Moving digital assets to an institutional custodian removes a genuine set of risks. It also leaves several in place, and the ones it leaves tend to be the ones people assume they have paid to remove.
Custody is worth having. What follows is the set of questions worth asking before signing, written for someone whose position is large enough that the answers change the decision. If you want the mechanics of how institutional custody works first, DAG’s explainer covers what institutional crypto custody is.
The gap this article addresses is narrow and expensive. Custody marketing describes what a custodian does well, which is accurate and incomplete. Almost nothing describes the edges, and the edges are where a large position gets hurt.
1. The insurance covers less than the brochure implies
Custodians carry insurance. It is real, and it is narrower than most buyers read it to be.
Crime and specie policies of the kind custodians hold are generally written against theft, and typically against theft from cold storage. That is a meaningful risk to transfer. It is also a specific one.
What those policies characteristically do not reach:
– A fall in the price of the asset. No custody arrangement addresses market risk, and nobody claims otherwise, yet “insured custody” gets heard as “protected holdings” more often than it should. – Protocol-level failure. A bug in the chain, a failed upgrade, or a consensus incident is not a theft. – Your own compromised credentials. If instructions arrive correctly authenticated through your own approved channel, the custodian generally executed a valid instruction. – The full balance. Coverage is a policy limit, usually shared across all clients on the platform, not a per-client figure. A limit that looks large against one account can be small against the platform’s total holdings.
So the useful questions are what the policy actually covers, what the limit is, whether that limit is shared across clients, and where the sub-limits sit. The word “insured” on its own answers none of them. Ask for the terms.
2. Federal deposit and investor protection schemes do not extend to crypto
Two protections people reach for by instinct do not apply here, and both regulators have said so directly.
FDIC deposit insurance covers deposits at insured banks. It does not cover crypto assets. The FDIC published a fact sheet in July 2022 specifically because customers of crypto custodians, exchanges, brokers and wallet providers were confused about whether and how deposit insurance applied to them. That confusion was the reason the document exists.
SIPC protects cash and securities held at a failed SIPC-member brokerage, up to $500,000 including a $250,000 limit for cash. Its own description of the program is precise about the boundary: SIPC protects the custody function of a broker-dealer, working to restore securities and cash that were in customer accounts when a liquidation begins, and it does not protect against a decline in the value of those holdings.
Neither program was built for this asset class, and neither has been extended to it.
3. The legal relationship decides what happens in an insolvency
This is the one that separates a custody arrangement that survives a bad outcome from one that does not, and it is not visible from the marketing page.
When a custodian fails, the question a court asks is what the relationship actually was. If assets were held in custody for you, they are generally yours and the custodian was holding them on your behalf. If the arrangement was in substance a debtor-creditor relationship, you may be an unsecured creditor of a failed company standing in line with everyone else.
New York’s Department of Financial Services addressed this directly in its January 2023 guidance on custodial structures. Two expectations in it are worth reading closely.
First, customer virtual currency should be separately accounted for and segregated from the corporate assets of the custodian and its affiliates, both on-chain and on the custodian’s own internal ledger. Segregation that exists in one place and not the other is not segregation.
Second, and more pointedly, the customer agreement should make clear that the parties intend to enter into a custodial relationship rather than a debtor-creditor relationship, and arrangements should be structured to preserve the customer’s equitable and beneficial interest in their own assets.
That sentence is doing enormous work. The characterization lives in the contract you sign, not in the word “custody” on the website. Read the agreement for it, and if it is ambiguous, treat the ambiguity as the answer.
4. Omnibus structures change what you own
The NYDFS guidance contemplates two acceptable structures: separate on-chain wallets and ledger accounts in each customer’s name, or omnibus wallets holding only customer assets in the custodian’s name as agent or trustee for those customers.
Both can be done properly. They are not the same thing.
In a separate-account structure, specific assets are identifiable as yours. In an omnibus structure, you hold a claim on a pool. Where the pool is clean, that claim is strong. Where record-keeping is poor, or where the pool has been commingled with anything belonging to the custodian, reconstructing who owns what becomes an exercise conducted by a bankruptcy court rather than by you.
Ask which structure your assets sit in, and ask how the internal ledger is reconciled to the chain. Where the position sits and who else can reach it is a question worth settling before the assets move, not after.
What changes when the asset is XRP
Everything above applies to XRP the same as any other digital asset. Four things are specific to it, and they change what a custody conversation should cover.
The ledger has custody controls of its own. Most chains push authorization entirely into the custodian’s systems. The XRP Ledger implements several at the protocol level, and they have been live for years rather than being roadmap items:
| Control | What it does | Live since |
|---|---|---|
| Multi-signing | Requires a quorum of signers before a transaction is valid | 2016-06-27 |
| Expanded signer lists | Raises the ceiling to 32 signers with per-signer weights | 2022-10-13 |
| Deposit authorization | Blocks incoming payments unless the sender is approved | 2018-04-06 |
| Escrow | Locks XRP until a time or a condition is met, with no custodian holding it | 2017-03-31 |
Those dates and the full list are in the complete index of enabled XRP Ledger amendments, where each one can be checked against the ledger itself.
The practical consequence is that some of what you would otherwise buy from a custodian, an XRP holder can enforce on-chain. A quorum written into a signer list is enforced by the network rather than by a provider’s internal policy, and those are different things. It is still not a replacement for custody, because key management, operational continuity and reporting remain somebody’s job.
Destination tags are a live loss vector. Exchanges and many custodians receive XRP into one shared address and identify the customer by a destination tag. Send without the tag, or with the wrong one, and the funds arrive in the right account belonging to the wrong party. Recovery then depends entirely on the receiving institution’s willingness and ability to help, and there is no protocol mechanism that reverses it. Ask any custodian how deposits are addressed and what their recovery process is before the first transfer, not after.
The reserve is not a fee, and accounts are not free to abandon. An XRP Ledger account holds a base reserve that cannot be spent while the account exists, with additional reserve consumed by objects like trust lines and signer lists. It is recoverable on account deletion, which has been possible since 2020-05-08, but it needs to appear in the accounting rather than surprising a treasurer at year end.
Insurance answers are no different because the asset is XRP. Custody policies are written against theft, generally from cold storage, subject to a shared platform limit. Nothing about XRP changes that, and no custodian’s XRP offering carries deposit insurance or investor-protection coverage, for the reasons set out above. If a provider’s XRP page reads as though it does, ask for the policy terms.
What custody does genuinely solve
A fair accounting has the other side.
Institutional custody meaningfully addresses key management, which is where most self-custody losses actually originate. It provides operational continuity that does not depend on one person’s memory or one device. It supplies the segregation of duties, audit trails, and reporting that a fund, a trust, or a corporate treasury needs to satisfy its own governance. And for regulated entities it can be the difference between being able to hold an asset and not.
It also solves a problem that only appears later. Assets held under a documented custodial arrangement with clean records are far easier to transfer on death or incapacity than a wallet whose access depends on one person, which is why passing digital assets to heirs tends to go better when a custodian is already in the picture.
Those are substantial. They are also a different list from the one people imagine when they read the word “insured”, and both lists deserve to be seen before a decision.
Where this analysis is limited
Several honest caveats.
This is written about the structure of custody arrangements generally, and specific custodians differ enormously. A well-run custodian with clean segregation, a strong customer agreement, and appropriate coverage is a genuinely different proposition from a poorly run one, and nothing here is a judgment on any particular firm.
Custody regulation is also moving. Rules governing who may act as a custodian for digital assets, and what obligations attach, have been the subject of active rulemaking and revision, and the position at the time you read this may differ from the position when it was written. Check the current state before relying on any of it.
Finally, this covers custodial safekeeping. Ancillary activities like staking, lending, or on-chain governance conducted with custodied assets raise separate questions that the NYDFS guidance itself expressly does not address in detail. If your assets are doing anything other than sitting still, the analysis changes, and the question of who is accountable when assets are deployed becomes the one that matters.
Common questions
Which XRP custody services offer insurance coverage? Most institutional custodians holding XRP carry a crime or specie policy against theft, and it is worth asking each one for the terms rather than the headline. What none of them carry is FDIC deposit insurance or SIPC protection, because neither scheme extends to digital assets. Coverage limits are also generally shared across the whole platform rather than allocated per client.
How do regulated XRP custody services work in the United States? They operate under state regimes rather than a single federal one. New York’s Department of Financial Services sets the clearest published expectations: customer assets segregated from the custodian’s own both on-chain and on the internal ledger, and a customer agreement establishing a custodial relationship rather than a debtor-creditor one. That second point decides what happens to your XRP if the custodian fails.
Is crypto held at a custodian insured? Usually there is a crime or specie policy against theft, subject to a limit that is generally shared across the platform rather than allocated per client. That is different from your holdings being covered against loss of value, protocol failure, or misuse of your own credentials.
Does FDIC deposit insurance cover crypto? No. FDIC deposit insurance covers deposits at insured banks. The FDIC issued a fact sheet in 2022 addressing exactly this confusion among customers of crypto companies.
Does SIPC cover digital assets? SIPC protects cash and securities at a failed SIPC-member brokerage and does not protect against a decline in value. It was not built for digital assets and does not extend to them.
What is the single most important thing to check? Whether the customer agreement establishes a custodial relationship rather than a debtor-creditor one, and whether assets are segregated both on-chain and on the internal ledger. That combination is what determines your position if the custodian fails.
Is self-custody safer then? It removes counterparty risk and replaces it with key management risk, which is where most losses actually happen. Neither is free. The right answer depends on size, governance requirements, and who else needs access, which is why the question is usually answered per situation rather than in general.
If you want to work through how this applies to a specific holding, DAG covers institutional digital asset services, including custody due diligence.
Disclosure of a material conflict of interest: Jake Claver is Chairman and Principal of Digital Ascension Group, which he co-founded in 2022. This article links to DAG and he has a financial interest in it. Weigh that when reading anything here that points toward DAG’s services.
Educational only. This is not legal, tax, or investment advice, and it is not a recommendation to use any particular custodian or custody arrangement. Digital assets are volatile and you can lose your entire position. Custody structures, insurance terms, and the rules governing them vary by provider and jurisdiction and change over time. Read the actual customer agreement and policy terms, and speak with qualified counsel before acting.
