Disclosure: This post contains affiliate links; we may earn a commission at no extra cost to you.
Crypto Exchange Insurance: Who’s Actually Insured?
Bitcoin, Ether, and stablecoins held on a crypto exchange are generally not FDIC-insured. The exchange may carry a commercial crime or cybersecurity policy, but that policy belongs to the company and covers only specified events, assets, locations, and limits. It is not a government guarantee of each customer’s portfolio and usually excludes losses caused by stolen login credentials, scams, bad trades, token price declines, or the exchange’s insolvency.
U.S. dollar cash can be different. Coinbase and Gemini disclose structures that may make qualifying cash held at partner banks eligible for pass-through FDIC insurance if regulatory requirements are satisfied. That protection responds to failure of the partner bank, not necessarily failure, fraud, or bankruptcy of the exchange. Cash invested in Treasury obligations or government money market funds is not a bank deposit and is not FDIC-insured.
The distinction is simple but critical: insurance follows the asset, custodian, legal title, cause of loss, and policy wording. A homepage badge saying “insured” never answers all five.
| Platform or product | Crypto insurance | U.S. dollar treatment | Major gap |
|---|---|---|---|
| Coinbase retail | Company crime policy covers a portion of digital assets against specified theft events | Cash may be held at insured banks or credit unions, Treasuries, or government money market funds | Account takeover from compromised credentials is excluded; coverage may be less than total loss |
| Gemini | Hot-wallet policy covers specified direct system breaches and employee theft | Eligible cash at named partner banks may receive pass-through FDIC coverage | Customer account takeover and crypto value loss are not covered |
| Kraken | Do not assume retail balances have a per-customer insurance guarantee | Legal treatment varies by entity and region | Proof of reserves is transparency, not insurance |
| Binance.US | No FDIC insurance for crypto; review current custody disclosures | Banking arrangements and availability change | Global Binance entities and Binance.US are legally distinct |
| Robinhood Crypto | Crypto is outside SIPC protection | Brokerage cash sweep may have separate bank coverage | Securities-account protection does not extend to crypto assets |
| Gemini Dollar, USDC, USDT | Reserve arrangements are not portfolio insurance for token holders | Some reserve cash can sit at insured banks | Pass-through eligibility, issuer failure, depegging, and wallet loss remain separate risks |
Our pick: editor's-pick
What FDIC insurance actually protects
The FDIC insures eligible deposits at an insured bank when that bank fails, generally up to $250,000 per depositor, per insured bank, per ownership category. It does not insure the Bitcoin price, reimburse a fraudulent blockchain transfer, rescue an insolvent exchange, or protect a money market mutual fund.
Pass-through insurance can apply when an intermediary holds pooled “for benefit of” deposits and maintains records showing each customer’s ownership. Coverage depends on the arrangement satisfying FDIC requirements and the regulator’s determination during a bank receivership. A customer’s direct deposits at the same partner bank usually aggregate with their share of the pooled deposit in the same ownership category.
Suppose an exchange places $100,000 of one customer’s cash at Bank A and that customer already has $200,000 in a single account at Bank A. The combined $300,000 can leave $50,000 above the standard limit if Bank A fails. Partner-bank lists and placements can change, making exact coverage difficult to track.
Coinbase: meaningful controls, narrow insurance
Coinbase says its crime insurance protects a portion of digital currency held across its storage systems against losses from theft, including cybersecurity breaches. It explicitly says the policy does not cover unauthorized access to a customer account caused by breached or lost credentials, does not cover NFTs, and may be insufficient if total losses exceed insurance recovery.
For U.S. customer dollars, Coinbase says funds can be held in pooled custodial accounts at FDIC-insured banks or NCUSIF-insured credit unions, or invested in liquid U.S. Treasuries and government money market funds under state money-transmitter laws. Customers cannot assume every dollar is in a bank deposit. Coinbase maintains internal ledgers designed to support pass-through claims on eligible bank or credit-union cash.
This produces four separate outcomes:
- A partner bank fails while eligible cash and records satisfy pass-through rules: federal deposit insurance may apply within limits.
- Coinbase’s hot wallet is breached in an event covered by its commercial policy: Coinbase may recover, but the policy limit and allocation govern.
- A thief phishes a customer and withdraws crypto: Coinbase’s disclosed crime policy does not cover credential-based account takeover.
- Bitcoin falls 60%: no insurance responds to market loss.
Coinbase is a public company and publishes financial disclosures, but public listing is not deposit insurance. Segregation, audits, and regulation reduce certain risks without eliminating custody or bankruptcy risk.
Gemini: hot-wallet cover is not account insurance
Gemini has described insurance for digital assets in its online hot wallet against direct theft resulting from a breach of Gemini’s systems or theft by an employee. Its disclosure excludes account takeover, third-party system breaches, and fraudulent transactions initiated by a user. Assets in cold storage, custody products, and different regional entities can have different terms.
Gemini’s U.S. dollar arrangements can include deposits at FDIC-insured banks, government money market funds invested in Treasury obligations, and U.S. Treasury obligations. Its legal agreements state that digital assets are not FDIC- or SIPC-protected. Pass-through insurance for cash applies only to the portion held as qualifying bank deposits and only if requirements are met.
Gemini Dollar reserves may include cash at insured banks, Treasury money market funds, and Treasury obligations. That reserve composition supports redemption but does not make a GUSD token in a self-hosted wallet an ordinary insured checking deposit. Token contract, issuer, reserve, custodian, and blockchain risks remain.
Kraken: proof of reserves is useful, but it is not insurance
Kraken publishes proof-of-reserves exercises for selected assets and allows customers to verify that balances were included in a Merkle-tree process. This can provide evidence that specified on-chain assets met reported client liabilities at a point in time. It does not cover future theft, prove every off-chain liability, guarantee operational liquidity, or pay a claim.
Kraken serves customers through different legal entities based on country and product. Cash, securities, staking, and crypto custody terms can therefore differ. Read the agreement tied to the account’s jurisdiction rather than relying on a global brand statement. Unless a specific policy names the customer as insured and explains limits, assume exchange-held crypto lacks personal insurance.
Binance.US and global Binance require entity-level reading
Binance.US is a U.S.-focused platform operated separately from global Binance entities. Banking access, custody providers, legal proceedings, and product availability have changed over time. Statements about a global emergency fund such as SAFU do not automatically create enforceable coverage for a Binance.US customer.
An exchange-funded reserve is not regulated insurance unless it is an actual policy or statutory scheme. The company controls when and how a discretionary fund is used. Verify the current user agreement, asset custody, and withdrawal availability for the exact entity shown on the account.
Robinhood, Fidelity, and brokerage brands: SIPC has boundaries
SIPC protection at a U.S. broker generally addresses missing cash and securities when a member brokerage fails, within statutory limits and rules. It does not protect market declines. Crypto assets held through a separate crypto affiliate are generally not securities covered by SIPC.
Robinhood’s brokerage cash sweep may place dollars at program banks eligible for pass-through FDIC coverage, while Robinhood Crypto assets remain outside that framework. Fidelity Crypto is also distinct from securities accounts, and its terms should be reviewed separately. A familiar brokerage logo does not extend securities protection to blockchain assets.
Stablecoin reserves are not the same as deposit insurance
Circle says USDC is backed by reserve assets, largely cash and short-duration U.S. government obligations under its current structure. Tether publishes reserve reports for USDT. Paxos issues regulated stablecoins with its own reserve and redemption terms. These mechanisms address backing and redemption, not every holder’s loss.
A stablecoin user can still lose money through:
- Issuer insolvency or an impaired redemption process.
- A freeze or blacklisting function applied to the token address.
- Loss of private keys or signing a malicious approval.
- Failure of the exchange holding the stablecoin.
- A bridge or smart-contract exploit involving a wrapped version.
- Depegging in a stressed secondary market.
- Counterparty risk in reserve banks, funds, and custodians.
FDIC insurance at a reserve bank protects qualifying deposits under the bank arrangement; it does not automatically turn every circulating token into an insured deposit owned directly by each token holder.
Questions an exchange’s insurance page must answer
- Who is the named insured? The exchange, a custody subsidiary, or each customer?
- Which assets? Hot-wallet crypto, cold-storage crypto, fiat cash, NFTs, or only selected tokens?
- Which events? External theft, employee theft, physical key loss, operational error, or account takeover?
- What limit? Per event, aggregate, per wallet, or per customer?
- What exclusions? Phishing, malware, SIM swaps, sanctions, war, insider collusion, and market loss?
- Which legal entity and jurisdiction? The brand may operate through several companies.
- Who controls claims? Can the customer claim directly, or only the exchange?
- Does coverage exceed assets at risk? “$100 million policy” is weak context without the insured asset total.
If the page does not disclose the insurer or policy wording, treat marketing totals cautiously. Even a legitimate insurer can deny a claim outside the policy or pay less than the platform’s total loss.
Custody practices matter more than insurance headlines
For trading balances, use a unique password, authenticator app or hardware security key, withdrawal-address allowlisting, anti-phishing code, and a dedicated email. Avoid SMS as the only second factor because SIM swaps remain common. Lock the account when not actively trading and confirm URLs manually.
For long-term holdings, self-custody with a hardware wallet such as Trezor Safe 5, Ledger Flex, or Coldcard Q can remove exchange insolvency risk, but transfers responsibility to the owner. Seed theft, malicious firmware, address substitution, fire, coercion, and inheritance failure become primary risks. Buy hardware directly from the manufacturer or an authorized seller, verify packaging and firmware, and never type a recovery seed into a website.
A multisignature setup using providers such as Unchained or Casa can distribute key risk for larger Bitcoin holdings. It adds fees and complexity. Test recovery with a small amount before moving a material balance.
A safer allocation by purpose
Keep spending cash at an insured bank rather than on an exchange. Hold only the crypto needed for near-term trades on the trading platform. Withdraw long-term assets to tested self-custody if capable of managing keys. Diversifying across two exchanges reduces a single-platform freeze but doubles login and counterparty exposure; it is not a substitute for self-custody.
Before depositing, test a small fiat withdrawal and a small on-chain withdrawal. Confirm supported networks—sending USDC through the wrong chain can lead to permanent loss. Preserve transaction IDs, account statements, cost-basis records, and beneficiary instructions.
Red flags
- “FDIC insured crypto” without separating dollars from tokens.
- A large coverage figure with no insurer, policy limit, or exclusions.
- Proof of reserves presented as protection against hacking.
- Customer funds lent or pledged without clear consent and risk disclosure.
- No named legal entity in the user agreement.
- Withdrawal delays blamed indefinitely on maintenance.
- Stablecoin yield far above Treasury rates without transparent borrower risk.
Bottom line
No major exchange offers FDIC insurance on the market value of customer crypto. Coinbase and Gemini have real commercial insurance and cash-custody arrangements, but their policies cover limited company-level events and exclude common personal-account losses. Kraken’s proof of reserves provides a different type of evidence, not insurance. Stablecoin reserves and brokerage SIPC protection solve still different problems.
Assume exchange crypto is uninsured unless a contract proves otherwise. Keep fiat at a bank when it does not need to be on-platform, minimize trading balances, secure accounts with hardware-backed authentication, and use competent self-custody for assets intended to remain untouched. Insurance is a last layer; it cannot replace control of keys and counterparties.