Crypto custody in the UAE comes in three forms. Self custody, where you control the keys and carry the operational risk yourself. Exchange custody, where the platform holds assets in its wallets, and your protection depends entirely on its licence, segregation and solvency. And licensed third party custody, where a firm licensed for custody by VARA, the DFSA or the FSRA holds client assets segregated from its own. The question that matters on any platform is what happens to your assets if the operator fails, and the answer sits in the custody structure, not the marketing.
The three models
| Model | Who holds the keys | Your main risk |
|---|---|---|
| Self custody | You | Key loss, operational error, theft from you |
| Exchange custody | The platform | Platform insolvency, misuse of pooled assets |
| Licensed custodian | A firm licensed for custody | Residual, if segregation is real and verified |
What segregation really means
Segregation means client assets are held in identifiably separate wallets and accounts from the operator's own funds, so that on insolvency they are client property to be returned, not estate assets to be shared with creditors. The industry's defining failures happened where client assets were pooled with operator funds and reused. In the UAE regimes, licensed custody carries segregation and client asset rules; the check is whether the entity holding your assets actually carries a custody permission, and whether an independent attestation or audit supports the segregation claim.
The questions to ask any platform
Which legal entity holds my assets, and in which jurisdiction? Does that entity hold a custody licence, from which regulator? Are client assets segregated from the operator's own, and who attests to that? Can the operator lend, stake or reuse my assets, and under what terms did I agree to it? And what, in writing, happens on insolvency? A platform that answers these plainly is telling you it has thought about them. A platform that cannot is also telling you something.
How GCI helps you screen a virtual asset venture
Gulf Commercial Insights does not provide investment advice and does not recommend, rate or endorse any cryptocurrency, token or virtual asset. What GCI screens is the venture behind the proposition: the platform, the exchange, the fund structure or the operating business asking for your capital. The conviction engine checks the licensing claims against the named regulator, tests the business model and the stated metrics against evidence, and flags every figure that is assumed rather than proven. You get back a private, source-graded verdict on the deal, with each claim tagged VERIFIED, ESTIMATED or REPORTED.
For anyone evaluating a custody arrangement or platform holding your assets, that answers the three questions that matter:
- Is the entity actually licensed for the activity it is offering, and by which regulator?
- Do the claimed volumes, custody arrangements and business metrics stand up to evidence?
- What should you confirm in writing before you transfer any funds?
Verify first, commit second. We are a technology and research firm, not a DFSA-regulated financial services firm and not a VARA licensed virtual asset service provider.
Frequently asked questions
Who holds my crypto on an exchange?
Under exchange custody, the platform holds assets in its own wallet infrastructure, and your entitlement is a claim against the platform. Your protection depends on its licence, whether client assets are genuinely segregated, and its solvency, which is why the custody structure matters more than the interface.
What is segregated custody in crypto?
Client assets held in identifiably separate wallets and accounts from the operator's own funds, so on insolvency they are returnable client property rather than part of the operator's estate. Licensed custody in the UAE regimes carries segregation rules; verify the permission and any independent attestation.
Is self custody safer than an exchange?
It removes counterparty risk and replaces it with operational risk: key management, backup and theft become entirely your responsibility. For large holdings, the institutional pattern is licensed third party custody with verified segregation, rather than either extreme.
Can a platform lend out my crypto?
Only under terms you agreed to, which is exactly why the terms of service matter. Yield programmes commonly involve lending or staking client assets, which adds counterparty risk to custody risk. If you did not knowingly opt in, ask the platform to confirm in writing whether your assets are reused.
Evaluating a custody arrangement or platform holding your assets?
Start with a free Deal Health Score on the specific venture, then get the full Conviction Report with a clear verdict and evidence-tiered findings, priced to your mandate. See the public record of past verdicts first.