from day one.
# Year one, Fireblocks Essentials then Custom, $2M outbound a quarter
essentials_q = 999 * 3 + (2_000_000 - 1_000_000) * 0.002 # $4,997
year_one = 2 * essentials_q + 36_000 / 2 # $27,994
# Custody fee sensitivity
aum, bps = 50_000_000, 10
fee = aum * bps / 10_000 # $50,000 a yearSwap in your own volumes and the tier you are quoted. The bps / 10_000 step converts basis points to a rate, so a 25 bps quote on $50M is $125,000 a year.
The Regulatory Shift Buyers Should Know
On 30 September 2025, the SEC’s Division of Investment Management issued a staff no-action letter letting registered advisers and regulated funds treat a qualifying state trust company as a bank for crypto custody. That puts New York trust companies such as Coinbase Custody and Fireblocks Trust Company inside the custodian field for US advisers, provided the conditions are met.
- Written agreement: the trust company must not lend, pledge or rehypothecate client crypto without written consent, and must keep it segregated from its own assets.
- Due diligence: the adviser must reasonably determine that the trust company is authorized and has controls, which the letter describes as including audited financial statements and SOC 1 or SOC 2 reports.
- Charters keep moving: BitGo Bank & Trust and Fidelity Digital Assets now hold OCC national trust bank charters, and Standard Chartered has signed agreements to acquire 100% of Zodia Custody.
How to Choose an Institutional Custodian
Use this checklist in your request for proposal, and send the same questions to every finalist. Each item maps to a line in the disclosure matrix above, so you can compare written answers side by side and spot the gaps that public pages leave open.
- Name the exact legal entity that will hold your assets, its charter and its supervisor.
- Ask for the latest SOC 1 Type II and SOC 2 Type II reports and the bridge letter that covers the gap since the period ended.
- Get the insurance certificate: insurer, limit, whether it is shared across clients and what it excludes.
- Read the custody agreement for segregation, rehypothecation, bankruptcy treatment and how fees are calculated.
- Test the withdrawal path: approval quorum, time to move from cold storage and who can recover a lost key share.
- Confirm asset and chain support, staking terms and whether rewards are passed through net of fees.
- Plan the exit: how to move assets to another custodian and what that costs.
1. BitGo
- Licences: BitGo New York Trust Company under NYDFS, BitGo Singapore under MAS, BitGo Custody MENA under Dubai’s VARA, BitGo Europe under MiCAR through BaFin, and BitGo GmbH in Switzerland, per its licenses page.
- Security: multisig and MPC wallets, 100% cold storage for qualified custody and over 1,700 supported assets, per its security page.
- Insurance: $250M through a Lloyd’s of London syndicate for assets where BitGo holds all keys, with BitGo paying deductibles and excess cover available, per its insurance page.
- Weaknesses: no public custody rate, though BitGo, Inc. offers a free self-service self-custody tier, and the security page names SOC attestations without stating the report type.
Verdict: BitGo scores 9.3. It is the default for funds and corporates that need a federally chartered qualified custodian with broad asset and regional coverage.
2. Anchorage Digital
- Licences: OCC bank in the US, an MAS Major Payment Institution licence in Singapore and a New York BitLicense for agency trading, per its regulatory page.
- Features: staking, governance, Atlas settlement, fiat services and a separate self-custody wallet.
- Coverage: about 780 assets on its supported assets list (our count on 25 October 2026), with support varying by legal entity and jurisdiction.
- Porto pricing: the self-custody wallet costs $750 a month (balance under $1M) or $1,500 a month (under $10M), with a custom Premium tier above that.
- Disclosures: its pages say custody assets are not FDIC or SIPC insured and state no private insurance amount.
- Weaknesses: fewer regulated regions and supported assets than BitGo, and no public price for bank custody.
Verdict: Anchorage Digital scores 9.0. It suits US institutions that want a federally chartered bank holding their assets, with staking and governance built in.
3. Fireblocks
- Network: 80+ blockchains, 2,000+ counterparties and 30+ exchange integrations, with over 99.97% monthly uptime, per its pricing page.
- Audits: SOC 2 Type 2 with zero material findings, ISO 27001 and CCSS QSP Level 3, with NCC-audited cryptography libraries, per its security page.
- Custody option: Fireblocks Trust Company, LLC is an NYDFS limited purpose trust company with separate onboarding and segregated, bankruptcy-remote accounts, per its regulated entities page.
- Weaknesses: Essentials is limited to 6 months and $1M of quarterly outbound volume, and the Off Exchange add-on costs 3 to 30 bps on assets under custody.
Verdict: Fireblocks scores 8.8. Choose it when your team wants to hold its own keys with institutional policies and the widest counterparty network.
4. Coinbase Prime
- Coverage: 470+ assets in custody, a MiCA licence in the EU and a Custody Only option for clients that do not trade, per its custody page.
- Staking and governance: stake listed assets without moving them out of Vault storage, and vote on governance from custody.
- Onchain: a Prime Onchain Wallet for DeFi alongside cold storage, per its Prime page.
- Weaknesses: no public price and no insurance figure on the pages we read.
Verdict: Coinbase Prime scores 8.4. It fits funds that want custody, execution and staking under one relationship.
5. Copper
- Audits: SOC 2 Type 2 and ISO 27001, per its security page.
- Segregation: on-chain and legal segregation of client assets, per its qualified custody page.
- ClearLoop: $105bn of monthly notional and $3bn of monthly off-exchange settlements, per its homepage.
- Weaknesses: its US entity is an SEC-registered broker-dealer, not a custody bank, and it publishes no price.
Verdict: Copper scores 7.2. It is the pick for trading firms that want assets to stay in custody while they trade on exchanges.
6. Komainu
- Licences: Komainu (Jersey) Ltd is a JFSC-regulated provider, Komainu MZE is a VARA-licensed provider in Dubai, and Komainu (UK) Limited is registered with the FCA, per its regulation page.
- Security: MPC and HSM key management with bankruptcy-remote, segregated wallets, per its security page.
- Features: Komainu Connect for exchange collateral, CORE collateral management and tokenization, per its custody page.
- Weaknesses: no US charter, no stated insurance amount and no public price.
Verdict: Komainu scores 7.1. It suits European and Middle East institutions that want custody linked to exchange collateral.
7. Fidelity Digital Assets
- Audits: SOC 1 Type 2 and SOC 2 Type 2 reports each year, per its about page.
- Custody: cold storage with trading directly from cold storage and collateral accounts, per its trading and custody page.
- Regions: Fidelity Digital Assets Ltd is registered with the UK FCA under the money laundering regulations.
- Weaknesses: a narrower feature set than Coinbase Prime or Anchorage, and no public asset list on the pages we read.
Verdict: Fidelity Digital Assets scores 7.0. It fits conservative allocators that value a federally chartered bank and a long custody history over breadth. Our BitGo vs Coinbase Prime vs Fidelity Digital Assets comparison sets it against two other qualified custodians.
8. Utila
- Key model: two-party MPC between Utila and the customer, where only a customer admin can recover the wallet, per its security page.
- Audits: SOC 2 Type II and security audits by Halborn.
- Starter limits: 1,000 active wallets, one vault, three users, all chains, limited DeFi and one exchange connection, with 24/7 chat support.
- Weaknesses: software only, so it does not satisfy a qualified custodian requirement on its own.
Verdict: Utila scores 6.7. It is the cheapest credible MPC stack for teams that can hold their own keys.
Other Institutional Crypto Custody Providers
Zodia Custody, BNY and Dfns were close calls, but none fit this ranking on 25 October 2026, for three different reasons. Standard Chartered has signed agreements to acquire 100% of Zodia Custody, subject to approvals, so we will score it once the deal closes.
BNY runs digital asset custody inside a global custody bank, but its public pages did not give us enough to score it on the same inputs. Dfns publishes the clearest MPC price list here, with no AUM or transaction fees, but it is wallet infrastructure for developers rather than a custody service, so it appears only in our pricing section.
Two more institutional crypto custody providers are worth a call, though we list them unscored because we read their pages after our 25 October scoring pass. Gemini Custody is run by Gemini Trust Company, a New York limited purpose trust company and qualified custodian, with MPC signing, ISO 27001 and SOC 2 Type 2, and $100M of cold storage insurance. Its custody page states a minimum fee of $30 per asset a month.
Hex Trust serves institutions in Asia and the Middle East, with a Hong Kong trust company registration, a Singapore MAS Major Payment Institution licence and a Dubai VARA custody licence. It names SOC 1 Type 2 and SOC 2 Type 2 reports and HSM key storage, but states no insurance amount.
Self-custody with hardware wallets and a multisig is also an option for smaller treasuries. It removes vendor fees but adds key ceremony, recovery and insurance work. Our digital asset custody hub collects our custody guides as they publish.
Final Ranking
BitGo wins on breadth: a federal charter, five regional licences, stated insurance and 1,700+ assets. Fireblocks wins for teams that hold their own keys. Anchorage Digital and Coinbase Prime lead when custody must sit beside trading, staking or a bank charter, and Utila is the budget pick.
Verdict: Shortlist BitGo and one of Anchorage Digital or Coinbase Prime for qualified custody, and Fireblocks or Utila for the MPC layer. Ask every finalist for SOC reports and an insurance certificate before signing.
Frequently Asked Questions
What is the best institutional crypto custody provider in 2026?
On our weighted scorecard, BitGo is the best institutional crypto custody provider at 9.3 out of 10. It runs an OCC chartered trust bank, holds licences in New York, Singapore, Dubai, the EU and Switzerland, states $250M of insurance and supports over 1,700 assets. Anchorage Digital is second at 9.0 and Fireblocks third at 8.8.
Which institutional crypto custody providers did we compare?
We ranked eight institutional crypto custody providers: BitGo, Anchorage Digital, Fireblocks, Coinbase Prime, Copper, Komainu, Fidelity Digital Assets and Utila. We also cover Zodia Custody, BNY, Dfns, Gemini Custody and Hex Trust outside the ranking, and explain why each one sits there in the section on other providers.
What is a qualified custodian for crypto?
A qualified custodian is a regulated bank, trust company or similar institution that may hold client assets under the SEC custody rule. For crypto that usually means an OCC chartered bank or a state trust company, which keeps client assets segregated, bankruptcy-remote and outside its own balance sheet.
Is MPC custody the same as a custodian?
No. An MPC wallet platform splits each private key into shares so no full key exists, but your team usually signs and controls the assets. A custodian holds the assets for you under a charter. MPC software alone does not meet a qualified custodian requirement for advisers or funds.
How much does institutional crypto custody cost?
Qualified custodians quote a basis point fee on assets under custody plus transfer fees, and none of the eight publishes a custody rate card. Software is priced publicly: Fireblocks Essentials is $999 a month for up to 6 months, Utila Starter $799 a month, Porto by Anchorage Digital $750 or $1,500 a month, and BitGo has a free self-service tier.
Are crypto assets in custody insured?
Sometimes, but rarely by government. Anchorage says custody assets are not FDIC or SIPC insured. Private specie cover varies: Copper states $500M placed through Aon and BitGo states $250M through a Lloyd’s syndicate. Ask any custodian for the certificate, limit and exclusions before signing an agreement.
Can a state trust company hold crypto for a registered adviser?
Yes, under conditions. A 30 September 2025 SEC staff no-action letter lets registered advisers and funds treat a qualifying state trust company as a bank for crypto custody, if it segregates assets, does not rehypothecate them without consent and the adviser completes due diligence on its controls.
