Crypto10 min read

Self-custody: what it is and when it makes sense [2026]

Picnic teamMay 5, 2026Updated: November 10, 2026
Self-custody: what it is and when it makes sense [2026]

In November 2022, FTX's customers found out that a balance held on a crypto exchange can freeze overnight when the company collapses. In its bankruptcy filings, FTX said it could have more than a million creditors, most of them customers, and billions of dollars in balances were locked. Most users only got their money back after more than two years of court proceedings.

The FTX story pushed a once-niche word into the mainstream: self-custody. The idea is simple: instead of leaving your balance in a company's care, you control the keys that give access to it. If the company goes bust, your balance is not part of its estate.

This guide explains self-custody in plain language, how it differs from the traditional bank and exchange model, what changed in Brazilian regulation in 2026, and when it makes sense to consider it for holding digital dollars.

What is self-custody?

Self-custody means the keys that control a balance stay with you, not with an institution. Whoever holds the key controls the balance, and no bank, fintech or exchange can move the money on the holder's behalf.

The spelling varies: you will see "self-custody", "self custody" and "non-custodial" used in different places. They all refer to the same idea.

The simplest mental model is a safe. When you keep money in a bank, the safe belongs to the institution. You have a right to the balance, but the safe is theirs. If the bank fails, you have to join the queue to get back what was yours. With self-custody, the safe is yours: it lives inside a digital wallet that only you can open.

The phrase that sums up the principle has been around in the market for years: "not your keys, not your coins".

Institutional custody vs self-custody

The practical difference shows up in who is in control day to day.

DimensionInstitutional custodySelf-custody
Who controls itThe institution (bank, exchange, fintech)You, with keys that only you control
Moving the balanceDepends on the institution being online and operatingDirect, as long as you keep your credentials
Institutional riskReal (if the company fails, the balance gets stuck)Removed for custody (the balance does not depend on the company's solvency)
RecoveryInstitution's support, with its own deadlines and rulesThe user's responsibility, using the wallet's own recovery mechanisms
ConvenienceHigh (the institution takes care of everything)Varies (depends on the product you choose)

There is no universally "better" model, only different balances between convenience, institutional risk and personal responsibility. Traditional banks offer maximum convenience and human support, in exchange for you taking on the risk of the institution itself. Self-custody flips that equation.

The FTX case and why it became a talking point

It is worth understanding what happened, because this is the real-world case that turned self-custody into a news story rather than a topic for technical forums.

Until November 2022, FTX was one of the largest crypto exchanges in the world, headquartered in the Bahamas and operating globally. Within a few days, internal problems came to light, the company lost access to part of the funds and filed for bankruptcy.

For customers, the immediate result was simple and painful: their balances on the platform became assets of a bankrupt estate. Getting their money back now depended on court proceedings.

The outcome turned out better than it looked in 2022. After two years of managing the estate and selling off holdings, the plan confirmed by a US bankruptcy court in October 2024 provided for 98% of creditors by number to receive about 119% of their allowed claims. There is a catch: claims were valued in dollars at November 2022 prices, so customers who held bitcoin or other assets missed the price rally that followed. And the road there took time and paperwork; the first payouts only began in February 2025, and for that whole period users were without their money.

The lesson: custody matters, even when a company looks big, safe and reputable. For anyone holding a digital asset balance over long periods, self-custody takes this kind of risk out of the equation.

How does a self-custody wallet work?

A self-custody wallet is software (or hardware) that holds the cryptographic keys proving ownership of a balance. There are two main concepts worth knowing:

Private key. A randomly generated number that gives control over the balance. Whoever has the private key can move the balance. That is why it must never be shared.

Seed phrase (or recovery phrase). The "human" version of the private key: a sequence of 12 or 24 words, usually in English, that regenerates the key in any compatible wallet. It works as the master backup.

From there, there are three common wallet models:

  1. Hot wallet (app wallet). An app on your phone or browser. The most practical for everyday use. The private key lives on the device.
  2. Hardware wallet. A physical device (Ledger, Trezor) that keeps the key offline. Recommended for large or long-term balances.
  3. Smart wallets. A newer model that makes the wallet itself programmable: you can change how transactions are signed (for example, replacing the seed phrase with your phone's biometrics through a passkey) and even how the wallet is recovered (through guardians, linked devices or other mechanisms defined in code). It brings the experience closer to that of an ordinary finance app.

The evolution of smart wallets is what made self-custody workable for a mainstream audience. The old model of "write down 12 words on paper and don't lose them" worked for technical users but was fragile for most people. Because a smart wallet is programmable, it can work like any other app: you unlock it with biometrics, and recovery happens through your devices or through social mechanisms.

Self-custody of digital dollars, the lesser-known use case

Almost every article about self-custody talks about Bitcoin. That makes historical sense, because that is where the idea was born. But for a Brazilian audience in 2026, the most practical use case is a different one: holding dollars in self-custody.

A digital dollar (in Portuguese) is the US dollar in electronic form: a dollar-pegged stablecoin such as USDC, whose issuer backs it 1:1 with reserves in cash and short-term US Treasury securities. Because its value does not swing like traditional crypto, it works as digital money, useful for saving, sending and spending.

When you combine digital dollars with self-custody, three things happen at once:

  • The balance is in dollars, so it is not exposed to the depreciation of the Brazilian real
  • The balance is under your control, so it does not depend on the financial health of a platform
  • The balance is digital, so it can be moved and spent without going through a currency exchange bureau

One honest caveat: self-custody removes the risk of the platform you use, not the risk of the asset itself. A stablecoin still depends on its issuer's reserves, and issuers such as Circle (USDC) and Tether (USDT) can freeze specific addresses, for example under a court order.

That combination is what underpins Picnic's product: a technology platform offering an international account with a Visa card, digital dollars and self-custody in the same app. Other ways to hold dollars (in Portuguese), such as an account abroad, a traditional Brazilian international account or currency funds, keep the balance in institutional custody.

On Picnic, you keep control of your digital dollar balance, and the Picnic card, a Visa card accepted in 180+ countries, spends from it with no IOF and no annual fee. Card availability: new Picnic card orders have been temporarily paused since September 22, 2026 (notice in Portuguese). If you already have the card, it keeps working normally until December 20, 2026, 23:59 UTC; after that, card use continues on Gnosis Pay's new infrastructure through an upgrade, starting with the virtual card. If you don't have one yet, check current card availability before counting on it. Open your Picnic account and keep your digital dollars in self-custody.

Self-custody risks (and how modern products reduce them)

Self-custody shifts part of the institutional risk (in Portuguese) onto the user. It is worth listing the risks honestly, along with how modern products deal with each one.

Risk of losing your credentials. If you lose the seed phrase or access to your device, you lose the balance. This was the scariest risk in the old model. Current solutions: passkeys tied to your device and synced through iCloud Keychain or Google Password Manager, social recovery (several "guardians" approve a recovery), email-based recovery with a security waiting period, and encrypted backups.

Phishing risk. Fake sites and messages ask for your seed phrase or trick you into approving a malicious transaction. Rule of thumb: nobody legitimate will ever ask for your seed phrase. If an app or a person asks for it, it is a scam. Many modern wallets show the full transaction before you sign, and passkeys are bound to the website where they were created, so a lookalike site cannot use them.

Risk of user error. Wrong address, a transaction on the wrong network, a misplaced decimal point. Smart wallets reduce this with extra confirmations, lists of verified contacts and transaction simulation before signing.

In exchange for these risks, self-custody removes two important risks of the institutional model: the risk of the company going bust with your balance, and the risk of the company freezing your account balance. Other risks remain, such as the asset issuer's own rules and bugs in the wallet's code. For people holding a meaningful balance over long periods, the trade can make sense.

The choice is not "self-custody or nothing". For beginners, the most common path is to keep part of the balance in self-custody (the long-term part) and part in an account with institutional support (the day-to-day part).

Self-custody in Brazil in 2026: what the Central Bank says

In November 2025, the Central Bank of Brazil (BCB) published Resolutions 519, 520 and 521, which regulate the virtual asset market in Brazil. The general rules entered into force on February 2, 2026. Some provisions, including parts of the foreign exchange rules and specific reporting obligations, took effect on May 4, 2026.

The question that mattered most to self-custody users was whether the practice would remain allowed. An earlier public consultation had suggested restrictions, and part of the market feared a ban. The final rules kept self-custody allowed.

What changed in practice:

  • Virtual asset service providers (known in Brazil as PSAVs) must identify the owners of the self-custody wallets they send funds to or receive funds from
  • Certain operations with virtual assets denominated in foreign currency, such as international payments and transfers to self-custody wallets, were brought into the scope of the foreign exchange market, with reporting to the BCB
  • Limits were set for some international transfers involving virtual assets
  • Since October 1, 2026, under BCB Circular 3,978/2020 as amended in September 2026, transfers of virtual assets to or from self-custody wallets worth US$10,000 or more must be specifically reported to Coaf, Brazil's financial intelligence unit; the report is triggered by the amount alone and does not block the transfer

For an everyday self-custody user, the impact is small: you can still have your own wallet, with direct access to your balance. The difference is that when you deposit or withdraw through a regulated exchange or platform, your wallet is identified in that operation, and larger transfers are reported.

The regulatory information in this article was checked in November 2026 against official Central Bank publications and specialist coverage (Capital Aberto, Conjur, Atlas Público). The BCB keeps issuing adjustments to this framework, so check for updates before relying on a specific rule.

When self-custody makes sense (and when it doesn't)

It is not a binary decision. Self-custody is worth considering when:

  • You want to reduce the risk of an institution failing, freezing your account or being hacked
  • You hold a meaningful balance over long periods (more than a few months)
  • You use the balance internationally, and institutional independence makes that easier
  • You are comfortable managing credentials carefully

It may not make sense when:

  • You prefer total convenience and don't want to learn how recovery works
  • You move small amounts, quickly, day to day
  • You need human support for any question about your balance

For most people, a hybrid start makes sense: part in self-custody (long term), part in an account with support (day to day). The good news is that some modern apps let you have both in the same place.

How to get started with self-custody today

The barrier to entry has dropped a lot. Three paths, from simplest to most technical:

  1. An app with a smart wallet and a passkey. The wallet is created when you sign up, you can sign in and approve transactions with your phone's biometrics, and the balance is under your control from the start. This is the recommended path for beginners, because it reduces the risk of losing your credentials. It is the model Picnic uses for its international account; see how Picnic's access keys protect your account.
  2. A traditional wallet with a seed phrase. Apps such as MetaMask or Trust Wallet create a wallet and show you a 12-word seed phrase. You need to write it down, store it somewhere safe and never share it with anyone. It works well, but it takes discipline.
  3. A hardware wallet. A physical device (Ledger, Trezor) that keeps the key offline. It is the standard for people holding large amounts, at the cost of more friction in everyday use.

Beginners are better off choosing an app that handles the technical side while preserving the principle of direct control. Small balances can sit in a hot wallet with a passkey; larger balances can move to hardware when it makes sense.

Conclusion

Self-custody is the model in which the user, rather than an institution, controls the keys. The FTX collapse in 2022 was the event that brought the topic into the mainstream and showed in practice that institutional custody is a choice, with risks of its own.

Brazilian regulation, in force since 2026, kept self-custody allowed, with identification rules when you move funds through regulated platforms and reporting of larger transfers. For users, the ground rules are clear.

The combination that makes sense for a Brazilian audience in 2026 is holding digital dollars in self-custody, with the convenience of a modern app and an international card (in Portuguese) for spending. That is what Picnic's international account is built around: digital dollars under your control, and a Visa card accepted in 180+ countries with no IOF and no annual fee for those who already have it (new card orders are paused for now; see the availability note above). Open your Picnic account and keep your digital dollars in self-custody from day one.


Picnic is a technology platform that lets users independently interact with USDC, a U.S. dollar-pegged stablecoin issued by Circle, on public blockchains. USDC is not legal tender in Brazil.

Displayed exchange rates vary with market conditions. The final applicable amount is the one shown on the transaction confirmation screen. Cryptoassets involve risks, including volatility and loss of peg.

Picnic does not custody user assets and is neither a financial institution nor a virtual asset service provider. Sending and receiving U.S. dollar payments through a U.S. account is offered in partnership with Noah Savings Inc. Terms and conditions apply.

Information verified in November 2026.

Picnic team

Picnic team

Technology platform

The Picnic team creates content about international finance, cards and digital dollars.

Share:
#self-custody#digital dollar#crypto wallet#Central Bank of Brazil#passkey

Get your Picnic card

No annual fee, no IOF and no Picnic fee. Open your account in five minutes.

Open your account →