Pillars of wealth protection

For Xapo Bank, our members’ trust is something we have to earn. We never take it for granted. This is why we insist on exemplary standards of physical and digital security.

These robust pillars of protection offer you a unique, all-encompassing combination of safeguards to protect both your deposits and your personal information.

Licensed in Gibraltar

Xapo Bank is licensed in one of the world’s most trusted financial jurisdictions – Gibraltar. Our banking licence is issued and regulated by the Gibraltar Financial Services Commission and we are part of the Gibraltar Deposit Guarantee Scheme.

Fully regulated

We adhere to strict regulatory frameworks. Xapo Bank and Xapo VASP are legal entities regulated by the Gibraltar Financial Services Commission. Eligible USD deposits are covered up to 100,000 US Dollars².

Unrivalled digital security

As pioneers in Bitcoin, we constantly invest in new security tech to ensure our members’ wealth is safe and secure. We use best-in-class security tools and digital intelligence to monitor market activity, predicting and protecting against potential issues.

Secure Headquarters

Our headquarters is housed in a 19th century army barracks on the Rock of Gibraltar – in the heart of one of the world’s most trusted financial jurisdictions. Should you find yourself nearby, we look forward to welcoming you in person.

Uncompromised financial protection

Xapo holds one of the largest Bitcoin reserves in the world. Together with our liquid financial assets and solid balance sheet, our commitment to Bitcoin is generating interest for our members – while ensuring the highest levels of protection. Built on solid foundations, we are here for the long term.

Personalised support

All our members have access to a dedicated Xapo Bank account manager – on hand to give peace of mind, answer day-to-day questions and guide you at every stage of your wealth creation journey. We’re proud to unite the personalised service of traditional private banking with the security and flexibility of Bitcoin.

A rewarding, member-centric relationship

Members of Xapo Bank have the reassurance of knowing their wealth is protected by one of the world’s most renowned financial jurisdictions.

Gibraltar is an icon in both modern banking and crypto and is at the forefront of financial innovation. As a champion for the blockchain and Distributed Ledger Technology (DLT) sector, Gibraltar has played a key role in developing market-leading frameworks for this fast changing industry. In 2018, it was the first in the world to deliver a DLT framework, designed to evolve dynamically without compromising core regulatory and legislative principles.

Xapo Bank License

Xapo Bank is regulated and authorised as a credit institution to provide fiat related services.

USD deposits held with Xapo Bank are covered by the Gibraltar Deposit Guarantee Scheme. Eligible depositors are covered up to 100,000.00 US Dollars*. The GDGS does not regulate us or other banks. Regulation is carried out by the Gibraltar Financial Services Commission.

Xapo VASP License

Xapo VASP is regulated under the DLT regulatory framework in Gibraltar. This principle based framework requires us amongst other requirements to protect our members' interests and mitigate risks. For example, our Xapo Bitcoin Reserve covers direct and effective losses experienced by our members as a result of attacks on our systems and/or any other qualifying losses, including bankruptcy.

Unlike other VASPs that provide wallet custodian services, Xapo VASP is obliged to protect our members' assets. This means that any member's Bitcoin must be segregated from Xapo VASP’s own assets and monies. Member assets are clearly designated as such to ensure protection from any third party creditors, and do not at any time represent the property of Xapo VASP.

As a DLT business, Xapo VASP also has to be sufficiently capitalised to operate in a secure and efficient way. This differs from other VASPs which are subject to ‘registration’ rather than ‘regulation’ in different parts of the world. We are subject to both financial and non-financial resource requirements, which includes our regulatory capital. This is calculated on our ability to ensure an orderly wind down, as well as a risk based capital calculation.

Security Infrastructure

Xapo Bank is fully PCI DSS (Payment Card Industry Data Security Standards) Level 1 compliant to meet the international standards of data protection. The PCI standards cover cardholder data protection, network security, anti-fraud technologies, monitoring and restriction of access to customer data and detecting security threats.

Xapo will always be committed to safekeeping our members' funds. Our self-custody crypto solution relies on state of the art Multi-Party Computing (MPC) "keyless" wallets, whose signing shares are managed by Xapo as well as a trusted SOC2 Type II compliant third party. They are secured using Hardware Security Modules (HSM) devices and we employ strict controls and access rights to both the assets and supporting infrastructure. Cold storage of key material is supported by bank-grade Class III vaults in geographically dispersed locations.

Live your potential

Apply for membership

Cookie preferences

Pillars of wealth protection

Live your potential