Your Crypto Exchange Says Your Funds Are 'Insured.' Here's What That Word Actually Covers
6 min read
Loading...
6 min read
You open a crypto exchange's homepage and see a small badge that says your funds are "insured." It feels reassuring, like a bank account. It is not the same thing. Crypto exchange insured funds usually means a private crime insurance policy with a fixed dollar cap, and that cap almost never covers the way most people actually lose money on an exchange. Here is what the word covers, what it leaves out, and how Indonesia's registered exchanges protect customers differently.
Most exchanges that use the word "insured" are describing a commercial crime insurance policy, a private contract with an insurance company that pays out if the exchange itself gets hacked. Coinbase publicly confirmed in 2019 that it carried $255 million in crime insurance covering a portion of the digital currency held across its storage systems, specifically against theft from a cybersecurity breach of the platform. Coinbase's own help center states the policy does not cover losses from unauthorized access to an individual customer's own account, and does not cover NFTs at all.
Gemini took a similar but separately structured approach: as of March 2024 it carried $25 million in crime insurance for assets in its hot wallet (the internet-connected wallet used for daily withdrawals) plus $100 million in cold storage insurance (for assets kept offline, in hardware not connected to the internet), for $125 million in total digital asset coverage. That coverage was arranged through Gemini's own captive insurer, with the excess layer placed by the brokers Aon and Marsh through the Lloyd's of London syndicate Arch Insurance International, real, named insurers standing behind a real, capped policy.
Both of those numbers are fixed dollar limits, not a percentage of what any individual user holds. If an exchange is hacked for more than its policy's limit, the insurance does not stretch to cover the rest. A $125 million or $255 million policy sounds large until you remember that a single exchange can hold tens of billions of dollars in customer assets. The insurance is real, but it was never sized to make every user whole in a worst case breach.
The exclusion that matters most for an ordinary user is the one both Coinbase and Gemini share: individual account compromise. If someone phishes your password, SIM-swaps your phone number, or tricks you into approving a malicious transaction, that loss falls outside a platform-wide crime policy. The policy protects against the exchange itself being breached, not against you personally losing control of your own account. Market losses, meaning the price of your crypto simply falling, are never covered by any exchange insurance policy either. Insurance here means "someone stole it from us," not "you lost money."
Some US exchanges also mention FDIC insurance, and this is where the confusion runs deepest. The Federal Deposit Insurance Corporation insures bank deposits, and Coinbase's own disclosures state that when a US customer holds an uninvested US dollar balance, that cash can sit in a pooled account at an FDIC-insured partner bank, covered up to $250,000 per depositor if that specific bank fails. Bitcoin, Ether, or any other digital asset held on the exchange is never FDIC insured, under any circumstance. The FDIC badge on a crypto exchange's website describes the leftover dollars in your account, not your crypto holdings.
Binance's Secure Asset Fund for Users, known as SAFU, gets described casually as insurance, but it is not a third-party insurance policy at all. It is an emergency reserve Binance itself funds and controls, built by setting aside a share of trading fees, and Binance decides when and how much of it to pay out. There is no external insurer, no regulator standing behind the guarantee, and no contractual right to a payout the way an insurance claim works. NetWort has covered SAFU's own mechanics in detail separately, since it actually exists for a narrower purpose, covering losses from a specific kind of forced liquidation event in leveraged trading, not general custodial theft.
Indonesia does not lean on the word "insured" for its registered crypto exchanges at all. Since 10 January 2025, Indonesia's crypto asset supervision moved from Bappebti to OJK (the Financial Services Authority) under POJK No. 27/2024, reclassifying crypto from a commodity into a regulated financial asset. Under this framework, a registered exchange cannot simply hold customer crypto in its own company wallet. Customer assets have to sit with a separate, dedicated custodian institution, segregated from the exchange's own operating funds, so that if the exchange itself runs into financial trouble, customer holdings are not part of what its creditors can claim. Indodax, for example, uses a dedicated custodian, Indonesia Coin Custodian (ICC), for this purpose. This is a structural, regulatory protection, not a private insurance payout, and it answers a different question than a US-style crime policy does: it is about keeping your assets legally separate from the company's, not about reimbursing a hack after the fact.
| Mechanism | What it is | What it covers |
|---|---|---|
| Exchange crime insurance (Coinbase, Gemini) | Private policy with named insurers, fixed dollar cap | Platform-wide theft from a hack, up to the cap. Never individual account compromise or price losses |
| FDIC insurance | US bank deposit insurance, up to $250,000 | Only uninvested USD cash held at a partner bank. Never crypto |
| Binance SAFU | Self-funded, discretionary emergency reserve | A narrow set of Binance's own defined loss events, at Binance's discretion |
| OJK-mandated custodian segregation (Indonesia) | Regulatory requirement, not insurance | Keeps customer crypto legally separate from the exchange's own funds if it fails |
None of these mechanisms protect you from losing your own login credentials, and none of them make you whole if the crypto you hold simply drops in price. The single biggest thing within your control is understanding the actual risk profile of what you hold, not the marketing badge on the exchange that lists it. NetWort's Explore screener lets you filter down to crypto assets specifically and check each one's Health Score, historical volatility and maximum drawdown, the kind of risk information no insurance badge tells you.