Omnibus Account vs Segregated: Where Your Crypto Sits

An omnibus account pools many clients’ assets in one account, with an internal ledger recording who owns what. A segregated account gives each client a dedicated account. Most crypto exchanges and lenders run omnibus wallets, so a balance on screen is a claim against a pool. Packed Capital uses neither, trading inside the client’s own account.

When a venue says it is holding your bitcoin, there are two structurally different things that sentence can mean, and the difference only becomes visible when something goes wrong. Either there is an account with your name on it, or there is a large shared account and a database entry recording your share of it.

Both models are ordinary in traditional finance and both are used in crypto. This article explains what each one is, which one your venue is probably using, what the documented failures teach, and how a restricted sub-account fits between pooled custody and self-custody. It includes the part most managers skip, which is where this model stops protecting you.

What is an omnibus account?

An omnibus account is a single account that holds the assets of many clients together. The account sits in the name of the intermediary, the broker or the exchange, and the individual owners are recorded on that firm’s own books rather than at the level of the account itself.

Fortris puts the crypto version plainly: “Omnibus accounts are custodial accounts where multiple users’ assets are combined into a single account.” Onramp’s description adds the mechanism: “An omnibus account pools everyone’s bitcoin under the custodian’s control on an internal ledger.”

The appeal is operational. Pooling cuts the number of on-chain transactions, speeds up internal transfers, and lowers the cost of running the venue. Moving assets between two clients of the same exchange becomes a database update rather than a blockchain transaction, which is why exchange transfers are instant and free while withdrawals take time and cost a fee.

The cost is identifiability. Your coins are not separable from everyone else’s, and your ownership exists as a record maintained by the firm.

What is a segregated account?

A segregated account keeps one client’s assets in an account dedicated to that client. Fortris: “A segregated account provides individual asset segregation and isolation within a custodial framework. Each user or enterprise has a dedicated account where their assets are kept separate from others.”

For crypto specifically, Onramp draws the sharper line: “A segregated vault holds each client’s bitcoin in a dedicated on-chain address that is independently verifiable.” That verifiability is the substantive difference. With a dedicated address, ownership can be checked against the blockchain. With a pooled wallet, ownership can only be checked against the venue’s own database.

Segregation costs more to operate, which is why it tends to appear at higher account sizes, in institutional custody products, and in arrangements where the client is paying for the structure rather than for a free trading app.

How do omnibus and segregated accounts differ?

	Omnibus account	Segregated account	Self-custody
Assets held in	One pooled account, all clients	An account dedicated to you	Your own wallet
Your holding is	A ledger entry at the firm	An identifiable balance	Coins you control
Who signs transactions	The venue	The venue	You
Independently verifiable	No, only the total	Yes, if the address is disclosed	Yes
If the firm fails	Any shortfall affects the pool	Your account is identifiable	Unaffected by the firm
Typical cost	Free or low	Higher, usually institutional	Hardware plus your own time
Usual audience	Retail exchange and app users	Larger accounts, institutions	Anyone, at any size

The row that matters most is the last-but-two. A shortfall in a pooled account is a shortfall in something you share.

Which model do crypto exchanges actually use?

Most consolidate. When you deposit bitcoin to a large exchange, the coins are typically swept into the venue’s own hot and cold wallets alongside everyone else’s, and your balance becomes a number in the exchange’s database. Instant internal transfers and zero-fee trading between users are the visible symptoms of that design.

Proof-of-reserves reporting, which several exchanges publish, is built around this reality. It attests that total holdings cover total customer liabilities. It is an aggregate check on the pool, and it does not identify your specific coins. Our non-custodial crypto asset management guide covers where those attestations help and where they stop.

Lending platforms go further, because pooling is the product. Deposits are lent onward, which means the assets are meant to leave and the depositor holds a claim for their return. That is a different risk again, and we compare the trade-offs in non-custodial alternatives to Nexo and EarnPark.

What happened when pooled accounts failed?

Two documented cases, for different reasons.

FTX. In December 2022 the SEC charged Samuel Bankman-Fried with concealing the diversion of customer funds, alleging he “used commingled FTX customers’ funds at Alameda to make undisclosed venture investments, lavish real estate purchases, and large political donations” (SEC press release 2022-219). The pooled structure is what made that diversion possible without customers seeing it. Fortris records the result: FTX “held assets in omnibus accounts and commingled them with the assets of other business entities. After the exchange collapsed, it left FTX clients struggling to recover their assets.”

Prime Trust. Onramp’s account of the custodian’s failure identifies the same structural feature: “because client assets sat in pooled accounts rather than dedicated vaults, the shortfall was borne collectively.” A deficit in a shared pool distributes across everyone in it, regardless of which client’s activity created it.

Pooling did not cause the fraud at FTX or the shortfall at Prime Trust. It determined who absorbed the consequences and how long it took anyone to notice.

Does segregation help if the venue is hacked rather than insolvent?

Insolvency and a security breach are separate failures, and segregation behaves differently in each.

In an insolvency, identifiability is the whole argument. A client whose assets sat in a dedicated account can point to them; a client holding a share of a pool joins everyone else in a claim against whatever remains. That is the distinction the Prime Trust shortfall illustrates.

In a breach, the picture is less favourable. Attackers generally reach the keys, and a custodian’s keys sign for segregated addresses and omnibus wallets alike. Where segregation helps is in scope: separate vaults with separate keys mean a compromise of one does not automatically drain the rest, whereas a single hot wallet holding pooled deposits concentrates the whole balance behind one signature. Where it fails to help is that the operational key management remains the venue’s job either way.

This is why the security questions and the structure questions are both worth asking. Neither answer covers the other.

What does “qualified custodian” mean, and does it settle the question?

In US regulation, a qualified custodian is a defined category of institution, typically a bank, a registered broker-dealer or a futures commission merchant, that advisers are expected to use when holding client assets. The term signals a regulated entity subject to examination, and it does real work in traditional markets.

It settles less than it appears to in crypto. The label describes who is permitted to hold assets; it does not say whether that holder pools them. A qualified custodian can operate omnibus accounts, and a custodian outside the category can offer dedicated vaults. Commingled funds are a structural choice rather than a licensing outcome, so the pooling question survives every answer about status and jurisdiction. Ask about the account structure separately, even where the custodian’s credentials are impeccable.

Does a segregated account mean you hold the keys?

No, and this is the part worth being precise about, because it is routinely blurred in marketing.

A segregated account at a custodian or an exchange is still a custodial account. The venue generates the address, the venue holds the private key, and the venue signs the transaction when assets move. What segregation gives you is identifiability: your holding is distinguishable from other clients’ holdings, and where the address is disclosed you can check it against the chain yourself.

Level 1 is the only arrangement where nobody else can sign, and it earns nothing. Level 2 is where an account can be traded by someone else while the assets stay yours and identifiable. Level 4 is the arrangement to decline: whoever can withdraw can lose your assets, whatever the marketing says about partnership. The phrase this all sits under is covered in not your keys, not your coins, and the wider map of who can lose your money is in counterparty risk in crypto.

How do you find out which model your venue uses?

Five questions that produce a usable answer. Ask them in writing before funding anything.

Question two separates real segregation from the word being used loosely. A venue running dedicated vaults can name your address. A venue running an omnibus wallet will explain why it cannot, and that explanation is your answer.

Question four is the one that applies to managed accounts specifically. If the access you grant a manager can be limited to trading, custody stays with you. Our Deribit sub-account walkthrough shows the exact permission scopes involved.

Terms of service deserve the extra minute. Language permitting the firm to pool, lend or rehypothecate client assets appears in agreements whose interfaces show a tidy personal balance. For a structural comparison of the vehicles this all sits inside, see crypto SMA vs fund vs managed account.

Where does a restricted sub-account fit?

Packed Capital’s arrangement is level 2 on the ladder above, and we would rather describe its limits than oversell it.

The account is opened by the client, in the client’s name, at the client’s chosen venue. Packed operates inside a sub-account of it, restricted to trade permissions, so orders can be placed and no withdrawal is technically available to us. The assets are never pooled with other clients’ assets and never move to a Packed wallet, because there is no Packed wallet in the arrangement. Positions remain visible to the client continuously.

What that removes is Packed as a party who could take the money. What it does not remove is the exchange: the venue still holds the keys and still signs, so choosing a venue deliberately remains the client’s decision and their exposure. Anyone who tells you a managed exchange account is self-custody is describing something else.

On that footing, the Option Wheel starts at $100,000 and the Hedged Grid at $1,000,000, both targeting 20–25% a year. Targets, with real drawdowns in bad months and no contractual floor on a volatile asset. The strategies have run since 2018, our own capital first, across more than $100 million in monthly volume. If you want to see how the structure would look on your holdings, talk to us.

FAQ

What does omnibus account mean? An account in which one intermediary holds the assets of many clients together, with ownership recorded on the intermediary’s internal books. The account belongs to the firm; your share of it belongs to you as a claim recorded in their database.

Is a segregated account safer than an omnibus account? It removes one specific failure mode: a shortfall or a misuse affecting the shared pool. Both models leave a custodian holding the keys, so both leave you exposed to that custodian’s solvency and security. Segregation improves what you can verify and narrows what you share.

Do crypto exchanges keep customer funds separate? Most do not at the wallet level. Deposits are typically consolidated into the exchange’s own wallets and tracked internally, which is what makes instant internal transfers possible. Proof-of-reserves reports check totals rather than identifying individual holdings.

Can a manager trade my crypto without being able to withdraw it? Yes, where the venue supports scoped permissions. An API key or sub-account can be granted trading rights with withdrawal rights withheld, which lets a manager execute strategy while the ability to move assets out stays with the account holder.

What is rehypothecation, and why does it matter here? Reusing client assets as collateral for the firm’s own borrowing or lending. It is easiest inside pooled structures, where individual holdings are not separately identifiable, and it is the mechanism by which a depositor’s coins can be committed elsewhere while the balance on screen stays unchanged.

---

Sources: SEC press release 2022-219, FTX charges · Fortris, Omnibus vs Segregated Accounts in Digital Assets · Onramp Bitcoin, Omnibus Account · Venly, Omnibus vs Segregated Wallets