Crypto Law/Level IV · Holders' traps/4.1 Custody/Lesson 7
Choosing where to hold
Each way of holding crypto, from an exchange account to a regulated custodian, a fund share or your own wallet, gives you a different legal claim and a different set of risks.
Education, not legal, tax or investment advice. Crypto law differs between countries and states and changes often. Check the current rules where you live with a qualified lawyer or tax adviser before you act.
The lean path
The cheapest, lowest-tax, simplest and most private route the law allows, best first. Each step names the rule it rests on and the condition that keeps it lawful.
- Zero-fee legal ownership: self-custody wallets, with US transfers between your own wallets not taxable; the catch is that loss, theft and inheritance risks fall entirely on you and records still matter for tax.
- For tax-free growth, spot bitcoin fund shares can sit in a Roth IRA (2026 limit $7,500, plus $1,100 catch-up at 50+); you own fund shares, not coins, and SIPC covers broker failure only, not price falls.
- If using a platform, choose one whose terms keep title with you, bar lending, and that a regulator supervises (MiCA Articles 70 and 75; NYDFS custody guidance); checking costs only reading time.
- Spreading holdings across arrangements limits any single failure; moves between your own accounts are not US-taxable, but each network fee is real and every eventual sale is reported on Form 8949 and 1099-DA.
MaterialsThe user agreement and any regulator licence details of each platform where you hold cryptoMiCA (Regulation (EU) 2023/1114), Articles 70 and 75, if you use an EU providerThe GENIUS Act, Public Law 119-27, section 10 (custody of payment stablecoin reserves and collateral)
Wonder
- Is any place to hold crypto legally safe?
- What is the legal difference between owning coins and owning shares of a bitcoin fund?
- Which protections apply if I am outside the US?
Explore
- There are four broad ways to hold crypto, and each gives you a different legal position. With an exchange or app account, you have a contract with the platform (lesson 4.1.1). With a regulated custodian, such as a licensed trust company, you hold assets under supervision rules. With a fund, such as one of the spot bitcoin exchange-traded products the SEC approved on 10 January 2024 (lesson 3.2.7), you own shares in a fund, not coins. With self-custody, you hold the keys yourself (lesson 4.1.5). The question in each case is the same: if something fails, what exactly do you hold, and against whom?
- For any platform, three legal points carry most weight. First, title: do the terms say the assets remain yours, as some US user agreements do, or transfer ownership to the platform, as Celsius’s Earn terms did (lesson 4.1.4)? Second, use: may the platform lend, pledge or rehypothecate your assets? Third, supervision: is the entity you contracted with licensed for custody where you live, and by whom (lesson 1.3.6)? New York’s Department of Financial Services, for example, expects its licensed custodians to segregate customer assets, preserve customers’ beneficial interest, and get approval before using sub-custodians, in guidance updated on 30 September 2025.
- In the EU, MiCA sets these duties by law. Article 75(7) requires custodians to segregate clients’ holdings from their own, including on the blockchain, and to keep them legally segregated so that the provider’s creditors have no recourse to them, in particular in insolvency. Article 75(8) makes a custodian liable for losses attributable to it, capped at the market value of the lost crypto at the time of the loss. Article 70(3) requires clients’ cash to be placed with a credit institution or central bank by the end of the next business day. MiCA has applied since 30 December 2024; transitional periods for existing providers ended by 1 July 2026 at the latest.
- Insurance labels are a common trap. The FDIC insures deposits at insured banks; crypto held by a crypto company is not such a deposit. Some platforms say customers’ US dollar balances sit in pooled accounts at insured banks, which concerns the cash, not the coins. SIPC protects securities and cash at failed member brokerages up to $500,000, including $250,000 cash, but says unregistered digital asset investment contracts are not protected. Fund shares held at a broker are securities. Even so, SIPC protection covers a broker’s failure, not a fall in the fund’s price. A platform’s private insurance policy may cover only certain events, such as theft from its own systems.
- US law is moving toward written segregation duties in particular areas. The GENIUS Act, Public Law 119-27, signed on 18 July 2025, governs payment stablecoins (lesson 3.2.4). Section 10 requires custodians of stablecoin reserves, stablecoins used as collateral, and the private keys used to issue them to treat customer property as the customer’s, protect it from their own creditors, and not commingle it, subject to exceptions for omnibus accounts. The Act takes effect on the earlier of 18 months after enactment or 120 days after regulators issue final implementing rules. Broader market-structure legislation remains a separate matter (lesson 3.2.5).
- A practical exercise, not a recommendation: make a table of every place you hold crypto. For each, record the legal entity and country, the title clause, whether your assets may be lent, the regulator if any, what any insurance actually covers, withdrawal limits, and the cost and time to move out. Moving coins between your own wallets is generally not a taxable event in the US (lesson 2.1.6), but fees and errors are real. Some holders spread assets across several arrangements so that no single failure takes everything; whether that suits you depends on your circumstances and is a decision for you.
Key facts
- The SEC approved the listing and trading of a number of spot bitcoin exchange-traded products on 10 January 2024.
- NYDFS issued updated guidance on custodial structures for customer protection in insolvency on 30 September 2025.
- Article 75(8) of MiCA caps a custodian’s liability for lost crypto at its market value at the time the loss occurred.
- Article 70(3) of MiCA requires crypto-asset service providers to place clients’ funds with a credit institution or central bank by the end of the next business day.
- SIPC protects customers of failed member brokerages up to $500,000, including a $250,000 limit for cash.
- The GENIUS Act, Public Law 119-27, was signed on 18 July 2025 and takes effect on the earlier of 18 months after enactment or 120 days after final implementing regulations.
Exercise nine, six, three, one
Fact check
Dates, figures and claims checked against the published sources listed below.
- Regulation (EU) 2023/1114 on markets in crypto-assets (MiCA), Articles 70, 75 and 143
- Public Law 119-27 (GENIUS Act), 18 July 2025, GovInfo
- NYDFS Industry Letter: Updated Guidance on Custodial Structures for Customer Protection in the Event of Insolvency (30 September 2025)
- SEC Chair Gensler, Statement on the Approval of Spot Bitcoin Exchange-Traded Products (10 January 2024)
- FDIC FIL-35-2022: Advisory on deposit insurance and dealings with crypto companies
- SIPC: What SIPC protects
- Coinbase User Agreement (United States)