United Kingdom

Last Updated: June 2026

1. Executive Summary

The United Kingdom is the global hub for digital asset insurance, primarily through the Lloyd's of London specialty market. While the UK has no bespoke regulatory framework for digital asset insurance products, the existing FCA and PRA supervisory architecture applies to insurers and intermediaries writing digital asset lines. Lloyd's syndicates — including Atrium, Canopius, Chaucer, and Mosaic — along with specialty MGAs such as Evertas and AnchorWatch, have built the world's most developed digital asset insurance ecosystem. Major brokers Marsh, Aon, and Howden maintain dedicated London-based digital asset teams.

The market remains severely capacity-constrained relative to the total digital asset ecosystem. Estimated total global insurance capacity for digital asset risks is in the low single-digit billions of US dollars, against a total crypto market capitalisation exceeding $3 trillion. The Financial Services Compensation Scheme (FSCS) explicitly does not cover cryptoasset losses, even under the forthcoming comprehensive FCA cryptoasset regime (commencing 25 October 2027).

Regulatory Stance: Permissive — digital asset insurance is written under existing general insurance frameworks without specific prohibitions or bespoke requirements.

2. Lloyd's of London and Digital Asset Insurance

2.1 Lloyd's as the Global Centre for Digital Asset Risk Transfer

Lloyd's of London is the world's leading marketplace for specialty insurance and reinsurance, and it has become the primary venue for digital asset risk transfer globally. Digital asset insurance products at Lloyd's are underwritten through syndicates, placed by specialist brokers, and in some cases distributed through coverholders — delegated authorities empowered to bind risks on behalf of syndicates.

Source: Lloyd's — How the Market Works

2.2 Syndicates Writing Digital Asset Insurance

The following Lloyd's syndicates have been confirmed as active in digital asset insurance:

Additional syndicates reported as active in the broader digital asset insurance space by industry sources include Beazley and AXA XL, though specific digital asset product confirmations were not independently verified at the time of writing.

Source: Risk & Insurance — Crypto Insurance Gap, 2025

2.3 Products Available Through Lloyd's

Digital asset insurance products available through the Lloyd's market include:

Specie / Crime (Custody) Insurance

• Covers theft, fraud, and physical loss/damage to private key material
• Applies to both hot wallets (online) and cold wallets (offline storage)
• Includes coverage for employee dishonesty, duress/extortion, fraudulent transfer instructions, and computer fraud
• Canopius specifically covers "mysterious disappearance" of private key material

Source: Canopius — Cryptocurrency Insurance

Cyber and Technology E&O

• Covers network security breaches, data privacy incidents, system failure
• Mosaic's modular product offers standalone or blended cyber, tech E&O, and crime
• Capacity: up to $10M for cyber/tech, $5M for crime per Mosaic Syndicate 1609

Source: Mosaic press release, Jul 2025

Directors & Officers (D&O) Liability

• Available through Marsh DART facility and broader London market
• Covers securities claims, regulatory investigations, and management liability

Professional Indemnity / Errors & Omissions (E&O)

• For custodians, exchanges, wallet providers, and blockchain analytics firms

Hot Wallet Liability (Dynamic Limit)

• The Coincover/Atrium product features a dynamic limit that adjusts automatically in line with cryptocurrency price fluctuations, ensuring the insured is always indemnified for the underlying value
• Flexible limits from as little as GBP 1,000

Source: Lloyd's press release, 28 Feb 2020

Mining Equipment Insurance

• Physical loss or damage to mining hardware (Canopius)

Digital Art / NFT Coverage

• Physical loss or damage to artistic media and theft/physical loss of private keys (Canopius)

2.4 Estimated Total Capacity

Precise aggregate capacity figures for digital asset insurance through Lloyd's are not publicly disclosed. However, the following data points provide an indication:

• Marsh DART facility: Up to $825 million in capacity, backed by Lloyd's syndicates and London-based international insurers, launched March 2024. This is described as "the largest facility of its kind."
• Evertas: Per-policy limit expanded to $420 million (June 2023).
• AnchorWatch: Authorised to write up to $500 million per customer (increased from initial $100M at December 2024 launch).
• Aon: Reports more than $1.2 billion in individual client capacity available.
• Lloyd's PIF shared capacity: Approximately GBP 150 million across 27 managing agents.

The global digital asset insurance market was estimated at between $150 million and $300 million in gross written premium as of 2024, according to Howden.

Sources: Marsh press release, Mar 2024 | Evertas capacity expansion, Jun 2023 | AnchorWatch press release, Nov 2024

2.5 Typical Coverage Limits, Deductibles, and Premium Rates

Source: Relm Insurance — Crypto Asset Insurance, 2025 | AnchorWatch

2.6 Standard Exclusions

Common exclusions across digital asset insurance policies include:

• Value fluctuation / market risk — price volatility losses are universally excluded
• Fraudulent acts by the policyholder — intentional misconduct by the insured
• Unsecured or negligent key management — failure to follow minimum security protocols
• Unrecognised currencies — tokens not listed on major exchanges may be excluded
• Protocol-level failures — losses arising from blockchain consensus failures or hard forks (varies by policy)
• Sanctions exposure — transactions involving sanctioned entities or jurisdictions
• War and terrorism — standard market exclusions apply
• Consequential loss — typically limited to direct asset loss rather than business interruption
• DeFi protocol losses — most traditional policies exclude losses from DeFi protocol interactions unless specifically endorsed

Source: Hunton Andrews Kurth — Digital Asset Insurance Coverage Series, Part 5

2.7 Lloyd's Performance Management and Market Oversight

Lloyd's Corporation exercises oversight over syndicate business plans through its Performance Oversight function (formerly the Performance Management Directorate / PMD). Syndicates must submit annual business plans for approval, and Lloyd's reviews relative gross underwriting performance benchmarks.

The Product Innovation Facility (PIF), launched in June 2019, provides a "safe space" for underwriters to experiment with non-standard risks including digital assets. The PIF included 27 managing agents with shared capacity approaching GBP 150 million as of the February 2020 Coincover launch. The Coincover cryptocurrency wallet policy was the second product developed under the PIF.

As of 31 December 2024, there were 84 syndicates, 8 special purpose arrangements, and 9 syndicates-in-a-box at Lloyd's.

No dedicated "digital asset class" has been formally established as a separate Lloyd's class of business. Digital asset risks are written across existing classes including specie, crime, cyber, and financial institutions.

Source: Lloyd's — Performance Oversight | Lloyd's press release — Coincover, Feb 2020

3. Specialty Insurers and Coverholders

3.1 Evertas (formerly BitGo Insurance)

Status: Lloyd's of London Coverholder (granted February 2022)

Evertas describes itself as "the world's first company dedicated to crypto insurance." As a Lloyd's coverholder, Evertas has delegated authority to bind risks on behalf of Lloyd's syndicates, with policies written on A+ (Superior) rated Lloyd's paper.

• Backing syndicate: Arch (Lloyd's syndicate member)
• Per-policy limit: Expanded to $420 million (June 2023), described as the highest in the industry at the time
• Coverage types: Custodians, exchanges, bitcoin mining industry
• On-chain innovation: In July 2024, Evertas partnered with Nayms to enable Lloyd's-backed insurance policies to be arranged on the Ethereum blockchain, with premium payments in USDC or native cryptocurrency. CEO J. Gdanski described this as "a seminal piece of infrastructure" enabling seamless interaction between public blockchain users and "highly regulated, traditional, fiat-backed institutions."

Sources: GlobeNewsWire — Evertas coverholder status, Feb 2022 | GlobeNewsWire — $420M capacity, Jun 2023 | CoinDesk — Ethereum payments, Jul 2024

3.2 AnchorWatch

Status: Lloyd's of London Coverholder (November 2024); began operations December 2024

AnchorWatch provides bitcoin-specific insurance with integrated custody technology (Trident Vault), embedding regulated insurance directly into its custody solution.

• Initial binding authority: Up to $100 million per customer (December 2024)
• Current authority: Up to $500 million per customer
• Premium: Starting at 0.55% of the value of bitcoin holdings annually
• Coverage range: $250,000 to $100 million per policy
• Covered perils: Theft, kidnappings, catastrophic events, and fraud
• Key feature: Customers do not surrender private access keys — described as the first time retail customers have direct access to bitcoin insurance

Source: BusinessWire — AnchorWatch coverholder, Nov 2024

3.3 Coincover

Status: Welsh-headquartered crypto protection firm; not itself an insurer but distributes Lloyd's-backed coverage

Coincover's product is a liability insurance policy created by Lloyd's syndicate Atrium, with TMK and Markel on the supporting panel. The policy protects against theft of cryptocurrency held in online (hot) wallets. Coincover reports protecting $300M+ of crypto across 200+ different cryptocurrencies held in more than 15,000 wallets.

Coincover is not separately FCA-authorised as an insurer. The insurance products are underwritten by Lloyd's syndicates which are themselves regulated by the PRA (prudential) and FCA (conduct).

Source: Lloyd's press release, Feb 2020

3.4 Native

Status: Specialist digital asset insurance broker

Native launched the Native Risk Collective in July 2025, an underwriting partnership that directly links vetted cybersecurity and risk mitigation technology to improved insurance terms. The Collective is the first initiative of its kind.

• Lead underwriters: Lloyd's underwriters Mosaic Insurance and Chaucer
• Security vendor partners: Hacken, Circuit, BreachBits, Hypernative, Station70
• Coverage: Crime, Cyber, and Tech E&O policies
• Mechanism: Clients adopting one or more approved security technologies gain access to preferential insurance rates

Source: CoinDesk — Native Risk Collective, Jul 2025

3.5 BDIC (Blockchain Deposit Insurance Corporation)

BDIC, a Bermuda-based digital insurance start-up, was reported in January 2025 to be targeting Lloyd's coverholder status to underwrite cryptocurrency-related risks. Current status: NOT VERIFIED whether coverholder status has been granted.

Source: The Insurer — BDIC targets Lloyd's coverholder status, Jan 2025

4. Major Brokers

4.1 Marsh — Digital Asset Risk Transfer (DART)

Marsh operates a dedicated Digital Asset Risk Transfer (DART) team with offices in New York and London. Key developments:

• Global Custody Facility (March 2024): Up to $825 million capacity — the largest digital asset insurance facility of its kind. Backed by Lloyd's syndicates and London-based international insurers.
• Covered risks: Physical natural perils, third-party physical theft, internal collusion by employees responsible for secure storage
• Scope: Cold storage and certain MPC (Multi-Party Computation) custody solutions
• Additional lines: D&O, crime, E&O, cyber, employment practices, K&R, employed lawyers, representations and warranties
• Innovation: Partnered with Curv and Munich Re to develop combined crime + cyber insurance solutions

Source: Marsh press release, Mar 2024 | Marsh UK — Blockchain and DART solutions

4.2 Aon

Aon appointed Rupert Poland as head of its EMEA digital asset practice, based in London, reporting to the executive director of the EMEA Financial Services Group. The team comprises more than 60 professionals focused on developing risk solutions for the digital asset sector.

• Capacity: Aon reports more than $1.2 billion in individual client capacity available
• On-chain pilot: In 2024, Aon completed a pilot programme for placing insurance using blockchain and smart contract technologies in collaboration with Nayms SAC Ltd and Copper.co
• Notable placement: Crypto.com's $120 million insurance policy for its US custody trust company was arranged by Aon

Sources: Insurance Business UK — Aon appoints Poland, 2025 | Insurance Times — Aon digital asset drive, 2025

4.3 Howden

Howden maintains a specialist Digital Assets, Crypto & Blockchain team headquartered in London with offices in Dubai, Australia, Singapore, Israel, and throughout Europe.

• Key offering: Professional indemnity, cyber, crime/vault insurance
• Innovation (July 2025): Partnered with London law firm Lawrence Stephens to combine cryptocurrency theft insurance with legal asset recovery services — providing post-incident legal and forensic recovery capabilities alongside insurance coverage
• Market estimate: Howden estimated global digital asset insurance GWP at $150–$300 million as of 2024

Source: Insurance Times — Howden crypto proposition, 2025

4.4 Gallagher

Gallagher has a dedicated Digital Assets unit merged with its Asset Management team. The firm provides access to proprietary broker-designed insurance products for digital asset-related clients. Peter Wedge FCII of Gallagher is lead author of the Insurance Institute of London's Research Study Report on Digital Assets and Insurance (RS 270).

Source: IIL — Digital Assets & Insurance RS 270, 2025

5. Reinsurers

5.1 Munich Re

Munich Re offers dedicated Digital Asset Protection insurance, marketed as covering the digital asset and Web3 industry. Products include:

• Digital Asset Comprehensive Crime (Plus): Covers external hacking, employee fraud, physical theft of cold-storage media, and breaches of third-party wallet technology providers
• Staking Risk and E&O Insurance: Covers slashing risks in Proof-of-Stake mechanisms (e.g., Ethereum)
• Smart Contract Risks Insurance: Protects against asset loss from smart contract failures, breaches, compromises, or exploitations

Munich Re cites Chainalysis data that "total losses from crypto hacks in 2025 amounted to $3.4bn."

Munich Re also participated in Marsh's partnership with Curv to develop combined traditional crime insurance with cyber insurance elements for digital asset custody.

Source: Munich Re — Digital Asset Protection

5.2 Swiss Re

Swiss Re has not been independently verified as offering a standalone digital asset reinsurance product. Swiss Re has collaborated with Munich Re on fintech initiatives (e.g., backing Instnt's identity fraud insurance). Specific digital asset reinsurance capacity: NOT VERIFIED.

Source: Reinsurance News — Munich Re and Swiss Re back Instnt

6. FCA Regulation of Insurance

6.1 Existing Insurance Regulatory Framework

The FCA regulates insurance conduct in the UK through the Insurance Conduct of Business Sourcebook (ICOBS), which forms part of the FCA Handbook. ICOBS applies to firms conducting general insurance business and pure protection insurance business from a UK establishment. ICOBS requires that customers receive "clear, fair information" when sold insurance products.

ICOBS applies to the insurance product itself — not to the underlying asset being insured. Therefore, insurance products covering digital asset risks are subject to ICOBS to the same extent as any other general insurance product, provided they are distributed to UK customers by FCA-authorised firms.

Source: FCA — Insurance Conduct of Business Sourcebook (ICOBS)

6.2 FCA Authorization for Insurance Intermediaries

Firms selling, advising on, or arranging digital asset insurance in the UK require FCA authorisation. The FCA handles applications for:

• General insurance intermediaries — effecting/carrying out contracts of insurance, distribution, and brokering
• Lloyd's and London Market Intermediaries — specialist category
• Price comparison websites

Authorisation is available under Part 4A FSMA (full permission) or limited permission for firms offering insurance as a secondary business activity.

Application fees: Range from GBP 280 (Category 1) to GBP 222,940 (Category 10). Most general insurance intermediary applications fall into Category 4. Firms also pay annual periodic fees once authorised.

Timeline: The FCA does not publish guaranteed processing times for insurance intermediary applications. Industry experience suggests 6–12 months for straightforward applications, though complex cases may take longer. (This figure is an industry estimate, not an FCA commitment.)

Sources: FCA — Insurance sellers and authorisation | FCA — Authorisation application fees

6.3 FCA Cryptoasset Financial Promotions Regime

On 8 June 2023, the FCA published final rules on cryptoasset financial promotions (PS23/6), effective 8 October 2023. Key requirements:

• Ban on incentives to invest (e.g., sign-up bonuses)
• Positive frictions: Personalised risk warning and 24-hour cooling-off period for first-time investors
• Client categorisation and appropriateness assessments
• Mandatory risk warning emphasising high-risk nature and absence of FSCS/FOS protection
• Universal scope: Applies to all firms marketing cryptoassets to UK consumers, regardless of location

This regime applies to the marketing of cryptoassets, not specifically to insurance products. However, firms marketing insurance that covers digital assets, or marketing cryptoasset services that include insurance as a feature, should consider whether their promotions trigger the cryptoasset financial promotions regime.

Source: FCA — PS23/6: Financial promotion rules for cryptoassets

6.4 FCA New Cryptoasset Regulatory Regime (2026–2027)

The Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026 (SI 2026/102) was made on 4 February 2026 and comes into force on 25 October 2027.

Key regulated activities requiring FCA authorisation:

1. Issuing qualifying stablecoins
2. Safeguarding and administering qualifying cryptoassets
3. Operating cryptoasset trading platforms
4. Dealing in or arranging transactions in qualifying cryptoassets
5. Conducting qualifying cryptoasset staking

Application gateway: Open from 30 September 2026 to 28 February 2027

The FCA published CP25/25 (September 2025) on the application of the FCA Handbook to regulated cryptoasset activities. Notably, the consultation confirmed that certain COBS chapters, including those on insurance and pensions, will not apply to cryptoasset firms. The regime does not create new insurance-specific requirements for digital asset firms.

The FCA followed with CP26/4 (published 23 January 2026), the second part of the Handbook-application consultation, which proposes extending CASS 17-style safeguarding to cryptoasset custody — including mandatory use of a non-statutory trust for client cryptoassets, daily reconciliations, and shortfall-resolution expectations. The proposed custody protection mechanism is structural (trust segregation), not a mandatory insurance requirement. On 15 April 2026 the FCA published CP26/13: Cryptoasset Perimeter Guidance (consultation closing 3 June 2026), draft guidance interpreting the regulatory perimeter for the seven cryptoasset activities (issuance, custody, trading platforms, dealing/arranging) ahead of the 25 October 2027 regime; CP26/13 does not introduce any insurance mandate for custodians or other cryptoasset firms.

Sources: Legislation.gov.uk — SI 2026/102 | FCA — New regime for cryptoasset regulation | Sidley Austin — UK Cryptoasset Regulation Action Points for 2026–27, Jan 2026 | FCA — CP25/25 | FCA — CP26/4 | FCA — CP26/13 Cryptoasset Perimeter Guidance

6.5 DeFi Insurance Protocols: Nexus Mutual

Nexus Mutual is a UK-registered entity:

• Company name: Nexus Mutual Limited
• Company number: 10917763
• Incorporated: 16 August 2017
• Registered office: 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ
• Legal structure: Private company limited by guarantee without share capital

Nexus Mutual operates as a discretionary mutual — members have no contractual obligation to pay claims. This structure enables it to operate without FCA authorisation as an insurer because it does not carry on "insurance business" within the meaning of FSMA. The FCA approved the use of the word "mutual" in the company name.

Nexus Mutual is not FCA-authorised as an insurer and does not appear on the FCA Register as a regulated firm (as distinct from the unrelated "Nexus Underwriting Limited" which is a separate entity). Its DeFi cover products are not regulated insurance products under UK law.

Source: Companies House — Nexus Mutual Limited | CoinDesk — Nexus Mutual, Nov 2025

7. PRA Prudential Requirements

7.1 Solvency UK Framework

The PRA regulates all UK-authorised insurers and reinsurers under the Solvency UK framework (the UK's post-Brexit adaptation of Solvency II). The PRA published the final Solvency UK reforms in 2024, with implementation ongoing through 2025-2026.

Insurers writing digital asset lines must hold capital in accordance with standard Solvency UK requirements. There is no separate or bespoke capital treatment for digital asset insurance liabilities. Capital charges are calculated under the standard formula or an approved internal model, treating digital asset exposures within existing risk categories (primarily underwriting risk, operational risk, and counterparty default risk).

Source: Bank of England — Solvency II / Solvency UK

7.2 PRA Supervisory Priorities (2025)

The PRA's annual Dear CEO Letter for insurers (published 9 January 2025) sets out supervision priorities focusing on:

• Financial and operational resilience
• Risk management
• Implementation of Solvency UK reforms
• Reinsurance risk

The letter states the PRA will continue to take "a proactive approach to digital innovations through its insurer start-up unit" and contribute to international digitalisation standards through the IAIS Fintech Forum. However, digital asset insurance is not identified as a standalone supervisory priority.

Source: Linklaters — PRA Dear CEO letter 2025 priorities | Hogan Lovells — PRA 2025 priorities

7.3 PRA Authorization for New Insurers

The PRA and FCA jointly operate a New Insurer Start-Up Unit for firms seeking to establish as authorised insurers. This would be relevant for any digital asset-focused insurer seeking PRA authorisation (as opposed to operating as a Lloyd's coverholder or MGA).

Source: Bank of England — New Insurer Start-Up Unit Guide

7.4 Risk Modelling Expectations

The PRA has not published specific guidance on risk modelling for digital asset insurance portfolios. Insurers writing these lines are expected to apply the same standards of actuarial rigour as for any other class. Key challenges include:

• Limited historical loss data — the asset class has a short claims history
• Correlation risk — a single exploit or protocol failure could trigger multiple claims simultaneously
• Valuation volatility — insured values fluctuate significantly between inception and claims notification

NO DATA FOUND on specific PRA internal model approvals for digital asset classes.

8. FSCS (Financial Services Compensation Scheme)

8.1 No FSCS Coverage for Cryptoasset Losses

The FSCS has published explicit guidance confirming it does not cover cryptoasset losses:

"FSCS cannot protect you if a platform that exchanges or holds them goes out of business... Cryptoassets generally aren't protected by organisations like the FCA or FSCS."

The FSCS identifies five major risk factors for consumers: extreme price volatility, vulnerability to hacking and theft, difficulty converting to usable currency, absence of regulatory oversight, and vulnerability to sudden regulatory bans.

Source: FSCS — Cryptoassets: Are they covered, and what's the risk?

8.2 FSCS Insurance Compensation Limits

For general insurance claims (non-compulsory), the FSCS covers 90% of the claim with no upper limit. For compulsory insurance (e.g., employer's liability, motor), 100% of the claim is covered.

However, these limits apply only where the underlying insurance product is itself regulated and the insurer is FSCS-protected. A digital asset insurance policy written by a PRA-authorised insurer or through Lloyd's would potentially trigger FSCS protection if the insurer failed — protecting the policyholder's claim on the insurer, not the underlying cryptoasset loss.

Source: FSCS — Investment types

8.3 FSCS Under the New Cryptoasset Regime

The FCA's new cryptoasset regulatory framework (SI 2026/102, effective 25 October 2027) explicitly does not extend FSCS coverage to cryptoasset activities. Linklaters has noted a potential inconsistency: "a claim about a share held in custody would be covered by the FSCS but a claim about safeguarding a token that represents the share on a blockchain would not be covered."

The FCA's mandatory risk warning for cryptoasset financial promotions (PS23/6) requires firms to notify consumers that they "should not expect protection from the Financial Services Compensation Scheme."

Sources: Linklaters — FCA rules for UK-regulated crypto activities | FCA — PS23/6

9. Licensing and Registration for Insurance Providers

9.1 Routes to Market for Digital Asset Insurance

There are three primary routes for providing digital asset insurance in the UK:

Route 1: Lloyd's Syndicate

• Requires Lloyd's Corporation approval of syndicate business plan
• Must have a managing agent approved by Lloyd's and the PRA
• Capital provided by Names (individuals/corporations)
• Digital asset risks written across existing classes (specie, crime, cyber, FI)

Route 2: Lloyd's Coverholder / Delegated Authority

• Binding authority granted by one or more Lloyd's syndicates
• Coverholder must be approved by Lloyd's and typically FCA-authorised
• Examples: Evertas, AnchorWatch
• Lower capital requirements than establishing a syndicate

Route 3: PRA-Authorised Insurer

• Full PRA and FCA dual authorisation required
• Must meet Solvency UK capital requirements
• Can write policies directly (not through Lloyd's)
• The PRA/FCA New Insurer Start-Up Unit facilitates applications

9.2 Lloyd's Syndicate Formation and Approval

To form a new Lloyd's syndicate or add a new class of business (such as digital asset coverage):

1. Submit a Syndicate Business Forecast (SBF) to Lloyd's Performance Oversight
2. Managing agent must be PRA-authorised and Lloyd's-approved
3. Lloyd's assesses underwriting strategy, capital adequacy, risk management, and reinsurance programme
4. Business plan must demonstrate adequate expertise and data for the proposed class
5. Annual review cycle — plans reviewed and approved each year

No specific syndicate has been publicly reported as forming solely to write digital asset business. Existing syndicates have added digital asset coverage to their existing books.

Source: Lloyd's — Performance Oversight

9.3 Surplus Lines / Non-Admitted Considerations

The UK does not operate a surplus lines system analogous to the

• EEA insurers may continue to service existing UK contracts under the Temporary Permissions Regime (post-Brexit)
• Non-admitted insurers may write risks where no UK-authorised capacity is available, subject to local tax obligations (Insurance Premium Tax)
• Bermuda-based insurers (e.g., BDIC, Relm Insurance) may access UK risk through London market brokers

10. Claims History and Loss Data

10.1 Industry Loss Data

Chainalysis reported total cryptocurrency theft reached $3.41 billion in 2025, up from $3.38 billion in 2024. The single largest incident was the Bybit exchange hack ($1.5 billion), accounting for approximately 44% of the annual total. North Korean hackers stole $2.02 billion in 2025 alone (51% year-over-year increase).

Source: Chainalysis — 2025 Crypto Theft Report

10.2 Notable Claims Through Lloyd's

Specific digital asset insurance claims processed through Lloyd's are not publicly disclosed due to confidentiality. The London market does not publish claims-level data for individual policies.

Historical context relevant to London market capacity:

• BitGo held a $250 million policy through Lloyd's and other European companies covering digital assets in its custody against copying/theft of private keys, insider theft, and loss of keys
• The series of major exchange hacks (Mt. Gox 2014, Bitfinex 2016, Coincheck 2018, FTX collapse 2022) significantly influenced London market appetite and pricing

Source: Hunton Andrews Kurth — Digital Asset Insurance Coverage Series, Part 4

10.3 Recovery Rates and Loss Ratios

NO DATA FOUND — specific loss ratios for digital asset insurance lines are not publicly available. Industry observers note:

• Limited historical claims data makes actuarial pricing difficult
• Insurers "fear catastrophic events that could trigger correlated claims"
• The concentration of losses in a small number of very large incidents (top 3 hacks = 69% of 2025 losses) creates "lumpy" loss experience
• Premium rates (0.8%–5% depending on storage type) reflect the high-risk, low-data environment — significantly above comparable traditional crime insurance rates (< 0.5%)

11. The Protection Gap

11.1 Scale of the Gap

The digital asset insurance market faces a profound protection gap:

The gap exists because:

• Available insurance capacity is minuscule relative to total assets under custody
• Premiums are expensive (1%–5% of covered value)
• Underwriters lack actuarial data and claims history
• Correlated risk (a single protocol failure could trigger systemic claims)
• Policies typically cover only a portion of total assets under management

Source: Risk & Insurance — Crypto Insurance Gap, 2025

11.2 Coverage Gaps and Exclusions

Key coverage gaps in current digital asset insurance products:

1. DeFi protocol losses — most traditional policies exclude DeFi interactions
2. Staking losses — only Munich Re offers verified staking-specific coverage (slashing risk)
3. Bridge exploits — cross-chain bridge failures are generally uninsured
4. Market value vs. purchase price — some policies cover purchase price rather than current market value, creating significant gaps during price appreciation
5. Partial coverage — most institutional policies cover only a fraction of total assets under custody
6. Retail gap — until AnchorWatch (December 2024), no direct-to-retail bitcoin insurance existed through Lloyd's
7. NFT-specific coverage — limited to Canopius for institutional/private collectors

12. Market Developments (2024–2026)

12.1 Key Milestones

12.2 Lloyd's Lab and Innovation

The Lloyd's Lab Accelerator is Europe's top insurance-focused innovation hub, running 10-week InsurTech programmes. Its fifteenth cohort included digital asset modernisation as a focus area. The Lloyd's Lab has facilitated connections between blockchain startups and Lloyd's market participants.

Source: Lloyd's — Cohort 15

12.3 On-Chain Insurance Infrastructure

The Evertas/Nayms partnership (July 2024) represents a significant innovation: Lloyd's-backed insurance policies can now be arranged on the public Ethereum blockchain with premium payments in USDC or native cryptocurrency. Nayms (a play on Lloyd's "Names") operates as a digital marketplace connecting brokers and underwriters with crypto-native capital.

This creates a potential pathway for integrating DeFi insurance protocols with traditional Lloyd's market capacity — though regulatory treatment of on-chain policy issuance under UK insurance law remains evolving.

Source: CoinDesk — Lloyd's on Ethereum, Jul 2024

12.4 UK Cryptoassets Taskforce

The Cryptoassets Taskforce was launched in March 2018 by the Chancellor of the Exchequer, bringing together HM Treasury, the FCA, and the Bank of England. The Taskforce published its final report in October 2018.

The FCA has not proposed mandatory cryptoasset-specific insurance under the new regime. However, firms are expected to "assess their operational and custodial risks and consider appropriate insurance coverage to demonstrate robust consumer protection and operational resilience."

Source: Bank of England — Cryptoassets Taskforce Report, Oct 2018

12.5 International Context

The UK's position as the global hub for digital asset insurance should be understood relative to:

• Bermuda: Home to several specialist digital asset insurers (Relm Insurance, BDIC) that access London market reinsurance
• EU: MiCA regulation does not mandate specific digital asset insurance
• United States: NYDFS requires custodians to maintain insurance but does not prescribe specific products; surplus lines market is active
• IAIS: The International Association of Insurance Supervisors has begun examining digital asset insurance through its Fintech Forum, with PRA participation

13. Assessment

13.1 What Works

1. Lloyd's ecosystem is unmatched. The combination of syndicates, coverholders, specialist brokers, and the PIF creates the world's most developed digital asset insurance market. No other jurisdiction offers comparable depth of product, capacity, or expertise.

2. Regulatory pragmatism. The UK has not created unnecessary bespoke regulation for digital asset insurance. Existing FCA/PRA frameworks apply proportionately, allowing the market to develop organically.

3. Innovation velocity. The Lloyd's Lab, PIF, and on-chain insurance experiments (Evertas/Nayms) demonstrate willingness to support insurance technology innovation.

4. Broker infrastructure. Marsh ($825M facility), Aon ($1.2B+ capacity, 60+ person team), Howden, and Gallagher all maintain dedicated London-based digital asset practices.

13.2 What Doesn't Work

1. Massive protection gap. Only ~11% of crypto holders are insured. Total global capacity is dwarfed by the $3+ trillion crypto market cap and $3.4B in annual theft losses. The insurance industry is failing to keep pace with demand.

2. No FSCS safety net. The explicit exclusion of cryptoassets from FSCS — even under the new 2027 regime — leaves consumers exposed. The Linklaters-identified inconsistency (tokenised shares unprotected while traditional shares are protected) is a policy gap requiring attention.

3. Opaque claims data. The absence of published claims experience, loss ratios, or recovery rate data for digital asset lines impedes actuarial development and market entry by new capacity providers.

4. Correlated risk problem unsolved. A single major protocol failure or exchange hack can trigger multiple simultaneous claims. The industry has not developed adequate tools for modelling and pricing this systemic risk.

5. DeFi coverage gap. Traditional Lloyd's policies largely exclude DeFi protocol losses, leaving the fastest-growing segment of digital finance uninsured.

13.3 Lessons for Policymakers

1. Mandatory insurance requirements could accelerate market development. If the FCA's new cryptoasset regime required licensed custodians to maintain minimum insurance coverage (as NYDFS requires), it would create demand certainty for underwriters and potentially unlock new capacity.

2. Standardised licensing frameworks for digital asset insurers could reduce barriers to entry. The current system requires navigating either Lloyd's syndicate/coverholder approval or PRA dual authorisation — both lengthy processes.

3. An industry loss database would transform risk pricing. The FSB or IAIS could facilitate a confidential, aggregated digital asset insurance claims database analogous to those used for catastrophe modelling.

4. FSCS inconsistency requires resolution. The differential treatment of tokenised and non-tokenised versions of the same underlying asset is logically indefensible and should be addressed before the October 2027 regime takes effect.

5. DeFi insurance protocol regulation needs clarity. Nexus Mutual's discretionary mutual structure enables it to operate without FCA authorisation, but this leaves its members without regulatory protection. The FCA should clarify the boundary between "insurance" and "discretionary cover" in the context of on-chain risk pooling.

14. Key Regulatory Bodies and Resources

15. Verification Notes

Sources Successfully Verified via WebSearch and/or WebFetch

• Lloyd's press release on Coincover product (28 Feb 2020) — confirmed via lloyds.com
• Evertas coverholder status (Feb 2022) and $420M capacity expansion (Jun 2023) — confirmed via GlobeNewsWire
• AnchorWatch coverholder status (Nov 2024) — confirmed via BusinessWire
• Marsh $825M facility (Mar 2024) — confirmed via marsh.com
• Mosaic Syndicate 1609 digital asset product (Jul 2025) — confirmed via mosaicinsurance.com
• Native Risk Collective (Jul 2025) — confirmed via CoinDesk
• Howden + Lawrence Stephens partnership (Jul 2025) — confirmed via Insurance Times
• SI 2026/102 enacted (4 Feb 2026) — confirmed via legislation.gov.uk
• FCA PS23/6 financial promotions rules — confirmed via fca.org.uk
• FCA CP25/25 handbook application — confirmed via fca.org.uk
• FSCS cryptoassets guidance — confirmed via fscs.org.uk
• PRA Dear CEO Letter 2025 — confirmed via Linklaters, Hogan Lovells
• Chainalysis $3.41B theft data 2025 — confirmed via chainalysis.com
• Munich Re Digital Asset Protection products — confirmed via munichre.com
• Nexus Mutual company registration (10917763) — confirmed via Companies House
• Canopius cryptocurrency insurance products — confirmed via canopius.com
• Aon EMEA digital asset practice — confirmed via Insurance Business UK, Insurance Times
• Gallagher RS 270 digital assets research — confirmed via IIL

Data Points Marked as Not Verified or No Data Found

• Swiss Re specific digital asset reinsurance capacity — NOT VERIFIED
• BDIC Lloyd's coverholder status (outcome) — NOT VERIFIED
• Specific deductible/retention amounts for digital asset policies — NOT VERIFIED (commercially sensitive)
• Loss ratios for digital asset insurance lines — NO DATA FOUND
• Recovery rates on digital asset insurance claims — NO DATA FOUND
• PRA internal model approvals for digital asset classes — NO DATA FOUND
• Beazley, AXA XL specific digital asset product details — NOT VERIFIED (reported by industry sources but not independently confirmed)
• Specific number of digital asset insurance claims processed through Lloyd's — not publicly disclosed

Refresh 2026-06-04 (window: 2026-03-20 → 2026-06-04)

• New development added: FCA CP26/13: Cryptoasset Perimeter Guidance — published 15 April 2026, consultation closing 3 June 2026 — confirmed via fca.org.uk. Verified that CP26/13 introduces no insurance mandate for cryptoasset custodians; it is perimeter/authorisation-scope guidance. Added to §6.4 and §12.1.
• Context added (CP26/4): FCA CP26/4 (published 23 January 2026 — outside the refresh window, added for completeness) proposes CASS 17-style non-statutory-trust safeguarding for cryptoasset custody, a structural protection mechanism, not a mandatory insurance requirement. This corroborates the file's central claim that UK custodian insurance remains voluntary under the forthcoming regime.
• High-stakes claims re-verified unchanged (no correction needed):
  • FSCS does not cover cryptoasset losses (general-insurance cover 90% no upper limit; compulsory 100%) — fscs.org.uk, unchanged.
  • No mandatory custodian/VASP insurance under SI 2026/102 or any 2026 consultation — fca.org.uk, unchanged.
  • Chainalysis 2025 crypto theft $3.41bn (Bybit $1.5bn ≈44%; DPRK $2.02bn) — re-confirmed via chainalysis.com (the Marsh 2026 outlook's "~$2.94bn / ~200 incidents" is a different security-incident tracker methodology, not a contradiction).
  • Marsh DART $825M facility (Mar 2024) and Aon $1.2bn+ client capacity — self-reported broker figures, unchanged; flagged as such.
  • Nexus Mutual = discretionary mutual (not FCA-authorised insurer), Companies House no. 10917763 — unchanged.

Methodology

All factual claims were verified through WebSearch queries and, where possible, confirmed by fetching the original source page via WebFetch. Sources are cited inline with full URLs. Where data could not be independently verified, the text explicitly states "NOT VERIFIED" or "NO DATA FOUND." No claims from Wikipedia, Reddit, Quora, or Medium were included. No proposed legislation is presented as enacted law. Market-capacity, premium, and GWP figures are flagged as self-reported / broker estimates with attribution. Mandatory vs voluntary insurance and regulated-insurance vs discretionary-mutual distinctions are stated explicitly.

Related coverage

United Kingdom in other research domains:

• CBDC Frameworks
• Crypto Mining Regulations
• DeFi Regulation & Liability Frameworks
• Digital Asset License Map
• Digital Asset Taxation
• Institutional Crypto Custody Regulations
• NFT & Digital Collectibles Regulations
• Payment Services & Crypto Payment Regulation
• Stablecoin Regulations & License Regimes
• Tokenized Real-World Assets (RWA) Regulation