Custody — the decision underneath everything
Non-custodial wallets, and why they matter here
Every other choice on this site is downstream of one question: can anyone but you sign a transaction? New Zealand's own exchange history makes the answer unusually consequential.
- NZ$30m Lost in the 2019 Cryptopia hack
- NZ$6.3m Unaccounted for in the Dasset liquidation
- 1 Jul 2026 DIA becomes sole AML/CFT supervisor
- 0 Regulators supervising your seed phrase
The restore test
There is a lot of confusing terminology in this corner of crypto — non-custodial, self-custody, decentralised, Web3, MPC, smart wallet — and most of it exists to make a product sound more sovereign than it is. You can cut through all of it with one question: if this company disappeared overnight, could I still move my funds?
If the answer is yes, because you hold a recovery phrase that reproduces the wallet in any compatible software, you have self-custody. If the answer is no, because access depends on an email and password that support can reset, you have an account. The second thing is not inherently bad — banks work that way and most people are happy about it — but you should know which one you own, because the failure modes are completely different.
The distinction matters more than it sounds because of what sits behind each arrangement. Behind a bank account sits a licensed institution, a prudential regulator, and a body of consumer law. Behind a crypto exchange account sits a company's balance sheet and integrity, and in New Zealand that has not been a reliable combination.
What custody has cost New Zealanders
This is not an abstract argument here. New Zealand has an unusually dense history of platform failure for a country of five million people, and every one of those failures cost people who had chosen convenience over custody.
Cryptopia, based in Christchurch, was hacked in January 2019 for roughly NZ$30 million and never reopened; its liquidation ran until December 2024, nearly six years, before the process finally wound up. Dasset, an Auckland exchange, was placed into liquidation in August 2023, and the liquidator's first report found around NZ$6.3 million in cryptoassets unaccounted for — the gap between what customers believed they held and what actually existed. The Serious Fraud Office opened an investigation. Before those, BitNZ folded in 2017 and NZBCX in 2021, both largely because New Zealand banks would not keep serving them. BitPrime halted trading in 2022 amid a liquidity crunch.
And 2026 added a gentler but equally instructive case. Easy Crypto, the largest homegrown platform in the country with more than 350,000 users, was acquired by the Australian exchange Swyftx and stopped trading in New Zealand on 30 March 2026. Nobody lost money — customers were migrated, with phone calls from Brisbane to those who had not moved — but the balance that had felt local was now an account with an offshore operator on their timetable. Kiwi-Coin, the longest-running local exchange, closed in the same period.
None of that would have touched a single non-custodial wallet. A wallet does not enter liquidation, lose its banking relationship, or send you a migration deadline. That is the whole argument, and in this country it does not need to be made in the abstract.
Side by side
What you actually gain and give up
Self-custody is a trade, not a free upgrade. It removes counterparty risk and hands you operational risk in exchange. Being clear-eyed about that is the difference between doing it well and doing it badly.
| Property | Exchange account | Non-custodial wallet |
|---|---|---|
| Who can sign a transaction | The provider | Only you |
| Survives the company failing | No | Yes |
| Can be frozen or seized by the platform | Yes | No |
| Password recovery if you forget | Yes | None |
| Dispute resolution scheme access | If FSPR registered | None |
| Identity verification required | Yes | No |
| Reports your transactions under CARF | Yes | No |
| You must keep your own tax records | Partly | Entirely |
| Recoverable if you lose your credentials | Usually | Never |
Read that table honestly. The bottom four rows are the price of the top four. Self-custody means no reset link, no support escalation, no ombudsman and no compensation fund. If you lose your recovery phrase, the funds are gone in the most permanent sense available in finance — not frozen, not disputed, gone. That is not a reason to avoid self-custody; it is a reason to take the backup process as seriously as you would take the deed to a house.
The two rows about tax deserve a note. Because a self-custody wallet has no reporting entity behind it, nobody is generating a statement for you. From 1 April 2026, New Zealand applies the OECD Crypto-Asset Reporting Framework, which requires reporting crypto-asset service providers to collect identity and transaction data and report it to Inland Revenue, with the first reports due by 30 June 2027. The platform where you bought reports. The platform where you eventually sell reports. The wallet in the middle does not — so your own records need to reconcile the two ends. See the tax and CARF guide.
The New Zealand regulatory position, precisely
It is worth being accurate here, because a lot of what gets written about crypto regulation in New Zealand is wrong in both directions — either "it's completely unregulated" or "the FMA regulates crypto wallets". Neither is true.
Cryptoassets are not the subject of a dedicated statute in New Zealand. Instead the existing framework is applied where it fits. The AML/CFT Act 2009 captures businesses that exchange or transfer value, which covers exchanges and brokers; virtual asset service providers fall under it, and from 1 July 2026 the Department of Internal Affairs becomes the single supervisor, replacing the current split between the Reserve Bank, the FMA and DIA. The Financial Service Providers (Registration and Dispute Resolution) Act 2008 requires those businesses to appear on the Financial Service Providers Register, and if they serve retail clients, to belong to an independent dispute resolution scheme. The Financial Markets Conduct Act 2013 engages the FMA where a particular cryptoasset qualifies as a financial product.
That last one produced a useful data point in March 2026. The FMA issued a designation notice declaring that the NZDD stablecoin issued by ECDD Holdings is not a financial product under the FMC Act — the reasoning being that its economic substance is a payment tool rather than an investment, since holders receive no income or gain. Issuing it is still a financial service, so fair conduct obligations apply. It is the first formal indication of how a New Zealand regulator reads a stablecoin, and the FMA was explicit that it is a product-specific decision rather than a general rule.
None of this framework touches a wallet on your own device. There is no licence for wallet software, no supervisor for your key management, and no scheme that compensates you for a lost phrase. The FMA's own consumer guidance on cryptocurrencies is essentially a warning notice, and its most actionable advice is to use providers that appear on the FSPR — which is advice about where you buy, not about where you store.
What this means practically
Do your due diligence at the on-ramp, where a regulator actually has jurisdiction, and then remove the counterparty by taking custody. Check any platform on the FSPR before depositing, prefer ones in a dispute resolution scheme, and do not leave a balance sitting there once a trade has settled. The regulatory protection you have is at the point of purchase; the protection you build yourself is everything after that.
Which non-custodial wallet should you use?
Every wallet we review on this site is non-custodial, so the question becomes which form factor. The short version: a hardware wallet for anything you would call savings, a mobile wallet for what you actually spend and swap, and multisig when the amount would materially change your life if it vanished. Our hardware versus software page walks through the decision in more detail, and safest wallets ranked scores the security architecture of each option on its own merits.
The one thing we would push back on is the idea that you must pick a single wallet. Most people are best served by two, with a clear rule about what lives in each — see how many wallets you actually need.
Our view
The strongest argument for self-custody in New Zealand is not ideological, it is actuarial. Look at the list of platforms that have served this market and count how many are still operating. Then ask what a wallet's failure rate looks like when the only dependency is whether you wrote twelve words down correctly. The odds are not close — provided you actually did that part.
Custody FAQ
Non-custodial wallet questions
What is a non-custodial crypto wallet?
A non-custodial wallet is one where the private keys are generated on your device and held only by you, so no company can move your funds, freeze them, or lose them on your behalf. The test is simple: if you can restore the wallet on a different device using a recovery phrase that nobody else has, it is non-custodial. If access depends on an email address and password that a company can reset, it is custodial — you have an account with a claim against a business, not a wallet.
What is the difference between a custodial and non-custodial wallet?
Custody is about who can sign. In a custodial arrangement — an exchange balance, a broker account, most "buy crypto in our app" services — the provider holds the keys and you hold a promise. That promise is worth exactly what the provider's solvency and integrity are worth, which New Zealanders learned expensively with Cryptopia and Dasset. In a non-custodial wallet you hold the keys, which removes the counterparty entirely and hands you the whole operational burden instead. There is no third option; anything marketed as one is usually custody with better branding.
Is a non-custodial wallet regulated in New Zealand?
No, and that is the point. Self-custody wallet software and hardware are not financial products, so the Financial Markets Authority does not license or supervise them. Exchanges and brokers serving New Zealanders are captured by the AML/CFT Act 2009 and must register on the Financial Service Providers Register — and from 1 July 2026 the Department of Internal Affairs becomes the single AML/CFT supervisor. None of that applies to a wallet on your own device, which means no dispute resolution scheme, no compensation fund and no recovery if you lose your phrase.
What is a self-custody wallet and is it the same thing?
Yes — "self-custody", "non-custodial" and "decentralised wallet" all describe the same arrangement, and the variety of terms is mostly marketing. Be slightly careful with "decentralised": some products use it to describe a wallet that connects to decentralised applications while a company still controls the keys. Ignore the adjective and apply the restore test instead. If a recovery phrase in your handwriting reproduces the wallet elsewhere, you have self-custody.
Do I have to give ID to use a non-custodial wallet?
No. There is nobody to give it to — a wallet is software that generates keys, not a service with an account. Anti-money-laundering obligations sit on businesses that exchange or transfer value on your behalf, not on the mathematics of key generation. You will still complete identity verification wherever you buy the crypto, because that business is a reporting entity, and from 1 April 2026 New Zealand's CARF rules require those platforms to collect and report identity and transaction data. The wallet itself asks you for nothing. See privacy and KYC-free wallets.
Next in this cluster