The Architecture of Wealth
Funding a Trust with Digital Assets
A Key Is Not a Title
The sixth and last essay in the funding sequence. Every asset before this one answered to a book kept by somebody. Here the book records addresses rather than persons, or belongs to a platform that will not deal with you — and the failure, uniquely, cannot be undone.
Paul Magaji · 17 min
The trust deed lists them. The asset schedule gives the amounts. The settlor mentioned them at every family meeting for six years, and everyone knows roughly what they were worth.
He died in March. The trustee has the deed, the schedule and the certificate of death, and it cannot reach a single unit of any of it.
This is the only essay in the sub-cluster in which the failure is final. A deed of assignment never registered can be registered late. Shares never entered in the register of members can be entered after a dispute. An assignment of a policy never notified can be notified, tardily, with priority lost but the asset intact. A key that nobody knows is not a contested asset. It is an absence, and no court in Nigeria or anywhere else can order it back into existence.
That question does more work in this asset class than every instrument counsel can draft, and it is the question the funding operation has to answer twice: who knows it now, and who will be able to learn it later.
Who else knows the secret?
Act One
Three Things Called Digital Assets
Families use one phrase for holdings that behave in completely different ways, and the funding operation is different for each. Sort them before anything else.
The first is self-custodied. Cryptocurrency held in a wallet the settlor controls, where the only thing standing between the asset and anyone in the world is knowledge of a private key or a recovery phrase. There is a ledger, and it is public, and it records nothing about persons. It records that a certain address holds a certain balance. It does not know the settlor's name, has never heard of the trust, and cannot be told.
The second is platform-held. An account at an exchange, a payment platform, a broker, a marketplace, a monetised channel. Here a register does exist — the platform's own account records, which name a holder exactly as an insurer's register names a policy-holder. The difficulty is different: that register is closed. Most platform terms prohibit transfer of the account, prohibit sharing credentials, and treat the relationship as personal to the holder. The register names somebody and will not be persuaded to name anyone else.
The third is conventional property that happens to be digital. A domain name held through a registrar. Copyright in software, a catalogue, a course, a body of writing. A database. A registered trade mark used online. These are ordinary property rights in an unfamiliar wrapper, they are assignable in writing like any other chose in action, and the registrar or registry that records them behaves like the registers in the earlier essays. Families often overlook them entirely while worrying about the first category.
Only the third funds easily. The second frequently cannot be funded at all. The first can be funded, but only by an operation most families get precisely backwards.
Act Two
A Key Is Not a Title
Consider what it means to hand somebody a private key.
In every other asset class, transferring the thing that controls the asset divests the transferor. Hand over the original share certificate and you no longer have it. Execute the assignment of a policy and the insurer records somebody else. Pay money out of your account and the balance falls.
A key can be copied. Writing a recovery phrase on a card and giving the card to a trustee transfers nothing whatever, because the settlor still knows the phrase, or photographed it, or wrote it somewhere else in 2019 and has forgotten where. Two people now control the asset absolutely and independently, and neither can exclude the other. Nothing has moved.
This is the analytical heart of the essay. In self-custodied digital assets, control and ownership are the same fact, and control is knowledge. A gift is not complete until the giver can no longer take the thing back, and a settlor who still knows the phrase can take it back this afternoon from anywhere on earth. The instrument of gift that worked so well for cash in the essay on funding with cash does not complete anything here on its own, because there is no third party holding the asset who can be told the settlor no longer owns it.
The consequence is that the transfer must be made by movement, and to custody the settlor has never had and cannot reconstruct. Not by delivering a key. By generating a new one in the trustee's hands and sending the assets to it.
Act Three
The Operation, in Six Steps
The order below assumes a settlor with holdings across all three categories, which is the ordinary case rather than the exotic one.
Step One
Inventory the Holdings and Classify Them by Custody
The schedule is by custody type, not by asset name.
List every holding, and against each record where it actually lives: self-custodied in a wallet, held at a named platform, or held through a registrar or registry. Record the approximate value, the date of the record, and — for platform holdings — the name on the account and the identity documents behind it.
Two things surface reliably at this stage. Holdings the settlor had forgotten, often on platforms that no longer exist or have been through insolvency; and holdings registered in someone else's name because a relative or an agent opened the account. Both are funding problems, and neither improves with time.
The Verification
a dated schedule classifying every holding by custody type, with the platform account names recorded as they actually stand.
Step Two
Read the Platform's Terms Before Promising Anything
The deed cannot give the trust what the contract forbids.
For each platform holding, obtain the current terms and read the provisions on transfer, on assignment, on shared access and on death of the account holder. Most prohibit transfer outright. Many prohibit disclosure of credentials even to a spouse. A number provide a deceased-account process that pays out to a personal representative on production of probate documents — which routes the asset through the estate, not around it, exactly as the pension does in the essay on funding with insurance.
Where the terms forbid transfer, say so plainly to the family rather than drafting around it. The realistic options are to liquidate the holding and settle the proceeds as cash under the essay on funding with cash; to have the trustee open its own account with the platform and receive the assets into it, where the platform permits corporate or fiduciary accounts; or to hold the asset through a company the trust owns, so that the account holder never changes while its ownership does. The last is the route that most often works, and it borrows the reasoning of the essay on funding with a family business.
The Verification
the platform's terms as at the funding date, with the transfer, access and deceased-holder provisions extracted onto the trust file.
Step Three
Generate Custody in the Trustee's Hands, Then Move the Asset
New keys, made by the trustee, never known to the settlor.
For self-custodied holdings, the trustee establishes new custody: a wallet whose keys are generated by the trustee or its custodian, under conditions the settlor is not party to and cannot observe. The settlor then transfers the assets to that address.
The distinction between this and the common practice is the whole of the operation. Handing over a hardware device, a written phrase or an exported file leaves the settlor in control of an asset he has told the world he gave away, and produces a settlement that is vulnerable on precisely the ground the essay on funding with cash identified for a bank account the settlor still operates. A transfer to newly generated custody is complete, irreversible and provable, which are the three things this asset class otherwise refuses to supply.
Where the value warrants it, the custody should be arranged so that no single person can move the assets alone — keys split between the trustee, its counsel and an independent party, with a defined number required to act. This costs something to set up and it removes the largest operational risk in the entire trust, which is not the settlor's death but the compromise or dishonesty of one person holding everything.
The Verification
evidence that the receiving custody was generated by or for the trustee, and the transaction record showing the assets arriving at it.
Step Four
Record the Transfer Twice
Once on the ledger, once on paper — and the paper is the part the ledger cannot supply.
The public ledger will record that a quantity moved from one address to another at a moment in time. It will not record that this was a gift into a settlement, any more than a bank statement did in the previous essay, and for the same reason.
So the discipline of the cash essay applies unchanged and matters more. The settlor executes an instrument identifying the holding, the receiving address, the trust and its date, and stating that the transfer is absolute and beneficial. The trustee acknowledges receipt and minutes the acceptance. The transaction reference is recorded against the instrument so that the paper and the ledger can be matched by someone who was not present. The trust's asset schedule is updated.
Where the settlor wishes to preserve evidence of control before the transfer — that these holdings were his to give — a signed message from the originating address, made and retained at the time, does that job better than any recollection offered afterwards.
The Verification
the instrument of gift, the trustee's receipt and minute, and the transaction reference recorded against both.
Step Five
Build the Access Mechanism, and Then Test It
A mechanism that has never been rehearsed is a theory.
The trust must be able to reach the assets when the people who currently can are unavailable — through death, incapacity, resignation or simple absence. This is the step families skip and the step the whole asset class turns on.
The mechanism is a matter of design rather than doctrine, and the workable arrangements share a shape: custody split so that no individual holds enough to act alone; instructions sealed with a professional custodian or a bank, releasable on defined and verifiable triggers; a written succession of who is entitled to what on which event; and, for holdings of real size, a regulated custodian carrying the operational burden rather than an individual with a safe.
Then test it. Run the recovery with the settlor alive, on a small holding, and document that it worked. An untested mechanism has the same value as an untested fire alarm, and it will be discovered to be broken on the one occasion it is needed.
The Verification
a written access and recovery protocol, and a dated record of a rehearsal in which the trustee actually recovered a holding.
Step Six
Settle the Regulatory and Tax Position
This asset class stopped being unregulated in 2025.
Two Nigerian statutes now speak to these holdings directly, and both are recent enough that families and advisers are still operating on outdated assumptions.
The Investments and Securities Act 2025, which repealed the 2007 Act, expressly recognises virtual and digital assets as securities and brings them and the service providers dealing in them within the oversight of the Securities and Exchange Commission. The grey area in which Nigerian digital-asset holdings sat for a decade has closed. Where the settlor's involvement goes beyond holding — where he operates a platform, deals for others, or promotes an offering — the funding conversation has a licensing conversation inside it.
The Nigeria Tax Act 2025 names digital and virtual assets expressly among the chargeable assets, so the grey area these holdings occupied for tax has closed alongside the one they occupied for regulation. A transfer into a settlement is a disposal; where it is a gift, section 54 qualifies that disposal so it takes the character of a gift, and where a trustee holds for a person absolutely entitled, section 36 disregards the acquisition altogether. The qualification is broadly drafted and has not been construed by any court, so its margin is genuinely open. No rate, threshold or computation appears in this essay. The reform is recent, the thresholds move, and the position must be taken from the Act as in force on the date of the transfer.
The Authority
propositions under the Investments and Securities Act 2025 and the Nigeria Tax Act 2025 are stated structurally and without section references; verify both against the current text and the regulators' published guidance before advising.
Act Four
The Determination
The determination for this asset class has two limbs, and the second is the one families resist.
A self-custodied digital asset cannot be settled by instrument. It is settled only by movement to custody the settlor has never held and cannot reconstruct. A deed describing the holding, a key handed over, a phrase written in a sealed envelope and a promise made in front of the family are, individually and together, not a transfer. Until the assets sit at an address whose keys the settlor never knew, the trust owns a description.
A platform-held asset usually cannot be settled at all. The account is personal, the terms forbid transfer, and the platform will deal with a personal representative rather than a trustee. What the trust can hold is the company that holds the account, or the proceeds once the holding is realised. Where the family wants the trust to hold the asset itself, the honest answer is frequently that it cannot, and the plan should be built around that rather than in denial of it.
One further consequence deserves stating to any settlor who holds meaningfully in this class. Digital assets are the only holdings in this sub-cluster where doing nothing produces total loss rather than an argument. An unregistered deed leaves a claim. An unassigned policy leaves a payment to the wrong person, which is at least a person who can be sued. An unrecoverable wallet leaves nothing at all — no defendant, no register to correct, no application to make. The asset does not pass to the wrong hands. It ceases to be reachable by any hands, permanently.
Act Five
What Must Never Go in the Will
There is one instruction in this essay that admits of no exception, and it is the one most commonly got wrong by careful people trying to be thorough.
Never write a private key, a recovery phrase, a password or a set of credentials into a will. A will admitted to probate becomes a document of record, capable of being inspected. The registry is not a vault. A settlor who writes his recovery phrase into his will has arranged for his holdings to be published to anyone willing to make an application, at the precise moment when nobody is watching the wallet and everybody knows he is dead.
The same reasoning applies with almost equal force to a letter of wishes, which may be shown to beneficiaries and their advisers and is not written for confidentiality of that order. the essay on the letter of wishes treats what a letter of wishes is for, and this is not it.
What belongs in the will or the letter is the map, not the key: that holdings of this kind exist, who the custodian is, which professional holds the sealed instructions, and what the trigger for release is. The instruction should be sufficient for a trustee to know where to go and useless to anyone who reads it without authority.
The design problem underneath is real and should be named to the family rather than solved silently. Access wide enough to survive a death is access wide enough to be abused during life, and every arrangement in this field is a chosen point on that line. There is no configuration that eliminates both risks. There is only a decision, taken deliberately, written down, and reviewed as the value of the holding changes.
A key that has been shared has not been given. It has been duplicated, and the giver still owns everything.
Act Six
Which Book Decides — and the End of the Sequence
Six asset classes have now been put to the same question, and the answers make a series.
Land answered with the register of a state. Shares answered with the register of members. Insurance answered with the register the insurer keeps, and with the date a notice reached it. The family business answered with six registers at once and the discovery that an enterprise is not an asset. Cash answered that there is no register of ownership at all, so the family must keep the book itself. And digital assets answer that there is a book, kept perfectly and publicly, which records addresses rather than people — and that the family must therefore keep two books, the ledger's and its own, and match them.
The sequence has been arguing one proposition in six costumes. A trust owns what the relevant record says it owns, and the record is never the deed. The deed states an intention. Something else — a registry, a register, a receipted notice, a signed acknowledgment, a contemporaneous instrument, a transaction to custody the settlor never held — converts that intention into ownership. Nigerian trusts fail at funding far more often than they fail at drafting, and they fail because the family stopped at the intention.
What follows this essay is the instrument the six were written toward: a funding and evidence checklist, built asset class by asset class, with one verification line for every step in these pages. It is the document a settlor should be handed at the first meeting and a trustee should work through before it accepts anything.
Every other asset in this sequence can be recovered by argument. This one cannot. When the key is gone, the asset is not disputed — it is simply gone.