[{"data":1,"prerenderedAt":846},["ShallowReactive",2],{"tag-custody":3},[4,486],{"_path":5,"_dir":6,"_draft":7,"_partial":7,"_locale":8,"title":9,"description":10,"slug":11,"date":12,"lastUpdated":13,"author":14,"readingTime":15,"category":16,"tags":17,"ogImage":24,"featured":7,"body":25,"_type":479,"_id":480,"_source":481,"_file":482,"_stem":483,"_extension":484,"sitemap":485},"\u002Farticles\u002F09-self-custody-vs-custodial-wallets","articles",false,"","Self-Custody vs. Custodial Wallets: What Attorneys Need to Know","How the distinction between self-custody and custodial cryptocurrency wallets drives discovery strategy, what records exist in each case, and how to prove control when no institution holds records.","self-custody-vs-custodial-wallets","2026-05-05","2025-05-05","Nick Kampe",8,"Education",[18,19,20,21,22,23],"custody","self-custody","hardware wallet","exchange","KYC","evidence","\u002Fog\u002Fself-custody-vs-custodial-wallets.png",{"type":26,"children":27,"toc":467},"root",[28,36,41,48,53,66,77,83,93,103,113,118,124,134,144,154,164,170,175,185,195,205,215,225,244,250,255,268,273,279,284,294,303,313,323,329,334,339,352,358,363,368,373,392,396,402,410,415,423,428,436,441,449,454,462],{"type":29,"tag":30,"props":31,"children":32},"element","p",{},[33],{"type":34,"value":35},"text","When attorneys first encounter cryptocurrency in a legal matter, one of the most practically significant questions is whether the assets are held with a financial institution or held independently by the individual. The answer determines what institutional records exist, what can be obtained through subpoena, and what investigative techniques are required to establish ownership and value.",{"type":29,"tag":30,"props":37,"children":38},{},[39],{"type":34,"value":40},"The distinction is not subtle. It is the fundamental design choice in cryptocurrency: either a third party holds the cryptographic key material and the user interacts with the assets through that party's platform, or the user holds the key material directly and controls the assets without any intermediary. These two arrangements have radically different evidence profiles.",{"type":29,"tag":42,"props":43,"children":45},"h2",{"id":44},"the-fundamental-distinction",[46],{"type":34,"value":47},"The Fundamental Distinction",{"type":29,"tag":30,"props":49,"children":50},{},[51],{"type":34,"value":52},"Every cryptocurrency asset on a public blockchain is controlled by whoever possesses the private key associated with the address where the asset is held. The private key is the cryptographic credential that authorizes spending. Nothing else matters technically. Courts, legal titles, and oral agreements about who should have access to cryptocurrency are beside the point until someone has the key.",{"type":29,"tag":30,"props":54,"children":55},{},[56,58,64],{"type":34,"value":57},"In a ",{"type":29,"tag":59,"props":60,"children":61},"strong",{},[62],{"type":34,"value":63},"custodial arrangement",{"type":34,"value":65},", the user does not possess the private key. A third party, typically a cryptocurrency exchange or institutional custodian, holds the private key and provides the user with an account interface. The user can view their balance, initiate trades, and request withdrawals, but they are relying on the custodian to execute all of that on their behalf. The custodian actually controls the blockchain assets. From a legal process perspective, this arrangement resembles a bank account: there is an institution with records, regulatory obligations, and the ability to respond to subpoenas.",{"type":29,"tag":30,"props":67,"children":68},{},[69,70,75],{"type":34,"value":57},{"type":29,"tag":59,"props":71,"children":72},{},[73],{"type":34,"value":74},"self-custody arrangement",{"type":34,"value":76},", the user holds the private key directly. There is no intermediary. The user controls the blockchain assets personally, using wallet software or hardware to manage the key material and sign transactions. From a legal process perspective, this arrangement has no institutional analog. There is no company to subpoena for records. The evidence must come from the blockchain itself, from the user's devices, and from whatever documentary evidence exists about the key material.",{"type":29,"tag":42,"props":78,"children":80},{"id":79},"types-of-custodial-custody",[81],{"type":34,"value":82},"Types of Custodial Custody",{"type":29,"tag":30,"props":84,"children":85},{},[86,91],{"type":29,"tag":59,"props":87,"children":88},{},[89],{"type":34,"value":90},"Cryptocurrency exchanges",{"type":34,"value":92}," are the most common custodial arrangement. Exchanges like Coinbase, Kraken, Gemini, and Binance allow users to buy, sell, and hold cryptocurrency in exchange-managed accounts. The exchange holds the private keys and maintains internal ledger entries representing each user's balance. The blockchain does not necessarily reflect each user's individual holding; many exchanges aggregate user funds in pooled wallets and maintain their own off-chain record of who holds what.",{"type":29,"tag":30,"props":94,"children":95},{},[96,101],{"type":29,"tag":59,"props":97,"children":98},{},[99],{"type":34,"value":100},"Cryptocurrency ETFs and investment products",{"type":34,"value":102}," hold digital assets through institutional custodians on behalf of shareholders. A person who owns shares in a Bitcoin ETF has exposure to Bitcoin price movements but does not hold Bitcoin on the blockchain and has no private key. The relevant records are with the fund and the brokerage through which the shares are held, not on a blockchain.",{"type":29,"tag":30,"props":104,"children":105},{},[106,111],{"type":29,"tag":59,"props":107,"children":108},{},[109],{"type":34,"value":110},"Institutional custody services",{"type":34,"value":112}," are used by high-net-worth individuals and institutional investors who want the security of a regulated custodian combined with the direct asset ownership that exchange accounts provide. These custodians maintain blockchain records but hold the keys and provide security infrastructure that individual users cannot easily replicate. They are subject to regulatory oversight and maintain records similar to other financial institutions.",{"type":29,"tag":30,"props":114,"children":115},{},[116],{"type":34,"value":117},"For litigation purposes, all forms of custodial custody share the key characteristic: there is an identifiable institution that holds records and can be compelled through legal process to produce them. The discovery approach for custodial assets is the same as for conventional financial assets, with the additional technical consideration of identifying the specific exchange or custodian.",{"type":29,"tag":42,"props":119,"children":121},{"id":120},"types-of-self-custody",[122],{"type":34,"value":123},"Types of Self-Custody",{"type":29,"tag":30,"props":125,"children":126},{},[127,132],{"type":29,"tag":59,"props":128,"children":129},{},[130],{"type":34,"value":131},"Software wallets",{"type":34,"value":133}," are applications installed on a computer or mobile device that generate and store private key material on the device. The user interacts with the wallet through the application's interface, which reads the blockchain and signs transactions using the locally stored key. Popular software wallets include MetaMask (primarily for Ethereum-based assets), various Bitcoin wallet applications, and multi-asset wallets supporting many different blockchains. Software wallets store key material on the device, which creates the possibility of recovering that material through device forensics even if the application itself has been deleted.",{"type":29,"tag":30,"props":135,"children":136},{},[137,142],{"type":29,"tag":59,"props":138,"children":139},{},[140],{"type":34,"value":141},"Hardware wallets",{"type":34,"value":143}," are dedicated physical devices designed specifically to store private key material in a secure chip that is isolated from internet-connected computers. When a user wants to sign a transaction, they connect the hardware wallet to a computer, review the transaction details on the hardware wallet's display, and physically confirm the transaction by pressing a button. The private key never leaves the device. Popular hardware wallets include devices made by Ledger and Trezor. A hardware wallet can hold essentially unlimited cryptocurrency value in a device the size of a USB drive.",{"type":29,"tag":30,"props":145,"children":146},{},[147,152],{"type":29,"tag":59,"props":148,"children":149},{},[150],{"type":34,"value":151},"Paper wallets",{"type":34,"value":153}," are printed records of a private key or seed phrase. At the time of creation, the user generates the key material on a device and then prints or writes it down. If the paper is stored securely, the funds are accessible to anyone who finds it. Paper wallets are less common today but were a popular storage method in earlier years of cryptocurrency adoption.",{"type":29,"tag":30,"props":155,"children":156},{},[157,162],{"type":29,"tag":59,"props":158,"children":159},{},[160],{"type":34,"value":161},"Multisignature wallets",{"type":34,"value":163}," (commonly called multisig) require authorization from multiple private keys to execute a transaction. A 2-of-3 multisig wallet, for example, requires any two of three specified private keys to sign before funds can be moved. This arrangement can be used for security, for shared control, or specifically to complicate attribution in litigation. Multisig wallets have important implications for ownership evidence, because no single key establishes control.",{"type":29,"tag":42,"props":165,"children":167},{"id":166},"identifying-which-type-a-party-uses",[168],{"type":34,"value":169},"Identifying Which Type a Party Uses",{"type":29,"tag":30,"props":171,"children":172},{},[173],{"type":34,"value":174},"The first investigative question in any matter involving cryptocurrency is determining what type of custody the party employed. Several sources of evidence are useful:",{"type":29,"tag":30,"props":176,"children":177},{},[178,183],{"type":29,"tag":59,"props":179,"children":180},{},[181],{"type":34,"value":182},"Financial records",{"type":34,"value":184}," may show purchases from or transfers to cryptocurrency exchanges. Credit card or bank statements showing payments to known exchange platforms are strong indicators of custodial holdings.",{"type":29,"tag":30,"props":186,"children":187},{},[188,193],{"type":29,"tag":59,"props":189,"children":190},{},[191],{"type":34,"value":192},"Tax records",{"type":34,"value":194}," may show cryptocurrency-related transactions reported by exchanges through Form 1099 or equivalent reporting, or capital gains reported on Schedule D that reference exchange-based transactions.",{"type":29,"tag":30,"props":196,"children":197},{},[198,203],{"type":29,"tag":59,"props":199,"children":200},{},[201],{"type":34,"value":202},"Device examination",{"type":34,"value":204}," may reveal installed wallet applications, browser history showing exchange account access, locally stored wallet data, or seed phrase material saved in notes or password managers.",{"type":29,"tag":30,"props":206,"children":207},{},[208,213],{"type":29,"tag":59,"props":209,"children":210},{},[211],{"type":34,"value":212},"Communications",{"type":34,"value":214}," including email, text messages, or messaging app records may reference specific wallets or exchanges, amounts, transactions, or recovery phrases.",{"type":29,"tag":30,"props":216,"children":217},{},[218,223],{"type":29,"tag":59,"props":219,"children":220},{},[221],{"type":34,"value":222},"Prior disclosures",{"type":34,"value":224}," in other proceedings or in tax filings may identify specific exchange accounts or addresses.",{"type":29,"tag":30,"props":226,"children":227},{},[228,233,235,242],{"type":29,"tag":59,"props":229,"children":230},{},[231],{"type":34,"value":232},"Blockchain analysis",{"type":34,"value":234}," of any known addresses can identify exchange interactions in the transaction history, pointing toward specific custodial platforms. See ",{"type":29,"tag":236,"props":237,"children":239},"a",{"href":238},"\u002Fresources\u002Fcan-blockchain-transactions-be-traced",[240],{"type":34,"value":241},"Can Blockchain Transactions Be Traced?",{"type":34,"value":243}," for how this analysis works.",{"type":29,"tag":42,"props":245,"children":247},{"id":246},"discovery-strategies-for-custodial-assets",[248],{"type":34,"value":249},"Discovery Strategies for Custodial Assets",{"type":29,"tag":30,"props":251,"children":252},{},[253],{"type":34,"value":254},"For custodial assets, the discovery approach closely parallels conventional financial asset discovery:",{"type":29,"tag":30,"props":256,"children":257},{},[258,260,266],{"type":34,"value":259},"Identify the specific exchanges through the sources above. Serve subpoenas directly to domestic exchanges seeking KYC records, transaction history, deposit and withdrawal addresses, linked payment methods, and access logs. See ",{"type":29,"tag":236,"props":261,"children":263},{"href":262},"\u002Fresources\u002Fsubpoenaing-cryptocurrency-exchange-records",[264],{"type":34,"value":265},"Subpoenaing Cryptocurrency Exchange Records",{"type":34,"value":267}," for detailed guidance on structuring these requests.",{"type":29,"tag":30,"props":269,"children":270},{},[271],{"type":34,"value":272},"Interrogatories should require the party to identify all exchange accounts, all associated wallet addresses, and the existence of any self-custody wallets in addition to exchange accounts.",{"type":29,"tag":42,"props":274,"children":276},{"id":275},"discovery-strategies-for-self-custody-assets",[277],{"type":34,"value":278},"Discovery Strategies for Self-Custody Assets",{"type":29,"tag":30,"props":280,"children":281},{},[282],{"type":34,"value":283},"Self-custody assets require a different approach. There is no exchange to subpoena. The evidence must come from the blockchain, from the devices, and from documentary sources that establish the party's connection to specific addresses.",{"type":29,"tag":30,"props":285,"children":286},{},[287,292],{"type":29,"tag":59,"props":288,"children":289},{},[290],{"type":34,"value":291},"Device discovery",{"type":34,"value":293}," is the most important single step for self-custody assets. A court can order a party to produce devices, including phones, computers, and hardware wallets, for forensic examination. The forensic examination may recover wallet applications, locally stored wallet data, seed phrases saved in notes or password managers, transaction records, and other evidence connecting the party to specific addresses. Request device production early; devices get replaced, reset, or tampered with.",{"type":29,"tag":30,"props":295,"children":296},{},[297,301],{"type":29,"tag":59,"props":298,"children":299},{},[300],{"type":34,"value":232},{"type":34,"value":302}," begins from any confirmed wallet address and traces outward. If the party disclosed any exchange accounts, the withdrawal addresses from those accounts provide starting points for tracing funds that moved into self-custody wallets.",{"type":29,"tag":30,"props":304,"children":305},{},[306,311],{"type":29,"tag":59,"props":307,"children":308},{},[309],{"type":34,"value":310},"Seed phrase and key material discovery",{"type":34,"value":312}," should be addressed explicitly in discovery requests. Interrogatories should ask whether the party has written down, stored, or memorized seed phrases or private keys. Requests for production should seek any document, photograph, or record containing seed phrase or private key material.",{"type":29,"tag":30,"props":314,"children":315},{},[316,321],{"type":29,"tag":59,"props":317,"children":318},{},[319],{"type":34,"value":320},"Signed message requests",{"type":34,"value":322}," can be pursued through court order in some circumstances. A court can order a party to produce a cryptographic signed message from a disputed address, which proves control without requiring the party to disclose the private key itself.",{"type":29,"tag":42,"props":324,"children":326},{"id":325},"the-proving-self-custody-problem-in-specific-contexts",[327],{"type":34,"value":328},"The Proving Self-Custody Problem in Specific Contexts",{"type":29,"tag":30,"props":330,"children":331},{},[332],{"type":34,"value":333},"In divorce proceedings, a party who holds cryptocurrency in self-custody and denies owning it faces a specific evidentiary problem: the absence of institutional records creates a defense of plausible deniability that requires more investigative work to overcome. The combination of blockchain tracing from known addresses, device forensics, and seed phrase evidence is typically the path to overcoming that defense.",{"type":29,"tag":30,"props":335,"children":336},{},[337],{"type":34,"value":338},"In fraud cases, a defendant who received fraudulent proceeds into a self-custody wallet may argue that the wallet no longer holds the funds and that they cannot access the relevant addresses. Whether this argument is credible depends on the blockchain history of those addresses and any evidence of key material in the defendant's possession.",{"type":29,"tag":30,"props":340,"children":341},{},[342,344,350],{"type":34,"value":343},"See ",{"type":29,"tag":236,"props":345,"children":347},{"href":346},"\u002Fresources\u002Funderstanding-wallet-ownership-evidence",[348],{"type":34,"value":349},"Understanding Wallet Ownership Evidence",{"type":34,"value":351}," for a comprehensive treatment of the evidence types used to establish wallet control in litigation.",{"type":29,"tag":42,"props":353,"children":355},{"id":354},"seed-phrase-evidence-specifically",[356],{"type":34,"value":357},"Seed Phrase Evidence Specifically",{"type":29,"tag":30,"props":359,"children":360},{},[361],{"type":34,"value":362},"The seed phrase deserves particular attention because it is both the most complete form of ownership evidence and the most portable. A party who has memorized their seed phrase carries the controlling credential in their head. A party who has written it on paper carries it in a format that can be found, photographed, or subpoenaed.",{"type":29,"tag":30,"props":364,"children":365},{},[366],{"type":34,"value":367},"Finding a seed phrase in a party's possession, in any form, and connecting that seed phrase to a specific wallet address through cryptographic verification, is strong evidence of control. The connection is mathematical: given a seed phrase, the set of addresses that can be derived from it is deterministic. An analyst can verify that a specific seed phrase controls a specific address without spending any funds.",{"type":29,"tag":30,"props":369,"children":370},{},[371],{"type":34,"value":372},"Courts have treated seed phrase evidence seriously. The challenge in cases where seed phrase evidence has not been found is establishing control through other means. The absence of recovered seed phrase evidence does not mean the party does not control the wallet; it means the investigation must rely more heavily on device forensics, exchange records, transaction patterns, and the party's prior conduct and statements.",{"type":29,"tag":30,"props":374,"children":375},{},[376,382,384,390],{"type":29,"tag":236,"props":377,"children":379},{"href":378},"\u002Fservices",[380],{"type":34,"value":381},"ConsensusIntel's services",{"type":34,"value":383}," cover both the technical analysis needed to establish wallet ownership and the preparation of expert testimony explaining custody structures and ownership evidence in terms that a court can evaluate. For matters where self-custody is suspected or at issue, ",{"type":29,"tag":236,"props":385,"children":387},{"href":386},"\u002Fcontact",[388],{"type":34,"value":389},"contact us",{"type":34,"value":391}," to discuss the specific evidence picture and the most productive investigative approach.",{"type":29,"tag":393,"props":394,"children":395},"hr",{},[],{"type":29,"tag":42,"props":397,"children":399},{"id":398},"frequently-asked-questions",[400],{"type":34,"value":401},"Frequently Asked Questions",{"type":29,"tag":30,"props":403,"children":404},{},[405],{"type":29,"tag":59,"props":406,"children":407},{},[408],{"type":34,"value":409},"Can a hardware wallet be forensically examined?",{"type":29,"tag":30,"props":411,"children":412},{},[413],{"type":34,"value":414},"Hardware wallets are purpose-built security devices and are designed to be resistant to physical extraction of the key material. In most cases, the private key cannot be extracted from a hardware wallet through standard forensic methods. However, the device's transaction history and associated addresses may be recoverable, and the device's presence in a party's possession is itself evidence relevant to the ownership question. The most useful forensic work for hardware wallets typically focuses on the associated device (the computer the hardware wallet was connected to) rather than the hardware wallet itself.",{"type":29,"tag":30,"props":416,"children":417},{},[418],{"type":29,"tag":59,"props":419,"children":420},{},[421],{"type":34,"value":422},"What if a party says they lost their seed phrase and cannot access the wallet?",{"type":29,"tag":30,"props":424,"children":425},{},[426],{"type":34,"value":427},"A claimed loss of seed phrase access is a factual question. The party's testimony about loss is not dispositive. Evidence inconsistent with the claim, such as on-chain activity from the wallet after the claimed loss date, device records showing wallet access, or communications referencing the wallet, can be offered to challenge the claim. Courts draw credibility inferences from the totality of the evidence, and a convenient inability to access a wallet at the time of disclosure warrants scrutiny.",{"type":29,"tag":30,"props":429,"children":430},{},[431],{"type":29,"tag":59,"props":432,"children":433},{},[434],{"type":34,"value":435},"Can multisig wallets be used to hide assets from a court?",{"type":29,"tag":30,"props":437,"children":438},{},[439],{"type":34,"value":440},"A multisig wallet requires multiple keys to spend, and the arrangement can be structured so that the party holding one key argues they cannot access the funds unilaterally. While technically true that a multisig requires cooperation of keyholders, the legal question is whether the party's interest in the wallet is an asset subject to disclosure, which it typically is regardless of the access mechanics. Courts can order parties to disclose interests in multisig arrangements even if unilateral spending is not possible.",{"type":29,"tag":30,"props":442,"children":443},{},[444],{"type":29,"tag":59,"props":445,"children":446},{},[447],{"type":34,"value":448},"Are cryptocurrency assets held in an ETF or investment account self-custody?",{"type":29,"tag":30,"props":450,"children":451},{},[452],{"type":34,"value":453},"No. Assets held through an ETF or investment product are custodial: the fund's custodian holds the actual cryptocurrency, and the investor holds a financial interest in the fund. From a litigation perspective, these are treated like any other investment account: the brokerage or fund can be subpoenaed for records, and the assets appear on conventional account statements.",{"type":29,"tag":30,"props":455,"children":456},{},[457],{"type":29,"tag":59,"props":458,"children":459},{},[460],{"type":34,"value":461},"How does self-custody affect the valuation of cryptocurrency in divorce?",{"type":29,"tag":30,"props":463,"children":464},{},[465],{"type":34,"value":466},"Self-custody assets are valued based on the blockchain balance at the relevant date and the applicable cryptocurrency price at that time. The valuation method is the same as for custodially held assets; the difference is that obtaining the balance information requires blockchain analysis rather than requesting an account statement from an exchange.",{"title":8,"searchDepth":468,"depth":468,"links":469},2,[470,471,472,473,474,475,476,477,478],{"id":44,"depth":468,"text":47},{"id":79,"depth":468,"text":82},{"id":120,"depth":468,"text":123},{"id":166,"depth":468,"text":169},{"id":246,"depth":468,"text":249},{"id":275,"depth":468,"text":278},{"id":325,"depth":468,"text":328},{"id":354,"depth":468,"text":357},{"id":398,"depth":468,"text":401},"markdown","content:articles:09-self-custody-vs-custodial-wallets.md","content","articles\u002F09-self-custody-vs-custodial-wallets.md","articles\u002F09-self-custody-vs-custodial-wallets","md",{"loc":5},{"_path":487,"_dir":6,"_draft":7,"_partial":7,"_locale":8,"title":349,"description":488,"slug":489,"date":490,"lastUpdated":491,"author":14,"readingTime":15,"category":16,"tags":492,"ogImage":495,"featured":7,"body":496,"_type":479,"_id":842,"_source":481,"_file":843,"_stem":844,"_extension":484,"sitemap":845},"\u002Farticles\u002F03-understanding-wallet-ownership-evidence","How wallet ownership is established in litigation: the difference between controlling a private key and proving control to a court's satisfaction, with evidence types explained.","understanding-wallet-ownership-evidence","2026-04-14","2025-04-14",[493,23,494,18],"wallet ownership","private keys","\u002Fog\u002Funderstanding-wallet-ownership-evidence.png",{"type":26,"children":497,"toc":826},[498,503,508,514,519,524,529,535,540,545,550,555,568,574,581,586,591,597,602,607,613,618,623,628,634,639,644,650,655,660,666,671,676,681,693,699,704,709,722,728,733,738,754,757,761,769,774,782,787,795,800,808,813,821],{"type":29,"tag":30,"props":499,"children":500},{},[501],{"type":34,"value":502},"Establishing who owns a cryptocurrency wallet is one of the central challenges in almost every case involving digital assets. The blockchain records the complete transaction history of every address. What it does not record is who controls that address. That gap, between what the ledger shows and what a court needs to determine, is where the evidence question lives.",{"type":29,"tag":30,"props":504,"children":505},{},[506],{"type":34,"value":507},"The legal question of wallet ownership is different from the technical question. Technically, the person who possesses the private key controls the wallet. In practice, proving that a specific individual possessed and controlled a private key at a relevant point in time requires building a case from multiple evidence sources, each of which contributes to the picture and none of which is typically sufficient on its own.",{"type":29,"tag":42,"props":509,"children":511},{"id":510},"how-wallet-ownership-actually-works",[512],{"type":34,"value":513},"How Wallet Ownership Actually Works",{"type":29,"tag":30,"props":515,"children":516},{},[517],{"type":34,"value":518},"Every cryptocurrency wallet is, at its core, a private key: a large number generated through cryptography that authorizes the spending of funds associated with a corresponding public address. The relationship is deterministic and mathematical. Whoever possesses the private key can spend the funds. Whoever does not cannot, regardless of any other claim to the assets.",{"type":29,"tag":30,"props":520,"children":521},{},[522],{"type":34,"value":523},"This is what practitioners in the cryptocurrency space mean by the phrase \"not your keys, not your coins.\" It is not a slogan about preference. It is a description of how the technology actually works. There is no appeals process, no customer service department that can override the cryptographic reality. The private key is the controlling fact.",{"type":29,"tag":30,"props":525,"children":526},{},[527],{"type":34,"value":528},"The legal system, of course, has mechanisms to impose outcomes that diverge from the technical reality. A court can order a party to transfer cryptocurrency to a different address, or to provide the private key to a trustee or escrow. But establishing what a court should order requires first establishing the factual question of who actually controls the wallet.",{"type":29,"tag":42,"props":530,"children":532},{"id":531},"custodial-vs-self-custody",[533],{"type":34,"value":534},"Custodial vs. Self-Custody",{"type":29,"tag":30,"props":536,"children":537},{},[538],{"type":34,"value":539},"The evidence picture looks substantially different depending on whether a wallet is custodial or self-custodied. Understanding the distinction is essential before developing a discovery or investigation strategy.",{"type":29,"tag":30,"props":541,"children":542},{},[543],{"type":34,"value":544},"A custodial wallet is one where a third party, typically an exchange like Coinbase, Kraken, or Gemini, holds the private keys on the user's behalf. The user has an account with the exchange, logs in with a username and password, and can buy, sell, or transfer cryptocurrency through the exchange's interface. But the user does not directly possess the private key. The exchange holds it and controls the on-chain assets on the user's behalf.",{"type":29,"tag":30,"props":546,"children":547},{},[548],{"type":34,"value":549},"For custodial wallets, the ownership question is relatively straightforward: the account belongs to the person who registered it, and the exchange maintains records that establish registration, identity verification, and transaction history. A properly served subpoena to a domestic exchange will typically produce this information, along with KYC documents that tie the account to a real-world identity.",{"type":29,"tag":30,"props":551,"children":552},{},[553],{"type":34,"value":554},"A self-custody wallet is the opposite arrangement. The user generates and controls the private key directly. There is no exchange, no intermediary, and no third party that maintains a record linking the wallet to the user. The user may have installed a software wallet on a phone or computer, used a hardware wallet device, or simply written down the seed phrase (a human-readable backup of the private key) on paper. None of this activity creates a record at any institution that can be subpoenaed.",{"type":29,"tag":30,"props":556,"children":557},{},[558,560,566],{"type":34,"value":559},"For self-custody wallets, proving ownership is a different and more involved exercise. See ",{"type":29,"tag":236,"props":561,"children":563},{"href":562},"\u002Fresources\u002Fself-custody-vs-custodial-wallets",[564],{"type":34,"value":565},"Self-Custody vs. Custodial Wallets",{"type":34,"value":567}," for a full treatment of the discovery implications of each type.",{"type":29,"tag":42,"props":569,"children":571},{"id":570},"how-ownership-is-established-in-litigation",[572],{"type":34,"value":573},"How Ownership Is Established in Litigation",{"type":29,"tag":575,"props":576,"children":578},"h3",{"id":577},"exchange-records",[579],{"type":34,"value":580},"Exchange Records",{"type":29,"tag":30,"props":582,"children":583},{},[584],{"type":34,"value":585},"The most common and reliable form of wallet ownership evidence is an exchange record. When a party acquired cryptocurrency through a regulated exchange and then withdrew it to a self-custody wallet, the exchange maintains a record of that withdrawal, including the destination address. A subpoena to the exchange produces documentation showing that a specific account, belonging to a specifically identified person, sent funds to a specific wallet address on a specific date.",{"type":29,"tag":30,"props":587,"children":588},{},[589],{"type":34,"value":590},"That record does not prove that the person still controls the address at the time of litigation, but it establishes that they controlled it at the time of the withdrawal. Combined with blockchain analysis showing subsequent activity consistent with continued control, it builds a strong evidentiary foundation.",{"type":29,"tag":575,"props":592,"children":594},{"id":593},"device-forensics",[595],{"type":34,"value":596},"Device Forensics",{"type":29,"tag":30,"props":598,"children":599},{},[600],{"type":34,"value":601},"Wallet software leaves traces on the devices where it is installed. A forensic examination of a phone or computer may reveal the presence of wallet applications, transaction history stored locally by the wallet software, seed phrase material stored in notes applications, password managers, or encrypted files, and access logs showing when the wallet was opened and used.",{"type":29,"tag":30,"props":603,"children":604},{},[605],{"type":34,"value":606},"Device forensics requires physical or logical access to the device, which typically means either cooperation from the party or an order compelling production. In civil litigation, a court can order a party to produce a device for forensic examination. In practice, device examinations are most productive when conducted by a qualified digital forensic examiner who understands both the device's file system and the specific wallet software likely to be present.",{"type":29,"tag":575,"props":608,"children":610},{"id":609},"seed-phrase-evidence",[611],{"type":34,"value":612},"Seed Phrase Evidence",{"type":29,"tag":30,"props":614,"children":615},{},[616],{"type":34,"value":617},"A seed phrase, also called a recovery phrase or mnemonic, is a sequence of 12 or 24 words generated when a self-custody wallet is first created. Anyone who possesses the seed phrase can reconstruct the private key and gain full control of the associated funds on any compatible wallet software. The seed phrase is therefore the master credential for self-custody wallets.",{"type":29,"tag":30,"props":619,"children":620},{},[621],{"type":34,"value":622},"Finding a seed phrase in a party's possession, whether written on paper, stored in a password manager, photographed on a phone, or saved in a document, is strong evidence that the party controls the associated wallet. The connection between a specific seed phrase and a specific wallet address can be verified mathematically, without requiring access to the funds themselves.",{"type":29,"tag":30,"props":624,"children":625},{},[626],{"type":34,"value":627},"Courts have treated seed phrase evidence seriously. When a party denies controlling a wallet but a seed phrase linked to that wallet is found in their possession, the explanation required becomes difficult to construct.",{"type":29,"tag":575,"props":629,"children":631},{"id":630},"signed-messages",[632],{"type":34,"value":633},"Signed Messages",{"type":29,"tag":30,"props":635,"children":636},{},[637],{"type":34,"value":638},"A wallet can produce a cryptographic signature, using the same private key that authorizes transactions, that demonstrates control of a specific address without moving any funds. This is called a signed message: a piece of text combined with a cryptographic proof that can be verified by anyone to confirm it was produced by the controller of a given address.",{"type":29,"tag":30,"props":640,"children":641},{},[642],{"type":34,"value":643},"In civil litigation, a court can order a party to produce a signed message from a disputed address. If the party produces one, it proves beyond cryptographic doubt that they control the address at the moment of signing. If the party claims they cannot produce one because they do not have access to the key, that claim can be evaluated against the other evidence in the case.",{"type":29,"tag":575,"props":645,"children":647},{"id":646},"transaction-history-as-circumstantial-evidence",[648],{"type":34,"value":649},"Transaction History as Circumstantial Evidence",{"type":29,"tag":30,"props":651,"children":652},{},[653],{"type":34,"value":654},"The pattern of transactions associated with a wallet can itself serve as evidence of control. Transactions that correlate with events in a party's life, purchases that match known interests or businesses, transfers that align with dates of known payments, or connections to addresses confirmed to belong to the party through other evidence, all contribute to an inference of control.",{"type":29,"tag":30,"props":656,"children":657},{},[658],{"type":34,"value":659},"Circumstantial evidence of this kind is rarely sufficient on its own, but it can be significant corroboration. When combined with device forensics, exchange records, or seed phrase evidence, a coherent transaction history that is consistent with a specific individual's behavior strengthens the overall attribution.",{"type":29,"tag":42,"props":661,"children":663},{"id":662},"challenging-ownership-claims",[664],{"type":34,"value":665},"Challenging Ownership Claims",{"type":29,"tag":30,"props":667,"children":668},{},[669],{"type":34,"value":670},"Ownership claims can be challenged from both directions. A party may claim that they do not control a wallet that forensic analysis suggests is theirs, or a party may claim to control a wallet as an asset when the ownership is disputed by another party.",{"type":29,"tag":30,"props":672,"children":673},{},[674],{"type":34,"value":675},"When challenging an ownership attribution, the relevant questions are whether the methodology used to connect the address to the individual was sound, whether the clustering heuristics applied could have produced a false positive, whether the exchange record or device evidence actually establishes what is claimed, and whether the timeline is consistent with the theory of control.",{"type":29,"tag":30,"props":677,"children":678},{},[679],{"type":34,"value":680},"A well-constructed challenge to blockchain evidence requires an expert who understands both the forensic methodology used and its limitations. Blockchain analysis is not infallible. There are circumstances where the common input ownership heuristic can misattribute addresses, particularly in certain types of coinjoin transactions or when multiple parties share access to a single device or account. Identifying those circumstances requires technical knowledge of the specific tools and techniques the opposing expert used.",{"type":29,"tag":30,"props":682,"children":683},{},[684,685,691],{"type":34,"value":343},{"type":29,"tag":236,"props":686,"children":688},{"href":687},"\u002Fresources\u002Fcommon-mistakes-crypto-investigations",[689],{"type":34,"value":690},"Common Mistakes in Cryptocurrency Investigations",{"type":34,"value":692}," for the specific errors that arise in attribution analysis and how they can be identified and challenged.",{"type":29,"tag":42,"props":694,"children":696},{"id":695},"what-evidence-courts-have-accepted",[697],{"type":34,"value":698},"What Evidence Courts Have Accepted",{"type":29,"tag":30,"props":700,"children":701},{},[702],{"type":34,"value":703},"Courts across the country have accepted blockchain evidence and expert testimony about cryptocurrency wallet ownership in a range of civil and criminal proceedings. The specific evidentiary frameworks differ by jurisdiction, but the general principle that digital asset evidence is subject to the same authentication and reliability requirements as other forms of electronic evidence is well-established.",{"type":29,"tag":30,"props":705,"children":706},{},[707],{"type":34,"value":708},"Authentication of blockchain records typically involves a combination of self-authenticating public records from block explorers, certified records from exchanges, and expert testimony that explains the methodology used to analyze the data. Courts that have encountered blockchain evidence have generally focused on whether the methodology is reliable and whether the expert is qualified to offer the opinion, rather than treating blockchain evidence as inherently inadmissible or inherently self-proving.",{"type":29,"tag":30,"props":710,"children":711},{},[712,714,720],{"type":34,"value":713},"The admissibility of expert testimony on wallet ownership follows the standard applied to other technical fields. The analyst should be able to explain their methodology clearly, account for alternative explanations, and identify the limitations of their conclusions. See ",{"type":29,"tag":236,"props":715,"children":717},{"href":716},"\u002Fresources\u002Fblockchain-evidence-admissibility",[718],{"type":34,"value":719},"Blockchain Evidence Admissibility",{"type":34,"value":721}," for a detailed treatment of the evidentiary standards and best practices.",{"type":29,"tag":42,"props":723,"children":725},{"id":724},"building-the-ownership-case",[726],{"type":34,"value":727},"Building the Ownership Case",{"type":29,"tag":30,"props":729,"children":730},{},[731],{"type":34,"value":732},"For attorneys handling matters where wallet ownership is at issue, the practical approach is to pursue evidence from multiple directions simultaneously. Exchange records and blockchain analysis establish the starting point. Device forensics may add transaction records and key material. Interrogatories can require the party to state whether they control a wallet and, if they deny it, to explain how the on-chain connections arose. Requests for admission can pin down specific factual questions.",{"type":29,"tag":30,"props":734,"children":735},{},[736],{"type":34,"value":737},"A party who falsely denies controlling a wallet faces increasing risk as the evidence accumulates. The combination of technical evidence that connects an address to the party and the party's sworn denial creates a foundation for sanctions, adverse inferences, or credibility findings that can affect the outcome of the matter broadly.",{"type":29,"tag":30,"props":739,"children":740},{},[741,745,747,752],{"type":29,"tag":236,"props":742,"children":743},{"href":378},[744],{"type":34,"value":381},{"type":34,"value":746}," include the full range of analysis required to establish wallet ownership in litigation: blockchain tracing, forensic reporting, and expert testimony that clearly explains both the technical findings and the appropriate limits of those findings. For an initial discussion of what an engagement looks like, ",{"type":29,"tag":236,"props":748,"children":749},{"href":386},[750],{"type":34,"value":751},"contact us directly",{"type":34,"value":753},".",{"type":29,"tag":393,"props":755,"children":756},{},[],{"type":29,"tag":42,"props":758,"children":759},{"id":398},[760],{"type":34,"value":401},{"type":29,"tag":30,"props":762,"children":763},{},[764],{"type":29,"tag":59,"props":765,"children":766},{},[767],{"type":34,"value":768},"Can a party transfer a wallet to someone else and then claim not to own it?",{"type":29,"tag":30,"props":770,"children":771},{},[772],{"type":34,"value":773},"A transfer of cryptocurrency does not erase the history of prior control. Exchange records, device forensics, and blockchain analysis can establish that the party controlled the wallet before the transfer, and the timing of a transfer in relation to litigation or disclosure deadlines may be evidence of bad faith. Courts can draw inferences from transfers made specifically to avoid asset disclosure.",{"type":29,"tag":30,"props":775,"children":776},{},[777],{"type":29,"tag":59,"props":778,"children":779},{},[780],{"type":34,"value":781},"What if the seed phrase is not found?",{"type":29,"tag":30,"props":783,"children":784},{},[785],{"type":34,"value":786},"The absence of recovered seed phrase evidence does not rule out ownership. Seed phrases can be memorized, stored in offline locations, or destroyed after the wallet is set up. The investigation does not depend on recovering the seed phrase; it relies on the combination of available evidence including exchange records, device traces, transaction history, and the party's own prior statements.",{"type":29,"tag":30,"props":788,"children":789},{},[790],{"type":29,"tag":59,"props":791,"children":792},{},[793],{"type":34,"value":794},"Can two people share control of a wallet?",{"type":29,"tag":30,"props":796,"children":797},{},[798],{"type":34,"value":799},"Yes. Multisignature wallets require signatures from multiple private keys to authorize a transaction, meaning control is genuinely shared among the keyholders. In addition, a person might have provided their seed phrase to another person, creating joint access to a single-key wallet. These arrangements complicate the ownership analysis and require careful examination of the surrounding evidence to determine who had practical control in a given context.",{"type":29,"tag":30,"props":801,"children":802},{},[803],{"type":29,"tag":59,"props":804,"children":805},{},[806],{"type":34,"value":807},"How is wallet ownership handled in divorce specifically?",{"type":29,"tag":30,"props":809,"children":810},{},[811],{"type":34,"value":812},"In divorce proceedings, the relevant question is often not just whether a party controls a wallet, but when they acquired the cryptocurrency and whether it is marital or separate property. Exchange records often provide a clear acquisition timeline. For self-custody wallets without exchange records, establishing the acquisition date requires other evidence such as blockchain data, device records, or prior communications.",{"type":29,"tag":30,"props":814,"children":815},{},[816],{"type":29,"tag":59,"props":817,"children":818},{},[819],{"type":34,"value":820},"What does it cost to establish wallet ownership forensically?",{"type":29,"tag":30,"props":822,"children":823},{},[824],{"type":34,"value":825},"Costs vary significantly based on the complexity of the holdings and the amount of starting information available. Matters involving a single exchange account may require minimal technical work. Matters involving multiple chains, self-custody wallets, and complex transaction histories require more extensive analysis. Early engagement, before evidence becomes unavailable or the timeline becomes urgent, generally produces better results at lower cost.",{"title":8,"searchDepth":468,"depth":468,"links":827},[828,829,830,838,839,840,841],{"id":510,"depth":468,"text":513},{"id":531,"depth":468,"text":534},{"id":570,"depth":468,"text":573,"children":831},[832,834,835,836,837],{"id":577,"depth":833,"text":580},3,{"id":593,"depth":833,"text":596},{"id":609,"depth":833,"text":612},{"id":630,"depth":833,"text":633},{"id":646,"depth":833,"text":649},{"id":662,"depth":468,"text":665},{"id":695,"depth":468,"text":698},{"id":724,"depth":468,"text":727},{"id":398,"depth":468,"text":401},"content:articles:03-understanding-wallet-ownership-evidence.md","articles\u002F03-understanding-wallet-ownership-evidence.md","articles\u002F03-understanding-wallet-ownership-evidence",{"loc":487},1779289486699]