What is an unhosted wallet?
An unhosted wallet — also called a self-hosted or self-custody wallet — is a crypto wallet whose private keys are held by the user rather than by an exchange or custodian. No intermediary sits between the holder and the blockchain: transactions are signed locally on a device, browser extension, or hardware wallet. The term matters legally because most crypto regulation attaches to intermediaries, and an unhosted wallet, by design, has none.
Hosted versus unhosted
- Hosted (custodial). A service provider controls the keys, applies know-your-customer checks, and can freeze or report activity. The user holds a claim against the provider, not the coins themselves.
- Unhosted (self-custody). The user controls the keys and bears the loss if they are compromised. There is no account, no onboarding, and no entity to serve orders on.
- Hybrid arrangements. Multi-signature or recovery-assisted setups sit between the two and are assessed by who can actually move the funds.
The legal dimension
Unhosted wallets are the pressure point of the Travel Rule, the standard in Recommendation 16 of the FATF Recommendations requiring service providers to pass originator and beneficiary information along with transfers. When one side of a transfer is an unhosted wallet, there is no counterpart institution to exchange data with, so obligations fall entirely on the regulated side: identifying its own customer, assessing the transfer’s risk, and in some regimes verifying that the customer actually controls the external wallet. The policy debate is unresolved — regulators see an anti-money laundering blind spot, while industry argues that self-custody is simply how the technology works and blanket verification is disproportionate.
Turkish context
Türkiye regulates the intermediaries, not the wallet itself. Platforms fall under the licensing regime introduced by Law No. 7518 amending the Capital Markets Law, and as obliged parties under MASAK guidance they apply customer identification and suspicious-transaction reporting to deposits and withdrawals that touch unhosted wallets. Holding one is lawful; friction appears at the on- and off-ramps, where platforms may ask users to declare or evidence ownership of external wallet addresses.
Do: keep records that link your unhosted wallet addresses to you, and expect withdrawal questionnaires from licensed platforms. Don’t: assume self-custody removes compliance duties — the moment funds cross into a regulated platform, the platform’s obligations reach your transfer.
If this is on your desk
Templates and checklists are free in the Founder Academy; for a specific situation, book a 30-minute intro call.
Founder AcademyBook an intro call