A custodial wallet is one where a company holds the private keys to your crypto, while a non-custodial wallet, also called a self-custodial wallet, leaves those keys with you. Whoever holds the keys can move the coins, so the difference decides who is actually in control of your money.
Day to day, the two can look almost identical. Both show a balance, and both let you send and receive. The difference surfaces when something breaks. In January 2023, a US bankruptcy judge ruled that about $4.2 billion in crypto that customers had deposited into a lending platform's yield accounts belonged to the company, because the terms of use said so. The customers became unsecured creditors of their own deposits.
Self-custody avoids that outcome and introduces a different one. If you lose your recovery phrase, nobody can restore your access.
Manage your Bitcoin and crypto with the self-custodial Bitcoin.com Wallet app.
Key Takeaways
- A custodial wallet means a third party, usually an exchange, holds the private keys and you hold an account. A non-custodial wallet means the keys are generated and kept on your own device.
- Self-custodial, non-custodial, self-hosted, and unhosted all describe the same model.
- In a custodial account, what you legally own is set by the platform's terms of service. A US court applied that reasoning to rule that Celsius Earn deposits belonged to Celsius.
- Exchange failures pay out slowly and often in dollars. Mt. Gox customers who lost access in 2014 face a repayment deadline of October 31, 2026, and FTX valued every customer bitcoin at $16,871.63, its price on the November 2022 bankruptcy filing date.
- Since July 1, 2026, every authorized crypto provider in the EU must legally segregate client crypto from its own estate under MiCA. The US has no federal equivalent after the CLARITY Act failed a Senate procedural vote on September 15, 2026.
- Self-custody removes platform risk and replaces it with personal risk: lost backups, phishing, and malware. Personal wallet compromises accounted for 44% of stolen crypto value in 2024, according to Chainalysis.
- Custody (who holds the keys) and connectivity (hot or cold storage) are separate questions. An exchange can keep coins in cold storage and still be custodial.
- MPC wallets, collaborative multisig, and smart accounts sit between the two models, and the deciding test is whether anyone can move your funds without you.
What Is a Custodial Wallet?
A custodial wallet is a crypto account where a service provider generates, stores, and controls the private keys, and records your balance on its own internal ledger. Centralized exchanges, which match buyers and sellers on an order book, are the most common example, along with brokerage and payment apps that let you buy crypto without ever showing you a recovery phrase.
You sign in the way you would at a bank: an email address, a password, two-factor authentication, and usually identity verification. When you buy bitcoin, the coins typically sit in large pooled wallets controlled by the platform, often called omnibus wallets, and your share exists as an entry in the company's database. Transfers between two customers of the same exchange often never touch the blockchain at all. The platform edits two lines in its ledger.
That arrangement has genuine advantages.
- Account recovery: Forget your password and support can verify your identity and restore access.
- Fiat access: Exchanges connect to banks and card networks, which is how most people buy their first crypto.
- Speed and cost inside the platform: Internal transfers and trades settle instantly, without network fees.
- No backup burden: There is no recovery phrase to write down, store, or lose.
Every one of those features depends on the company continuing to operate, continuing to serve your country, and continuing to honor withdrawals. A custodial balance is a promise from a business, and it carries the same strength as the business behind it.
What Is a Non-Custodial Wallet?
A non-custodial wallet is software or hardware that generates your private keys on your own device and never sends them to anyone else. The wallet provider supplies the interface. It cannot see your keys, approve your transactions, or reverse them.
The terms self-custodial, non-custodial, self-hosted, and unhosted all mean the same thing. Regulators tend to say self-hosted or unhosted, while wallet providers usually say self-custodial.
Self-custody is the model Bitcoin was built around. The Bitcoin whitepaper describes a system for sending payments "directly from one party to another without going through a financial institution." Holding your own private keys is what makes that work in practice, since the network only checks that a transaction carries a valid signature from the right key. It has no concept of an account holder.
Most non-custodial wallets back everything up as a recovery phrase of 12 or 24 words. Whoever holds that phrase holds the wallet, which is why self-custody moves the job of security from a company's operations team to you.
The Bitcoin.com Wallet is self-custodial. Keys are generated and stored on your device, and nobody at Bitcoin.com can access or move your funds. Its optional Cloud Backup keeps an encrypted copy of your recovery information in your own Google Drive or iCloud account, unlocked by a master password that Bitcoin.com never receives.
The advantages run the other way from custody.
- No permission required - Download a wallet and receive funds immediately, without an application or approval.
- No counterparty - A company failure, a third-party hack, or a policy change cannot lock your coins.
- Direct blockchain access - You can connect to decentralized finance (DeFi) apps and set your own network fee.
- Portability - Recovery phrases follow open standards, so if one wallet app disappears, another can restore the same funds.
Custodial vs Non-Custodial Wallets Compared
| Custodial wallet | Non-custodial wallet | |
|---|---|---|
| Who holds the private keys | The provider | You |
| How you sign in | Email, password, 2FA, usually ID verification | Device PIN or biometrics, with a recovery phrase as backup |
| If you lose access | Support can verify your identity and restore the account | Only your recovery phrase or backup can restore it |
| What you legally own | A claim defined by the terms of service | The coins, through control of the keys |
| If the provider fails | Your balance enters a legal process | Your funds are unaffected |
| If the provider is hacked | Recovery depends on the provider covering the loss | Your funds are unaffected unless your own device is compromised |
| Can the provider freeze your funds? | Yes | No |
| Identity checks | Required at regulated platforms | None at the wallet level |
| Transfers to other users of the same service | Often instant and free, recorded off-chain | Always on-chain, with a network fee |
| DeFi and dApp access | Limited or none | Full |
| Your security responsibilities | A strong password and 2FA | Backup, device security, and phishing defense |
| Inheritance | An estate process through the provider | Works only if someone can reach your backup |
What You Actually Own in a Custodial Account
When you hold bitcoin on an exchange, the blockchain records the exchange's wallets as the place those coins live. Your claim on them exists in two places: the company's internal ledger and the agreement you accepted when you opened the account. Whether that claim amounts to ownership of specific coins, or to a debt the company owes you, depends on the wording of that agreement.
The clearest test came from the Celsius bankruptcy. On January 4, 2023, Chief Judge Martin Glenn of the US Bankruptcy Court for the Southern District of New York ruled that crypto deposited into Celsius Earn accounts, roughly $4.2 billion across about 600,000 accounts, was property of the bankruptcy estate. His reasoning, as reported by the American Bankruptcy Institute, was that the terms of use transferred title to Celsius the moment customers deposited. Earn customers were classified as general unsecured creditors, standing in line alongside everyone else the company owed.
Two lessons carry beyond Celsius.
Yield products usually transfer ownership. To pay interest on your crypto, a platform has to lend it, stake it, or otherwise put it to work, and the terms almost always grant that right. The ruling covered Earn accounts specifically and left Celsius's separate custody accounts to be decided under their own terms.
Terms change, and continuing to use a service can mean accepting the new ones. The court held that updates to the terms of use bound customers who kept using the platform after the change.
Regulators have since moved to require custodians to keep customer assets separate from their own, so that a failure does not hand customer coins to the company's creditors. The level of protection depends heavily on where the platform is licensed.
| Where | What protects custodial customers | Legal force |
|---|---|---|
| European Union | MiCA Article 75 requires client crypto to be legally segregated from the provider's estate, so the provider's creditors have no claim on it in an insolvency | Binding regulation for every authorized provider since July 1, 2026 at the latest |
| New York | The state financial regulator's custody guidance of January 23, 2023 expects licensed custodians to segregate customer crypto and not to treat customers as lenders | Supervisory guidance for BitLicense holders and trust companies |
| Rest of the US | Platform terms of service and state law | No federal statute governs crypto custody in an exchange bankruptcy |
| Unregulated or offshore platforms | The terms of service | Whatever the contract says |
MiCA also makes providers liable for client assets they lose, capped at the market value of those assets at the time of the loss.
FDIC insurance covers deposits at insured banks and does not extend to crypto assets, and SIPC protection at brokerages covers securities and cash, which generally excludes crypto. A crypto balance at an exchange has no government backstop in the United States.
What Happens When an Exchange Fails
When a custodian collapses, customer coins enter a legal process that can run for years, and the payout is often fixed in dollars at the worst moment in the market.
| Failure | Collapse | What customers received | Timeline |
|---|---|---|---|
| Mt. Gox | February 2014, after losing about 850,000 BTC | A partial return in BTC and BCH under a Japanese rehabilitation plan | First repayments in 2024. The court-approved deadline for remaining creditors is October 31, 2026 |
| Celsius | Withdrawals paused June 12, 2022, bankruptcy filed July 13, 2022 | Earn customers treated as unsecured creditors under the confirmed plan | Plan took effect January 31, 2024 |
| FTX | Bankruptcy filed November 11, 2022 | Dollars, calculated from asset prices on the filing date | Fifth distribution paid July 31, 2026, bringing the total to nearly $10 billion |
Headlines reported that FTX creditors would recover more than 100% of their claims, and in dollar terms most did. But the court-approved conversion table priced every customer bitcoin at $16,871.63, its value on the November 11, 2022 filing date, and distributions are paid in dollars. Smaller claims received about 120% of that figure once interest was added. A customer who held one bitcoin at FTX did not get a bitcoin back. They received a payment sized to the bottom of the 2022 bear market, while bitcoin went on to trade at several times that price.
At Mt. Gox, customers who lost access in early 2014 waited a decade for the first repayments, and the trustee has extended the deadline for the rest several times, most recently to October 31, 2026.
The Risks of Custodial Wallets
| Risk | What happens | Where it has shown up |
|---|---|---|
| Insolvency | Customer balances enter a bankruptcy or rehabilitation process | FTX, Celsius, Mt. Gox |
| Platform hack | Coins are taken from the provider's own wallets | Mt. Gox in 2014, and about $1.5 billion taken from Bybit in February 2025 |
| Withdrawal freeze | The platform stops processing withdrawals, often before a failure becomes public | Celsius paused all withdrawals on June 12, 2022 |
| Account freeze | Compliance reviews, court orders, or sanctions screening lock individual accounts | A standard power at regulated platforms |
| Regulatory exit | A platform loses permission to serve your country and winds down | Unauthorized providers in the EU had to stop serving clients after July 1, 2026 |
| Use of your assets | Terms allow lending, staking, or rehypothecation of customer coins | Celsius Earn |
| Data exposure | The platform stores your identity documents and your full balance history | Any exchange that performs identity checks |
Several of these risks involve no wrongdoing by the company. A fully solvent platform can still freeze an account during a compliance review or leave a market after a rule change. Custodians answer to the same kinds of authorities as banks, and banks can be ordered to restrict access too. In 2015, Greek banks closed for three weeks under capital controls and capped cash withdrawals at €60 a day.
The Risks of Self-Custody
Self-custody takes the company out of the picture and puts the full weight of security on you. The threats move from the platform to your devices, your backups, and your judgment.
| Risk | What happens | How to reduce it |
|---|---|---|
| Lost backup | Without the recovery phrase, nobody can restore access | Write it down offline and test a restore |
| Phishing and fake support | Someone persuades you to type your phrase into a site or message | No legitimate service ever asks for your phrase |
| Malware | Software on your device captures keys, phrases, or copied addresses | Keep phrases off connected devices and check addresses after pasting |
| Sending mistakes | Funds sent to the wrong address or network cannot be reversed | Send a small test amount first |
| Physical coercion | Someone forces you to hand over access | Keep your holdings private |
| Inheritance | Heirs cannot reach funds nobody told them how to find | Leave instructions, kept separately from the phrase |
| Counterfeit wallet apps | A fake app generates keys the attacker already holds | Install only from the official publisher |
Chainalysis found that compromises of personal wallets rose from 7.3% of all stolen crypto value in 2022 to 44% in 2024. Most of the defenses are habits, and the common scam patterns repeat often enough to learn.
Custody and Connectivity Are Separate Questions
Hot and cold describe whether keys are kept on an internet-connected device. Custodial and non-custodial describe who holds them. The two get conflated because the most familiar custodial service, an exchange, is also the most familiar online one.
| Hot (keys online) | Cold (keys offline) | |
|---|---|---|
| Custodial | An exchange's hot wallet, used to process withdrawals | An exchange's or fund custodian's offline vault |
| Non-custodial | A mobile or desktop wallet app | A hardware wallet or offline storage you set up yourself |
An exchange that advertises cold storage is describing how it secures its own keys. It remains custodial, because you still do not hold them. A hardware wallet is non-custodial and cold, and a mobile app such as the Bitcoin.com Wallet is non-custodial and hot.
Where MPC, Multisig, and Smart Accounts Fit
Newer wallet designs split control among several parties or devices, which makes the custodial label harder to apply. Two questions settle it in every case: can anyone move your funds without you, and can you move them without anyone else?
| Model | How control works | Custodial? |
|---|---|---|
| Exchange account | The provider holds every key | Yes |
| Spot bitcoin ETF | A fund holds the coins through a custodian, and you own shares in the fund | Yes, and you cannot withdraw the bitcoin |
| MPC wallet | One key is split into shares held by different parties or devices | Depends on who holds enough shares to sign |
| Collaborative multisig | You hold some keys and a service holds one as a backup | No, if your keys alone meet the signing threshold |
| Smart account wallet | A smart contract acts as the wallet, often secured by passkeys or recovery contacts | Usually no, but check who can trigger a recovery |
| Single-key self-custody | You hold the only key, backed up as a phrase | No |
| Multisig you control | Several keys, all yours, kept in separate places | No |
An MPC wallet can be fully self-custodial if you hold enough key shares to sign alone, or effectively custodial if the provider's share is required for every transaction. Multisig arrangements follow the same logic. A two-of-three setup where you hold two keys and a service holds the third leaves you in control, since you can always sign without the service.
Smart accounts replace the recovery phrase with passkeys or trusted recovery contacts, and are non-custodial in principle. In practice, the details decide it, especially who can start a recovery and how long the delay lasts before it takes effect.
What Proof of Reserves Does and Does Not Show
After FTX, many exchanges began publishing proof of reserves: cryptographic evidence that they control wallets holding a stated amount of crypto, often paired with a Merkle tree that lets each customer confirm their balance was counted in the total.
A proof of reserves shows the assets an exchange controlled at one moment. It does not show what the exchange owes elsewhere, whether the coins were borrowed for the snapshot, or what the terms of service say about who owns them. A platform can publish a valid proof of reserves and still be insolvent if its total liabilities exceed its assets. A proof of liabilities alongside an independent audit tells you considerably more than a reserve figure alone.
Where Custody Rules Stand in October 2026
| Rule | Where | Status as of October 13, 2026 | What it means for you |
|---|---|---|---|
| MiCA authorization and custody rules | EU | Fully in force, with the transitional period ended on July 1, 2026 | Custodied crypto must be segregated from the provider's own assets |
| Transfer of Funds Regulation | EU | In force since December 30, 2024 | Exchange withdrawals over €1,000 to your own wallet need an ownership check |
| CLARITY Act | US | Failed a Senate cloture vote, 49 to 50, on September 15, 2026 | No federal custody framework yet |
| NYDFS custody guidance | New York | In effect since January 23, 2023 | Segregation expected at New York-licensed custodians |
European Union - The Markets in Crypto-Assets Regulation (MiCA) has applied to crypto service providers since December 30, 2024, and its transitional period ended across the EU on July 1, 2026 at the latest. Any firm serving EU clients without MiCA authorization is now in breach of EU law, and the European Securities and Markets Authority advised customers of unauthorized providers to move their assets to an authorized provider or a self-hosted wallet. Self-custody sits outside MiCA's licensing regime, since a wallet provider that never holds your keys is not providing custody.
One EU rule reaches self-custody users indirectly. Under the Transfer of Funds Regulation, an exchange sending more than €1,000 to a self-hosted wallet must confirm that the wallet belongs to its customer. In practice, that usually means signing a message from your wallet or confirming ownership another way before the withdrawal is released.
United States - The House passed the CLARITY Act in July 2025, which would have divided crypto oversight between the SEC and the CFTC. On September 15, 2026, the Senate voted 49 to 50 against beginning debate on it, short of the 60 votes required. A motion to reconsider keeps the bill technically alive, though Orrick's analysis of the vote notes that passage in this Congress is widely viewed as unlikely and that regulators are building an interim framework under existing authority. For custody, that leaves the patchwork described above: platform terms, state regulation such as New York's, and no federal statute deciding who owns customer crypto when an exchange fails.
How to Tell Whether Your Wallet Is Custodial
| Signal | Points to |
|---|---|
| You wrote down a 12 or 24-word recovery phrase during setup | Non-custodial |
| The same phrase restores your balance in a different wallet app | Non-custodial |
| You signed up with an email address and identity documents | Custodial |
| Support can restore your access without any backup from you | Custodial |
| Withdrawals involve approvals, holds, or limits | Custodial |
| There is no phrase, but keys are split across your devices or passkeys | Check the documentation for who can sign |
If your crypto can only ever be reached through one company's app and account, you are the customer of a custodian. If a phrase you hold can bring the same balance back in any compatible wallet, the coins are yours.
When Each Model Makes Sense
Neither model is safer in every situation. The useful question is which set of risks you are better placed to manage.
| Situation | Usually fits | Why |
|---|---|---|
| Buying crypto with a bank card for the first time | Custodial, then withdraw | Fiat payments run through regulated platforms |
| Frequent trading on an order book | Custodial | An order book needs the exchange to hold balances |
| Holding savings you could not afford to lose | Non-custodial, with a tested backup | Removes insolvency and freeze risk |
| Using DeFi, NFTs, or other on-chain apps | Non-custodial | Those apps connect directly to your wallet |
| Paying people anywhere in the world | Non-custodial | No account approval or platform restrictions |
| You cannot commit to protecting a backup | A regulated custodian that segregates client assets | A carefully run custodian is safer than self-custody done carelessly |
| Large long-term holdings | Multisig or cold storage | Removes single points of failure |
Many people combine the two: buying through a regulated provider, then moving the coins to a wallet they control for the long term. Once the custody model is settled, choosing a specific wallet comes down to supported assets, backup options, and security design.
How to Move Crypto from an Exchange to a Self-Custodial Wallet
- Set up the wallet and secure the backup. Create the wallet, write down the recovery phrase offline, and test that it restores before moving meaningful funds.
- Copy a receiving address on the right network. Open the receive screen for the asset you are withdrawing and copy the address. Making sure the address format and network match what the exchange will send on prevents the most expensive mistake in this process.
- Add the address as a withdrawal destination. Many exchanges let you whitelist addresses, which blocks withdrawals to anything else. In the EU, expect an ownership check for transfers over €1,000.
- Send a small test amount. Confirm it arrives in your wallet before sending the rest.
- Withdraw the balance. Check the full address again after pasting, since clipboard malware can swap a copied address for an attacker's.
- Confirm on a block explorer. Look up the transaction in a block explorer to watch the confirmations arrive.
Expect a withdrawal fee from the exchange, which can be higher than the network fee itself.
Conclusion
Custodial and non-custodial wallets differ on one point that shapes everything else: who holds the private keys. A custodian offers convenience, account recovery, and a direct line to banks, and in return your crypto becomes a claim defined by a contract and protected by whatever rules apply where the platform operates. Self-custody gives you the coins themselves, portable across any compatible wallet and beyond the reach of a company's failure, and in return every part of security becomes your job.
The record since 2014 shows what the custodial side of that trade can cost: twelve years and counting at Mt. Gox, dollar payouts fixed at the 2022 low at FTX, and a court ruling that Celsius customers had handed over ownership by accepting the terms. Regulation has closed part of that gap in the EU and stalled in the US. For crypto you intend to keep, the practical answer for most people is a self-custodial wallet with a tested backup, using exchanges for the moments you need them.
