Custodial vs non-custodial wallets: who holds your Bitcoin?

Custodial vs non-custodial comes down to who holds the private key. In a custodial wallet, an exchange or app holds it and you own a claim on that company. In a non-custodial wallet, the key lives on your device and you hold the Bitcoin itself. Cryptopia, Dasset and Kiwi-Coin show what that difference costs when a company fails.

A private key is a very large secret number that signs transactions, and whoever can produce that signature can move the coins. The Bitcoin network has no account manager and no reversal button. So the only question that really matters about where your Bitcoin “is” comes down to this: who holds the key?

What is the difference between a custodial and a non-custodial wallet?

A custodial wallet is a company’s promise to pay you; a non-custodial wallet is the asset under your own control.

Custodial means someone else holds the key for you. When you buy on an exchange and leave the coins there, the exchange controls the keys and records in its database that it owes you, say, 0.05 BTC. You log in with an email and password, and if you forget the password, support can reset it. That convenience is real.

Non-custodial (also called self-custody) means the key is created on a device you own and backed up by a recovery phrase of 12 or 24 words that only you know. Nobody can freeze it, lend it out or lose it in a hack of someone else’s servers. Nobody can reset it for you either.

The old slogan is “not your keys, not your coins”. Blunt, but the idea underneath is sound. A custodial balance is a claim on a company, and a claim is only as good as that company’s security, solvency, bank relationships and conduct.

What happened to customers when Cryptopia, Dasset and Kiwi-Coin failed?

Cryptopia customers waited almost six years for their coins, Dasset customers faced a NZ$6.3 million shortfall, and Kiwi-Coin customers simply lost the platform. Add Easy Crypto’s orderly wind-down and these four New Zealand cases cover most of the ways custodial risk plays out: a hack, an insolvency with missing money, a closure caused by the banks, and a planned exit.

Cryptopia: why customers got coins back, and why it took six years

When Cryptopia was hacked, the big legal question was whether customers owned the coins in their accounts or were just unsecured creditors. In Ruscoe v Cryptopia the High Court held that cryptocurrency is property and that Cryptopia held it on trust for its account holders. That decision is why customers got coins back rather than joining a queue of general creditors.

Recovery still took nearly six years. Distributions began on 20 December 2024, the final claim cut-off was 30 September 2025, and court applications about late claims and unclaimed assets were heard in mid-2026. Good law helped; it didn’t make the money quick.

Dasset: a NZ$6.3 million gap that a trust couldn’t fill

Dasset’s collapse followed a different script. The exchange lost its bank in January 2023, and liquidators appointed that August reported a shortfall of about NZ$6.3 million between what customers were owed and what could be found, with unexplained transfers to offshore exchanges.

The Serious Fraud Office opened an investigation in February 2024. A trust only protects you if the assets are actually there.

Kiwi-Coin: closed by bank de-risking, not by a hack

Kiwi-Coin announced in October 2025 that it would close, saying it had operated for years without a bank account because NZ banks were “de-risking” crypto businesses. Trading halted on 15 December 2025 and the exchange stopped on 1 January 2026.

Nothing was stolen, but anyone who wanted to keep using the platform had no choice. Lost banking is the thread that links several NZ exchange exits.

Is it safe to leave Bitcoin on an NZ exchange? Four cases where it’s reasonable

It is a risk you accept, not a safe default, but for a small or short-term balance it is often a sensible one. Self-custody isn’t a moral test, and four situations favour keeping some Bitcoin with a company:

• You’re actively buying and selling. Moving coins on and off an exchange for every trade costs network fees and time.
• You hold a small amount while learning. A few hundred dollars on a reputable exchange is a reasonable place to start while you get comfortable.
• You genuinely can’t look after a backup. If you know you’d lose a piece of paper, a well-run custodian may be safer for you than a phrase stuffed in a drawer.
• You need to cash out soon. Coins you plan to sell to NZD this month may as well sit where the sale will happen.

Keeping a balance on a platform? Choose one registered on the Financial Service Providers Register: the FMA says registration usually gives access to a dispute resolution scheme, though it is not a licence or a guarantee.

Global platforms such as CEX.IO are custodial too, and CEX.IO isn’t on the NZ register and has no NZ dispute scheme. Our NZ exchange reviews set out custody and registration for each platform, and the guide to whether crypto is legal in NZ explains what the FSPR does and doesn’t do.

Bank deposit protection doesn’t extend to exchanges. The Depositor Compensation Scheme covers up to $100,000 per depositor per bank, but crypto sitting on an exchange is not a bank deposit.

Exchange, phone, hardware: a three-layer setup for NZ holders

Most Kiwis who hold Bitcoin for the long run end up with three layers, each with a different job and a different failure mode.

Custodial

Exchange: working balance

Only what you’re about to trade or sell. Withdraw the rest on a schedule, for example monthly.

Self-custody

Phone wallet: spending money

A non-custodial mobile wallet for small amounts and Lightning payments. Its own recovery phrase, written down.

Self-custody

Hardware wallet: savings

Coins you don’t plan to touch, on a device bought direct from the manufacturer, with a tested backup.

→

How much sits in each layer is your call. The principle is that losing any one layer, whether through an exchange failure, a stolen phone or a lost device, shouldn’t mean losing everything. Apps for the middle layer are compared in our guide to mobile and desktop Bitcoin wallets in NZ.

What self-custody costs you in responsibility, money and estate planning

Self-custody shifts risk rather than removing it, and the three costs below are the ones people underestimate.

Responsibility. Mistakes are final. Send to a wrong address, fall for a fake wallet app, or let someone photograph your recovery phrase and there’s nobody to call. The usual failure points are phishing and poor backups, not Bitcoin itself.

Time and money. A hardware wallet costs roughly NZ$105 to NZ$712 at current manufacturer prices before GST and shipping, plus an hour to set up and test. Software needs updating, and occasionally a wallet changes its model or shuts down, as Wallet of Satoshi and BlueWallet’s Lightning service have.

Inheritance. With an exchange, your executor can contact a company with a death certificate. With self-custody, the coins may be gone forever if nobody knows where the recovery phrase is or how to use it. Don’t write your seed into a will, which becomes a public document at probate; safer options are in our crypto security checklist.

How to move Bitcoin from an NZ exchange into self-custody in five steps

Back up the wallet first, then send a small test before the full balance. The five steps:

1. 01

   Set up and back up the wallet first

   Install the wallet from the official source, write the recovery phrase on paper, and do a test restore before any money arrives.

2. 02

   Get a fresh receive address

   Copy the address from your wallet. With a hardware wallet, confirm it on the device’s own screen.

3. 03

   Whitelist the address if your exchange offers it

   Many exchanges let you save approved withdrawal addresses, sometimes with a waiting period. That stops a hijacked account sending elsewhere.

4. 04

   Send a small test

   Withdraw a small amount on the Bitcoin network. Check the address on the confirmation screen character by character at the start and end.

5. 05

   Confirm, then send the rest

   Once the test shows in your wallet, send the balance. Keep the exchange’s withdrawal record for your tax files.

According to IRD, moving Bitcoin between wallets you own isn’t a disposal for tax purposes, but your purchase history still matters when you eventually sell. Download your exchange’s transaction history before you need it. The closures of Easy Crypto and Kiwi-Coin are reminders that platforms don’t last forever, and our NZ crypto tax guide lists the records IRD expects.