What is the difference between a custodial and a self-custody wallet?

With a custodial account, such as a balance on an exchange, the provider controls the keys and moves funds on your instruction. With self-custody, your wallet signs transactions with keys that you control, and the provider cannot move the assets.

Is self-custody legal in the EU?

Yes. MiCA regulates custody as a service offered by providers. Regulation (EU) 2023/1113 defines a self-hosted address and sets the checks providers apply when they send crypto to one or receive crypto from one, rather than prohibiting such wallets.

Why did my exchange ask me to prove I own my wallet?

Under Regulation (EU) 2023/1113, for transfers above EUR 1,000 to or from a self-hosted address, the provider must take adequate measures to assess whether that address is owned or controlled by its own client.

What happens if I lose my recovery phrase?

If you lose the recovery phrase and every device that holds your keys, the funds usually cannot be recovered. Some wallets offer extra recovery options, so check what yours supports before you move large amounts.

Does self-custody protect me from a provider's insolvency?

Assets in a wallet whose keys you control are not held by any provider, so they do not depend on a provider staying in business. You still carry the risks of losing keys, falling for scams and making mistakes when sending.

Self-custody

By xChange.bg team
Published 16 September 2026

Every crypto-asset sits at an address on a blockchain, and whoever controls the private key for that address can move it. Self-custody means that key is under your control. A wallet app is only the tool that stores the key and signs transactions for you.

How self-custody works

When a wallet creates an account, it generates a private key and derives a public wallet address from it. You can share the address freely. The private key, or the recovery phrase that regenerates it, must stay secret. As ethereum.org puts it, wallet providers do not have custody of your funds: they give you a window to see and manage your assets.

There are several forms:

Hardware wallets keep keys on a separate device.
App and browser wallets keep keys on your phone or computer.
Embedded wallets are built into an app and let you sign in with email or a social account. Whether one is self-custody depends on who controls the keys.

xChange.bg, a technology provider whose accounts and conversions come from the regulated partner Bridge (a Stripe company), uses an embedded self-custody wallet from Privy on Solana, Ethereum, Base, Arbitrum, Polygon and Optimism. The customer holds the keys.

Custody under EU rules

MiCA defines custody as safekeeping or controlling crypto-assets, or the means of access to them such as private keys, on behalf of clients (Article 3(1)(17)). Firms that do this must be authorised CASPs, keep client assets segregated and are liable for losses from incidents attributable to them.

When you control the keys, no provider performs that service for your assets. Providers you deal with still have duties. Regulation (EU) 2023/1113, in force since 30 December 2024, calls a wallet not linked to a provider a "self-hosted address". Providers collect sender and recipient details for transfers to and from such addresses. Above EUR 1,000, they must also assess whether the address belongs to their own client.

Example

You hold 1,500 USDC on an EU exchange and want to move it to your own wallet. At an exchange rate of about 0.87 euro per dollar, that is roughly EUR 1,300, above the EUR 1,000 threshold. The exchange may ask you to show that the address is yours. Once the USDC arrives, it sits at your address and only your key can move it again. If you later send 200 USDC to a friend's wallet, you pay just the network fee, and no platform has to approve the transfer.

Common confusion

An exchange "wallet" is usually a custodial account. The balance you see is a record kept by the exchange.
Self-custody does not mean no rules. Tax obligations stay the same, and providers apply transfer checks when funds move in or out.
A recovery phrase is the whole wallet. ethereum.org advises writing it down and not storing it on a computer, because anyone who finds it controls the funds.
Self-custody is not anonymity. Blockchain transactions are public, and the providers you use know who you are.

Frequently asked questions

What is the difference between a custodial and a self-custody wallet?: With a custodial account, such as a balance on an exchange, the provider controls the keys and moves funds on your instruction. With self-custody, your wallet signs transactions with keys that you control, and the provider cannot move the assets.
Is self-custody legal in the EU?: Yes. MiCA regulates custody as a service offered by providers. Regulation (EU) 2023/1113 defines a self-hosted address and sets the checks providers apply when they send crypto to one or receive crypto from one, rather than prohibiting such wallets.
Why did my exchange ask me to prove I own my wallet?: Under Regulation (EU) 2023/1113, for transfers above EUR 1,000 to or from a self-hosted address, the provider must take adequate measures to assess whether that address is owned or controlled by its own client.
What happens if I lose my recovery phrase?: If you lose the recovery phrase and every device that holds your keys, the funds usually cannot be recovered. Some wallets offer extra recovery options, so check what yours supports before you move large amounts.
Does self-custody protect me from a provider's insolvency?: Assets in a wallet whose keys you control are not held by any provider, so they do not depend on a provider staying in business. You still carry the risks of losing keys, falling for scams and making mistakes when sending.