Four custody models — pick by threat, not preference
Each model defends against a different threat. Match the model to the threat that actually applies to you in your jurisdiction.
One hardware wallet + seed backup. Defends against exchange failure and online attacks. Vulnerable to single point of failure (loss, theft, coercion).
Three keys, two required to sign. Eliminates single point of failure. Distribute keys geographically (home, bank box, trusted family/lawyer).
Multisig where one or two co-signers are held by a service (Casa, Unchained, AnchorWatch, Onramp). You retain a quorum-blocking key — service can't move funds alone.
A regulated entity (HashKey, DBS, BitGo Japan, Zodia, Sygnum) holds your BTC in segregated cold storage with insurance and audit. Lose self-custody — gain institutional protections.
Hardware wallets — what to actually buy in Asia
All wallets below are non-custodial, open-firmware (or have publicly auditable firmware), and ship reliably across Asia. Do not buy from third-party Lazada/Shopee/Daraz listings — supply-chain attacks on no-name resellers are documented.
Mature, audited secure element, supports 5,000+ assets, deep Asian distribution (official resellers in JP/SG/HK/TH/IN). Ledger Recover is opt-in only — turn it off if you want zero key escrow.
Fully open firmware, secure element (Optiga T1000), Bitcoin-only mode, excellent for multisig. Ships to most Asian addresses via official store.
Bitcoin-only, air-gapped via PSBT (microSD), maximum paranoia. Steeper learning curve. Coldcard Q adds a keyboard — easier for less-technical users at the high end.
⚠️ Asian supply-chain hygiene
- Buy direct from Ledger, Trezor, or Coinkite. Never from Lazada / Shopee / Daraz / Taobao third-party resellers.
- Verify the holographic seal and check for tampering before plugging in.
- Generate the seed phrase on the device, never accept a "pre-configured" wallet.
- If buying for delivery to mainland China or Vietnam, expect customs delays — order through Hong Kong / Singapore forwarders.
Licensed Bitcoin custodians in Asia (2026)
Regulated entities authorised to hold Bitcoin on behalf of clients in their jurisdiction. We have not been compensated by any custodian below; rankings are by license maturity + insurance coverage + audit transparency.
| Custodian | HQ | License | Insurance | Min | Audit cadence |
|---|---|---|---|---|---|
| HashKey Custody | 🇭🇰 HK | SFC Type 1, 4, 7, 9 | $400M | $100K | Quarterly SOC2 |
| OSL Digital Securities | 🇭🇰 HK | SFC Type 1, 7 | Lloyd's coverage | $250K | Annual |
| DBS Digital Exchange | 🇸🇬 SG | MAS CMS | Bank-grade | Accredited investor | Bank-supervised |
| Sygnum Singapore | 🇸🇬 SG | MAS Major Payment | Yes (undisclosed) | $50K | Annual |
| Coinhako Trust | 🇸🇬 SG | MAS DPT | Yes | Retail OK | Annual |
| BitGo Japan | 🇯🇵 JP | FSA crypto-asset custody | $250M | $25K | Annual SOC2 |
| Coincheck Custody | 🇯🇵 JP | FSA | Yes | Retail OK | Annual |
| KB Kookmin Trust | 🇰🇷 KR | FSC pilot | Bank-grade | Institutional | Bank-supervised |
| Zodia Custody | 🇦🇪 UAE | VARA + FCA | $425M | Institutional | SOC2 + ISO27001 |
| Hex Trust | 🇦🇪 UAE / 🇭🇰 HK | VARA + SFC Type 1 | Yes | $100K | SOC2 |
| Cobo | 🇸🇬 SG / 🇭🇰 HK | MAS-applied | Yes | Retail OK (MPC wallet) | Annual |
Inheritance & estate planning
The #1 cause of Bitcoin loss in 2024–26 is not theft — it is the holder dying with no recoverable plan. Asia's family / trust laws make this uniquely complex (multi-jurisdiction beneficiaries, succession constraints in Sharia jurisdictions, mandatory probate in JP/KR).
2-of-3 multisig where one key is held by a Bitcoin-aware lawyer's escrow. Recoverable on death without exposing seed phrase in life. Casa, Unchained and AnchorWatch all support this.
A sealed letter held by your executor with instructions (not seeds). Refers to a hardware wallet PIN and seed location. Combined with a hardware wallet's passphrase, even a leaked letter does not compromise funds.
Singapore / Hong Kong / UAE trust companies offer Bitcoin-aware trustee services. Casa, Onramp, AnchorWatch can coordinate with the trustee for jurisdictionally-valid succession.
🚨 Things people get wrong
- Storing seeds in a will — wills become public during probate. Use multisig + sealed instructions instead.
- Single safe deposit box — courts can freeze a deceased person's box, blocking heirs from seed access for 12+ months.
- Telling your spouse "just call my lawyer" — most Asian lawyers cannot legally hold a seed phrase for you. Use a multisig provider who has the legal structure for this.
- SS shares stored together — Shamir's Secret Sharing only works if shares are geographically and legally separated. Two shares in the same house = a single point of failure.
Frequently asked questions
Is self-custody legal in my country?
Holding Bitcoin in your own private keys is legal in every Asian jurisdiction we have surveyed — including jurisdictions that ban exchanges (China) or restrict promotion (Vietnam, India). The legal targets are intermediaries (exchanges, OTC desks) and tax events (disposal). The individual right to hold private keys has not been criminalised anywhere in Asia as of May 2026.
Do I need to declare self-custodied Bitcoin?
Most jurisdictions require declaration only on disposal (taxable event), not on holdings. India is the strict exception — Section 285BAA mandates annual reporting of crypto assets. Japan requires reporting under "miscellaneous income" but only on realised gains. Singapore, Hong Kong, UAE do not currently require holdings disclosure. This is a fast-moving area — verify with a local accountant annually.
What's the difference between a hardware wallet and an exchange wallet?
A hardware wallet stores private keys offline on a dedicated device. You own the keys. An exchange wallet (Binance, Bybit, Coinbase, etc.) is a deposit at the exchange — you own a claim against the exchange, not the BTC itself. Mt. Gox (2014), FTX (2022), and dozens of smaller failures have demonstrated the difference. For long-term holdings: always hardware. For active trading only: exchange is acceptable.
How does multisig actually work?
You create 3 separate keys on 3 separate devices. The Bitcoin address is a "multisig script" requiring 2 of those 3 signatures to spend. You store one key at home, one at a separate location (bank box, parent's house, lawyer), one in a backup location. Lose any single key and you can still spend. Lose two and the third becomes unrecoverable — this is the redundancy you trade off against complexity. Sparrow Wallet (free) plus Specter Desktop is the standard open-source multisig stack.
Is collaborative custody safer than full self-custody?
For most users, yes — it removes the most common failure mode (losing your own keys to fire, flood, divorce, or accident). The trade-off is annual service fees and a degree of identity exposure to the co-signer. For experienced users with established backup discipline, full self-custody (multisig you control all keys to) remains the lowest-trust option.
Can I use a Singapore custodian if I live in India?
Most Singapore custodians (DBS, Sygnum, Coinhako) accept Indian residents subject to KYC and your home jurisdiction's tax rules. You remain liable for Indian 30% tax on gains and 1% TDS on disposals, regardless of where the custody sits. Cross-border custody arrangements are an excellent E&Y / Big-4 tax-advice topic — always consult before depositing.