Toolkit · Technology
The Digital Asset Custody and Fraud Recovery Toolkit
11 U.S.C. § 541
- Type
- Toolkit
- Jurisdiction
- National
- Date
- 2026-02-25
- Topic
- Technology
This toolkit assembles the working documents a person or business actually needs to hold, report, protect, and recover digital assets. It contains a holdings inventory template, a custody decision worksheet, a backup verification log, and a cost basis reconstruction table. It supplies ready letters to a receiving exchange, to a bank, and to a platform in distress, together with an incident timeline the letters draw from. It includes a platform diligence questionnaire, a securities and money transmission screening worksheet, and a compliance program outline for businesses. It also provides fiduciary access language, an estate inventory format, and a routing table pointing to the other UpLaw resources each situation requires. Every template is designed to be copied and filled in without legal training. Authority is cited and linked throughout.
The Digital Asset Custody and Fraud Recovery Toolkit
Technology > Digital Assets and Cryptocurrency | Published 25 February 2026 - Updated 24 August 2026 | UpLaw - uplaw.us
The documents below are meant to be copied, filled in, and used. Nothing here requires legal training. Most of it takes an evening once and an hour a year afterward, and it is the difference between an incident and a permanent loss.
Tool 1 — Holdings inventory
Keep this current. Keep it separate from your keys. Store it where a fiduciary will find it.
| Location | Type | Asset(s) | Approx. amount | Address (public) | Who can move it | Backup location(s) | Last verified |
|---|---|---|---|---|---|---|---|
| Platform / hardware / software / multisig | Me only / Me and platform / Platform only | ||||||
Notes field for each row: date opened, login email used, whether a hardware key is enrolled, whether withdrawal allowlisting is on, and any API keys outstanding.
⚠ Never record a recovery phrase, private key, or password in this table. The inventory says what exists and where instructions live. It is not itself the key.
⭐ The single most common cause of total, permanent loss is that nobody knew the assets existed. This table solves that at a cost of twenty minutes.
Tool 2 — Custody decision worksheet
Answer in writing. Keep the answers with the inventory.
| Question | Your answer |
|---|---|
| Total value at stake | |
| Portion actively traded | |
| Portion held long term | |
| Who else must be able to access it, and when? | |
| Am I comfortable operating a hardware device? | |
| Do I have two secure physical storage locations? | |
| Is anyone dependent on these assets? | |
| What happens to this if I die tomorrow? |
Model selected:
☐ Platform account only — suitable for small, actively traded balances. Accepts platform insolvency risk under 11 U.S.C. § 541. ☐ Qualified custodian — suitable for institutions and fiduciaries. ☐ Self-custody, single signature — suitable for moderate holdings with disciplined habits. ☐ Self-custody, multi-signature — suitable for significant holdings, businesses, and families. ☐ Trust-held — suitable where estate or incapacity planning drives the design. ☐ Hybrid (recommended default) — trading balance on a platform, bulk in tested self-custody, inventory and fiduciary authority in place.
Reason for the choice (one paragraph): ______________________
Date to revisit: ______________________
Tool 3 — Backup verification log
⚠ An untested backup is a hypothesis. Test on a spare device, then record it here.
| Date | Backup ID / location | Medium (paper, metal) | Verified by restoring to a test device? | Word count checked? | Result | Next test due |
|---|---|---|---|---|---|---|
| ☐ | ☐ | |||||
| ☐ | ☐ |
☐ Two backups exist in physically separate locations. ☐ Each is protected against fire and water. ☐ Neither is a photograph, a note application, an email, or a cloud document. ☐ At least one has been restored successfully on a device other than the original. ☐ Someone I trust knows the locations exist, without knowing the contents.
Tool 4 — Cost basis reconstruction table
Use this when records are incomplete. Work backward from every source you can reach: platform exports, bank statements, block explorer histories, and old email confirmations.
| Date | Acquired / disposed | Asset | Quantity | USD price | Fees | Source of the figure | Confidence |
|---|---|---|---|---|---|---|---|
| Export / bank / explorer / email / estimate | High / medium / low |
Rules to apply as you fill it in:
☐ Trading one asset for another is a disposition — 26 U.S.C. § 1001. ☐ Converting into a dollar-pegged token is a disposition. ☐ Spending is a disposition. ☐ Moving between your own wallets is not a disposition — label these clearly, because raw data cannot tell the difference. ☐ Rewards, airdrops, staking, and compensation are income at fair market value on receipt — 26 U.S.C. § 61. ☐ There is no like-kind deferral — 26 U.S.C. § 1031 is limited to real property. ☐ Determine capital or ordinary character — 26 U.S.C. § 1221. ☐ Expect broker reporting under 26 U.S.C. § 6045 to be compared against your return.
⭐ Where basis cannot be proved, the entire proceeds can be treated as gain. An afternoon of reconstruction is often worth more than any argument you will make later. See tax controversy for individuals.
Tool 5 — Incident timeline
Fill this in first when something goes wrong. Every letter below draws from it, and law enforcement, exchanges, and counsel will all ask for the same facts.
| Field | Entry |
|---|---|
| Date and time you noticed | |
| Date and time of the first unauthorized transaction | |
| Wallet or account affected | |
| Transaction hashes (all) | |
| Destination addresses (all) | |
| Assets and quantities | |
| Approximate USD value at the time | |
| Device(s) involved | |
| Suspected vector (approval, phrase disclosure, malware, SIM swap, platform failure, fraud scheme) | |
| Platform(s) involved, with account identifiers | |
| Bank account used to fund, with dates and amounts | |
| Communications preserved (where saved) | |
| Reports filed (agency, date, reference number) |
☐ Screenshot everything before it disappears — chats, interfaces, promotional pages, support threads. ☐ Trace destinations one hop at a time and note any address a block explorer labels as an exchange. ⭐ A labeled exchange deposit is the most valuable fact in the file.
Tool 6 — Letter to a receiving exchange
Send to the compliance or legal address, not general support. Attach the incident timeline.
Subject: Report of stolen digital assets — request for account freeze and record preservation
To the Compliance Department:
I am reporting the theft of digital assets that were transferred, without my authorization, to an address associated with your platform.
Transaction details: [hashes], transferred on [date and time UTC], in the amount of [quantity and asset], from my address [address] to [destination address].
I request that you (1) freeze any account associated with the receiving address, (2) preserve all records relating to that account, including identity verification records, login and device data, and subsequent transfers, and (3) confirm receipt of this notice in writing.
I have filed reports with [agency] under reference number [number] and will provide your response to investigating authorities. I am available at [contact] and will provide additional documentation on request.
[Name, date]
☐ Send from an email address you control and monitor. ☐ Keep the message factual; do not speculate about who the account holder is. ☐ Follow up in writing every few days and keep every response. ☐ Provide the reference number to law enforcement so the two records connect.
Tool 7 — Letter to your bank
Use where fiat funded the loss. Timeliness controls what the bank can do.
Subject: Fraud report and request to stop or recall transfers — account [number]
I am reporting that the following transfers from my account were induced by fraud: [dates, amounts, recipients].
I request that you (1) stop or recall any transfer not yet settled, (2) open a fraud investigation, (3) place appropriate protections on the account, and (4) provide me a written response describing what action was taken.
I first learned of the fraud on [date]. I have filed a report with [agency], reference [number]. Please confirm receipt in writing.
[Name, date, contact]
☐ Also telephone; then confirm the call in writing the same day. ☐ Ask specifically whether a recall is possible and by when. ☐ Request the account be reviewed for further unauthorized activity. ☐ See consumer fraud and financial exploitation and responding to fraud, a scam, or financial exploitation.
Tool 8 — Letter to a platform that has halted withdrawals
Subject: Demand for return of customer property and preservation of records — account [identifier]
I hold [quantity and assets] in the above account. Withdrawals have been suspended since [date].
I demand the immediate return of my property. I further request written confirmation of (1) whether the assets in my account are held in segregation for customers, (2) the specific terms of service provision on which you rely regarding title to deposited assets, and (3) the current location and form of the assets credited to my account.
I direct you to preserve all records relating to my account, including balances, transaction history, communications, and internal records concerning the custody and segregation of customer assets.
[Name, date, contact]
☐ Before sending, screenshot every balance and download every statement. ☐ Save the terms of service in effect, especially the title and insolvency paragraphs. ⭐ That paragraph, not the balance display, decides whether you own property or hold an unsecured claim. ☐ Calendar any bar date in a formal proceeding; missing it extinguishes the claim. ☐ Do not deposit additional funds to unlock a withdrawal, for any stated reason. ☐ See consumer bankruptcy.
Tool 9 — Platform diligence questionnaire
Complete before funding any account. If a question cannot be answered from the terms of service or public filings, that is the answer.
| Question | Finding | Source |
|---|---|---|
| What legal entity operates the platform, and where? | ||
| Does the entity hold money transmitter licenses in my state? | ||
| Do the terms transfer title to deposited assets? | ||
| What do the terms say happens on insolvency? | ||
| Are customer assets segregated, and is that in the terms or only in marketing? | ||
| Who is the custodian, and is it independent? | ||
| What does "insured" mean here — insurer, policy, covered perils, limits? | ||
| Is there proof of reserves, and does it address liabilities? | ||
| What withdrawal controls exist (allowlisting, delays, notifications)? | ||
| Is arbitration required, and is class action waived? | ||
| Is there a lending or rehypothecation program touching my assets? |
☐ ⚠ Silence in the terms is not comfort. Assets whose treatment on insolvency is unaddressed are usually estate property under 11 U.S.C. § 541. ☐ ⚠ Deposit insurance covers bank failure, not platform failure or asset loss. ☐ Check the arbitration clause against 9 U.S.C. § 2 and see arbitration. ☐ Assess marketing claims against 15 U.S.C. § 45.
Tool 10 — Securities screening worksheet
Complete for any token, interest, or program before selling or buying it. Document contemporaneously; this worksheet will be read later.
| Element of the investment-contract test | Facts here | Conclusion |
|---|---|---|
| Was money or value invested? | ||
| Is there a common enterprise? | ||
| Is a profit expected? | ||
| Does that expectation rest on the efforts of others? |
☐ Apply Howey to the transaction, not the label. "Utility token" is a marketing category with no legal content. ☐ If styled as a note or loan, run the parallel analysis in Reves. ☐ Confirm the statutory definition at 15 U.S.C. § 77b. ☐ If a security, identify the registration or exemption relied on — 15 U.S.C. § 77e, with regulations at 17 C.F.R. part 230. ☐ ⚠ The antifraud provisions apply regardless of the classification conclusion — 15 U.S.C. § 77q, 15 U.S.C. § 78j, and 17 C.F.R. part 240. ☐ Screen for derivatives or leveraged retail transactions, which bring 7 U.S.C. § 1a, 7 U.S.C. § 2, 7 U.S.C. § 6c, and 7 U.S.C. § 9. ☐ Re-run the analysis whenever the marketing changes. ⭐ Promoters usually convert their own token into a security by describing it. ☐ See investor rights and securities claims.
Tool 11 — Money transmission and compliance outline
For any business where customer value passes through its control.
Step 1 — Map the funds flow. Who holds value, at what moment, under what authority? Diagram it. ⭐ "We are just software" describes the architecture, not the legal category.
Step 2 — Classify. Apply the functional definition at 31 U.S.C. § 5312 and the scope provision at 31 U.S.C. § 5311.
Step 3 — Build the program. Written policies, designated compliance officer, training, and independent testing under 31 U.S.C. § 5318; recordkeeping and reporting under 31 U.S.C. § 5313; implementing rules at 31 C.F.R. part 1010.
Step 4 — Never structure, and never assist structuring. 31 U.S.C. § 5324 makes the avoidance itself the offense; penalties follow under 31 U.S.C. § 5321 and 31 U.S.C. § 5322.
Step 5 — License by state. Usually the larger burden.
Step 6 — Screen sanctions, with blocking and reporting procedures.
Step 7 — Segregate operationally and verify it.
Step 8 — Report tax information under 26 U.S.C. § 6045.
☐ ⚠ Principals face personal exposure for unlicensed transmission and for unregistered offerings. The entity does not always absorb it. ☐ See starting and running a small business and data privacy and security.
Tool 12 — Fiduciary access language
Adapt with counsel; the state fiduciary access statute supplies the framework, and the instrument supplies the authority.
For a will or trust:
My [executor / trustee] shall have full authority to access, control, transfer, sell, and manage my digital assets, including cryptocurrency and other blockchain-based assets, and to access any account, device, wallet, or electronic communication containing or relating to them, to the fullest extent permitted by the applicable fiduciary access to digital assets statute. This authority includes the power to obtain and use access credentials, to engage technical assistance, and to take custody of hardware storage devices.
For a power of attorney:
My agent shall have authority over my digital assets, including cryptocurrency and other blockchain-based assets, with power to access, control, transfer, sell, and manage them, to obtain and use access credentials, and to access any account, device, wallet, or electronic communication containing or relating to them.
☐ ⚠ Never place a recovery phrase in a will. A will becomes public on probate; the phrase is the asset. ☐ Keep access instructions in a separate sealed document, referenced but not reproduced in the estate documents. ☐ Tell the named fiduciary that the assets exist. ⭐ Authority without knowledge accomplishes nothing. ☐ Consider multi-signature or trust custody so that no single death or incapacity is fatal. ☐ See digital assets in estate planning and administration, trusts and estate planning, powers of attorney and advance directives, and probate and estate administration.
Tool 13 — Discovery request language
For litigation, divorce, or judgment enforcement. Generic requests for "cryptocurrency" are routinely answered narrowly and truthfully in a way that conceals everything.
☐ Identify every digital asset wallet you have controlled at any time during the relevant period, by public address, including wallets no longer in use. ☐ Identify every account at any digital asset exchange, custodian, lending platform, or brokerage, by platform and account identifier. ☐ Produce complete transaction histories and account statements for each. ☐ Produce all documents reflecting acquisition, disposition, transfer, or valuation of digital assets. ☐ Identify every hardware device, seed backup, and multi-signature arrangement in which you hold an interest or a signing role. ☐ Produce tax returns and supporting schedules reflecting digital asset transactions. ☐ Identify any digital asset held by another person or entity for your benefit.
Follow-through:
☐ Subpoena the exchanges directly; they respond to process and hold identity records. ☐ Trace bank transfers to and from exchanges; the fiat leg is ordinary, discoverable banking data. ☐ Issue a litigation hold covering devices, wallets, and platform accounts. ☐ Fix the valuation date explicitly; volatility makes the date worth more than the argument. ☐ ⚠ Contempt reaches a person who controls a key and refuses. It does not reach a genuinely lost key — proving which is which is the case. ☐ See civil discovery, judgment enforcement and debtor exemptions, divorce and dissolution, and representing yourself in civil court.
Tool 14 — Stablecoin and payment acceptance worksheet
| Question | Finding |
|---|---|
| What backs the token, and is the backing segregated and bankruptcy-remote? | |
| Who may redeem, in what minimum size, and on what timeline? | |
| Who attests to reserves, how often, and to what standard? | |
| Where is the issuer organized and licensed? | |
| Is the peg maintained by reserves or by an algorithm? | |
| What happens in a redemption surge? |
If accepting digital assets as payment:
☐ Decide whether to convert immediately or hold; holding is an unvoted market position. ☐ Record fair market value at receipt as revenue under 26 U.S.C. § 61 and as basis for later disposition under 26 U.S.C. § 1001. ☐ Address refunds, chargebacks, and settlement-window volatility by contract; the network provides none of it. See contracts and electronic signatures and online contract formation. ☐ Confirm no participant in the flow becomes a money transmitter. ☐ Confirm state wage payment law before paying employees this way. See wage and hour law. ☐ ⚠ "Stable" describes an intention, not a guarantee. Opaque backing, restricted redemption, and algorithmic pegs have all failed.
Tool 15 — Annual review agenda
One hour, once a year, with the inventory open in front of you.
☐ Confirm every backup is where the log says, and legible. ☐ Restore one backup to a spare device and record the result in Tool 3. ☐ Update the inventory: new holdings, closed accounts, moved assets, changed devices. ☐ Revoke stale token approvals and unused API keys. ☐ Export records from every platform, including dormant ones — ⭐ exchanges fail and their records fail with them. ☐ Reconcile the year's transactions; confirm basis is provable for every position. ☐ Confirm the fiduciary named in your documents still knows the assets exist. ☐ Reassess whether the custody model still fits the amount at stake. ☐ Confirm the estate documents still contain explicit digital-asset authority. ☐ Re-read the terms of service of any platform holding material value.
Tool 16 — Routing table
| If your situation is | Go to |
|---|---|
| Deciding how to hold assets | Digital assets and cryptocurrency guide |
| Working through concrete steps | Securing, reporting, and recovering digital assets |
| Understanding the basic legal framing | Not your keys, not your coins |
| A fraudulent investment platform | Consumer fraud and financial exploitation |
| An older adult targeted | Elder financial exploitation |
| A platform insolvency | Consumer bankruptcy |
| A securities or suitability claim | Investor rights and securities claims |
| A forced arbitration clause | Arbitration |
| Unreported gains or an examination | Tax controversy for individuals |
| Planning for death or incapacity | Digital assets in estate planning |
| Administering an estate that holds these assets | Probate and estate administration |
| Building a business around them | Starting and running a small business |
| Handling customer data and breaches | Data privacy and security |
| Finding hidden assets in a case | Civil discovery |
| Collecting on a judgment | Judgment enforcement and debtor exemptions |
| Dividing assets in a divorce | Divorce and dissolution |
| Facing a criminal investigation or forfeiture | The criminal case from arrest to sentencing |
| Nonprofit treasury questions | Nonprofit formation and governance |
| Incapacity and fiduciary authority | Elder law |
| Automated systems making decisions about you | Automated decisions and artificial intelligence |
Tool 17 — Refrigerator card
Print. Keep with the inventory. It exists for the moment when something has gone wrong at two in the morning.
Never give a recovery phrase to anyone, for any reason. Never pay a fee to withdraw your own money. Never pay anyone who offers to recover stolen assets. Move first, investigate later — if a key may be exposed, move remaining assets to a new wallet now. Revoke approvals on any compromised address. Write down every hash before anything is taken down. Find the exchange in the destination chain and email its compliance address today. Call the bank the same day if fiat was involved. Test your backup before you need it. Tell someone the assets exist.