An exchange account and a qualified custodian are two different legal relationships, not two grades of the same one. A balance on a trading platform is a claim against that company on the terms of its user agreement, and if the company fails, how that claim is treated depends on those terms and the insolvency process, which can leave customers ranked alongside other unsecured creditors. A qualified custodian is a regulated arrangement built around segregation, recordkeeping, statements, and examination.
Part of our guide: Digital Asset Custody.
The short version
- An exchange balance is a contractual claim, not an asset in your name. The user agreement, and the law where the company is organized, decide what it is worth in a failure.
- Qualified custodian is a defined term in the SEC’s custody rule for registered investment advisers, covering banks, registered broker-dealers, registered futures commission merchants, and certain foreign financial institutions (17 CFR 275.206(4)-2).
- That rule is an adviser obligation, not a consumer protection standard. It is useful signal, but it does not by itself make any firm safe.
- Proof of reserves shows one side of a balance sheet at one moment. Without liabilities in scope, it does not establish solvency.
- An exchange is a venue, not a vault. It is the right tool for execution, and a poor place for a position to sit.
What an exchange account actually is
An exchange account is a record in a company’s database saying the company owes you something, governed by the agreement you accepted when you opened it.
Most platforms hold customer assets in pooled, or omnibus, wallets rather than one on-chain address per customer. Your entitlement therefore lives in the platform’s internal ledger, and you are relying on that ledger being accurate, on the assets behind it being unencumbered, and on the company remaining solvent.
The user agreement is the document that matters. Look for how customer assets are characterized, whether the company may lend or pledge them, which entity in the corporate group you contract with, and which law governs disputes. Whether customer assets are treated as the customer’s property or as part of a failed company’s estate has turned on exactly those terms.
Federal deposit insurance covers insured deposits at insured banks. It does not cover crypto assets held at a trading platform, whatever a marketing page implies about the platform’s banking relationships.
What qualified custodian means
Qualified custodian is a defined term rather than a description, and knowing where the definition comes from prevents most of the confusion.
It appears in the custody rule under the Investment Advisers Act, which applies to registered advisers that have custody of client funds or securities. The rule requires those assets to be held with a qualified custodian, requires account statements to reach clients, and imposes verification obligations on the adviser.
The categories it recognizes are banks and savings associations, registered broker-dealers, registered futures commission merchants, and certain foreign financial institutions that segregate customer assets. The bank category is why several digital asset custodians are organized as chartered trust companies.
Two qualifications. The obligation runs to the adviser, not to you, so if no registered adviser has custody of your assets, nothing requires you to use one. And how this framework applies to digital assets has been the subject of active rulemaking, so read the current rule text before relying on any summary, including this one.
What the evidence actually proves
The evidence a platform offers, meaning reserves attestations, SOC reports, and insurance, is routinely read as proving more than it does.
Proof of reserves. An attestation typically demonstrates control over a set of addresses at a moment in time. It generally does not establish total liabilities, whether the assets are pledged, or whether the company is solvent. Agreed-upon procedures are not a financial statement audit, and the report says so in language most readers skip.
SOC reports. These are examinations against criteria maintained by the AICPA. A SOC 1 addresses controls relevant to financial reporting, a SOC 2 addresses trust services criteria such as security, and a Type II covers operating effectiveness over a period rather than design at a point in time. Check the scope, the period, and the exceptions, because the exceptions are the content.
Insurance. Custody insurance is a commercial policy with a limit, sublimits, and exclusions, not a promise that assets will be made whole. Ask whether the limit is per client or aggregate across all clients, and whether the named insured is the entity you contract with.
Why size and fiduciary duty change the answer
Size and duty change the answer because they change who has to explain the arrangement later.
For a personal position small enough that its total loss would be an inconvenience, an exchange account is a reasonable home for the portion you actively trade, and the analysis stops at convenience.
Once a trustee, an executor, or an adviser is involved, the standard shifts to what can be documented and defended. A fiduciary needs third-party statements, an audit trail of instructions, and an arrangement that survives their own unavailability. Concentration is a separate question, and it is independent of how well the venue is run.
What I actually see
The most common pattern is drift. An account was opened to buy, the purchase worked, and years later the position is still sitting where it was bought because nothing forced a decision.
The second is treating a marketing page as diligence. “Insured” and “audited” appear on the site, the underlying documents were never requested, and the real scope of each is narrower than assumed.
Where this goes wrong
The relationship is assumed rather than read, and the assumption is tested at the worst possible time.
The specific failures: an entitlement believed to be segregated that the agreement never described that way. A contracting entity in a jurisdiction nobody checked. An insurance limit shared across every client. A SOC report accepted without reading its exceptions. And no documented answer, anywhere, to what happens to this position if the company stops operating.
The decision rule
- Separate the venue from the vault. Trade where you trade, and hold the position somewhere chosen for holding.
- Read the user agreement for characterization of customer assets, permitted use, insolvency treatment, and contracting entity.
- Ask for the documents, not the claims: the SOC report, the reserves engagement scope, and the insurance certificate.
- Match the account to the owner. If a trust or an entity owns the assets, open the account in that name.
- Escalate with size and with duty. Once a fiduciary is responsible, regulated custody is a documentation requirement.
- Write down the failure plan: who to contact, what records you hold independently, and how the position would be claimed.
If nobody in the family can say which legal entity holds the assets and on what terms, the custody decision has not been made. It has been deferred to whichever screen was easiest to open.
Where this sits
Qualified custody versus self-custody is the wider decision this one lives inside. The definition of a qualified custodian is worth having straight before comparing providers. What happens when a custodian fails is the scenario that makes the paperwork matter, and an account freeze is the version most people meet first. The full guide is Digital Asset Custody.
Nothing here says exchanges are bad or custodians are safe. It says they are different instruments, and using one for the other’s job is the error worth avoiding.
Sources
- eCFR, 17 CFR 275.206(4)-2, custody of client funds or securities
- U.S. Securities and Exchange Commission
- Investor.gov, protect your investments
- AICPA-CIMA, System and Organization Controls (SOC)
- CISA, cybersecurity best practices
- FBI Internet Crime Complaint Center (IC3)
Related
- What is a qualified crypto custodian?
- What happens if a crypto custodian fails?
- Should a family office use more than one crypto custodian?
- Counterparty risks: DeFi vs centralized lending
- Crypto insurance for large holdings
Last updated: 5 August 2026.
This article is general education, not legal, tax, or investment advice, and it does not recommend or evaluate any specific company. Rules governing custody change, and outcomes depend on your facts and your jurisdiction. Talk to a qualified attorney or adviser about your own situation.
