01
Unknown Gravity: designing and integrating custody into your platform
Unknown Gravity is a technology company based in Málaga, Spain, and the publisher of this page. It is not a custodian or a CASP: it builds wallets and integrates custody into third-party platforms, either with an authorized custodian or with wallets where each user holds their own keys.
- Role: technology.
- Registration: Unknown Gravity, S.L., Commercial Register of Málaga, sheet MA-177027; its incorporation was published in the BORME of October 18, 2023.
The architecture decision has legal consequences: if your company safekeeps or controls its clients' crypto-assets or their private keys, it is providing custody (Article 3(1)(17) of MiCA) and needs an authorization. Where it fits: your platform needs to integrate an authorized custodian or to design self-custody wallets. Where it does not: if you need someone to hold your clients' keys, that is what the entities on this list are for.
02
Bit2Me: custody and trading authorized by the CNMV
Bitcoinforme, S.L., which trades as Bit2Me, is a crypto-asset service provider based in Spain.
- Type of entity: CASP authorized in Spain and supervised by the CNMV.
- Registered services: custody and administration, exchange of crypto-assets for funds and for other crypto-assets, execution of orders, placing, reception and transmission of orders, and transfer services.
- Since: October 31, 2025, according to the ESMA register and the CNMV list.
Where it fits: you want to hold and buy or sell crypto-assets with the same entity, authorized in Spain.
03
Cecabank: crypto custody at a Spanish credit institution
Cecabank, S.A. is a credit institution. MiCA allows credit institutions to provide crypto-asset services if they notify their supervisor at least 40 working days before they start (Article 60(1)).
- Type of entity: Spanish credit institution, according to the CNMV list.
- Registered services: custody and administration, reception and transmission of orders, and transfer services.
- Since: July 24, 2025, according to the ESMA register.
Where it fits: you prefer a Spanish credit institution as custodian. It is not the only one: the table below lists five more.
04
Prosegur Crypto: a specialist custodian authorized in Spain
Prosegur Custodia de Activos Digitales, S.L.U. (Prosegur Crypto) is a crypto-asset service provider based in Spain whose authorization centers on custody.
- Type of entity: CASP authorized in Spain and supervised by the CNMV.
- Registered services: custody and administration, reception and transmission of orders, and transfer services; it does not include exchange services or a trading platform.
- Since: June 30, 2026, according to the ESMA register and the CNMV list.
Where it fits: you are looking for a specialist custodian based in Spain.
05
BitGo Europe: custody and execution from Germany, passported into Spain
- Type of entity: BitGo Europe GmbH, CASP authorized by BaFin (Germany).
- Registered services: custody and administration, exchange of crypto-assets for funds and for other crypto-assets, execution of orders, reception and transmission of orders, and transfer services.
- Since: May 9, 2025, for custody and transfer services, and September 2, 2025, for exchange, execution, and reception and transmission of orders, according to its BaFin entry (the ESMA register gives May 9, 2025, as its authorization date). The CNMV list shows it passported into Spain, with custody since May 13, 2025.
Where it fits: you want custody and order execution with the same provider, and supervision by another EU member state is enough for you.
06
Boerse Stuttgart Digital Custody: custody and transfers, supervised in Germany
- Type of entity: Boerse Stuttgart Digital Custody GmbH, CASP authorized by BaFin (Article 59(1)(a) of MiCA).
- Registered services: custody and administration, and transfer services.
- Since: January 17, 2025, according to its BaFin entry, which also shows, since December 30, 2024, the German qualified crypto custody license (Section 1(1a), second sentence, No. 6 of the German Banking Act, KWG). The CNMV list shows it passported into Spain, with custody since April 1, 2025.
Where it fits: you want a provider whose MiCA authorization is limited to custody and transfers of crypto-assets, with no trading services.
The 11 Spain-based entities authorized to hold crypto-assets in custody
The ESMA register (file of October 7, 2026) lists 365 entities; 227 have the custody service and 11 of them are based in Spain. These are the 11 as of October 7, 2026, with the type of entity and the date given in the CNMV list:
| Entity | Type, according to the CNMV | May provide custody since |
|---|
| BBVA (Banco Bilbao Vizcaya Argentaria, S.A.) | Credit institution | March 5, 2025 |
| Openbank (Open Bank, S.A.) | Credit institution | July 24, 2025 |
| Cecabank, S.A. | Credit institution | July 24, 2025 |
| Bit2Me (Bitcoinforme, S.L.) | Crypto-asset service provider | October 31, 2025 |
| Renta 4 Banco, S.A. | Credit institution | November 21, 2025 |
| CaixaBank, S.A. | Credit institution | March 27, 2026 |
| Kutxabank, S.A. | Credit institution | March 27, 2026 |
| Criptan Trade, S.L. | Crypto-asset service provider | June 26, 2026 |
| Crossmint Europe, S.L. | Crypto-asset service provider | June 26, 2026 |
| Minos Global, S.L. | Crypto-asset service provider | June 30, 2026 |
| Prosegur Custodia de Activos Digitales, S.L.U. | Crypto-asset service provider | June 30, 2026 |
As of October 14, 2026, the CNMV web list also includes Prakma Markets, S.L., which is not in the ESMA file or the CNMV PDF of October 7: check which services it has registered before you choose. In addition, providers authorized in other EU member states can provide the service in Spain on a cross-border basis (Article 65 of MiCA), and the CNMV includes them in its list. A selection of European institutional custodians, with their supervisor and type of authorization, is in crypto custody providers.
How to choose a custodian: six questions MiCA lets you check
- Does it have the custody service registered, with no end date, and can it operate in your country? Look it up in the ESMA register and in the CNMV list.
- What does the agreement say? MiCA requires an agreement that includes, at least, the identity of the parties, the service, the custody policy, the means of communication and authentication, the security systems, the fees and the applicable law (Article 75(1)).
- Will it give you a summary of its custody policy? It must make one available in electronic format on request (Article 75(3)).
- What happens if it goes bankrupt? The crypto-assets held in custody must be legally segregated from its estate, so that its creditors have no recourse to them, in particular in the event of insolvency (Article 75(7)).
- What is it liable for? For the loss of crypto-assets or of the means of access caused by an incident attributable to it, capped at the market value of the crypto-asset at the time of the loss (Article 75(8)).
- Does it subcontract custody? It may only use other authorized CASPs and must tell you (Article 75(9)). It must also send you a statement of your positions at least every three months (Article 75(5)).
Custody models and who can provide custody are covered in crypto-asset custody. If you are unsure whether your own project needs a license, try the CASP test.
Frequently asked questions
Which companies can hold crypto-assets in custody in Spain?
Those authorized in Spain for that service, 11 according to the ESMA file of October 7, 2026, and those authorized in another EU member state that provide it in Spain on a cross-border basis. All of them must appear in the ESMA register (Article 109 of MiCA) and on the CNMV list.
Is an exchange a custodian?
If it safekeeps or controls its clients' crypto-assets or keys, it provides custody (Article 3(1)(17) of MiCA) and needs that service authorized, on top of its trading services. Check in the register which services it has: not every provider has the same ones.
What happens to my crypto-assets if the custodian goes bankrupt?
MiCA requires them to be legally segregated from the custodian's estate, in accordance with applicable law, so that its creditors have no recourse to them, in particular in the event of insolvency (Article 75(7)). Ask the custodian to explain in writing how it complies.
Why does Unknown Gravity appear first?
Because it publishes this guide, and it appears as a company that integrates custody, not as a custodian. The numbering is not a ranking: no entity paid to appear or reviewed its entry.
Official sources
Data verified as of October 14, 2026. The ESMA register and the CNMV list change often: check them before you sign up. This guide is published by Unknown Gravity, which does not provide custody services. Talk to us.