How Crypto IRA Custody Works
Understanding crypto IRA custody requires understanding that there are two distinct layers of protection involved — and they involve different entities with different responsibilities.
Layer 1 — The IRA Custodian: By law, an IRA must be held by a qualified IRA custodian — typically a bank, trust company, or federally insured credit union approved by the IRS. The custodian holds the IRA in trust, maintains the account records, processes contributions and distributions, and issues required tax forms. The custodian is a regulated financial institution responsible for administrative compliance.
Layer 2 — The Asset Custodian: For a crypto IRA, the actual cryptocurrency must be held somewhere. This is the asset custodian's job — a regulated entity that holds the private keys and physically secures the crypto. Not all IRA custodians are equipped to hold crypto directly, which is why crypto IRA platforms use specialized institutional crypto custodians.
This two-layer structure is by design. It means iTrustCapital (the platform) never directly holds your assets. Even if iTrustCapital went offline tomorrow, your IRA would remain at Equity Trust and your crypto at Coinbase Custody — neither of which is iTrustCapital.
Who Holds Your Crypto? (iTrustCapital's Custodian Model)
iTrustCapital uses the following custody chain:
- Platform: iTrustCapital — the trading interface and customer experience layer. You interact with iTrustCapital's platform to execute trades, manage your account, and process distributions. iTrustCapital does not hold your assets.
- IRA Custodian: Equity Trust Company — one of the largest and longest-established self-directed IRA custodians in the United States, with over $45 billion in assets under custody across more than 200,000 accounts. Equity Trust is a regulated trust company that holds the IRA in your name.
- Crypto Asset Custodian: Coinbase Custody Trust Company — a regulated qualified custodian overseen by the New York Department of Financial Services (NYDFS). Coinbase Custody is a separate legal entity from Coinbase Exchange and is specifically designed for institutional-grade asset safekeeping.
This is the most important custody distinction to understand. The crypto in your iTrustCapital IRA is not held on iTrustCapital's balance sheet. It is titled in your IRA's name and held by Equity Trust and Coinbase Custody. If iTrustCapital ceased operations, your assets would remain accessible through the custodians. This is categorically different from crypto held on an exchange like FTX, which held customer funds on its own balance sheet — with catastrophic results when it failed.
Cold Storage vs Hot Wallet — How Your Assets Are Stored
Not all crypto storage is equal. The key distinction in institutional custody is between cold storage (offline, air-gapped) and hot wallets (online, connected to the internet).
Cold storage
Cold storage refers to keeping crypto private keys in hardware or systems that are completely disconnected from the internet. Because the keys are never online, they cannot be hacked remotely. Cold storage is the gold standard for institutional crypto custody and is required for any serious long-term safekeeping of large amounts.
Coinbase Custody stores the vast majority of assets in cold storage — offline, geographically distributed, and protected by multiple layers of physical security. The cold storage systems are designed so that no single person or system can access funds unilaterally; multi-party authorization is required.
Hot wallets and the trade-off
A small portion of assets may be maintained in hot wallets (online) to facilitate trading execution and liquidity. Hot wallets are a necessary component of any operational platform — you can't execute a trade if everything is in cold storage with a multi-day access delay. However, this creates a window of vulnerability that cold storage doesn't have.
Coinbase Custody is designed to minimize hot wallet exposure. They are not a retail exchange and don't maintain the kind of hot wallet balances a retail exchange does. The institutional custody product is built around the assumption that large, long-term holders require maximum cold storage security.
Key storage security features at Coinbase Custody:
- Majority of assets in offline cold storage
- Multi-signature authorization required for transactions
- Geographically distributed key storage (no single point of failure)
- Physical security controls at storage locations
- Background-checked and bonded operations staff
- Separation from Coinbase Exchange operations and customer funds
Is My Crypto IRA FDIC or SIPC Insured?
This is one of the most important questions to ask about any crypto IRA — and the honest answer requires some nuance.
FDIC insurance
FDIC insurance covers deposits at FDIC-insured banks — checking accounts, savings accounts, CDs, and money market deposit accounts — up to $250,000 per depositor per institution. Cryptocurrency is not a bank deposit and is not FDIC insured. There is no government guarantee on your crypto holdings, period.
Cash held within your iTrustCapital account while awaiting a trade may have FDIC coverage as a bank deposit, but the crypto assets themselves are not covered.
SIPC insurance
SIPC insurance protects brokerage account customers when a SIPC-member broker-dealer fails, covering up to $500,000 in securities (including $250,000 in cash). Cryptocurrency is not considered a security under SEC regulations (with some arguable exceptions), and iTrustCapital is not a SIPC-member broker-dealer. Crypto IRA assets are not SIPC insured.
What insurance does exist?
Coinbase Custody carries commercial crime insurance that covers assets held in custody against theft, internal fraud, and some cybersecurity events. The specific coverage amount and terms are not fully public. This is private insurance, not a government backstop — meaning coverage limits, exclusions, and claims processes differ significantly from FDIC/SIPC.
This is a real and important risk to understand. Your crypto IRA assets are not insured by the US government in the way bank deposits and brokerage accounts are. Commercial insurance exists at the custodial level, but it is not equivalent to a government guarantee. Position size your crypto IRA accordingly and understand this risk before allocating significant retirement funds.
What Happens If iTrustCapital Shuts Down?
This is the question that separates a well-structured crypto IRA platform from a dangerous one. In the case of iTrustCapital, the answer is relatively reassuring — by design.
Because iTrustCapital uses Equity Trust as the IRA custodian and Coinbase Custody as the asset custodian, your assets are not on iTrustCapital's balance sheet. If iTrustCapital ceased operations:
- Your IRA would remain at Equity Trust Company under your name
- Your crypto assets would remain at Coinbase Custody
- Equity Trust would work to transfer your IRA to another self-directed IRA custodian or platform
- You would retain access to your funds and could transfer to another provider
This structure is fundamentally different from what happened to customers of FTX, Celsius, and BlockFi — those platforms commingled customer assets with their own, meaning customer funds were directly at risk when those companies failed.
Key distinction: Segregated assets vs. commingled assets
The reason the FTX collapse was so catastrophic for customers is that FTX treated customer crypto as its own asset — commingling it with corporate funds. When the company failed, customer assets were part of the bankruptcy estate.
An IRA at a properly structured provider like iTrustCapital is different: the assets are held in trust for you at a regulated custodian and are legally segregated from the platform company's assets. This is a fundamental structural difference, not just a marketing claim.
That said, no system is completely risk-free. Always verify the custodian relationships of any crypto IRA provider before committing funds.
How to Evaluate Any Crypto IRA Custodian's Security
When comparing crypto IRA providers, use this checklist to evaluate custodian quality and security:
- Named, regulated IRA custodian: Is there a named, IRS-qualified trust company or bank acting as IRA custodian? Verify the custodian independently — do not take the platform's word for it.
- Named, regulated crypto asset custodian: Who physically holds the crypto? Is it a regulated qualified custodian (e.g., Coinbase Custody, BitGo, Anchorage Digital)? Avoid platforms that are vague about who holds assets.
- Segregated assets: Are client assets legally segregated from the platform company's corporate assets? This should be stated explicitly in the custodian agreement.
- Cold storage majority: What percentage of assets are held in cold storage? Is there a stated policy?
- Commercial insurance: What level of commercial insurance coverage exists on custodied assets? Who is the insurer?
- Platform holds assets directly: Avoid any platform that appears to hold customer crypto on its own balance sheet without a separate qualified custodian.
- Vague custody disclosures: Avoid platforms that don't clearly name their custodians or describe their custody model in detail.
- Yield/staking programs without clear risk disclosure: Yield programs on IRA assets introduce counterparty risk. Understand who holds assets during staking and what happens if the counterparty fails.
iTrustCapital meets the positive criteria on this list. Equity Trust and Coinbase Custody are both named, regulated entities with publicly verifiable regulatory standing. This is one of the primary reasons iTrustCapital ranks as the best overall crypto IRA provider for investors who prioritize custodial safety alongside fee efficiency.