CASP authorization and Article 60 notification for banks are not identical. After 1 July 2026, legacy French DASP registration should not be treated as current MiCA authorization.
AMF transition status ↗Institutional Custody Regulatory Matrix
Compare 60 evidence-reviewed custody providers across MiCA/CASP, New York trust, OCC, FINMA, ADGM, Hong Kong and bank/CSD frameworks — without pretending that unlike licences are equivalent.
Regulatory status is entity- and service-specific
A bank licence, a custody-specific authorization, a trust charter and a technology-provider registration are different legal bases. The matrix records the strongest basis established in the reviewed evidence and keeps conditional or entity-specific cases visibly separate. For contracting-entity due diligence, drill into the 69 entity-level regulatory records.
A preliminary or conditional national trust bank approval is not final authorization to commence business. Conditional cases are labelled separately.
OCC licensing applications ↗A TCSP licence and an SFC VATP licence are distinct. Group licences are not automatically attributed to the custody legal entity.
SFC regulatory framework ↗Being a regulated bank or securities depository does not by itself prove that every digital-asset custody service or group entity is authorized in every market.
| Provider | Region | Regime / authority | Regulatory basis | Evidence status | Primary source |
|---|---|---|---|---|---|
| FireblocksReviewed 2026-08-17 | North America | NYDFS trust NYDFS |
Limited-purpose trust company Fireblocks Trust Company, LLC is listed by NYDFS as a limited purpose trust company; Fireblocks Trust markets qualified custody. |
Regulator-backed | NYDFS virtual currency businesses ↗ |
| BitGoReviewed 2026-08-17 | North America | NYDFS trustOCC conditional conversion NYDFS / OCC |
State trust charter; federal conversion conditionally approved BitGo New York Trust Company is listed by NYDFS as a limited purpose trust company; BitGo also operates regulated custody entities in other jurisdictions. |
Regulator-backed | OCC conditional trust-bank conversions (12 Dec 2025) ↗ |
| Anchorage DigitalReviewed 2026-08-17 | North America | OCC national trust bank OCC |
Federally chartered national trust bank Anchorage Digital Bank, National Association received an OCC national trust bank charter and appears in the OCC institution directory. |
Regulator-backed | OCC Anchorage charter approval ↗ |
| CopperReviewed 2026-08-17 | Europe | Switzerland / entity-specific Entity-specific |
Registration/permissions vary by contracting entity Copper publishes regulatory registrations for specific entities, including Switzerland; permissions must be checked against the entity used for the mandate. |
Entity-specific | Copper homepage ↗ |
| Zodia CustodyReviewed 2026-08-17 | Europe | MiCA / CASP CSSF / EU passport |
MiCA-authorized European custody entity Zodia Custody Europe S.A. appears on the AMF MiCA whitelist following authorization by Luxembourg CSSF. |
Regulator-backed | AMF MiCA whitelist — Zodia Custody Europe ↗ |
| KomainuReviewed 2026-08-17 | Multi-region | JerseyUAEUKItaly Multiple authorities |
Multi-jurisdiction regulated custody footprint Komainu publishes regulated custody permissions/registrations across Jersey, the UAE, the UK and Italy. |
Entity-specific | Komainu regulation ↗ |
| Hex TrustReviewed 2026-08-17 | Asia-Pacific | Singapore CMS custody MAS / entity-specific |
Capital-markets-services custody permission disclosed Hex Trust publishes multiple regulated-entity permissions, including a Singapore capital-markets-services licence with custodial permissions. |
Provider + regulatory framework | Hex Trust trust center ↗ |
| TaurusReviewed 2026-08-17 | Europe | Technology / entity-specific Entity-specific |
Custody/tokenization technology; legal custody perimeter depends on entity/deployment Taurus provides institutional custody/tokenization infrastructure; this review does not independently certify the regulatory status of every Taurus entity or customer deployment. |
Scope verification | Taurus platform ↗ |
| TanganyReviewed 2026-08-17 | Europe | MiCA / CASP BaFin / EU passport |
MiCA-authorized German custodian Tangany GmbH appears on the AMF MiCA whitelist following authorization by BaFin and markets itself as a MiCA-licensed German custodian. |
Regulator-backed | AMF MiCA whitelist — Tangany ↗ |
| Standard CustodyReviewed 2026-08-17 | North America | NYDFS trust NYDFS |
Limited-purpose trust company New York DFS approved Standard Custody & Trust Company as a limited purpose trust company; Ripple completed its acquisition in 2024. |
Regulator-backed | NYDFS Standard Custody trust charter ↗ |
| PaxosReviewed 2026-08-17 | North America | NYDFS trustOCC conditional conversion NYDFS / OCC |
State trust charter; federal conversion conditionally approved Paxos Trust Company is a New York limited purpose trust company supervised by NYDFS. |
Regulator-backed | OCC conditional trust-bank conversions (12 Dec 2025) ↗ |
| NYDIGReviewed 2026-08-17 | North America | NYDFS trust NYDFS |
Limited-purpose trust company NYDIG Trust Company LLC is listed by NYDFS as a limited purpose trust company. |
Regulator-backed | NYDFS virtual currency businesses ↗ |
| Xapo BankReviewed 2026-08-17 | Europe | Gibraltar bank / DLT GFSC / entity-specific |
Credit-institution and DLT framework disclosed Xapo Bank states it is regulated as a Gibraltar credit institution and its VASP operates under Gibraltar’s DLT framework. |
Provider + regulatory framework | Xapo custody ↗ |
| Bitcoin SuisseReviewed 2026-08-17 | Europe | Switzerland / entity-specific Entity-specific |
Swiss custody framework; exact permission depends on contracting entity This review verifies the custody/control framework but does not independently certify every regulatory permission of Bitcoin Suisse entities. |
Scope verification | Bitcoin Suisse custody ↗ |
| SygnumReviewed 2026-08-17 | Europe | FINMA bank FINMA |
Swiss bank and securities-dealer framework This review focuses on Sygnum’s bank custody platform; the exact licence/perimeter for each jurisdiction should be checked against the contracting entity. |
Regulator-backed | FINMA authorised banks and securities firms ↗ |
| AMINA BankReviewed 2026-08-17 | Europe | FINMA bank FINMA |
Swiss bank and securities-dealer framework AMINA describes itself as a FINMA-regulated Swiss bank and securities dealer providing crypto custody. |
Regulator-backed | FINMA authorised banks and securities firms ↗ |
| Coinbase CustodyReviewed 2026-08-17 | North America | NYDFS trust NYDFS |
Limited-purpose trust company Coinbase Custody Trust Company is a New York limited purpose trust company and qualified custodian under New York banking law. |
Regulator-backed | NYDFS Coinbase Custody trust charter ↗ |
| Kraken CustodyReviewed 2026-08-17 | North America | Wyoming bank Wyoming banking framework |
State-chartered bank custody model Kraken Custody is provided through Kraken Financial, a state-chartered bank in Wyoming. |
Provider + regulatory framework | Kraken Custody ↗ |
| Gemini CustodyReviewed 2026-08-17 | North America | NYDFS trust NYDFS |
New York trust company Gemini Trust Company is a New York trust company and Gemini markets qualified custody under New York banking law. |
Regulator-backed | NYDFS virtual currency businesses ↗ |
| Crypto.com CustodyReviewed 2026-08-17 | North America | OCC conditional charter OCC |
National trust bank charter conditionally approved; not final authorization Crypto.com announced conditional OCC approval for a national trust bank charter in February 2026; conditional approval is not the same as a completed charter. |
Conditional | OCC Corporate Decision 1367 — conditional approval ↗ |
| Fidelity Digital AssetsReviewed 2026-08-17 | North America | NY trustOCC conditional conversion NYDFS / OCC |
Existing state trust framework; OCC conversion conditionally approved Fidelity Digital Assets has historically operated a New York trust-company custody entity; current mandate scope should be confirmed against current entity documentation. |
Regulator-backed | OCC conditional trust-bank conversions (12 Dec 2025) ↗ |
| BNY Mellon Digital AssetsReviewed 2026-08-17 | North America | Bank custodian framework US banking regulators |
Digital-asset custody within regulated global custodian bank BNY is a regulated global custodian bank; its digital-asset custody platform has operated in the U.S. since 2022. |
Bank/CSD framework | BNY digital assets platform ↗ |
| DBS Digital ExchangeReviewed 2026-08-17 | Asia-Pacific | Singapore bank / exchange MAS / entity-specific |
Custody within DBS regulated bank/digital-exchange ecosystem DBS provides institutional digital custody within its regulated banking/digital-exchange ecosystem; exact service permissions vary by client/entity. |
Bank/CSD framework | DBS digital custody ↗ |
| BBVA Digital AssetsReviewed 2026-08-17 | Europe | MiCA / bank notification Spanish authority / MiCA |
Bank crypto trading/custody under MiCA framework BBVA publicly announced Spanish regulatory clearance/notification under MiCA for bitcoin and ether trading/custody services. |
Provider + regulatory framework | BBVA Spain custody announcement ↗ |
| CommerzbankReviewed 2026-08-17 | Europe | MiCA Article 60 German authority / MiCA |
Credit institution authorized/notified for crypto custody and transfer services Commerzbank states it is authorized under Article 60 MiCAR for custody/administration and transfer services for crypto-assets. |
Provider + regulatory framework | Commerzbank crypto custody ↗ |
| Deutsche Bank Digital AssetsReviewed 2026-08-17 | Europe | Bank framework / partner model German banking framework |
Regulated-bank initiative with Taurus; product/entity scope must be confirmed Deutsche Bank and Taurus publicly announced a partnership to build/provide digital-asset custody and tokenization services; current product availability should be confirmed. |
Bank/CSD framework | Deutsche Bank Flow custody partnership ↗ |
| DZ BANKReviewed 2026-08-17 | Europe | German bank custody German banking framework |
Institutional crypto custody within regulated bank framework DZ BANK’s current institutional product site states that it offers professional custody and transfer of crypto-assets to institutional clients. |
Bank/CSD framework | DZ BANK institutional crypto products ↗ |
| CACEISReviewed 2026-08-17 | Europe | MiCA Article 60 ACPR / AMF |
Credit institution authorized/notified to provide crypto-asset services CACEIS received French PSAN status for digital-asset custody and reported institutional custody live in France and Luxembourg in 2026. |
Regulator-backed | AMF MiCA whitelist — CACEIS Bank ↗ |
| SIX Digital ExchangeReviewed 2026-08-17 | Europe | FINMA CSD FINMA |
FINMA-regulated central securities depository with crypto custody approval SIX Digital Exchange states it is a FINMA-regulated CSD and received FINMA approval in 2026 to provide crypto custody. |
Regulator-backed | FINMA crypto-services / supervision context ↗ |
| Ripple CustodyReviewed 2026-08-17 | North America | NYDFS trust via Standard Custody NYDFS / group structure |
Technology platform plus owned NYDFS-chartered custody entity Ripple offers institutional custody technology and owns Standard Custody & Trust Company, a New York limited purpose trust company. |
Regulator-backed | NYDFS Standard Custody trust charter ↗ |
| CoboReviewed 2026-08-17 | Multi-region | Entity-specific Entity-specific |
No single globally applicable bank/trust/qualified-custodian status established Cobo publicly offers custodial wallets, but the reviewed public materials do not establish one globally applicable qualified-custodian or bank/trust status. Regulatory perimeter should be confirmed for the contracting entity. |
Scope verification | Cobo official site ↗ |
| Tetra TrustReviewed 2026-08-17 | North America | Canada trust company Canadian provincial trust framework |
Regulated Canadian trust company Tetra Trust states it is a regulated Canadian trust company providing institutional digital-asset custody. |
Provider + regulatory framework | Tetra Trust ↗ |
| Aegis CustodyReviewed 2026-08-17 | North America | Entity-specific Entity-specific |
Licensed-custodian claim requires contracting-entity verification Aegis markets itself as a licensed institutional digital-asset custodian. The exact legal entity and licence applicable to a buyer should be confirmed directly before procurement. |
Scope verification | Aegis Custody ↗ |
| AquanowReviewed 2026-08-17 | Multi-region | UAE / entity-specific Entity-specific |
Permissions vary by group entity; incidental custody disclosed for certain clients Aquanow operates regulated entities in several jurisdictions. Its UAE disclosures allow direct incidental custody for broker-dealer clients, while other legal entities may not provide custody. |
Entity-specific | Aquanow ↗ |
| State Street Digital AssetsReviewed 2026-08-17 | North America | Bank custodian framework US banking regulators |
Digital-asset services within regulated global custodian bank framework State Street is a regulated global custodian bank; the reviewed digital-asset materials describe capabilities delivered within its institutional asset-servicing framework. |
Bank/CSD framework | State Street Digital Asset Solutions ↗ |
| Northern Trust Digital AssetsReviewed 2026-08-17 | North America | Bank custodian framework US banking regulators |
Digital-asset work within regulated global custody/asset-servicing framework Northern Trust is an established regulated global custodian and asset servicer; the reviewed digital-asset work sits within that institutional framework. |
Bank/CSD framework | Northern Trust tokenized asset custody ↗ |
| Standard CharteredReviewed 2026-08-17 | Europe | MiCA / CASPUAE custody Luxembourg authority / UAE entity |
European MiCA authorization plus separate UAE custody footprint Standard Chartered announced a Luxembourg digital-asset custody entity and in June 2026 reported MiCA authorization supporting European custody operations; it also operates custody in the UAE. |
Provider + regulatory framework | Standard Chartered digital assets ↗ |
| HSBC Digital AssetsReviewed 2026-08-17 | Multi-region | Bank custodian framework Multiple bank regulators |
Digital-asset custody development within regulated global bank/securities-services framework HSBC is a major regulated custodian bank. Its current public materials describe digital-asset custody as part of its institutional securities-services development. |
Bank/CSD framework | HSBC digital assets & currencies ↗ |
| Société Générale FORGEReviewed 2026-08-17 | Europe | MiCA / CASP AMF / ACPR |
French investment firm/CASP authorized for custody and administration SG-FORGE states that it is a French investment firm licensed as a Crypto-Asset Service Provider and authorized for custody and administration of crypto-assets. |
Provider + regulatory framework | SG-FORGE legal information ↗ |
| UBS Digital AssetsReviewed 2026-08-17 | Europe | FINMA bank FINMA / bank framework |
Digital-asset offering within regulated Swiss/global bank framework UBS is a regulated global bank; its digital-asset offering is delivered within bank and securities-service frameworks. |
Bank/CSD framework | FINMA authorised banks and securities firms ↗ |
| ClearstreamReviewed 2026-08-17 | Europe | CSD / market infrastructure European securities regulators |
Digital issuance/custody within regulated securities-depository infrastructure Clearstream operates regulated securities depositories and custody infrastructure; its digital issuance and custody propositions are embedded in that market-infrastructure framework. |
Bank/CSD framework | Clearstream digital issuance ↗ |
| DekaBankReviewed 2026-08-17 | Europe | German crypto custody licence German authority |
Crypto-custody licence reported in 2024; current MiCA perimeter should be confirmed DekaBank public reporting states that it obtained a crypto-custody licence in December 2024 and can cover digital-asset value-chain activities. |
Provider + regulatory framework | DekaBank 2025 annual report ↗ |
| Bank FrickReviewed 2026-08-17 | Europe | MiCA / CASP Liechtenstein FMA / MiCA |
MiCAR authorization for custody and other crypto-asset services Bank Frick announced MiCAR authorization in January 2026 for crypto-asset services including custody, order handling and transfers across the EEA. |
Provider + regulatory framework | Bank Frick MiCAR authorization ↗ |
| Swissquote CustodyReviewed 2026-08-17 | Europe | FINMA bank FINMA |
Crypto custody within regulated Swiss bank framework Swissquote operates regulated banking/financial entities; group disclosures identify regulated entities providing custodian services that include crypto assets. |
Bank/CSD framework | FINMA authorised banks and securities firms ↗ |
| Julius BaerReviewed 2026-08-17 | Europe | FINMA bank FINMA |
Digital-asset services within regulated Swiss private-bank framework Julius Baer provides digital-asset services within its regulated private-banking framework. |
Bank/CSD framework | FINMA authorised banks and securities firms ↗ |
| Maerki BaumannReviewed 2026-08-17 | Europe | FINMA bank FINMA |
Crypto trading/custody within regulated Swiss private-bank framework Maerki Baumann provides digital-asset services through its regulated Swiss private-bank framework. |
Bank/CSD framework | FINMA authorised banks and securities firms ↗ |
| Arab Bank SwitzerlandReviewed 2026-08-17 | Europe | FINMA bank FINMA |
Digital-asset services within regulated Swiss bank framework Arab Bank Switzerland offers digital-asset services from its regulated Swiss banking platform. |
Bank/CSD framework | FINMA authorised banks and securities firms ↗ |
| HashKeyReviewed 2026-08-17 | Asia-Pacific | Hong Kong TCSPSFC VATP — separate entity Companies Registry / SFC |
Custody entity appears in TCSP register; SFC VATP licence belongs to separate HashKey group entity HashKey Group states that client assets for its Hong Kong platform are segregated and held by HashKey Custody Services Limited, a licensed trust/company service provider. |
Regulator-backed | Hong Kong TCSP register — HashKey Custody Services ↗ |
| KODAReviewed 2026-08-17 | Asia-Pacific | South Korea / entity-specific Korean virtual-asset framework |
Institutional custody under Korean regulated/certified environment; exact registration scope should be checked KODA presents itself as a regulated/certified institutional digital-asset custodian in South Korea. |
Provider + regulatory framework | KODA ↗ |
| Liminal CustodyReviewed 2026-08-17 | Middle East | ADGM / FSRAOther regional entities FSRA / entity-specific |
ADGM-regulated custody entity plus separate regional structures Liminal publishes entity-specific regulatory disclosures, including an ADGM-regulated custody entity and other regional structures; Singapore disclosures describe an exemption rather than a full custody licence for that entity. |
Provider + regulatory framework | Liminal Trust Center ↗ |
| BDACSReviewed 2026-08-17 | Asia-Pacific | South Korea / entity-specific Korean virtual-asset framework |
Institutional custody within South Korea virtual-asset regulatory environment BDACS describes itself as an institutional digital-asset custodian operating within South Korea’s regulated virtual-asset environment. |
Provider + regulatory framework | BDACS custody ↗ |
| M2Reviewed 2026-08-17 | Middle East | ADGM / FSRA FSRA |
ADGM custody entity disclosed as regulated/authorized for relevant service perimeter M2 disclosures identify M2 Custody Limited as regulated/authorized by the FSRA in ADGM for the relevant UAE service perimeter. |
Provider + regulatory framework | M2 ↗ |
| Rain InstitutionalReviewed 2026-08-17 | Middle East | ADGM / FSRA FSRA |
ADGM financial-services permission for eligible virtual-asset services Rain’s official materials describe regulated brokerage/custody operations in the UAE, including ADGM permissions for eligible services. |
Provider + regulatory framework | Rain about ↗ |
| BitOasis CustodyReviewed 2026-08-17 | Middle East | UAE / entity-specific UAE virtual-asset authorities |
Regulatory status depends on client entity and jurisdiction BitOasis operates regulated virtual-asset platform entities in the Middle East; the exact custody permission depends on the client entity and jurisdiction. |
Entity-specific | BitOasis terms ↗ |
| ZerohashReviewed 2026-08-17 | North America | US state trustNY BitLicense / other registrations North Carolina / NYDFS / other |
North Carolina non-depository trust plus other entity-specific permissions Zero Hash documentation states that Zero Hash Trust is a North Carolina-chartered non-depository trust company; the group also holds U.S. money-transmission/BitLicense permissions and other registrations. |
Provider + regulatory framework | Zero Hash custody docs ↗ |
| First Digital TrustReviewed 2026-08-17 | Asia-Pacific | Hong Kong trust framework Hong Kong trust-company framework |
Public trust corporation providing custody/asset servicing First Digital states that it is an independent public trust corporation headquartered in Hong Kong and provides custody/asset-servicing solutions. |
Provider + regulatory framework | First Digital ↗ |
| Laser DigitalReviewed 2026-08-17 | North America | OCC conditional charter OCC |
Proposed national trust bank has conditional approval; not final authorization Laser Digital announced OCC conditional approval in 2026 to establish Laser Digital National Trust Bank. Conditional approval is not the same as final authorization to operate the proposed U.S. trust bank. |
Conditional | OCC Corporate Applications Search — Laser Digital NTB ↗ |
| LBBWReviewed 2026-08-17 | Europe | Bank framework / partner model German banking framework |
Crypto custody proposition delivered with Bitpanda infrastructure; legal custody chain must be verified LBBW is a regulated German bank. Its public materials describe a cryptocurrency custody proposition for corporate clients implemented with Bitpanda technology/infrastructure. |
Bank/CSD framework | LBBW / Bitpanda custody partnership ↗ |
| SBI VC TradeReviewed 2026-08-17 | Asia-Pacific | Japan crypto exchange Japan FSA framework |
Regulated crypto-asset exchange custody/safeguarding framework SBI VC Trade operates as a Japanese regulated crypto-asset exchange service provider; customer asset safeguarding is subject to the Japanese exchange regulatory framework. |
Provider + regulatory framework | SBI VC Trade security guidance ↗ |
| Matrixport / Cactus CustodyReviewed 2026-08-17 | Asia-Pacific | Hong Kong TCSP / entity-specific Hong Kong / entity-specific |
Cactus Custody service perimeter; current legal entity and permissions must be confirmed Matrixport’s institutional custody is provided through Cactus Custody. Cactus describes itself as a qualified custodian operating under regulatory/AML requirements and has historically disclosed Hong Kong trust-company/TCSP credentials. |
Scope verification | Cactus Custody ↗ |
Use this matrix to narrow due diligence — not replace it
Regulatory permissions can change, group entities can differ, and a licence may cover only specific crypto-asset services. Before onboarding, confirm the exact contracting entity, jurisdiction, service permission, client-asset segregation, insolvency treatment and current regulator register entry.
