Is Onramp Safe? A Direct Answer, With Receipts
Jackson Mikalic | Head of Business Development
Onramp is a Bitcoin financial services company whose custody is built so that no single organization, including Onramp itself, can move, use, or lose client bitcoin alone. Client funds are protected by three independent institutions (Onramp, BitGo Trust, and CoinCover) in a 2-of-3 arrangement, each client's bitcoin sits in its own segregated on-chain wallet you can verify on any block explorer, and Onramp's custody operations are insured through Canopius, a Lloyd's of London syndicate: a $50 million active policy underwritten up to $100 million, at no cost to clients. Onramp has operated Multi-Institution Custody since October 2023 with no client losses.
"Safe" deserves more than assertions, so here is the checklist we would apply to any custodian, applied to us.
Who actually holds the keys
Three independent institutions, each holding one key, two signatures required to move funds:
- Onramp (Texas): first signer, client-facing operations
- BitGo Trust (South Dakota): independent second signer; part of BitGo, which has operated digital-asset custody since 2013
- CoinCover (UK): recovery specialist; holds the recovery key and activates only if Onramp cannot act
Keys are generated on purpose-built, air-gapped institutional hardware, and each institution shards its key internally so no single employee anywhere holds spendable material. Moving funds without a client would require coordinated fraud across many people at independent companies in different jurisdictions, the collusion scenario the Lloyd's policy is designed around.
Can you verify it, or do you have to trust it?
Verify it. Every client has a dedicated on-chain wallet address, never commingled, visible on any block explorer at any time. This is stronger than periodic proof-of-reserves attestations, which our research team has written about critically: attestations are snapshots, segregated on-chain holdings are continuously checkable. Your bitcoin is also legally titled to you, not carried as a claim on our balance sheet.
What happens if Onramp disappears?
The recovery process does not depend on Onramp existing. Every account includes a downloadable recovery kit with plain-English instructions. If Onramp becomes unresponsive, CoinCover and BitGo Trust execute recovery together after a defined waiting period, without Onramp's participation. The process is documented, and clients have independently stress-tested it. Full explainer: what happens to my bitcoin if Onramp goes away.
How withdrawals are protected
Withdrawals require a liveness check with government ID, a recorded video verification call with Onramp's operations team, senior review, and then a separate, independent video verification with BitGo Trust before the second signature. Optional controls at no extra cost: time delays, per-transaction and per-period limits, and duress words. This layered process is designed against the realistic 2026 threat model, including deepfakes and coercion.
Track record and independent examination
Operating Multi-Institution Custody since October 2023. No client losses, no insurance payouts. Custody architecture unchanged since launch: the model was built this way from day one, not patched into shape after an incident.
On the operational layer, Onramp has been issued a SOC 2 Type I report: Advantage Partners, an independent CPA firm, examined the design of the security controls behind Multi-Institution Custody as of June 11, 2026, against the AICPA Trust Services Criteria. The custody architecture has always been verifiable on-chain; the SOC 2 examination covers the part you previously had to take on our word: the people, processes, and controls behind the platform. A Type II examination, which tests whether those controls operate effectively over a period of months, is underway, with annual renewals planned. Between reports, controls are continuously monitored through Vanta, and the live status is published on Onramp's public Trust Center, so you do not have to wait for next year's report or take this page's word for it.
One clarification: which Onramp?
We are Onramp (onrampbitcoin.com), the Bitcoin financial services platform. We are not affiliated with onramp.money, Onramper, or other similarly named crypto payment companies. If you are researching one of those, reviews and safety information about them do not describe us, and vice versa.
Frequently asked questions
Is Onramp safe and legit?
Onramp has operated Multi-Institution Custody since October 2023 with no client losses. Client bitcoin is held in segregated on-chain wallets protected by three independent institutions (Onramp, BitGo Trust, CoinCover), no single one of which can move funds alone. Custody operations are insured through a Lloyd's of London syndicate, with a $50 million active policy underwritten up to $100 million.
Can Onramp steal or lose my bitcoin?
Onramp holds one of three keys and cannot move client bitcoin alone: withdrawals require an independent second signature from BitGo Trust after separate identity verification. Bitcoin is titled to the client in a segregated wallet, so it is not an asset of Onramp's that could be lost to company failure.
What happens to my bitcoin if Onramp goes out of business?
Recovery proceeds without Onramp: CoinCover and BitGo Trust execute the documented recovery process, and every client holds a recovery kit with step-by-step instructions. Client bitcoin is legally the client's property, held in a wallet titled to the client.
Is Onramp the same as onramp.money?
No. Onramp (onrampbitcoin.com) is a US-based Bitcoin financial services platform. Onramp.money is an unrelated crypto payments company. Safety and review information for one does not apply to the other.
Related reading: How does Multi-Institution Bitcoin Custody work? and What was the Prime Trust bankruptcy?.