Cryptocurrency held for customers by exchanges, hosted wallets, and other custodial services is reportable property under state unclaimed property laws. The Revised Uniform Unclaimed Property Act of 2016 (RUUPA) classifies virtual currency alongside bank deposits and brokerage holdings, and most states have adopted some form of that framework. If your business holds digital assets on behalf of users, crypto unclaimed property laws impose the same core duties banks and brokerages have handled for decades: track dormancy, attempt to find the owner, then report and remit to the state. The penalties for ignoring these obligations compound quickly, and state auditors are paying closer attention to the crypto sector.
RUUPA defines virtual currency as a digital representation of value used as a medium of exchange, unit of account, or store of value that lacks legal tender status in the United States. That captures bitcoin, ether, stablecoins, and most tokens traded on exchanges. Encryption and blockchain recording do not exempt an asset from state custody.
Who Counts as a Holder
Everything turns on who controls the private keys. Under RUUPA, a holder is a person or entity obligated to hold property for, deliver to, or pay the owner. When a user stores crypto in a self-hosted wallet and alone possesses the private key, no third party meets that definition. The wallet software provider never has custody and has nothing to report.
The moment your platform holds keys on behalf of users, you become a holder, with all the obligations that follow. Exchanges and hosted wallet services fall squarely on this side of the line.
Multi-signature setups complicate things. Some states treat partial key possession as a form of custodial control and require the service to try to obtain the remaining keys needed to transfer escheatable assets within a set window. If your business participates in any shared-key arrangement, the safer assumption is that you may be treated as a holder.
When Customer Crypto Is Considered Abandoned
A dormancy period is the stretch of inactivity that must pass before property is legally presumed abandoned. RUUPA’s default is three years from the date the owner first has a right to demand the property. Individual states set their own timelines, so the practical range runs from three to five years. The clock starts from the owner’s last recorded activity.
What counts as owner-generated activity is where confusion lives. These actions reset the dormancy clock:
- Logging in to the custodial platform, even without executing a trade
- Buying, selling, or transferring crypto within the custodial account
- Responding to holder communications, such as replying to an email, completing a verification request, or answering a mailed inquiry
- Updating account information like a password, address, or linked bank account
Passive events do not reset the clock. Price movements, automated staking rewards, dividend reinvestments, and interest accruals are all market- or holder-generated and involve no action by the owner. A large standing balance by itself does not stop the countdown.
Which State Gets the Property
When crypto is deemed abandoned, the next question is which state receives it. The U.S. Supreme Court set the priority rules in Texas v. New Jersey, and those rules apply to digital assets the same way they apply to any intangible property.
The primary rule: the state of the owner’s last known address, as shown on the holder’s books and records, has first claim. If no address is on file, or if the owner’s home state has no escheat law covering the property, the right to escheat falls to the state where the holder is incorporated.1Justia. Texas v. New Jersey, 379 U.S. 674 (1965) That secondary claim isn’t permanent. If the owner’s home state later enacts an applicable escheat law or a valid address surfaces, the home state can recover the property from the state of incorporation.
There’s a practical lesson here. A Delaware-incorporated exchange with users across all 50 states does not want every unclaimed account defaulting to Delaware because address data is missing. Accurate records distribute the reporting burden and reduce the risk of interstate disputes over the same property. When the last known address is in a foreign country, many states allow the holder’s state of incorporation to claim the property, though not all have enacted that provision.
Due Diligence Before You Report
Before transferring any abandoned crypto to the state, you have to make a genuine effort to locate the owner. The process has two parts: assembling accurate records and sending a formal notice.
Record-Keeping
For each potentially abandoned account, gather the owner’s full name, last known physical address, Social Security number or taxpayer identification number, and an accurate valuation of the asset at the time dormancy expired. Most state agencies publish standardized electronic templates and filing instructions on their websites. Clean records are what let the state reunite the property with the owner later.
The Due Diligence Letter
Mail a due diligence letter to the owner’s last known address within a specific window before the reporting deadline. The common timeframe runs 60 to 120 days ahead of the deadline, though some states require earlier notice.2U.S. Department of Labor. Introduction to Unclaimed Property The letter must explain that the property is at risk of being turned over to the state and tell the owner how to reclaim it.
This notice requirement typically kicks in for property valued at $50 or more, which is the most common state threshold. The range across jurisdictions is wide. Some states set the floor as low as $25, others at $100 or $250, and a handful require notice regardless of value. Digital assets don’t always get a separate threshold, so the general rules usually apply. Document every step. That paper trail is your proof of compliance if an audit comes.
Reporting and Remitting the Assets
Once the due diligence window closes without a response, you file a formal report and deliver the assets. These are two distinct steps.
Filing the Report
Reports are filed in the NAUPA II electronic format, which has been the national standard across all 50 states since 2004.3National Association of Unclaimed Property Administrators. Reporting Software and NAUPA File Format Free software that produces files in this format is available through NAUPA. The files go to secure portals maintained by state treasury departments or unclaimed property divisions. The data in these reports is what states use to match future claimants, so accuracy counts.
Remitting the Assets
The actual transfer follows one of two paths. Most states still require holders to liquidate the cryptocurrency into U.S. dollars at the current market rate before remitting. A smaller but growing number of states accept digital assets in their original form, through state-operated wallets or designated cryptocurrency custodians. Some states that accept in-kind transfers require the holder to deliver the exact asset type and amount, along with the private keys needed to access it, within 30 days of the reporting deadline.
Where a holder possesses only a partial key in a multi-signature setup and cannot immediately transfer the asset, some state frameworks require the holder to maintain custody and attempt to obtain the remaining keys within 60 days of determining the property is eligible for escheatment.
After successful delivery of both the report and the assets, the state agency issues confirmation. That confirmation triggers indemnification. The holder is legally protected from future claims by the original owner over the transferred funds, liability shifts to the state, and the property comes off your balance sheet.
Liquidation vs. In-Kind Transfer
The choice between liquidation and in-kind transfer is one of the most consequential pieces of this framework from the owner’s perspective. When a state mandates conversion to dollars, you sell the crypto at whatever the market happens to be on the liquidation date. If the owner surfaces two years later and the asset has tripled, they get the liquidation amount, not current value. The upside is lost.
States that accept in-kind transfers preserve the asset’s original form, so the owner can recover actual bitcoin or ether rather than a cash snapshot from years earlier. This approach better protects the owner’s economic interest but creates operational complexity for the state, which must manage custody of volatile assets. This is an area of active legislative development, and the trend is toward more states building the capacity to accept crypto directly.
Audit Exposure and Voluntary Disclosure
State unclaimed property audits are aggressive, and crypto holders are increasingly on the list. Audits are frequently conducted by third-party firms working on contingency, meaning the auditor’s compensation depends on finding unreported property. Lookback periods typically run 10 to 15 years, and some states, Delaware being the most prominent, push further.
Penalties stack. Interest on unreported property generally accrues at annual rates of 10% to 25% of the property’s value. Civil penalties can reach $200 per day of non-compliance, with aggregate caps as high as $10,000. Fines for knowing failure to report can run from $1,000 to $25,000, and some states add a further penalty calculated as a percentage of the unreported property’s value. Combine interest, daily penalties, and lump-sum fines across a large portfolio of abandoned accounts over a multi-year lookback, and the total exposure can exceed the value of the underlying assets.
Companies that catch past non-compliance before an audit arrives can often negotiate a voluntary disclosure agreement (VDA) with the state. Under a VDA, the business conducts a self-audit, identifies unreported liabilities, and remits the property in exchange for a waiver of penalties and interest. This is almost always the cheaper path. Once a formal audit begins, the leverage to negotiate favorable terms drops sharply. If your exchange or custodial platform has been operating without an unclaimed property compliance program, a VDA belongs at the top of the priority list.