Crypto wallets explained for Singapore — keys, accounts and the Lumi-era lesson

The old cryptonews.sg covered wallet launches the way a transport blog covers new bus models. Lumi Wallet had its moment; so did a dozen other brands whose names the Wayback Machine remembers better than the market does. The news instinct was understandable. A wallet is the object through which a person in Singapore actually touches a digital payment token. The instinct was also incomplete. A launch is a product story. The durable story is who holds the keys, what a licensed platform account is, and why a list of words on a kitchen table can be worth more than the phone that generated them.

This is an explainer, not a shopping guide. It does not recommend an app, a device, or a custody arrangement. For the regulatory fork, see self-custody versus licensed platforms. For the crime that harvests this vocabulary, see phishing, seed phrases and account takeover. Adjacent explainers live in the explainers hub.

A wallet is software (or steel) that holds a secret

In the native sense, a crypto wallet does not contain coins the way a leather wallet contains notes. It holds the secret that lets you create a valid transfer message. The network holds the balances, as records against addresses. If you can sign, you can move. If you cannot, you watch.

That secret is usually a private key, or a set of keys derived from a master secret. The master secret is often encoded as a seed phrase — a sequence of ordinary words designed so a human can back it up without pasting a blob of hexadecimal into a group chat. The design is clever. The failure mode is ordinary. People photograph the words. People type the words into a website that looks like support. People lose the paper in a move from Tampines to Clementi.

A custodial wallet or account means someone else holds the secret and shows you a balance. A non-custodial (or self-custodial) wallet means the secret is on your device, or on a hardware gadget, or split among several gadgets, and the vendor of the software cannot, in the honest versions, move the funds without you.

Both are called wallets. That is the first confusion. The second is that a licensed Singapore platform account is a third object again: a regulated book-entry relationship that may sit on top of either design.

Custodial: an account with a firm, dressed as a wallet

When you open an account at a digital-payment-token platform, you typically receive a login, a two-factor prompt, and a screen that looks like a wallet. Behind the screen, the firm is running a treasury. It may pool client assets, segregate them, or use a licensed custodian. It may give you a unique on-chain deposit address that it controls. It may keep an internal ledger and only touch a chain when you withdraw.

What you have, legally, is a claim on the firm — hopefully a well-segregated claim, if the firm is licensed under the Payment Services Act and is following the custody notices that go with that licence. What you do not have, in the usual retail set-up, is the seed phrase. You cannot restore “your” wallet in a competitor’s app. You can file a ticket. You can, if the firm is in Singapore, find a regulator. You cannot sign a raw transaction from a beach if the app is down.

Advantages, stated as operations rather than as a pitch:

• Password reset exists.
• Someone else runs backups and key ceremonies.
• The firm sits inside AML and travel-rule processes that a lone hardware device does not.
• For many people, this is the only arrangement they will ever use, and it can be the arrangement that matches their risk of losing a piece of paper.

Disadvantages, stated the same way:

• Platform outage is your outage.
• Platform insolvency is a legal project.
• Phishing now targets passwords and one-time codes as well as seeds.
• You have accepted the firm’s withdrawal delays, fee schedule and product list.

MAS licensing does not make the account a bank deposit. It makes the activity a supervised payment service. That is already a lot, relative to an anonymous website. It is not a vault at the Authority.

Non-custodial: you are the operations department

A non-custodial wallet — mobile app, browser extension, or desktop client — generates or imports the secret on your side. The vendor may run infrastructure that relays transactions. The vendor should not be able to empty the wallet. If they can, you have a custodial product with different marketing.

This design restores the bearer-instrument property that makes digital payment tokens interesting, and the bearer-instrument property that makes them unforgiving.

You can move assets without asking a platform’s permission, subject to the network and to any issuer-level freeze that the token itself supports. You can inspect the address on an explorer. You can, if you know what you are doing, interact with applications that a licensed platform will never list.

You can also send the entire balance to a character you mistyped. You can install a lookalike app. You can approve a smart-contract permission that drains the wallet next Tuesday. There is no chargeback. There is no branch.

Singapore readers sometimes treat self-custody as a political identity. This desk treats it as a job. The job includes physical backups, a plan for incapacity, scepticism towards anyone who asks for the words, and the humility to use a small test transfer. People who do not want that job are not morally inferior. They are customers.

The companion piece on self-custody versus licensed platforms is the place for the regulatory and recovery contrast. This page only needs the mechanical fact: non-custodial means the seed is the account.

Hardware: a computer that tries not to give the secret away

A hardware wallet is a small device whose purpose is to store the key and to sign transactions without letting a general-purpose phone or laptop export the secret. You typically connect it, check an address on its tiny screen, and press a button. The seed phrase is written on paper (or stamped into metal) at set-up and should never be typed into a computer.

What this improves:

• Malware on the laptop has a harder time stealing the key.
• Casual export — “I’ll just save the phrase in Notes” — is slightly less likely if the ritual is physical.

What this does not improve:

• A tampered device bought from a random listing.
• A user who confirms an address they did not really read.
• A user who enters the seed into a phishing site “to restore support”.
• A house fire, a flood, or a relative who tidies away a notebook.

Hardware is a control, not a consecration. Treat the purchase channel as part of the control. Treat the backup as more important than the gadget. The gadget can be replaced if the backup exists. The backup cannot be replaced by a receipt.

Seed phrases, in the tone of a household object

A seed phrase is closer to a spare key than to a password. A password sits at a firm that can reset it. A spare key opens the door whether or not you still like the person who copied it.

Practical education, not a complete security manual:

• The words are generated by the wallet. A website that gives you words and asks you to “validate” them is a classic trap. See the phishing briefing.
• Anyone who asks for the words is not your friend, not MAS, not the platform’s “verification team”, and not a police officer with a helpful form.
• Cloud photos of the words are copies in someone else’s data centre.
• Splitting the words in half and giving each half to a cousin is a folk tale with a poor ending. There are better splitting schemes; they are also easier to get wrong.
• A second backup in a different physical failure domain is prudence. Five backups in five apps is diffusion.

If this sounds like the instructions on a fire extinguisher, that is the register. Bearer instruments need household procedures. Singapore is good at household procedures for cash and for jewellery. The seed phrase is a new object in that set, not a new personality type.

A licensed platform account is a supervised claim. A non-custodial wallet is a secret you can lose. A hardware device is a box for the secret. The ticker on the screen can be the same in all three cases. The failure is not.

What a licensed platform account is — and is not

A supervised claim, not a seed phrase

Under the Payment Services Act, a firm that provides DPT services to the Singapore public generally needs a licence. The account you open there is the retail face of that service.

It is:

• A relationship the firm must onboard under AML rules.
• A place where advertising, complaints and, increasingly, consumer-access rules apply.
• A book the Authority can inspect.

It is not:

• Legal tender.
• A guarantee that a listed token is sound.
• A promise that withdrawals will be instant on a Sunday.
• Self-custody in a costume, unless the firm has genuinely given you the keys — which most have not.

Some platforms offer a hybrid: they hold the bulk, and they let you withdraw to an address you control. The moment of withdrawal is the moment you change jobs. Until then, the phishing target is your login. After that, the phishing target is your seed. The Lumi-era coverage rarely said that. It is the sentence that survives the brand.

The lesson the launch items skipped

Wallet brands come and go. A few become infrastructure; most become archive pages. What does not go is the fork.

Either you hold the secret, or a firm does. If a firm does, ask which firm, which licence, which custody arrangement, and what the insolvency story is. If you hold the secret, ask where the words live, who else could see them, and whether you can afford an irreversible mistake.

The old site was right to treat wallets as news. This desk will treat them as payments plumbing. Readers who only wanted to know why a “wallet” on a licensed app does not come with twelve words now have the reason: because that product is an account, and an account is allowed to be a different object.