How to Set Up Distributed Bitcoin Custody with Onramp's Multi-Institution Approach

Three institutions. Three jurisdictions. Two signatures required to move your bitcoin. No single point of failure.

That's the core architecture behind Onramp's Multi-Institution Custody (MIC), a distributed custody model that uses bitcoin's native multisignature capabilities to spread control across independent regulated entities. If you're a high-net-worth individual, corporate treasury, or family office looking to hold bitcoin without the operational burden of self-custody or the concentrated risk of a single custodian, this guide walks through how the system works and how to implement it.

Understanding the 2-of-3 Multisig Architecture

Onramp's MIC model places private keys with three independent institutions: Onramp (Texas, USA), BitGo Trust (South Dakota, USA), and Coincover (UK). Moving bitcoin requires any two of these three keys to sign a transaction.

This design addresses two failure modes that have historically plagued bitcoin holders:

Single-custodian risk. When one institution controls all keys, you're exposed to that entity's solvency, security practices, and regulatory standing. The exchange collapses and custodian failures of recent years demonstrated how quickly concentrated counterparty risk can materialize.

Self-custody complexity. Managing your own keys offers maximum control but introduces operational burden, personal security risks, and inheritance complications. Hardware failures, seed phrase loss, and physical security threats become your responsibility.

MIC threads the needle: you outsource key management to professionals while ensuring no single entity can unilaterally control or lose your bitcoin.

How Keys Are Generated and Stored

Each of the three private keys is independently generated in air-gapped environments, meaning the devices never connect to the internet during the key creation process. After generation, keys are sharded and geographically distributed.

Critically, you don't hold any keys. Unlike collaborative custody models where users supply one key themselves, MIC delegates all key management to the institutional partners. This removes the personal attack surface (no hardware wallets to travel with, no seed phrases to secure at home) while maintaining on-chain verifiability of your holdings.

Your assets sit in segregated vaults on the bitcoin blockchain rather than omnibus pools. You can verify your holdings cryptographically at any time through the Onramp dashboard, without relying on balance-sheet assurances.

Step-by-Step Setup Process

Step 1: Choose Your Account Type

Onramp's MIC architecture underlies multiple product wrappers. Your choice depends on your goals:

• Direct custody accounts for straightforward institutional or individual holding
• Onramp Business for corporate treasuries, miners, and family offices needing role-based permissions and policy controls
• Onramp Bitcoin Trust (OBT) for 1:1 spot bitcoin exposure in a Wyoming grantor trust with in-specie redemption options
• Bitcoin IRA for tax-advantaged retirement accounts
• Dynasty Trust Services for multi-generational wealth planning using South Dakota trust law

Each wrapper uses the same underlying 2-of-3 multisig vault, with account-level customization of governance and controls.

Step 2: Complete Onboarding

Onramp handles KYC/AML compliance during onboarding. For business accounts, this includes verifying corporate structure, authorized signers, and beneficial ownership. The platform then provisions your segregated vault with a unique on-chain address.

Step 3: Configure Governance (Business and Institutional Accounts)

Onramp Business and Institutional accounts support enterprise controls layered on top of MIC:

• Role-based permissions separating initiators (who request transactions) from approvers (who authorize them)
• Policy-based spending limits and workflows that can require multiple internal approvals before reaching the custody layer
• View-only access for auditors, board members, or external advisors who need visibility without transaction authority

These controls integrate with your existing governance structure rather than replacing it.

Step 4: Fund Your Vault

Transfer bitcoin to your segregated vault address. Once confirmed on-chain, your holdings become visible in the Onramp dashboard with cryptographic proof of reserves available 24/7.

Geographic and Jurisdictional Diversification

The default MIC configuration distributes keys across two U.S. states (Texas and South Dakota) and the United Kingdom. This isn't accidental. Geographic separation provides several layers of protection:

Operational resilience. A natural disaster, infrastructure failure, or localized security incident affecting one keyholder doesn't compromise the vault.

Regulatory diversification. Keys held under different legal jurisdictions reduce exposure to any single regulatory regime. If one jurisdiction imposes unexpected restrictions, two keys remain accessible elsewhere.

For clients seeking even broader diversification, Onramp's partnership with Tetra Trust (Canada's first qualified digital asset custodian, announced in 2024) enables a three-jurisdiction quorum spanning the U.S., U.K., and Canada. This configuration isn't available for all products (Bitcoin IRAs, for example, use the standard setup), but it's worth discussing with Onramp if global regulatory diversification is a priority.

The Withdrawal Process

MIC deliberately introduces friction into the withdrawal process, a feature rather than a bug for treasury and long-term holdings.

Here's how a typical withdrawal works:

1. Initiation. You request a movement via the Onramp dashboard from anywhere in the world. No hardware wallet travel required.

1. Verification. Two independent institutions perform secure, human-involved video verification. This step detects fraud, coercion, or duress.

1. Key reconstruction and signing. Each verifying institution reconstructs keys offline and applies signatures.

1. Transaction broadcast. With two valid signatures, the transaction broadcasts to the bitcoin network.

Expect 24-48 hours for completion, depending on your responsiveness to verification requests. This timeline is intentionally slower than exchange transfers. If you need instant liquidity, MIC isn't designed for that use case.

Tax-Advantaged Account Setup

Onramp's MIC architecture extends to retirement accounts, which introduces additional tax planning considerations.

Bitcoin IRA. Your IRA holdings sit in the same 2-of-3 multisig structure, with the standard Onramp, BitGo, and Coincover key distribution. Tax treatment follows standard IRA rules (tax-deferred growth for traditional IRAs, tax-free growth for Roth IRAs).

Dynasty Trust Services. For multi-generational planning, Onramp integrates MIC into South Dakota trust structures. Trust vaults remain 2-of-3 multisig with the same institutional keyholders, but the trust wrapper provides estate planning benefits including potential estate tax advantages and extended asset protection.

Onramp Bitcoin Trust. The OBT wrapper supports in-specie redemptions, meaning you can take delivery of actual bitcoin rather than cash. Onramp argues this structure can avoid certain taxable events compared to ETF wrappers, though you should verify the tax implications with your own advisor.

Insurance Coverage

All MIC vaults include per-incident insurance underwritten via the Lloyd's of London market. This coverage addresses theft or operational failures at the custody layer, though it doesn't protect against market losses or bitcoin's price volatility.

Insurance represents a meaningful differentiator from uninsured self-custody and partially insured exchange accounts, but understand what it does and doesn't cover before treating it as a safety net.

Trade-Offs and Limitations

MIC isn't a universal solution, and Onramp's own educational materials acknowledge several trade-offs:

Process friction. The 24-48 hour withdrawal timeline and multi-party verification process won't work for active traders or anyone needing instant liquidity.

Institutional reliance. You're trusting that Onramp, BitGo, and Coincover maintain robust governance, technological controls, and continued regulatory standing. While risk is distributed, you're still dependent on a small set of institutions.

Self-custody remains the standard. For technically capable holders willing to manage hardware and keys, self-custody offers maximum control without institutional dependencies. MIC is an alternative for those who can't or don't want to manage keys themselves, not a universal replacement.

Market risk unchanged. MIC addresses custody, counterparty, and operational risk. It doesn't protect against bitcoin's price volatility, regulatory shifts, or macro conditions.

How MIC Compares to Alternatives

Versus single-custodian solutions. Traditional custody concentrates all risk with one entity. MIC distributes that risk across three institutions in three jurisdictions.

Versus spot bitcoin ETFs. ETF wrappers typically obscure underlying custody arrangements, limit in-kind redemptions, and centralize risk with a single custodian. MIC preserves direct, auditable ownership and supports in-specie movements that may align better with tax and governance objectives for certain institutions.

Versus collaborative custody. Models where you hold one of three keys reduce institutional dependency but reintroduce self-custody complexity. MIC fully outsources key management while using on-chain primitives to maintain verifiability.

Getting Started

For high-net-worth individuals, corporate treasuries, or family offices measuring outcomes in decades rather than quarters, MIC offers a middle path between self-custody complexity and single-custodian concentration.

The setup process begins at Onramp's platform, where you can select the appropriate account type and begin onboarding. For institutional allocators with specific governance requirements, Onramp Institutional provides tailored structuring options including statutory trusts and Cayman fund wrappers.

Distributed custody won't eliminate all risk. But for bitcoin holdings you intend to keep for years or generations, eliminating single points of failure is a reasonable starting point.