Short answer: If crypto is held on an exchange, a platform failure can become a question about the provider’s records, terms, custody arrangement, insolvency process and any claim you may have. If crypto is self-custodied, the exchange is not holding it for you, so an exchange insolvency is usually not the immediate problem. The risk moves to the private key, recovery method, device and your ability to prove control. Neither arrangement guarantees recovery or a particular legal protection.
This is a UK-focused educational comparison. It is not legal, tax or financial advice. The result in a real failure depends on the facts, the provider’s contract and notices, the asset and service involved, the jurisdiction, and the formal process being used.
Exchange-held and self-custodied crypto compared
| Question | Crypto held on an exchange | Self-custodied crypto |
|---|---|---|
| Who controls the transfer process? | The provider generally controls the account interface and the operational process for withdrawals. Your balance may be shown as an account entitlement rather than as a wallet you can sign from directly. | The person with the relevant private key or recovery method controls the signing process. A wallet app is an interface; it is not, by itself, proof that the app can recover the asset. |
| What does a provider failure create? | A possible account-access, withdrawal, contract and insolvency problem. You may need to preserve records and follow an administrator’s or liquidator’s claims process. | Usually no exchange claim for the coins merely because an unrelated exchange has failed. The main questions are whether the key still works, whether the correct network and asset can be identified, and whether the owner can access the wallet. |
| What if the account is locked? | The provider may require identity checks, security review, estate documents or other steps under its terms. A displayed balance does not prove that withdrawal is currently available. | There may be no provider to unlock the wallet. A lost device may be replaceable if the recovery method works; a lost or wrong recovery method can leave the asset inaccessible. |
| What if the key is lost? | A customer normally does not hold the exchange’s private key. A lost personal password or failed two-step check is an account-access issue, subject to the provider’s recovery process. | A lost private key or recovery phrase can prevent a transaction from being signed. A public address or blockchain balance does not supply the missing secret. |
| What evidence matters? | Account statements, exports, identity records, terms, deposits, withdrawals, support messages and formal notices can help connect a person to an account and claimed balance. | The public address, transaction history, wallet records and evidence of how the key was controlled may help explain the holding. They do not automatically prove identity, ownership or lawful authority. |
| Is compensation automatic? | No. FCA information says most crypto-related activities are not protected by the Financial Ombudsman Service or the Financial Services Compensation Scheme if something goes wrong; registration alone does not establish access to either scheme.[1][2] | There is no exchange failure claim simply because a self-custodied asset cannot be accessed. Consumer or legal remedies, if any, depend on the particular facts and service involved. |
What custody changes
Custody is about who holds or controls the means of moving the crypto. With an exchange account, the provider operates the account and usually controls the transaction-signing infrastructure used to process withdrawals. You may have a contractual or account-based entitlement, but the exact legal relationship is set by the provider’s terms and the facts of the arrangement. Do not assume that every exchange uses the same custody model.
With self-custody, the user holds the transfer credential, directly or through a wallet setup they control. The network may show that assets sit at an address, but it does not show a name or explain whether the person with a device is authorised to use the address. A wallet app can be deleted and restored; that does not mean every wallet can be recovered without the right secret.
The distinction matters during a failure. An exchange can fail as a company, suspend withdrawals, lose access to records, suffer an operational incident or dispute what a customer is owed. Self-custody avoids that particular provider-creditor relationship, but it does not remove the possibility of loss through a missing key, damaged device, mistaken network, compromised credential or an access plan that nobody else can use.
What exchange insolvency may involve
An exchange insolvency does not automatically turn an account balance into cash or return the same coins. An administrator or liquidator may need to establish what assets exist, which records are reliable, how the provider’s terms apply and how claims rank under the relevant process. Customers may be asked to submit evidence or a proof of debt. The process and outcome can vary, especially where the provider, customer or assets cross borders.
The Insolvency Service describes crypto as a recoverable asset in bankruptcy and company cases and says its officials trace and recover assets for insolvency proceedings.[4] That shows that crypto can form part of an insolvency investigation. It does not promise that a customer of a failed exchange will receive a particular asset, the full account balance or any distribution.
Keep copies of dated statements, trade and transaction exports, deposit and withdrawal records, bank statements, account identity records, the terms that applied, and every official failure notice. Send evidence only through a verified claims channel. A password, two-factor code, private key or recovery phrase is not evidence to disclose.
Lost keys and account-access failures are different
A self-custody loss is often technical: the person cannot produce the private key or recovery material needed to sign a transaction. The blockchain can continue to record the address and its balance while the person remains unable to move the asset. There may be no customer-support route that can recreate a missing key.
An exchange access failure is different. The account may still exist while a login, two-step check, identity review, withdrawal hold, outage or provider policy prevents access. The provider may have a recovery or complaint route, but its terms and evidence requirements control what it will do. A familiar app or old screenshot is a lead, not proof that the current balance is withdrawable.
HMRC’s checklist for identifying cryptoassets in an estate reflects this practical difference: it points personal representatives to exchanges and trading platforms, bank and card statements, email, devices, wallet applications, papers and secure records. HMRC also recognises that an identified cryptoasset may be inaccessible and says the explanation and believed value may need to be recorded for an estate return, where appropriate.[3] That is reporting guidance, not a decision about who owns an asset or how a provider must handle a customer account.
Why legal and consumer protection depends on the facts
There is no single rule called “crypto protection” that answers every failure. The relevant questions can include:
- what service the firm supplied and what its terms said;
- whether the firm was authorised or registered for the relevant activity;
- whether the issue is insolvency, fraud, an operational outage, an account dispute or a lost credential;
- whether assets were held for customers, used in another service or subject to a different arrangement;
- where the provider, customer and assets are located; and
- which complaint, court, insolvency or compensation process applies.
The FCA says the availability of the Financial Ombudsman Service and FSCS depends on the firm and service, and warns that most crypto-related activities do not have those protections when something goes wrong.[1][2] That is why a firm’s registration should not be read as a blanket promise that crypto, balances or losses are protected.
A sensible record for either arrangement
Keep a private, dated inventory that separates discovery information from transfer credentials. It can identify the provider or wallet, relevant devices, account email, public addresses, transaction records and where the current terms or recovery instructions are stored. Do not put a private key, recovery phrase, password or one-time code into a public document or send it to someone offering to recover funds.
For an exchange, save account exports and official notices while they are available. For self-custody, record enough information for the owner or properly authorised representative to identify the wallet and its recovery method without exposing the secret itself. If a failure has already happened, use the provider’s or office-holder’s official contact route and get qualified advice on the particular claim.
Internal links
- What is a cryptoasset?
- What is a crypto wallet, private key, address and seed phrase?
- Crypto scams: rug pulls, phishing and fake support in the UK
Sources
[1] https://www.fca.org.uk/investsmart/investing-crypto — FCA, Investing in crypto (last updated 29 January 2026).
[2] https://www.fca.org.uk/consumers/crypto-investment-scams — FCA, Crypto investment scams (last updated 16 February 2026).
[3] https://www.gov.uk/hmrc-internal-manuals/cryptoassets-manual/crypto25000 — HMRC, CRYPTO25000: Cryptoassets for individuals: Inheritance Tax.
[4] https://www.gov.uk/government/news/insolvency-service-appoints-first-dedicated-crypto-specialist-to-help-recover-online-assets-such-as-bitcoin — The Insolvency Service, Insolvency Service appoints first dedicated crypto specialist to help recover online assets such as Bitcoin (9 June 2025).
Last checked: 23 September 2026. This article is general information, not legal, tax or financial advice.