Necessary Due Diligence: Preparing a Decade of On-Chain History for a CBI File

The Bitcoiner most confident about due diligence is usually the one with the oldest coins. The logic feels airtight: I bought years ago, I never sold, the coins never moved off my hardware, there is nothing to explain. Then the citizenship file gets opened, and the question is not whether you held with conviction. The question is where the money that bought the coins came from, a decade ago, with documents. And a decade is exactly long enough for every institution that touched the purchase to have vanished, purged its records, or never collected your name in the first place. The cleanest hold in the world can sit on the messiest paper trail.

Here is the reframe that matters: the chain itself never lost a record. Every acquisition you ever made is still sitting in a public ledger, timestamped and immutable. A citizenship-by-investment (CBI) file for a long-hold Bitcoiner is not built by finding ten-year-old receipts in a drawer. It is built by reconstructing the story until your documents and the ledger agree.

Your coins aged in public, on a ledger that forgets nothing. Your paperwork aged in a drawer. The file that wins is the one where both tell the same story.

What A Decade-old File Must Prove

Compliance reviews ask two distinct questions, and a long holder needs answers to both. Source of funds (SoF) asks where the specific money in this transaction came from: the contribution you are wiring to a government fund. Source of wealth (SoW) asks how you came to hold your overall position in the first place. For a Bitcoiner whose entire net worth is a stack acquired between 2014 and 2017, the two questions collapse into one long answer: show us the acquisition, then show us the decade.

The desks asking are real and layered. Vanuatu screens every applicant through three authorities, the Financial Intelligence Unit (FIU), the police with their Interpol databases, and immigration services. São Tomé and Príncipe runs files through the Unidade de Cidadania por Investimento e Doação (UCID), its citizenship unit, with processing handled through Dubai. El Salvador’s Freedom Passport, settled in Bitcoin or USDT, runs its checks through The Bitcoin Office. Different desks, same architecture: a sanctions and criminal screen on the person, and an origin story on the money that has to hold together.

And here is the part most applicants miss: the blockchain alone does not answer the question. The chain proves that coins existed at an address and moved at a time. It does not prove who controlled that address, or that the fiat which bought the coins was clean. The identity half of the proof lives in your documents. The asset half lives on-chain. A decade-old file is the work of stitching the two halves back together.

Why The Paper Trail Decays Faster Than The Coins

The global standard for financial record-keeping, set by the Financial Action Task Force (FATF), requires institutions to keep transaction records for at least five years. Five is a floor, and some jurisdictions stretch it longer, but almost nobody is obliged to keep your 2015 trade confirmations today. The exchange that still exists may have lawfully purged you. The exchanges that mattered most in that era did something more thorough: they ceased to exist.

Walk the graveyard. Mt. Gox, which at its peak handled the large majority of global Bitcoin volume, collapsed in February 2014 with roughly 850,000 BTC missing, about 200,000 of which were later recovered; its insolvency proceedings ran more than a decade, with the first creditor repayments landing in 2024. BTC-e, which served over a million users with no know-your-customer (KYC) program at all, was seized in July 2017 after a $110 million penalty from the US Treasury’s financial-crimes unit. Cryptsy collapsed in 2016, and the federal indictment of its founder alleges he destroyed the customer database on his way out. QuadrigaCX failed in 2019 owing roughly C$215 million to its clients after its founder’s death revealed there were essentially no books at all. LocalBitcoins, where a generation of early adopters bought coins peer-to-peer, did not even require identity verification until September 2019, and closed in 2023; whatever records existed can no longer be requested from anyone.

Add the acquisitions that never produced institutional paperwork in the first place: mined coins, cash trades at meetups, private deals between early believers. A meaningful share of the Bitcoin acquired in that era simply has no counterparty left to write a letter. That is not an accusation; it is an artifact of how young the industry was. But a due-diligence desk does not grade on nostalgia. The file still has to prove the origin.

There is a clean dividing line in the calendar, and it is worth knowing which side of it your coins sit on. In June 2019 the FATF extended its travel rule to virtual assets, and over the following two years full KYC became effectively universal at major centralized exchanges. Coins bought on a regulated venue after that era are usually an account export away from documented. The decade problem is specifically the earlier cohort: the pre-2019 purchases, the mined coins, the peer-to-peer deals. The older the acquisition, the more the file depends on reconstruction rather than retrieval, and the more valuable the work in the next section becomes.

What The Chain Preserves For Free

Now the good news, and it is better than most applicants expect. Bitcoin is a public, append-only ledger. The block that confirmed your 2015 purchase is still there, timestamped to within a couple of hours, visible to anyone, forever. No bank statement survives a decade with that reliability. While your paperwork decayed, the chain held the other half of your file in escrow.

That permanence works for you in three concrete ways. First, acquisition events can be located and dated: the transactions that funded your addresses are objective anchors a reviewer can verify independently, which is precisely the cryptographic-proof-over-trust principle this asset was built on. Second, provenance can be screened: the analytics tools that exchanges, Bitcoin-facing banks, and government agencies use as standard infrastructure can walk your coins' history and confirm they never touched sanctioned entities, darknet markets, or stolen funds. For a clean stack, that screen is not a threat; it is the strongest exhibit in the file. Third, control can be demonstrated: signing a message with the key that holds your coins proves you control them today, without moving a sat. A signed message does not prove you held the coins in 2016, and not every wallet signs every address type, which is why it is one exhibit among several rather than the whole case. But paired with dated corroboration, it closes the loop between the person in the application and the coins on the ledger.

Assembling The Decade, Step By Step

In practice, reconstructing ten years runs in five passes.

First, inventory the position. Which addresses, which UTXOs, which wallets, and how today’s stack traces back to the original acquisition events. Consolidations and wallet migrations over the years make the visual trail messy; mapped properly, they are just hops, and every hop is on the ledger.

Second, date the acquisitions. Each funding event gets anchored to its block and its calendar date. This is where the story gets its spine: not "I bought early," but "these coins arrived at this address in March 2016, here is the transaction."

Third, corroborate each event with whatever the era left behind. Bank statements showing the fiat leaving your account, which banks often retain longer than exchanges retain trade data. Old confirmation emails, account-opening notices, and CSV exports. Tax returns that reported the gains or the mining income, which carry the credibility of having been filed with a government years before any passport was on your mind. Mining-era applicants bring pool payout records and even electricity bills; over-the-counter buyers bring contracts and escrow correspondence. None of these alone is the proof. Together they triangulate it.

Fourth, prove control. Signed messages from the relevant keys, prepared once and dated, connect the applicant to the addresses in the narrative.

Fifth, write the narrative itself. A clear, chronological memo that walks a stranger from your first acquisition to today’s balance, with every document and transaction cross-referenced. Compliance reviewers are professionals reading a file cold. The narrative is what turns a folder of exhibits into a story that holds.

One boundary runs through all five passes, and it matters to every self-custodying Bitcoiner: the file documents the contribution and its origin, not your entire net worth. A source-of-funds review needs the story of the coins funding this application; it is not a census of every UTXO you control, and a properly scoped file does not volunteer one. That scoping is part of the craft. Disclose fully within the file’s perimeter, keep the perimeter where it belongs, and handle the whole exchange over encrypted channels with compartmentalized case handling. Sovereignty and compliance are not opposites; a well-built file is precisely how you satisfy the desk while revealing no more than the desk needs.

Where Decade-old Files Fail

The failures are predictable, and most are avoidable. Files fail on gaps: an unexplained jump where coins appear without an acquisition story. They fail on commingling: a clean long hold swept into a wallet alongside coins whose history nobody checked, so the screen flags the whole balance. They fail on mixer exposure that the applicant never disclosed and the analytics pass finds anyway; whatever your views on privacy tools, an undisclosed flag discovered by the reviewer reads very differently from a disclosed one explained up front. And they fail on improvisation: applicants who guess at dates a reviewer can check against the chain, and get them wrong.

What does not fail a file is honest incompleteness, handled professionally. If the exchange is dead, the gap gets bridged: the on-chain record, the bank record of the fiat leaving, a sworn declaration of the circumstances, and a narrative that does not pretend to more certainty than the documents support. Reviewers have seen the graveyard too. What they need is a story consistent with the ledger, not a miracle of archival perfection. And when a file genuinely is not ready, the professional answer is to say so and finish the reconstruction first; we have told clients exactly that, because a withdrawn gap is recoverable and a denied application follows you.

Start The Decade Before You Start The Application

The single most expensive mistake in this process is sequencing: choosing a program, wiring a deposit, and then discovering the file needs three months of reconstruction. The documentation work is portable; it is largely the same whether the file lands at Vanuatu’s FIU, São Tomé's UCID, or The Bitcoin Office in El Salvador. Built once, it serves every application you ever make, including the bank accounts and residencies that come after the passport.

This is the work 21 CBI does end to end: the on-chain mapping, the corroboration hunt, the signed-message protocol, and the narrative memo, handled over encrypted channels and disclosed line by line before you commit. The deeper mechanics are in our source of funds guide, and the program-by-program fit is a conversation: book a confidential advisory session, encrypted, no obligation, and no payment required to start.

A decade of conviction deserves a file that proves it. The chain did its half of the work already; it kept every record while the industry around it burned through exchanges, databases, and founders. Low time preference does not mean no action. It means doing the slow, unglamorous work of reconstruction now, so that when the application is in front of a reviewer, the oldest coins in the room are also the best documented.

This is general information, not legal, tax, or compliance advice for your situation. Due-diligence standards vary by program and change over time; consult a qualified advisor regarding your specific circumstances before you act.