Non-custodial vs custodial swaps: how to tell, and why it matters

"No KYC" gets all the attention, but custody is the part that actually bites people. A lot of swaps that advertise no KYC are still custodial, and a custodial service can freeze your coins and ask for your ID the moment a deposit gets flagged. Custody is also harder to check than KYC, because nobody advertises it either way. Here is what the distinction really means, how to work out which kind of service you are looking at before you send anything, and where the honest limits of the non-custodial claim sit.

What the words actually mean

Custodial means the service takes your coins into an account or wallet it controls, holds them, and then sends the output. For the period it holds them, those coins are on its balance sheet and under its policy. It can freeze them, delay them, or require verification before releasing them. Exchanges are the obvious example, but a lot of instant swap sites work the same way behind a simpler interface.

Non-custodial means the service never holds your funds as a balance you own on its books. Your coins move through the flow and out to an address you control. There is no account, no stored balance, and nothing sitting there for the operator to lock or hand over. If the operator disappeared mid-swap there would be no customer funds on its side to disappear with.

The practical difference shows up on your worst day, not your average one. On an ordinary swap both models look identical from the outside. The gap only opens when something gets flagged, when a request arrives from an authority, or when the operator has a problem. For more background, see what a non-custodial swap is.

Why "no KYC" isn't enough

Many instant swappers say "no KYC" and mean "no account needed to start." But if they take custody of your deposit, their terms almost always include AML screening, and flagged transactions get frozen until you verify your identity, sometimes indefinitely. So the no-KYC promise quietly becomes "no KYC, unless we decide otherwise, while we are holding your money." That is the exact trap a non-custodial design avoids.

The unpleasant detail is that verification requested at that point is usually worse than verification requested up front. You are asked for documents while the operator holds the funds, so you have no leverage and no realistic way to walk away. People report being asked for a selfie holding an ID, a source-of-funds explanation, and sometimes the deposit's prior transaction history. If you chose a no-KYC service specifically to avoid creating that record, you have now created it under pressure and handed it to whoever asked.

Screening also does not have to be accurate to ruin your week. Address-scoring systems produce false positives, and a coin that passed through a service someone dislikes several hops ago can be enough to trigger a hold on a completely ordinary transaction.

Where custody actually sits in a swap

It is worth being precise here rather than marketing at you. A cross-chain swap moves value between two separate blockchains that cannot talk to each other, and something has to bridge that gap. In an instant swap, a settlement network briefly handles the funds in transit: it receives the asset you sent and pays out the asset you asked for. That is a real party handling real funds for a short window, and no amount of wording makes it otherwise.

So the honest claim is not that no one ever touches the coins. It is narrower and more useful than that. A non-custodial interface never takes your funds itself, never holds a balance for you, and never has an account it could freeze. The exposure that remains is limited to the settlement leg and to the minutes that leg takes, rather than being open-ended and tied to your identity.

Two things follow. First, be sceptical of any instant swap describing itself as trustless. If it settles across chains in minutes at a quoted rate, there is a counterparty in there somewhere. Second, the technology that genuinely removes the counterparty exists and it is a different thing: atomic swaps, which are slower, need both sides online, and cover far fewer pairs. The trade-offs are laid out in atomic swaps versus instant swaps. What matters when you compare two instant swaps is which one is holding your funds and how much of the flow you can check yourself.

How to tell before you send

• Read the custody language. Does the service say it never holds your funds, or does it talk about "your balance," "holding" deposits, or freezing flagged transactions? The wording gives it away.
• Read the terms, not the landing page. The landing page is marketing and the terms are the contract. Search the terms for "suspend", "freeze", "verify", and "compliance". What you find there is what will actually happen.
• Check whether an account exists at all. If you can log in, there is a balance somewhere. If there is a balance, there is custody, whatever the homepage says.
• Check independent ratings. Directories like KYCnot.me classify services by KYC level and custody, and they do not work for the services they list.
• Look for open source. If the frontend is open, you can read exactly where your funds go rather than taking the claim on faith.
• Look for a warrant canary. A signed and dated canary tells you something about what has not happened yet, which is more than a promise does. How canaries work.
• Check what is logged. Custody and logging usually travel together, because an account needs records. See whether no-KYC services keep logs.
• Test with a small amount. The cheapest due diligence available is a swap near the minimum before you send a meaningful sum.

A step-by-step version of these checks, with what to look at in the code and in the network requests, is in how to verify a non-custodial swap.

Red flags that usually mean custodial

• A sign-up, a login, or an email confirmation before you can get a quote.
• A deposit address that stays the same across sessions rather than being generated per swap.
• Language about "funding your account" or a portfolio view of your holdings.
• Terms that reserve the right to request identity documents from any user at any time, at the operator's discretion.
• A refund process that requires you to prove ownership with a document instead of an address.

Refunds are the real test

Ask what happens when a swap cannot complete, because that scenario is where the two models separate most clearly. A well-built non-custodial flow asks for a refund address before you send anything and returns the original asset there automatically if the trade fails or the rate moves outside tolerance. Nothing about that process needs to know who you are.

A custodial service usually handles the same situation as a support case. Your funds sit in its account while a ticket is reviewed, and the review can attach conditions. If a service cannot explain its refund path in one plain sentence before you deposit, that is the answer to the custody question.

What non-custodial does not protect you from

Non-custodial is a specific property, not general safety, and treating it as a guarantee is its own risk. It does not undo a mistyped output address, because there is no operator holding the funds to call and reverse it. It does not protect you from a settlement failure or a delay on the settlement leg. It does not shield you from rate movement between the quote and the deposit. It does not make your on-chain activity private on a transparent chain, which is a separate problem that Monero itself solves and a swap does not.

It also does not make a service honest. A phishing clone of a legitimate non-custodial swap is still a scam, and the words on the page are trivial to copy. Confirm the domain, and read how to spot a swap scam if a site is new to you.

When custodial is the right tool anyway

There are jobs a custodial platform does that a swap does not. Bank transfers in and out, limit orders, margin, and deep order books for very large size all require a company holding funds. If you need those, use them with your eyes open and treat the platform as a venue rather than a wallet. Move coins off when the trade is done, keep only working balances there, and remember that a balance on someone else's books is a claim rather than money you hold. Anyone who has read an account freeze knows how that claim can behave under stress.

Side by side

• Who holds the funds. Custodial: the operator, until it pays out. Non-custodial: nobody on the interface side, only the settlement leg in transit.
• Can a deposit be frozen. Custodial: yes, by policy. Non-custodial: there is no balance to freeze.
• What identity is needed. Custodial: possibly none up front, potentially all of it later. Non-custodial: none, and none later either, because there is no lever to apply.
• What can be handed over on request. Custodial: account records and funds. Non-custodial: whatever was never collected, which should be close to nothing.
• Failure mode. Custodial: a support ticket with conditions. Non-custodial: an automatic refund to the address you set in advance.

Where MoneroSwap stands

MoneroSwap is non-custodial. We never hold your funds, so there is nothing for us to freeze or hand over. There is no account, no KYC, and no logs, the frontend is open source, and there is a signed warrant canary you can check. The settlement leg is handled by a settlement network in transit, as it is for any instant cross-chain swap, and we would rather say that plainly than pretend otherwise.

Do not take any of it on trust. Read the claims and check them on the verify page, look through the FAQ for minimums and refund handling, then start small with BTC to Monero or Monero to BTC, or browse all supported pairs.