Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

Holding stablecoins with a custodian adds risks around access, operations, and your legal claim to the assets. If the custodian or one of its service providers fails, withdrawals may be delayed while records and ownership are reconciled. That is different from issuer risk: a custodian can safeguard tokens while the issuer has reserve or redemption problems, and a sound issuer does not guarantee access through a failing custodian.

The outcome depends on the customer agreement, how assets and balances are recorded, the parties involved, and the applicable law. A custody label or regulatory framework alone does not settle every question.

How custodian risk differs from stablecoin issuer risk

A custodian holds or controls tokens or the keys needed to move them. The stablecoin issuer is responsible for the backing and redemption arrangement. A problem at either layer can affect you differently:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • Custodian failure: You may lose access temporarily or face uncertainty about identifying and retrieving your share of assets.
  • Issuer trouble: Reserve, liquidity, or redemption problems may affect the token even if the custodian is operating normally.

Assess both layers. A custodian’s safeguards do not establish the issuer’s ability to redeem, and issuer-level reserve rules do not by themselves establish your rights against a custodian.

#1 Best Overall
Ledger Nano X - Classic Crypto Wallet with Bluetooth | Compact, go anywhere, 1.1" display. Desktop & iOS/Android compatible
  • Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
  • Effortlessly build your crypto portfolio via the all in one Ledger Wallet app: buy, sell, send, receive, swap, stake and more across popular blockchains. 15,000+ coins & tokens in a single dashboard. Keep a close eye on the market. Compare service providers. Track performance. Get timely alerts. Build your portfolio with confidence.
  • Enjoy Bluetooth connectivity, iOS access, and hours of battery use with this mobile-first, secure backup signer. Freedom you can depend on.
  • Genuine Check: confirm your signer is authentic during setup with the Ledger Wallet app.
  • Protect your signer: keep it in mint condition at all times with a bespoke Pod or Case to avoid scratches and everyday wear and tear.

What can go wrong when a custodian fails?

Access may be interrupted while ownership is established

If a custodian becomes insolvent or stops operating, customers may need to establish which assets belong to them before assets can be returned. Separate customer records, on-chain wallet arrangements, and reconciliation practices can affect how clearly a customer’s interest can be identified. The New York State Department of Financial Services (NYDFS) guidance dated September 30, 2025, tells covered virtual-currency custodians to account for and segregate customer currency from corporate assets both on-chain and on internal ledgers. For omnibus wallets, it expects a clear audit trail and current evidence of each customer’s beneficial interest (NYDFS guidance).

Your legal claim depends on the arrangement and applicable law

Read whether the agreement says the assets remain your property, how it characterizes the relationship, and what happens in insolvency. The U.S. GENIUS Act has a payment-stablecoin custody provision that requires covered custodians to treat specified customer stablecoins, keys, cash, and other property as customer property, take steps to protect it from the custodian’s creditors, and keep it separately accounted for and segregated. It also provides for customer-claim priority subject to statutory terms and exceptions. The provision applies to defined entities and assets; it should not be assumed to cover every token, account, custodian, or jurisdiction (GENIUS Act text).

Pooling is not automatically the same as mixing customer and company assets

An omnibus wallet can hold customer assets collectively while records identify each customer’s beneficial interest. NYDFS describes covered arrangements in which assets are held in separate customer wallets and ledger accounts, or in omnibus wallets and accounts containing only customer virtual currency held for customers as agent or trustee. What matters is whether the structure and records make your interest clear—not simply whether the wallet is pooled.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #2
Sale
TANGEM Crypto Wallet Pack of 3 – Trusted Cold Storage Hardware Wallet | 100% offline; Bitcoin, Ethereum, NFTs & altcoins; No seed phrase; NFC; Pack of 3, Self custody wallet
  • Proven security at scale: Over 9 years and millions of cards issued with no known remote hacks, while military‑grade EAL6+ security keeps your private keys locked inside the chip. Your cryptocurrencies stay strongly protected from online attackers.
  • Tap once to manage your entire crypto wallet across 90 blockchains - no USB cables or Bluetooth, no batteries, no setup. Access 14,100+ coins & tokens, DeFi, NFTs, and staking instantly from your phone
  • Smart backup: Use your second Tangem Wallet as your Backup keys with end‑to‑end encryption; no more papers, pictures. If one card is lost, the remaining can still restore full access, with an optional seed phrase available for advanced users.
  • Engineered to last up to 25 years: Waterproof (IP69K), shockproof and tested for extreme temperatures from −25°C to 50°C. A durable cold wallet with long‑term protection and independently audited security.
  • Trusted by 6 million users worldwide (4.9 App Store, 4.8 Google Play) - buy, sell, swap, stake, and spend cryptocurrency directly. The secure offline storage wallet designed for how people actually use crypto wallets

Segregation and recordkeeping: what to check

Ask the provider to explain how customer assets and balances are tracked. Useful questions include:

  • Are customer tokens separated from the custodian’s own assets both on-chain and in the internal ledger?
  • Does each customer have a separate wallet, or are customer assets held in an omnibus wallet used only for customers?
  • How often are internal balances reconciled against on-chain activity, and how are discrepancies handled?
  • What records would establish your beneficial interest if the custodian or a service provider failed?

NYDFS guidance asks covered custodians to disclose how assets are segregated and accounted for. The GENIUS Act also allows specified omnibus arrangements and has distinct treatment for certain cash deposits at depository institutions. Neither source means every pooled arrangement has identical legal treatment.

Sub-custodians add another counterparty

A custodian may rely on another firm to hold tokens or keys. That firm’s systems, controls, contract, and financial condition can affect your access, creating an additional point of failure. NYDFS says covered primary custodians should conduct due diligence, document risk assessments and controls, and disclose relevant sub-custody terms and material risks.

Rank #3
TANGEM Crypto Wallet Pack of 2 – Trusted Cold Storage Hardware Wallet
  • Proven security at scale: Over 9 years and millions of cards issued with no known remote hacks, while military‑grade EAL6+ security keeps your private keys locked inside the chip. Your cryptocurrencies stay strongly protected from online attackers.
  • Tap once to manage your entire crypto wallet across 90 blockchains - no USB cables or Bluetooth, no batteries, no setup. Access 14,100+ coins & tokens, DeFi, NFTs, and staking instantly from your phone
  • Smart backup: Use your second Tangem Wallet as your Backup keys with end‑to‑end encryption; no more papers, pictures. If one card is lost, the remaining can still restore full access, with an optional seed phrase available for advanced users.
  • Engineered to last up to 25 years: Waterproof (IP69K), shockproof and tested for extreme temperatures from −25°C to 50°C. A durable cold wallet with long‑term protection and independently audited security.
  • Trusted by 6 million users worldwide - buy, sell, swap, stake, and spend cryptocurrency directly. The secure offline storage wallet designed for how people actually use crypto wallets

Find out who actually holds the assets or keys, where that entity is regulated, what duties the contract assigns it, and whether it can claim a lien or set-off. Also ask how discrepancies or a provider failure are handled. An app balance or familiar brand name does not answer these questions.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Asset use, liens, and withdrawal restrictions

Safekeeping is not necessarily the same as an agreement that permits lending, pledging, or other uses of tokens. NYDFS guidance says covered custodians should preserve customers’ equitable and beneficial interests and not use customer currency for their own purposes; it also expects customer agreements to describe the relationship and permitted use. Those are statements about the guidance’s scope, not universal terms for every custody product.

Check the agreement for permission to lend, pledge, reuse, transfer, freeze, or otherwise use assets; any security interest, lien, or set-off right; and the conditions that apply to withdrawals. NYDFS also says sub-custody agreements should address collateral, set-off, and liens, with a limited qualification for ordinary fees and expenses. Do not infer the terms from the words “custody” or “wallet.”

Rank #4
DCENT Hardware Wallet | Biometric Cold Storage, Bluetooth, Multi-Crypto
  • EAL5+ CERTIFIED SECURE ELEMENT + FINGERPRINT PROTECTION — Your private keys stay encrypted offline on a certified EAL5+ chip, the same security tier used in EMV bank cards. Built by DCENT, securing crypto since 2018. Fingerprint authentication adds a second layer no PIN-only wallet can match.
  • 10,000+ ASSETS NATIVE ON 100+ BLOCKCHAINS — Hold Bitcoin, Ethereum, XRP, Solana, Cardano, popular stablecoins (USDT, USDC), and NFTs in one wallet. No third-party apps, no fragmented setup — every supported asset works straight out of the box.
  • TAP-TO-SIGN MOBILE EXPERIENCE — Pair your wallet with the DCENT mobile app over Bluetooth. Manage tokens, review transactions, and access in-app swap features directly from your phone — no cables, no desktop required.
  • WEB3 & dAPP ACCESS VIA METAMASK — Connect to MetaMask and other browser extension wallets to manage NFTs, claim airdrops, and access dApps. A large screen and intuitive 4-button interface keep every transaction clearly visible before you sign.
  • SEAMLESS FIRMWARE UPDATES & 30-DAY MONEY-BACK GUARANTEE — Apply security updates without resetting your wallet or migrating funds. Backed by Amazon's 30-day money-back guarantee — your purchase is risk-free.

Operational, cyber, and access risks

Even when ownership records are clear, compromised credentials or keys, service outages, account restrictions, transaction controls, or other operational failures can interrupt access. A July 14, 2025 joint statement from the Federal Reserve, FDIC, and OCC discusses existing risk-management principles for banks engaged in crypto-asset safekeeping. It says it creates no new supervisory expectations and reminds banks to operate safely and comply with applicable law; it does not quantify incident likelihood or guarantee recovery (Federal Reserve, FDIC, and OCC statement).

The official sources cited here do not provide an empirical figure for stablecoin-custody failures or customer losses. A regulatory safeguard is not proof of a provider’s operational performance.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Issuer reserves and redemption are a separate check

Reserve and redemption protections depend on the token’s regulatory category and jurisdiction. They do not, by themselves, determine your rights against a custodian.

Best Value
Trezor Safe 7 Crypto Hardware Wallet with Bluetooth for Android/iOS/Desktop
  • Dual-chip architecture for maximum protection: The next-gen, fully auditable TROPIC01 chip works alongside a certified EAL6+ Secure Element—completely NDA-free—to deliver radically transparent, industry-leading defense against physical attacks.
  • Quantum-ready security: Get protection against future threats with the first-ever hardware wallet designed with quantum-ready architecture.
  • See every detail with confidence: Our largest high-resolution color touchscreen makes it easy to navigate your assets, review transactions and manage your coins with clarity.
  • Wireless freedom with encrypted Bluetooth control: Manage, buy, swap and stake securely using Trezor Suite on desktop or mobile. Qi2-compatible wireless charging keeps your Trezor powered up. No cables required—security meets convenience.
  • Works seamlessly with Android, iOS and desktop: Connect wirelessly or via USB-C to your phone or computer. Manage your crypto anywhere with our companion Trezor Suite app.

European Union

MiCA Article 36 sets reserve requirements for issuers of asset-referenced tokens, including addressing liquidity risks associated with holders’ redemption rights, legally and operationally segregating the reserve, and disclosing reserve risks and redemption procedures. It also requires independent reserve audits every six months. For deposits in each referenced official currency, the provision sets a minimum of 30% of the amount referenced in that currency to be held with credit institutions. This is a regulatory requirement for covered asset-referenced tokens, not a measure of the likelihood or severity of loss (ESMA-hosted MiCA Article 36).

Canada

Canada’s Department of Finance describes legislation introduced through the 2025 Budget Implementation Act that would require covered issuers to maintain a reserve at least equal to tokens issued, hold it in cash or high-quality cash-like assets with a qualified custodian, segregate it, and publish redemption policies. The described framework would also prohibit representing stablecoins as deposits or as insured under a public deposit-insurance system. These are requirements as described by the department for that framework, not universal attributes of stablecoins (Department of Finance Canada).

Rules vary by jurisdiction and entity

  • United States: The GENIUS Act is enacted federal law, but its custody provisions cover specified assets and regulated custodian categories and include exceptions. It addresses issuer insolvency separately from custody. Confirm whether a particular service and token fall within its scope and check for applicable implementing rules.
  • New York: NYDFS guidance dated September 30, 2025, applies to the regulated entities it identifies and replaces its January 23, 2023 guidance. It covers segregation, accounting, sub-custody, and customer disclosures.
  • United Kingdom: The FCA page for CP25/14 reports final rules and guidance published June 30, 2026, applying to cryptoasset firms authorised under FSMA on or after October 25, 2027. The stated future application date is time-sensitive; consult the FCA page for the current position (FCA CP25/14).

A rule described for one jurisdiction or type of firm should not be treated as a guarantee or as a description of every customer’s rights elsewhere.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

How to compare custody arrangements

Use the actual customer agreement and the rules that apply to the service. Compare these points across providers:

  • Legal interest: Does the agreement state that assets remain customer property, and describe the relationship as custody rather than a debtor-creditor arrangement?
  • Segregation and records: Are assets separated from company property? Are balances held individually or pooled, and are customer ledgers reconciled against on-chain records?
  • Sub-custody: Is another firm involved, and are its role, controls, and terms disclosed?
  • Use and encumbrances: Can assets be lent, pledged, or reused? Are there liens or set-off rights?
  • Access: What withdrawal conditions, delays, restrictions, or transaction controls may apply?
  • Token and issuer: What reserve and redemption disclosures apply, and who is eligible to redeem directly?
  • Law and oversight: Which legal entity and jurisdiction govern the relationship, and do the relevant safeguards cover this service and asset?

What self-custody changes—and what it does not

Self-custody removes the custodian as the party controlling access, but it shifts private-key security, backup, and recovery responsibilities to you. A hardware wallet is a tool for managing keys; it does not remove issuer, reserve, or redemption risk. The GENIUS Act’s custody requirements described above exclude a person solely providing hardware or software to facilitate a customer’s own custody. Choose between custody models based on which responsibilities and failure modes you can manage, rather than treating either model as risk-free.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.