Start Here
- Master Guidance Document — The complete regulatory framework with executive summary and non-negotiable elements
- Regulatory Spectrum — Where every jurisdiction sits on the insurance mandate spectrum
- What Works & What Doesn't — Evidence-based playbook of successes and failures
- Country Comparison Tables — Side-by-side data across all dimensions
The Regulatory Spectrum
Across the 18 jurisdictions profiled, insurance posture sorts into five distinct approaches. The distinction that matters most is mandatory vs voluntary and, within mandatory regimes, whether a numeric coverage minimum is prescribed.
| Approach | Examples | Key Feature |
|---|---|---|
| Mandatory comprehensive (numeric) | South Korea, Hong Kong | Prescribed coverage ratios (Korea ≥5% hot-wallet; HK 100% hot / 50% cold); tested in practice |
| Mandatory (categories, no numeric minimum) | UAE (VARA/ADGM/DFSA), Bahrain, Cayman, Nigeria | Required insurance types; Bahrain quantifies PII (BHD 100K), others principles-based / insure-or-mitigate |
| Insurance-or-capital (voluntary) | EU (MiCA Art. 67), France, Germany, Liechtenstein | Insurance is an elective alternative to own funds; scales with business size |
| Gating factor | Canada (CIRO) | Fidelity/specie insurance is mandatory in substance for higher custody tiers; no prescribed minimums |
| Voluntary / market-led | UK, US, Singapore, Bermuda, Switzerland, Japan, Australia | No mandate; coverage market-driven where insurance hubs / surplus lines exist |
Every deposit-guarantee and investor-compensation scheme surveyed (FDIC, SIPC, CDIC, CIPF, FSCS, DGS, esisuisse, SDIC, KDIC, DICJ, FCS) excludes crypto; the narrow exceptions are tokenised/security instruments (EU EBA tokenised-deposit guidance; Liechtenstein EAS investor compensation up to CHF 30,000 for qualifying security tokens).
Analysis
- The Regulatory Spectrum — Maps all 18 jurisdictions from no-framework to most prescriptive
- What Works & What Doesn't — Successes and failures, with verified evidence
- Country Comparison Tables — Comparative tables across all dimensions
Guidance Document
- Master Guidance Framework — Executive summary, non-negotiable elements, and full framework
- Insurance Provider Licensing — Licensing analysis across jurisdictions
- Insurance Product Taxonomy — Crime/specie, custody, cyber, D&O, E&O, parametric
- Market Capacity & Underwriters — Lloyd's syndicates, specialty MGAs, brokers, reinsurers (figures self-reported)
- Coverage Gaps & Exclusions — What ISN'T covered and why
- Custodian Insurance Requirements — Mandatory vs. voluntary by jurisdiction
- Self-Insurance & Captive Models — Exchange funds, Bermuda/Cayman captives, regulatory acceptance
- DeFi Insurance Protocols — Discretionary mutuals, classification debate
- Parametric & On-Chain Insurance — Oracle-triggered, smart contract automation
- Claims History & Loss Data — Major incidents, recovery rates, loss trends
- Actuarial & Risk Modeling — Challenges, approaches, capital treatment
- Deposit Guarantee Schemes — FSCS, FDIC, CDIC, DGS — all exclude crypto
- Taxation of Insurance Products — Premium tax, deductibility, captive taxation
- Compliance & Enforcement — AML, false insurance claims, regulatory actions
- Economic Outcomes — Market size, protection gap, cost-benefit analysis
- International Standards — IAIS, IOSCO, FSB, BIS, FATF positions
- Implementation Guide — Phased roadmap for regulators
Country Profiles
All 18 jurisdiction profiles below mirror the verified per-jurisdiction fact matrix (current to 4 June 2026). Market-capacity, premium, and per-policy-limit figures are self-reported by underwriters/brokers and flagged as such.
Europe
- United Kingdom — Voluntary; Lloyd's of London is the global hub; FCA/PRA oversight; FSCS excludes crypto even under the forthcoming regime (SI 2026/102, in force 25 Oct 2027); CP26/13 perimeter guidance (15 Apr 2026) adds no insurance mandate
- European Union — MiCA Art. 67 insurance-or-capital (voluntary); Solvency II Delegated Reg (EU) 2026/269 (OJ 18 Feb 2026) carries NO crypto charge; EIOPA's 100% crypto stress still a pending delegated act; MiCA transition ends 1 Jul 2026
- Germany — MiCAR via KMAG; Munich Re domestic underwriting champion; ~53 authorised CASPs — largest visible EU/EEA market (self-reported); KMAG grandfathering closed 31 Dec 2025
- France — PACTE DASP insurance-or-capital (2019, pioneered before MiCAR); voluntary; DASP transition ends 1 Jul 2026
- Liechtenstein — TVTG imposes no insurance mandate; MiCAR Art. 67 voluntary option; TT providers must obtain MiCAR authorisation by 1 Jul 2026; EAS is a PCC covering security tokens up to CHF 30,000 (unique)
- Switzerland — FINMA technology-neutral; no statutory insurance mandate; SST not Solvency II; esisuisse excludes all crypto; FinIA Crypto Institution licence proposed (not before 2027)
Americas
- United States — State-based insurance regulation; surplus lines dominant; no federal/state mandate; FDIC GENIUS-Act NPR (FIL-11-2026, 7 Apr 2026, proposed) bars pass-through insurance for stablecoin reserves; SEC/CFTC joint interpretation 17 Mar 2026
- Bermuda — BMA dual mandate; flexible surety-bond-or-trust-or-insurance under DABA; world's most developed dedicated DA insurance infrastructure (Class IIGB/IILT); PSPI class proposed; Embedded Supervision DeFi pilot completed 6 May 2026
- Cayman Islands — CIMA VASP regime; MC-RSOG (effective Feb 2026) insure-or-mitigate categories; first full VASP licence to BCXPro 5 Feb 2026; 82% of reviewed VASPs lacked cybersecurity insurance
- Canada — CIRO Feb 2026 four-tier custody framework with fidelity/specie insurance as gating factor (20% self-custody allowance at Tier 4); CDIC/CIPF exclude crypto; Stablecoin Act (Bill C-15) Royal Assent 26 Mar 2026, not yet in force
Asia-Pacific
- Singapore — MAS voluntary; PS-G03 custody-first (90% cold); 37 Major Payment Institutions with DPT activity; Lloyd's Asia capacity (Evertas/Arch up to US$420M per policy, self-reported)
- Japan — No standalone mandate under PSA; FIEA bill Cabinet-approved 10 Apr 2026 (mandatory liability reserve with approved-insurance option; penalty up to 10 yrs / JPY 10M); Coincheck/DMM Bitcoin lessons
- Hong Kong — SFC mandatory 100% hot / 50% cold compensation; 13 licensed VATPs; IA RBC 100% downward crypto stress (conclusions 8 May 2026); OSL US$1B Lloyd's programme
- Australia — No bespoke mandate (PI-only); Digital Assets Framework Act Royal Assent 8 Apr 2026, commences 9 Apr 2027; AML/CTF reform — existing entities (incl. DCEs) 31 Mar 2026, tranche-2 new sectors 1 Jul 2026
- South Korea — VAUPA mandatory ≥5% hot-wallet insurance/reserves; KRW 3B minimum (KRW-market exchanges); Nov 2025 Upbit restoration validated the regime; no-fault liability PROPOSED, not enacted (DABA phase-2 bill 8 Apr 2026)
Middle East & Africa
- UAE — VARA four mandatory insurance categories; ADGM PII; DFSA PII + cyber; VARA ETD Insurance Fund (31 Mar 2026); Federal Decree-Law No. 6 of 2025 compliance by Sep 2026
- Bahrain — CBB mandatory PII (BHD 100K minimum) + keyman + cybersecurity for CRA licensees; separate Digital Tokens (2023) and Stablecoin (SIO, Jul 2025) frameworks
- Emerging Markets — Brazil, Nigeria, South Africa, India: no domestic DA insurance product; Nigeria partial mandate (fidelity bond ≥25% of paid-up capital + user-asset insurance); South Africa Section 13 exemption
International Frameworks
- IAIS — Insurance Core Principles; no standalone digital asset insurance guidance
- IOSCO — DeFi insurance may be securities/derivatives; IOSCOPD747 custody provisions
- FSB, BIS, FATF & Geneva Association — Systemic risk, capital treatment, AML, cyber gap research; FATF R.15: of 138 jurisdictions assessed in 2025, ~1% fully and 29% largely compliant
Items
3 items under this folder.