Digital-asset funds that attract institutional capital, family-office allocations or regulated distribution channels face a sharply different custody question than their earlier-stage peers. Heightened Scrutiny – the enhanced due-diligence posture that prime brokers, fund administrators, auditors and regulators impose on funds whose assets are crypto-native – changes what a compliant custody arrangement must look like, who can provide it, and how the structure is documented. Getting that arrangement wrong does not simply create an operational gap. It closes institutional doors, triggers regulatory enquiry and, in the most acute cases, makes the fund unauditable.
The wrong domicile locks in tax leakage and limits which investors a manager can accept. A custody solution that looked adequate at seed stage is often the first thing a placement agent or institutional LP flags when the fund seeks its second close. In our practice, we have seen term sheets pulled because the custody arrangement did not meet the expectations of the investor's own investment committee – a problem that surfaces late and at high cost.
This page sets out the regulated basis for fund custody in the leading digital-asset hubs, the process of building an arrangement that survives Heightened Scrutiny, the common structural mistakes we encounter, and a decision matrix for managers at different stages of the capital-raising cycle.
What Does "Heightened Scrutiny" Mean for Fund Custody?
Heightened Scrutiny in this context refers to the elevated diligence and disclosure requirements that institutional investors, prime brokers and regulators apply to funds holding digital assets, rather than traditional securities. It is not a defined statutory term; it is a market posture that has crystallized as institutional capital has entered the asset class. Investors governed by insurance capital rules, pension mandates or regulated fund-of-funds policies apply it as a matter of internal policy. Regulators in leading fund hubs apply it as a matter of examination priority.
The custody arrangement is the first pressure point. Institutional investors expect a qualified custodian – typically a regulated entity holding digital assets in segregated, bankruptcy-remote accounts – with clear documentation of key management, insurance coverage, sub-custody chains and the controls around withdrawal authority. The gap between what a founding manager puts in place and what that standard requires is often significant. Regulators in jurisdictions such as ADGM and the Cayman Islands have progressively sharpened their expectations around safeguarding of fund assets, and the FCA in the United Kingdom has embedded explicit custody and safeguarding requirements into its regime for cryptoasset businesses.
In our practice, the most common trigger for a custody review is not a regulatory inspection – it is a letter from an institutional LP's legal team during a second close, requesting documentation that the fund's arrangements simply do not yet support.
What Is the Regulated Basis for Crypto Fund Custody?
Custody of digital assets is a regulated activity in most flagship fund domiciles, and the specific regime shapes what a compliant arrangement requires. Managers who treat custody as a back-office question rather than a regulatory one routinely miscalibrate their structure.
Under MiCA, the regulation administered by ESMA and national competent authorities across the EU and EEA, custody and administration of crypto-assets on behalf of clients constitutes a defined crypto-asset service requiring authorisation as a CASP (crypto-asset service provider). A fund's chosen custodian must hold that authorisation, or an equivalent regulated status, to provide the service lawfully. The passporting mechanism means a CASP authorised in one member state may serve fund clients across the bloc – but the authorisation must exist in the first place.
In the Cayman Islands, where a large share of offshore digital-asset funds are domiciled, the Virtual Asset (Service Providers) Act – administered by CIMA – establishes registration and licensing tracks for virtual asset service providers including custodians. A Cayman fund's custody arrangement must be consistent with those requirements, and the fund's offering documents must accurately reflect the arrangement.
In the ADGM, the FSRA regulates custody of virtual assets as a distinct regulated activity. Fund managers operating within the ADGM financial free zone must ensure their appointed custodian holds the appropriate authorisation from the FSRA. In VARA-regulated Dubai, the equivalent is the custody activity-based licence under VARA's rulebooks. Both regimes apply safeguarding and segregation expectations that go materially beyond what an unregulated custody provider can document.
For funds with a BVI FSC registration, the Virtual Asset Service Providers Act 2022 creates the custody registration framework. For Singapore-domiciled vehicles, MAS governs custody as part of the Payment Services Act regime. In each case, the regulated basis determines the minimum standards a custodian must meet and the documentation the fund must hold to evidence compliance.
The principle is consistent across regimes: custody is regulated; the regulator defines the standard; and an arrangement that does not meet that standard is not a custody arrangement – it is an operational risk dressed as one.
The custody questions institutional investors raise are specific – and a standard fund legal opinion does not answer them. If your fund is approaching a second close or preparing for regulatory review, the custody structure deserves its own analysis. Map your options with OBOLUS.
How Is a Custody Arrangement Built to Survive Institutional Review?
A custody arrangement that survives Heightened Scrutiny is built in layers: the regulated custodian, the contractual documentation, the key-management architecture and the fund-level disclosure. Each layer must be consistent with the others. A mismatch – for example, the fund's private placement memorandum describing a segregated arrangement while the custodian's standard agreement provides only omnibus accounts – is the kind of gap that a sophisticated LP's counsel will identify immediately.
The first layer is custodian selection. In our practice, we advise managers to assess a prospective custodian on four axes: regulatory status in the relevant jurisdiction; the segregation model it operates (segregated versus omnibus, and the bankruptcy-remoteness analysis in each case); its insurance coverage and the scope of what that coverage actually addresses; and its sub-custody chain, including whether sub-custodians are themselves regulated and how the manager retains oversight of that chain.
The second layer is contractual documentation. The custody agreement must address, at minimum: the scope of assets covered; the withdrawal and transaction authorisation framework; the liability regime (and its limits); the reporting obligations; and the termination and asset-return mechanics. For funds in MiCA jurisdictions, the agreement must be consistent with the CASP authorisation held by the custodian. For Cayman funds, it must align with the VASP Act registration parameters. Inconsistencies between the custody agreement and the fund's constitutional documents create the audit problems that surface when the fund is stress-tested.
The third layer is key-management architecture. Institutional investors increasingly ask how private keys are held – whether in a multi-signature arrangement, a threshold signature scheme, or a hardware security module environment – and who holds withdrawal authority and under what conditions. The answer must be documented and must be consistent with what the offering documents represent. A manager who cannot answer this question with precision is signaling an operational gap, not a technical one.
The fourth layer is fund-level disclosure. The private placement memorandum, the subscription documents and the risk factors must accurately and specifically describe the custody arrangement, the regulated status of the custodian, the insurance position and the key-management framework. Generic language about "reputable custodians" does not meet the standard that institutional LPs apply in 2025. Regulators reviewing the fund on examination will also look at whether the disclosure matches the reality of the arrangement.
What Is the Cross-Border Reality of Digital-Asset Fund Custody?
Very few digital-asset funds operate within a single jurisdiction. The fund vehicle may be domiciled in the Cayman Islands, the manager may be regulated in Singapore or the ADGM, the investors may sit in Europe and North America, and the custodian may be licensed in a third jurisdiction. Each of those relationships is governed by a different regime, and the custody arrangement must be coherent across all of them.
The cross-border challenge is most acute at the level of regulatory recognition. A custodian regulated by the FSRA in the ADGM may not automatically satisfy the expectations of a MAS-regulated fund manager or of an EU institutional investor whose own investment mandate requires a MiCA-authorised CASP. Managers who assume that a regulated custodian in one leading hub satisfies the requirements of all others discover the gap when an LP declines to invest or when the fund's auditor qualifies its opinion.
The banking layer compounds the complexity. Digital-asset funds frequently require both fiat banking (for subscriptions, redemptions and fee flows) and digital-asset custody. The fiat banking relationship and the custody relationship are typically with different institutions, and the AML/KYC requirements of each bank or custodian must be satisfied simultaneously. Operators we advise routinely find that a custodian change – driven by investor pressure – requires a parallel re-papering of the banking relationship, because the bank's AML risk assessment is anchored to the custody provider's regulated status.
The Travel Rule (the obligation to pass originator and beneficiary data with a virtual asset transfer) also operates across the custody chain. When a fund moves assets between a custodian and a trading venue, or between sub-custodians, the Travel Rule applies in most leading hubs. A custody arrangement that does not account for Travel Rule compliance creates a compliance gap that regulators in FATF-member jurisdictions treat as a material deficiency.
What Are the Common Mistakes in Fund Custody Structures?
In our cross-border practice, we encounter a recurring set of structural mistakes in digital-asset fund custody arrangements. Identifying them early – ideally at the fund launch, rather than at the point of institutional due diligence – is consistently less expensive and less disruptive.
The most frequent mistake is using an unregulated or lightly registered custodian because it was operationally convenient at fund inception. As the fund grows and institutional capital becomes the target, the custodian's regulatory status becomes a hard constraint. Migrating to a regulated custodian mid-fund life requires a consent process under the custody agreement, a disclosure update to investors and, in some domiciles, a regulatory notification. It is manageable, but it consumes time and creates uncertainty at precisely the moment when the manager is trying to close a round.
The second common mistake is omnibus custody presented in offering documents as segregated custody. The legal and practical differences between an omnibus account (where the fund's assets sit alongside other clients' assets in an account held in the custodian's name) and a segregated account (where the assets are held in an account that identifies the fund as the beneficial owner) are material in a default or insolvency scenario. Institutional investors and their counsel read custody agreements. When the agreement does not match the PPM, the fund loses credibility.
The third mistake is inadequate insurance coverage – or, more precisely, insurance whose scope does not cover what the manager believes it covers. Custodial insurance for digital assets is a specialist market. Coverage for hot-wallet assets, cold-storage assets, errors-and-omissions claims and crime coverage are distinct products. A blanket reference to "insurance" in the fund documents is not sufficient. We have seen institutional diligence stall because the manager could not produce a coverage summary that addressed the investor's specific concerns.
The fourth mistake is a custody agreement that is not jurisdiction-consistent. A custodian may be regulated in one domicile but the standard-form custody agreement may be governed by the law of another jurisdiction, with dispute resolution provisions that do not align with the fund's constitutional documents. Resolving a custody dispute across two legal systems adds cost and delay to a situation that is already operationally critical.
Which Custody Structure Fits Which Fund Profile?
The right custody structure depends on the fund's domicile, its investor profile, its asset composition and the stage of its capital-raising cycle. There is no universal solution, and the choice involves trade-offs that a manager should understand before committing.
Profile A – Early-stage fund, sub-institutional investor base, single-jurisdiction operation. A manager in this position typically uses a regulated digital-asset custodian in the fund's domicile (for example, a CIMA-registered provider in the Cayman Islands or a VASP-registered provider in the BVI). The custody agreement should be consistent with the fund's constitutional documents, and the PPM should accurately describe the arrangement. The key discipline is accuracy of disclosure – not sophistication of structure. The risk at this stage is over-promising (describing the arrangement as more robust than it is) rather than under-engineering.
Profile B – Mid-stage fund, mixed investor base including regulated institutions, multi-jurisdiction exposure. This profile requires a custodian with regulated status in at least one major hub (MiCA CASP, FSRA authorisation, MAS licence or equivalent) and a custody agreement that addresses segregation, insurance and key-management architecture in specific terms. The cross-border layer – Travel Rule compliance, recognition of custodian status by the manager's own regulator – must be mapped and documented. This is the profile where the gap between what the fund has and what institutional investors expect is most frequently encountered. A custody review at this stage is typically a matter of weeks, not months.
Profile C – Institutional fund, regulated distribution, multi-custodian architecture. A fund at this stage may operate with a primary custodian and one or more sub-custodians or trading custodians, with a formal oversight framework for the sub-custody chain. The MiCA regime's passporting mechanism is relevant here for European distribution. The offering documents must describe the full chain, the liability allocation at each link and the oversight procedures the manager maintains. Regulators in the leading hubs conduct thematic reviews on custody; a fund at this stage should expect to demonstrate, not merely describe, its oversight of the custody arrangement.
If your fund is transitioning between profiles – approaching an institutional close, adding regulated distribution, or switching custodians – the structural gap in the custody arrangement is worth identifying before an LP does. To pressure-test your structure before you commit, message us via t.me/oboluslaw.
A Custody Review in Practice
In a recent structuring matter, a digital-asset fund manager preparing for its first institutional close engaged us to review the fund's existing custody arrangement. The fund was domiciled in the Cayman Islands and had been operating with a custody provider registered under the VASP Act. The incoming lead LP – a regulated European fund-of-funds – required that the custodian hold authorisation consistent with MiCA standards or an equivalent recognised regime. We reviewed the custodian's regulatory status, the custody agreement, the sub-custody chain and the fund's offering documents against the LP's investment committee requirements. We identified a segregation gap in the custody agreement, a mismatch between the PPM's risk-factor language and the actual key-management architecture, and an insurance endorsement that excluded the fund's cold-storage assets. Working with the custodian and allied counsel in the relevant jurisdiction, we coordinated a revised custody agreement, an updated PPM and a coverage endorsement. The institutional close proceeded on schedule.
A Common Assumption Worth Examining
A common assumption among managers building digital-asset funds is that any offshore vehicle works equally well as a custody domicile. The assumption runs something like this: the assets are on-chain, the custodian holds keys, and the legal wrapper around the arrangement is secondary to the technical reality of key control.
That assumption does not survive contact with institutional due diligence or regulatory examination. The legal wrapper – the domicile of the custodian, the regulated status of the custody activity, the governing law of the custody agreement, the insolvency treatment of segregated assets – is precisely what institutional investors assess when they apply Heightened Scrutiny. Key control is a technical fact. Bankruptcy-remote segregation is a legal conclusion that depends entirely on the jurisdiction and the documentation. Regulators who examine funds ask about both.
In our practice, managers who have taken the time to align their custody structure with their investor profile, their domicile and their regulatory obligations consistently encounter fewer friction points at the institutional close and fewer surprises at regulatory examination. The upfront cost of the alignment is materially lower than the cost of remediation once an LP or regulator has identified the gap.
Related at OBOLUS
Related at OBOLUS
- Funds & Investment Vehicles – practice overview – the full scope of our fund structuring and regulatory counsel for digital-asset managers
- Fund manager licensing in Luxembourg – MiCA, AIFMD and the EU distribution gateway for digital-asset funds
- Custody arrangements for established operators – the custody framework for funds at full institutional scale
FAQ
Where should a crypto fund be domiciled?
Domicile turns on three factors: investor base, asset mix and regulatory recognition. Cayman and BVI remain the dominant offshore choices for their established fund law and CIMA/FSC regulatory infrastructure. EU distribution favors a Luxembourg or Irish vehicle with MiCA-aligned custody. ADGM and VARA-regulated Dubai serve managers targeting Gulf institutional capital. The wrong domicile creates tax friction, limits investor eligibility and may require custodians that do not meet the fund's target LP standards. Matching domicile to investor profile at launch avoids costly migration later.
Does a digital-asset fund manager need a licence?
In most leading hubs, yes. Managing a digital-asset fund is a regulated activity in its own right, separate from any licence the fund itself requires. Under MiCA, managing a crypto-asset portfolio on a discretionary basis constitutes a CASP activity. Singapore's MAS regime captures fund management under the Payment Services Act and securities laws. ADGM's FSRA regulates virtual-asset fund management as a distinct activity. The specific licence category depends on the assets managed, the investor profile and the domicile. Operating without the appropriate authorisation exposes both the manager and the fund to enforcement risk.
How is custody arranged for a crypto fund?
A compliant crypto fund custody arrangement requires: a regulated custodian (CASP-authorised, CIMA-registered, FSRA-authorised or equivalent); a custody agreement that addresses segregation, key-management architecture, insurance scope and termination mechanics; offering documents that accurately describe the arrangement; and, where multiple custodians or sub-custodians are used, a documented oversight framework for the full chain. The arrangement must be consistent with the fund's domicile regime and with the regulatory expectations of any jurisdiction into which the fund distributes. Institutional investors and regulators both verify the documentation, not merely the representation.
About OBOLUS
OBOLUS is an independent digital-asset law boutique acting only for businesses. We advise exchanges, custodians, token issuers and funds on licensing across 70+ jurisdictions, on disputes and on-chain asset recovery across 25+ forums, and on the tax, banking and compliance that sit around them. Digital assets are the whole of our practice. We match domicile to investor base, asset mix and redemption profile – and we structure licensing, banking and tax as one mandate rather than three disconnected workstreams. To discuss your fund's custody structure, contact info@oboluslaw.com.
By Lydia Brennan, Tax & Structuring Analyst – specialist in cross-border fund structuring, digital-asset custody frameworks and tax efficiency for investment vehicles across the leading fund domiciles.
This publication is general information about the law and does not constitute legal advice. It is not a substitute for advice tailored to your circumstances. OBOLUS accepts no liability for action taken or not taken on the basis of this material. For advice on your situation, contact info@oboluslaw.com.