Published 2026-07-14 · Last updated 2026-07-14 · By GCI Research Desk, DIFC, Dubai
Crypto custody in the UAE comes in three forms. Self custody, where you control the keys and carry the operational risk yourself. Exchange custody, where the platform holds assets in its wallets, and your protection depends entirely on its licence, segregation and solvency. And licensed third party custody, where a firm licensed for custody by VARA, the DFSA or the FSRA holds client assets segregated from its own. The question that matters on any platform is what happens to your assets if the operator fails, and the answer sits in the custody structure, not the marketing.
The three models
| Model | Who holds the keys | Your main risk |
|---|---|---|
| Self custody | You | Key loss, operational error, theft from you |
| Exchange custody | The platform | Platform insolvency, misuse of pooled assets |
| Licensed custodian | A firm licensed for custody | Residual, if segregation is real and verified |
What segregation really means
Segregation means client assets are held in identifiably separate wallets and accounts from the operator's own funds, so that on insolvency they are client property to be returned, not estate assets to be shared with creditors. The industry's defining failures happened where client assets were pooled with operator funds and reused. In the UAE regimes, licensed custody carries segregation and client asset rules; the check is whether the entity holding your assets actually carries a custody permission, and whether an independent attestation or audit supports the segregation claim.
The questions to ask any platform
Which legal entity holds my assets, and in which jurisdiction? Does that entity hold a custody licence, from which regulator? Are client assets segregated from the operator's own, and who attests to that? Can the operator lend, stake or reuse my assets, and under what terms did I agree to it? And what, in writing, happens on insolvency? A platform that answers these plainly is telling you it has thought about them. A platform that cannot is also telling you something.
How GCI helps you screen a virtual asset venture
Gulf Commercial Insights does not provide investment advice and does not recommend, rate or endorse any cryptocurrency, token or virtual asset. What GCI screens is the venture behind the proposition: the platform, the exchange, the fund structure or the operating business asking for your capital. The conviction engine checks the licensing claims against the named regulator, tests the business model and the stated metrics against evidence, and flags every figure that is assumed rather than proven. You get back a source graded verdict of CONVICTION, PROCEED WITH CONDITIONS, WATCH, READY or AVOID, with each claim tagged VERIFIED, ESTIMATED or REPORTED.
For anyone evaluating a custody arrangement or platform holding your assets, that answers the three questions that matter:
- Is the entity actually licensed for the activity it is offering, and by which regulator?
- Do the claimed volumes, custody arrangements and business metrics stand up to evidence?
- What should you confirm in writing before you transfer any funds?
Verify first, commit second. We are a technology and research firm, not a DFSA regulated financial services firm and not a VARA licensed virtual asset service provider.
Evaluating a custody arrangement or platform holding your assets?
Start with a free Deal Health Score on the specific venture, then get the full Conviction Report with a clear verdict and evidence tiered findings, priced to your mandate. See the public record of past verdicts first.