Back

Introducing Onramp Guardian: The Final Layer of Bitcoin Security

Brian Cubellis

Brian Cubellis | Chief Strategy Officer

Aug 25, 2025

For over a decade, bitcoin custody has been framed as a simple question of securing private keys. But reality is far more complex. Investors face not just the risk of hacks or lost passwords, but also phishing, social engineering, SIM swaps, and even coercion.

The real challenge of custody isn’t access, it’s control.

How do you ensure bitcoin can only move when it should? How do you defend not just against malicious outsiders, but against mistakes, rushed decisions, or being forced under duress?

This is why we built Onramp Guardian.

What is Guardian?

Guardian is Onramp’s new operational security framework, an added layer of protection wrapped around our multi-institution custody (MIC) vaults. It introduces enhanced identity checks, time delays, velocity limits, and fraud detection into the withdrawal flow, making unauthorized actions nearly impossible.

Where MIC ensures no single party can move your bitcoin, Guardian ensures that even if attackers breach accounts, impersonate you with AI, or pressure you in person, the bitcoin still doesn’t move.

Guardian is designed not just to help you hold bitcoin securely, but to resist being forced to move it.

Guardian Tiers

Guardian comes in two tiers: Guardian Core, included with all Onramp MIC accounts, and Guardian Private, a bespoke configuration for large balances and client-specific needs.

Guardian Core (Default for All MIC Clients)

Every Onramp client automatically benefits from Guardian’s baseline protections:

  • Multi-Institution Custody Solution (MIC): 2-of-3 independent institutional approvals required for every transaction.
  • Lloyd’s of London Insurance Policy: Third-party validated coverage against collusion, negligence, or compromise.
  • Withdrawal Delays: Optional 5, 10, or 20 business day holds before funds can move.
  • AI & Deepfake Defense: Biometric and behavioral verification to detect impersonation attempts.
  • Freeze Functionality: Ability to halt withdrawals instantly if account compromise is suspected.
  • Guardian Disclosure Option: A deterrent “security badge” that makes it clear your assets are time-locked and cannot be accessed immediately, even under duress.

All Guardian Core settings require video verification and a 5-business-day delay to deactivate, meaning protections can’t be silently disabled in the background.

Guardian Private (Optional for Private Clients)

For families, institutions, and investors safeguarding generational wealth, Guardian Private provides customizable controls that extend protection far beyond industry norms.

  • 365-Day Withdrawal Freeze: Lock withdrawals for up to a year, liftable only with in-person verification.
  • Velocity Controls: Define maximum withdrawal amounts per month in increments as small as 0.1 BTC.
  • Client-Controlled Delays: Go beyond the standard 5–20 business days with your own parameters.
  • 3FA Protocol: Onramp’s proprietary three-factor authentication, requiring both PIN logic and cryptographic proof (private keys), detached from Onramp’s digital environment.
  • Named Insurance Riders: Access to bespoke coverage through Lloyd’s and Native for higher balance requirements.

Guardian Private acknowledges that high-net-worth and institutional investors face a different class of risk: fiduciary oversight, targeted threats, and the responsibility of long-term continuity. These features empower clients to set their own guardrails, enforced cryptographically.

Why Guardian Matters

Most custody solutions stop at 2FA or single-custodian approval. That’s not enough.

Guardian assumes those defenses will eventually fail, and builds layers that cannot be bypassed. Time delays, multi-institution verification, AI fraud detection, and cryptographic withdrawal proofs are combined into one system of defense in depth.

The result:

  • A hacker can’t drain your account instantly.
  • A scammer can’t impersonate you convincingly enough.
  • An attacker can’t coerce you into transferring your bitcoin on the spot.

Guardian doesn’t just protect your bitcoin. It protects your peace of mind.

The Onramp Standard

Guardian formalizes what has always been true about Onramp: we lead on security. Our multi-institution custody already eliminates single points of failure. Guardian takes that structural advantage and extends it to the client experience.

We believe the future of wealth preservation requires custody that is deliberate and resilient, where bitcoin only moves when reinforced by time, verification, and cryptographic proof.

With Guardian, Onramp clients can be confident their bitcoin is secure, not just against the obvious risks, but against the evolving, sophisticated threats of the future.

Learn More

Guardian Core is available to all Onramp clients today. Guardian Private is available by request for private clients, with bespoke onboarding through our operations team.

For more details, visit the Onramp Guardian landing page, or to activate Guardian controls on your account, schedule a consultation.

Multi-Institution Custody

Are you ready?

The best security available for your Bitcoin without the technical burden. It’s time to upgrade.