Security & custody
Security you can verify, not just trust.
Every loan has its own on-chain address in multi-signature cold storage. Your collateral is never lent, staked or reused, and you can check it on any public block explorer, whenever you like.
- One address per loan, never pooled
- Multi-signature cold storage
- Never lent, staked or rehypothecated
- Returned only to your address
- 1 : 1on-chain address per loan
- Multi-sigcold storage, offline keys
- 0coins lent, staked or reused
- 24/7on-chain verification
- 0third-party scripts
How your collateral is held
Six rules we do not bend.
Your collateral’s address and balance are public on its blockchain, so you never have to take these rules on trust.
Its own address
When you set up a loan, we create a deposit address used for that loan only. Your coins are never pooled with other clients’ collateral or with our own funds.
Multi-signature cold storage
The keys that control collateral addresses are kept offline. Moving coins needs several independent approvals, so no single person, inside or outside the company, can move them alone.
Never put to work
Collateral is not lent, staked, pledged to anyone else, used as margin or rehypothecated. It earns nothing for us: it waits at its address until you repay.
Verifiable by you
The address is public on its blockchain. Paste it into any block explorer to see the balance and every movement, without asking us.
Returned only to you
Collateral leaves its address in two cases only: returned to the address you designate in your client area after you authenticate, or sold under the liquidation policy you agreed to.
Matched by your statements
Every deposit, return and sale appears in your client-area statements, so what you read there matches what you see on-chain.
Verify, don’t trust
Check your collateral in under a minute.
Find your address
It is shown on your loan in your client area and on your collateral receipt. Never use an address sent to you by message.
Open a public explorer
Any explorer for the network will do. We do not run them, so they are independent of us.
Read the balance
It equals your pledge, plus any top-up, minus any partial liquidation shown in your statements.
Check the movements
Deposits in; returns to your address or liquidation sales out. Nothing else.
Collateral receipt
Example
- Loan
- LP-04817
- Status
- Held · verified
- Collateral
- 0.6801 BTC
- Address
- bc1q 8r4x … 6m2k
- Confirmations
- 1,284
- Rehypothecation
- None, by contract
Verifiable on any public block explorer
In all honesty
What this protects you against, and what it cannot.
Good custody removes the risks that sank several crypto lenders. It does not remove market risk, and part of your security stays in your hands.
Designed to protect you against
- A lender using your coins. Your collateral is never lent or reused, so it cannot be lost in someone else’s trade or default.
- A single point of failure. No one person and no single key can move collateral.
- Commingling. Your coins are not mixed with other clients’ collateral or with our own funds.
- Not knowing where your coins are. The address and its balance are public, at any time.
What no custody model removes
- Market risk. If prices fall, margin calls and partial liquidations still apply under your agreement.
- Losing your own access. Without your account number, password and recovery kit, we cannot restore your access.
- Phishing. A fake website or message can trick you into revealing credentials or sending coins to the wrong address.
- Network and counterparty risks. Blockchain incidents can delay transfers, and Lombard Private is not a bank: no deposit-guarantee scheme covers your collateral.
Your account
An account with no name to steal.
There is no email to hijack and no phone number to swap: your client area is identified by a 16-digit number and protected by factors you control.
- A password that only you know. We store a one-way hash, never the password itself.
- A passkey, if you add one: it only works on lombardprivate.com, so a fake site cannot use it.
- An authenticator app for one-time codes, as a second factor.
- A recovery kit to download when you open your account, and to keep offline.
- Session control: see where you are signed in and sign out remotely.
4831 2207 9154 6602
Keep it safe: we can’t reset it — we don’t know who you are.
One rule to remember
We will never email, text or call you, and we never ask for your password, your codes or your recovery kit. Anyone who does is not Lombard Private.
This website
Built to give attackers nothing to work with.
Each protection is sent by our servers with every page, so your browser applies it and you can check it.
| Protection | What it means for you |
|---|---|
| No third-party code | Nothing is loaded from another company: no analytics, trackers, advertising tags, external fonts or scripts. No cookies are set. |
| Content security policy | Your browser is told to refuse any script, style, image or frame that does not come from lombardprivate.com, which blocks most injected code. |
| Encrypted connections only | Browsers that have visited us connect only over HTTPS for the following year, including on any subdomain (HTTP Strict Transport Security). |
| No framing | Our pages cannot be displayed inside another website, a trick used to make visitors click on something they cannot see. |
| Permissions policy | Your browser’s camera, microphone, location, motion sensors, payment and USB features are switched off for our pages. |
| Referrer policy | When you follow a link to another site, it learns only that you came from lombardprivate.com, never which page you were reading. |
| No IP address logs | Our servers do not record the IP addresses of visitors. |
To see them yourself, open your browser’s developer tools, choose the Network tab, reload the page and select the first request: the protections are listed under the response headers.
Questions
Security: straight answers.
Anything else? Our advisors answer by secure message from your client area, 7 days a week.
Help centreWhere is my collateral held?
At an on-chain address created for your loan only, controlled by keys kept offline in multi-signature cold storage. The address is shown in your client area and on your collateral receipt, and you can check its balance on any public block explorer.
Is my crypto lent out, staked or used to earn yield?
No. Your collateral is never lent, staked, pledged to anyone else, used as margin or rehypothecated. It stays at its address until it is returned to you or, if your loan reaches the liquidation threshold, partly sold under the liquidation policy.
Can someone at Lombard Private move my collateral?
Not alone. Moving collateral needs several independent approvals, and coins only leave their address to be returned to the address you designate or to be sold under the liquidation policy. Every movement appears in your statements and on the blockchain.
What happens to my collateral if Lombard Private fails?
Your collateral sits at a dedicated address and is never mixed with our own assets, which keeps it identifiable. Lombard Private is not a bank, however, and no deposit-guarantee or investor-compensation scheme covers it: recovering collateral in an insolvency could take time and involve legal proceedings. Our risk disclosure explains this in detail.
How do I know an address really belongs to my loan?
Only trust the address displayed in your client area, after you sign in at lombardprivate.com, and on your collateral receipt. We never send deposit addresses by message. Once your deposit is confirmed, the balance you see on a block explorer should match your loan.
Is this website safe to use?
It loads nothing from third parties, sets no cookies, enforces encrypted connections and a strict content security policy, and refuses to be displayed inside other websites. Our servers do not record visitors’ IP addresses.
How do I report a security issue?
Send us a secure message from a client area, choosing the Security topic, and see our responsible disclosure policy for what to include. We never ask anyone to report anything by email or by phone.
Security in detail
- Proof of collateralCheck your pledge on-chain, network by network.Read
- Account protectionPasskeys, one-time codes and your recovery kit.Read
- How we contact youOnly in your client area. Never by email, text or phone.Read
- Privacy by designWhat we never collect, and the little we hold.Read
- System statusPrices, payment systems and deposit times, live.Read
- Security disclosureFound a vulnerability? Report it privately.Read
Borrow against collateral you can check.
Price your loan in seconds. Your collateral gets its own address, and you can verify it whenever you like.
- No KYC
- No email, no phone
- Zero fees
- Repay any time