Regulation & Policy

Crypto's Next Infrastructure Layer Isn't Custody. It's Verification.

Accredifi Team
Crypto's Next Infrastructure Layer Isn't Custody. It's Verification.

Regulatory scrutiny of unhosted wallets is not simply a threat to self-custody. It is a signal that financial institutions need wallet verification, proof of control, reusable attestations, and audit-ready crypto evidence.

The most interesting part of the self-custody debate is not whether people should be allowed to hold their own keys.

It is whether regulated institutions can safely rely on assets held that way.

That distinction is becoming harder to avoid. In the UK, the Bank of England and other regulators have been working through how sterling stablecoins would operate if they became widely used for payments, treasury, retail settlement, or cross-border business flows. The debate has included holding limits, issuer obligations, redemption expectations, AML/KYC controls, and the role of unhosted wallets.

Some commentary has treated this as a simple collision between banks and self-custody. That framing misses the deeper shift.

As crypto moves closer to mainstream finance, regulators and institutions are not only asking whether self-custody should exist. They are asking how self-custodied assets become legible, attributable, and auditable inside regulated workflows.

The future is unlikely to be "banks or self-custody." It is more likely to be regulated finance interoperating with self-custody through verification layers.

The UK Debate Is About Evidence

The Bank of England's stablecoin work is focused on a specific future: sterling-denominated stablecoins used widely as money in the real economy, not just as settlement assets inside crypto trading.

That matters because money-like instruments carry different expectations from speculative assets. If a stablecoin is used for payroll, merchant payments, treasury movement, or cross-border settlement, regulators will expect controls closer to payment systems and commercial bank money.

In its November 2025 consultation, the Bank set out proposals for systemic stablecoins, including backing-asset requirements, possible holding limits, redemption expectations, and the FCA's role in conduct and consumer protection. It also identified unhosted wallets as a challenge because they do not naturally collect personal data, may be harder to monitor, and could complicate issuer failure payouts or holding-limit enforcement.

The debate sharpened after March 2026 evidence to the House of Lords Financial Services Regulation Committee, where Deputy Governor Sarah Breeden said unhosted wallets would not be permissible under the UK regime. In a later follow-up letter, the Bank framed the issue more operationally: coinholders may access stablecoins through unhosted wallets, but those arrangements would need to meet the relevant regulatory standards, which the Bank described as challenging due to their pseudonymous nature.

That clarification matters. It shifts the question away from ideology and toward evidence.

Can an issuer, bank, lender, payments firm, or regulated counterparty establish enough confidence about a wallet relationship to satisfy AML/KYC obligations, audit expectations, holding-limit controls, and operational resilience?

If the answer is no, self-custody becomes difficult to support in regulated contexts. If the answer is yes, self-custody can become part of mainstream finance through better verification.

Why Unhosted Wallets Create Friction

Traditional financial controls are built around intermediaries. Banks, brokers, custodians, payment institutions, and exchanges onboard customers, screen transactions, keep records, and respond to regulatory requests.

Self-custody changes the control surface.

A blockchain can show that an address exists and that assets moved. It cannot, by itself, show who controls the private key, why a transfer occurred, whether the owner has changed, whether the wallet is being used on behalf of someone else, or whether the funds have an explainable source.

That does not make self-custody inherently suspicious. It means the evidence model is different.

Regulators are concerned because unhosted wallets can make it harder to connect a wallet to a known customer, enforce AML and counter-terrorist-financing controls, support redemption or failure-management processes, apply stablecoin holding limits, and manage cross-border obligations.

Privacy and self-custody remain legitimate design goals. But regulated finance runs on accountable evidence. When self-custodied assets enter those systems, institutions need a way to bridge the gap between cryptographic possession and compliance-grade reliance.

Custody Risk Is Not Verification Risk

Custody risk asks who can move the asset. If a user holds private keys directly, they take on key-management risk. If a custodian holds the keys, the user takes on counterparty, operational, legal, and sometimes insolvency risk.

Verification risk asks what an institution can prove and defend later. A lender may need to know that an applicant controls a wallet. A bank may need to assess whether funds came from a declared source. A compliance team may need to document why it accepted a stablecoin balance as part of a review.

Custody can reduce verification friction because custodians maintain account records and customer relationships. But custody is not the only way to create trustworthy evidence.

Regulated finance does not necessarily need every crypto holder to move assets into a custodial account. It needs defensible answers to narrower questions:

  • does this person or entity control the relevant wallet?
  • did the wallet hold the relevant assets at the relevant time?
  • is the wallet within the scope of this review?
  • is the evidence current, expired, revoked, or due for reverification?
  • can another reviewer reconstruct the decision later?

Those are verification problems. And verification problems can be solved with infrastructure.

Why Today's Proof-of-Funds Workflows Break

Most banks, lenders, private-credit teams, mortgage brokers, and wealth platforms were not designed to evaluate self-custodied crypto.

Their workflows assume bank statements, custodian letters, brokerage confirmations, audited financials, or regulated account data. Those artifacts are imperfect, but they come from recognized systems and have familiar evidential meaning.

Crypto breaks that pattern.

A borrower may hold a significant stablecoin balance in a hardware wallet. A founder may keep operating liquidity across several addresses. A family office may self-custody Bitcoin while using stablecoins for short-term cash management.

In practice, reviewers often receive weak substitutes: screenshots, public addresses, static PDFs, or written explanations from the applicant.

None of these is sufficient for serious institutional assurance. A screenshot can be manipulated. A public address does not prove control. A PDF can go stale immediately. A declaration may help attribution, but it does not independently verify the wallet relationship.

The result is an operational compromise. Institutions either over-collect data, reject legitimate crypto evidence, force assets through custodial venues, or accept proof methods that would look thin under audit.

That model becomes harder to defend as stablecoins and self-custodied assets become more financially relevant.

Signatures Help. State Matters More.

Cryptographic wallet signatures are a major improvement over screenshots.

If a user signs a unique message with a private key, the verifier can confirm that the signer controlled the corresponding wallet at that moment. No funds move. No seed phrase is shared. The proof is narrow, technical, and reviewable.

But a one-time signature alone does not answer every institutional question.

It does not prove that the same person still controls the wallet three months later. It does not automatically bind the wallet to a loan file, onboarding case, source-of-funds review, legal entity, or compliance purpose. It does not define what data was shared, how long the evidence remains valid, or when reverification is required.

For consumer authentication, a single wallet signature may be enough. For institutional assurance, it is only one component.

The missing layer is stateful, repeatable, auditable verification infrastructure.

Wallet Ownership Is Becoming a Financial Primitive

In traditional finance, account ownership is basic infrastructure. A bank account has an account holder. A brokerage account has a named customer. A legal entity has authorized signatories. The relationship between person, entity, account, and asset is part of the system.

Crypto addresses do not come with that structure.

They are technically precise but institutionally incomplete. An address can receive, hold, and send assets. It does not declare whether it belongs to an individual, company treasury, trust, multisig group, fund vehicle, nominee, or attacker.

As crypto becomes more connected to lending, payments, private wealth, treasury, and regulated stablecoin infrastructure, wallet ownership starts to become a financial primitive.

Not ownership in the casual sense of "I pasted an address." Ownership in the operational sense:

  • the relevant party proved control of the wallet
  • the proof was bound to a specific request or relationship
  • the evidence was timestamped
  • the scope of access was defined
  • the record can be reviewed later
  • the verification can be refreshed if the relationship persists

A lender does not only care that a blockchain address has USDC. It cares whether the applicant controls that address, whether the balance was present at underwriting, whether it remains relevant before closing, and whether the file can survive review.

Ongoing Verification Is Different From KYC

KYC identifies a customer. Wallet verification establishes a relationship between that customer and a wallet.

Those are related, but they are not the same.

An institution may know that Alice is Alice because it performed identity verification. That does not prove Alice controls a specific Ethereum address. Conversely, a wallet signature can prove control of an address without proving the real-world identity of the signer.

Institutional workflows often need both. KYC answers who the customer is, whether they are permitted to use the service, and what risk category should apply. Wallet verification answers whether that customer controls a wallet, what assets were present at a specific point in time, what wallet data was shared, whether the evidence is still valid, and whether access has been revoked or expired.

This distinction matters for privacy. The right answer is not to turn every wallet into a fully public identity object. Nor is it to let regulated institutions rely on unverifiable claims.

The better model is purpose-bound verification: prove the relationship needed for the specific financial workflow, preserve auditability, and avoid unnecessary disclosure.

Reusable Attestations Will Matter

Most financial evidence has a time dimension. A bank statement covers a period. A credit report has a pull date. A sanctions check has a screening timestamp. A certificate expires.

Crypto evidence should work the same way.

A wallet signature proves control at time T. A balance snapshot proves holdings at time T. A provenance review may be valid for a particular transaction path and review window. A proof-of-funds attestation may be sufficient for a lending decision today but stale before completion.

Institutions increasingly need attestations that can say:

  • this wallet was controlled by the relevant party at this time
  • these assets were observed at this time
  • the proof was created for this purpose
  • the proof is valid until this date or event
  • reverification is required on this schedule
  • the record has or has not been revoked

That structure turns crypto evidence from a document into a control.

It also points toward a larger category: reusable wallet attestations. A verified wallet relationship could support repeated, scoped evidence packages for different institutions, each with its own permissions, validity window, and audit record.

Stablecoins Are the Forcing Function

Stablecoins make the verification problem more urgent because they sit at the boundary between crypto and payments.

They are already used for trading, treasury, remittance, payroll, merchant settlement, and cross-border workflows. If regulated sterling, dollar, or euro stablecoins become more deeply embedded in financial infrastructure, the question of wallet ownership becomes harder to avoid.

A business receiving stablecoin payments needs to know when receipts are attributable to a customer. A lender reviewing a stablecoin reserve needs to know whether the borrower controls the wallet. A payments firm needs to know whether it can support transfers involving self-custodied addresses without failing AML obligations.

Stablecoins turn crypto from an asset-class question into a payments-infrastructure question.

Payments infrastructure requires controls. Controls require verification.

Compliance Middleware for Self-Custody

The likely architecture is not one monolithic crypto bank. It is a layered system.

Custodians will serve customers who prefer outsourced key management. Exchanges will remain major on- and off-ramps. Banks will tokenize deposits and offer regulated digital-money products. Stablecoin issuers will operate under increasingly formal regimes. Chain analytics firms will monitor transaction risk. Identity providers will continue to support KYC and onboarding.

Between those systems, a new layer is emerging: verification middleware.

Its job is to make wallet-based assets usable without forcing every workflow into custody.

That layer needs to handle proof-of-control, attribution to a user or entity, scoped data sharing, time-bounded attestations, reverification schedules, audit logs, policy-specific evidence packages, and APIs for institutional systems.

In other words, it translates self-custodied wallet state into something regulated finance can consume.

This is not a workaround for regulation. It is how regulation becomes operationally compatible with self-custody.

Where Accredifi Fits

Accredifi is built for this shift from static crypto evidence to verification infrastructure.

The platform helps users and institutions establish cryptographic proof of wallet control, tie that proof to specific access requests or financial contexts, create timestamped evidence, and support ongoing verification workflows without taking custody of assets.

That matters in exactly the situations the stablecoin debate is surfacing:

  • lenders reviewing self-custodied proof of funds
  • compliance teams assessing wallet attribution
  • institutions replacing screenshots with cryptographic records
  • platforms needing scoped wallet evidence without private-key access
  • teams tracking whether verification remains current over time

Accredifi does not turn self-custody into custody. It gives regulated counterparties a more defensible way to interact with self-custodied assets.

The Strongest Version of the Future

Regulatory scrutiny of unhosted wallets may feel, at first, like a headwind for self-custody.

In the short term, it may be. Some institutions will choose exclusion over nuanced workflows. Some regimes may restrict certain stablecoin use cases. Some users will dislike the additional evidence burden.

But over a longer horizon, scrutiny can also clarify what infrastructure is missing.

Self-custody is unlikely to disappear. It is too useful, too embedded, and too aligned with the architecture of public blockchains. At the same time, institutions cannot rely on informal wallet claims if crypto is going to sit inside lending, payments, underwriting, treasury, and compliance workflows.

The bridge is verification.

Not screenshots. Not static PDFs. Not one-off signatures floating in isolation. Not blanket disclosure. Not forced custody for every legitimate financial interaction.

The bridge is stateful, repeatable, auditable verification infrastructure.

Crypto's next institutional layer may not be another custody product. It may be the infrastructure that lets finance recognize self-custody without having to absorb it.

Primary Sources

Related Articles

Related Tools


Disclaimer: This article is for informational purposes only and does not constitute financial, legal, tax, investment, mortgage, or property advice.

Back to Blog
May 8, 2026
Accredifi Team