An exchange brand is a starting point, not a custody analysis. Customers should know which company holds the account relationship, which entity controls withdrawals, and what the terms say about assets during an outage or insolvency. This guide does not rate any provider. It creates an evidence file that can be compared across platforms and revisited when the account agreement changes.
Collect the identity documents
From the official account and legal pages, save the customer agreement, privacy policy, risk disclosure, and entity name shown during onboarding. Record registered jurisdiction and support route. An app icon, domain, and corporate group name may all differ. If the agreement is unavailable before signup, ask for it through official support and keep the response.
Map the custody relationship
Write whether assets are held by the exchange, a named custodian, a client-money entity, or a network address controlled by a provider. Terms may distinguish omnibus wallets from individual addresses. Do not infer ownership from an explorer label. Note who can move assets, who approves withdrawals, and what happens when an account is restricted.
Read segregation language
Search the agreement for custody, segregation, rehypothecation, lending, liens, set-off, insolvency, and recovery. Record the exact section and date. A statement that assets are “protected” can have a narrow meaning. If the document is unclear, mark the question and ask support; do not replace missing detail with a marketing promise.
Review operational controls
Check withdrawal allowlists, cooldowns, two-factor methods, session alerts, address verification, and support escalation. These controls reduce operational mistakes but cannot change contractual rights. Run a small withdrawal to a verified address only when appropriate and record the status path. Never allow a support agent to direct funds to a personal recovery address.
Check asset and network scope
Custody terms may cover some assets or networks but not wrapped tokens, staking, lending, or bridge balances. Create a table with asset, contract or network, custody mode, and withdrawal condition. A ticker is insufficient. If an asset becomes suspended, the platform’s notice and the original terms should both be preserved.
Compare fees and restrictions
Capture trading, custody, network, conversion, inactivity, and recovery fees separately. Read minimums, confirmation thresholds, and regional restrictions. A fee schedule can change without changing an old receipt, so store the version used in a calculation. Use a concrete example with assumptions rather than claiming a universal total cost.
Write a risk-aware conclusion
Summarize confirmed facts, unanswered questions, and controls you can operate. Do not convert a strong brand or an audit headline into a guarantee of access or repayment. Keep a recheck date and a copy of the account entity. The same evidence file can support a comparison with another provider without exposing private credentials.
Worked example: wrapped asset scope
A custody agreement lists native ETH and several tokens but says nothing about a wrapped token received through a bridge. Record the contract address, network, custody mode, withdrawal condition, and the exact clause that is missing. Ask the provider whether the asset is supported before transferring it. A proof-of-reserves dashboard or brand FAQ cannot fill a contractual gap. Keep a separate record for a test withdrawal and a production balance so an operational success is not mistaken for a promise about insolvency or recovery.
Operational handoff
Ask how a restricted account is handled, which entity holds records, and how a complaint is escalated. These questions are practical even when no incident has occurred. Record the answer with the date and the exact support channel. If support points to a new help article, archive the old article reference and update the scope table. An operational test can show that one withdrawal works, but it cannot prove all assets, jurisdictions, or future recovery paths.
Frequently asked question
Does an exchange proof or brand reputation settle custody risk?
No. It can provide evidence about one scope or time, but custody, entity, liabilities, controls, and access terms remain separate questions. Read the current agreement and preserve its date.