Unhosted Wallets

So what is an unhosted wallet? It is the opposite of an exchange account. With an exchange, a company holds the keys and moves coins when you ask. With an unhosted wallet, whether a phone app, a browser extension or a hardware device, you hold the keys and deal with the network directly.

Hosted vs Unhosted Wallets

FinCEN, the US Treasury bureau that enforces anti-money-laundering rules, drew the line in its 2019 guidance on virtual currency business models: wallets where third parties control user funds "are called 'hosted wallets'", and wallets where users control the funds "are called 'unhosted wallets.'" The test is control, not technology. A key question in that guidance is whether an intermediary has "total independent control over the value".

That is why arrangements that split a key between you and a provider, such as MPC wallets, need a closer look: the label depends on whether the provider can move funds without you. How to hold your own keys safely is the job of our cold storage guide. This entry is about what the label means to the rules.

Why Regulators Use the Term

Anti-money-laundering law works through intermediaries. Banks and exchanges must identify customers and report suspicious activity. A person spending from their own wallet has no such duty: the same FinCEN guidance says someone using an unhosted wallet to buy goods or services on their own behalf is not a money transmitter.

The Financial Action Task Force (FATF), the international standard setter, extended its Recommendation 16, the so called travel rule, to virtual asset service providers, as the European Banking Authority's travel rule guidelines recount. Providers must pass sender and recipient details along with each transfer. An unhosted wallet has nobody at the other end to receive them, which is why a FATF report in March 2026 called peer to peer transfers through unhosted wallets a "key vulnerability" in the stablecoin market, The Block reported.

What Happens When You Withdraw to Your Own Wallet

The rules bite at the exchange, not the wallet. The EU calls these self-hosted addresses. Under Regulation (EU) 2023/1113, applied from 30 December 2024, every crypto transfer between providers carries the travel rule details regardless of amount. For a transfer above 1,000 euros to or from a self-hosted address, the EBA guidelines say the exchange should check that its own customer owns or controls the address. Listed methods include sending a small predefined amount to and from the address, or asking you to sign a specific message with its key. Once satisfied, the exchange may whitelist the address.

That is why an exchange may ask you to prove a withdrawal address is yours. It is a check on the address, not a ban on self custody.

The United States went the other way. FinCEN's December 2020 proposal would have made banks and exchanges report transfers involving unhosted wallets above 10,000 dollars and keep records above 3,000 dollars. It never became final and was withdrawn on 6 October 2026. Withdrawing a proposal removes nothing already in force: exchanges still know their customers. The trade off remains the one our entry on exchange bankruptcy shows from the other side: a hosted balance is a claim on a company, and an unhosted one is yours to lose.