What you own is not a coin and not a claim on anybody. It is the ability to authorise a change to one entry on a ledger - and who holds that ability is the whole of the risk.
10 min read · Level 3
The usual way to introduce this class is to start with the technology, and I think that is exactly backwards for somebody deciding what to do with their money. The interesting fact is not how the ledger reaches agreement; it is that this is the only asset in the curriculum where the investor can lose the entire position through their own administration, with no counterparty involved, no market move, and nobody to appeal to. Every other instrument here fails through somebody else: an issuer defaults, a tenant leaves, a company is mismanaged, a bank collapses. Those are risks you assess. A lost phrase is not a risk you assess, it is a task you either did or did not do, and it is the only place in investing where a filing cabinet outranks an analysis. What follows from that is unglamorous and, I think, genuinely the right order: before anybody forms a view about whether these assets are worth holding, they should be able to say which of the three arrangements each holding is in, what the venue's terms say happens in an insolvency, and when they last restored a backup and watched a balance reappear. Somebody who has done those three things and holds nothing has understood this class better than somebody who holds a great deal and has not, because the second person is exposed to a failure they have not priced and would not recognise until it happened.
Every other asset in this curriculum is a claim on somebody. A share is a residual claim on a company's profits. A bond obliges a named issuer to pay stated amounts on stated dates. A deposit is a debt a bank owes you. A building produces rent from a tenant under a lease, and if the tenant stops paying there is a person to pursue.
A digital asset is none of those. What exists is a shared record - a ledger maintained and checked by many independent computers - carrying a line that says a particular address holds a particular quantity. What you own is a secret number, the private key, which is the only thing that can authorise a change to that line.
There is no issuer obliged to pay you anything, no profits you share in, and no lease. The instrument is the entry and the key, and nothing else.
Two consequences follow immediately and they shape the rest of this subject.
Transfers are final and keys are not recoverable. A mistyped bank transfer is reversed by a person on a telephone. A mistyped ledger transfer has moved the entry, and nobody involved has the authority to move it back. The same asymmetry applies to the key itself: nobody is holding a copy for you, so a lost key is not an access problem to be resolved with identity documents - it is the end of the position.
Custody is therefore not an administrative detail. It is the position. Three arrangements, and they are three different investments:
Arrangement Who holds the key What you hold If they fail Self-custody you the asset itself nothing changes Exchange account the exchange a claim on the exchange you are a creditor Regulated custodian the custodian depends on the legal terms depends on the legal terms
The middle row is where most holdings actually sit and it is the one most often misdescribed. A balance on an exchange is not the asset. It is the exchange's promise to hand you the asset when you ask, and if the exchange fails you are an unsecured creditor of a company alongside everybody else.
Put an illustrative figure on what that means. Suppose 20,000 sits on a venue that fails, and creditors eventually recover 35% of their claims after four years:
Held on the venue 20,000.00 Recovered at 35% 7,000.00 Not recovered 13,000.00 which is 65.0% of it
And the 7,000 arrives four years late. Discounted at 5% a year, 7,000 / 1.05^4 5,758.92 which is 28.79% of the 20,000
Neither the 35% nor the four years is a live figure and neither should be treated as one. They are there to make one point arithmetically: a claim in an insolvency is not the asset. It is a smaller amount, later, on somebody else's timetable.
The phrase "not your keys, not your coins" is a compressed version of exactly this. It is a real distinction and it is not a slogan against exchanges - it is a statement about who is able to move the asset, and the honest reading is that self-custody does not remove the failure mode. It relocates it from an institution to you.
Because the two arrangements look identical on a screen and carry completely different risks, and because the vocabulary actively hides the difference.
A banking app and an exchange app both show a balance, both let you send and receive, and both use the word wallet somewhere. But an app that holds your keys and an app that shows you a claim on a company are not two designs of the same product. One of them can fail in a way that takes the balance with it. Nothing on the screen says which one you are looking at.
And there is no guarantee scheme underneath. Cash and savings has an entire lesson on deposit insurance, because a deposit below the limit is a genuinely solved problem: the institution can fail and you are still repaid. Nothing equivalent covers digital assets in most jurisdictions. Whatever protections exist come from the particular legal structure of the particular custodian, which means the answer is in a document rather than in a category.
Then the self-custody side, which is usually presented as the safe choice and is better described as a different job. Holding the key yourself removes the counterparty entirely - nobody can fail and take your asset with them - and it hands you two responsibilities that most people have never had before.
The first is that the backup is the asset. A recovery phrase written on paper in one place is one fire, one flood or one house move away from a total loss, and there is no institution to appeal to. The second is that there is no fraud department. A transfer authorised by your key is, from the ledger's point of view, a transfer you intended, whether or not you were deceived into it.
So the honest framing is that this class asks a question no other class in this curriculum asks: not "who owes me this?" but "who can move this, and what happens if they cannot be reached?" Every other instrument has a person or an institution on the other side who can be pursued, replaced or sued. Here, past a certain point, there is only the record and the key.
One more thing that belongs in the first lesson because it catches people early. The name of an asset is not the asset. The same name can exist as an entry on several different ledgers, and a version issued by a company that promises to hold the original is a claim on that company - a completely different instrument, with a counterparty, wearing the same ticker. Which ledger the thing you bought actually lives on is a question worth asking before rather than after.
This is educational information, not investment, securities or financial advice. Rules differ by country and change — get advice from a qualified professional in your jurisdiction before acting.
Educational, not personalised financial advice. Nothing in the Investor Academy is a recommendation to buy, sell or hold anything — what is right for you depends on your own circumstances and the rules where you live.
Sources: U.S. SEC - Investor.gov; UK FCA - information for consumers
One holding of 20,000, over one year, in each of the three arrangements, with the failure that arrangement is actually exposed to.
Self-custody. The key sits on a dedicated device, with the recovery phrase written down and stored somewhere separate. No institution is involved. The exposure is entirely operational: a lost device with no usable backup, a backup somebody else finds, or a transfer authorised under a deception. If the largest exchange in the world failed on a Tuesday, this holding would be completely unaffected, which is precisely the point of the arrangement.
Exchange account. The balance is visible, the asset can be sold in seconds, and the experience is better in every respect. The exposure is the company: its solvency, its controls, whether client assets were kept separate from its own, and what a court decides afterwards. Using the illustrative figures above, that exposure cost 13,000 of the 20,000, and the 7,000 that came back was worth 5,758.92 by the time it arrived.
Regulated custodian. Somebody else holds the key under a legal arrangement that is supposed to keep your asset separate from the custodian's own balance sheet. Whether it actually does is a question about the specific terms and the specific jurisdiction, not about the word regulated. This is the arrangement where reading the document is the entire diligence.
Now the comparison that matters, which is not which one is safest. It is that they fail differently and the failures are uncorrelated.
An exchange failure does not reach a self-custodied holding. A lost recovery phrase does not reach an exchange balance. Somebody holding everything one way is exposed to one failure completely, and it is the only decision in this lesson that costs nothing to get right: two arrangements, sized so that either failing alone is survivable.
That is a genuinely unusual property. In most asset classes, splitting a holding across two providers buys you very little, because the underlying risk is the asset. Here the custody arrangement is a large, separable and entirely different risk from the asset itself, and it is the one risk in this subject that responds to administration rather than to judgement.
Describing an exchange balance as ownership. It is a claim on a company, and the whole of lesson one is that the difference is not semantic. Somebody who has never opened the venue's terms does not know which of the three arrangements they are in, and the screen will not tell them.
Assuming a deposit guarantee applies because the venue looks like a bank. It almost certainly does not. Whatever protection exists comes from the specific legal structure of the specific custodian, and the only way to find out is to read what it says rather than to infer it from the interface.
Believing self-custody removes risk. It removes the counterparty and hands you the operational risk in exchange, and the operational risk has no complaints procedure. A holding secured by a phrase on a single sheet of paper in a single drawer has swapped a company that might fail for a drawer that might burn.
Testing the recovery only when it is needed. A backup that has never been used to restore a holding is an untested backup, and the moment of discovery is the worst possible one. Restoring a small balance onto a second device takes twenty minutes and converts a belief into a fact.
Treating the name as the asset. The same name can exist on several ledgers, and a version that a company issues against a promise to hold the original is a claim on that company. Two things with one ticker and two entirely different counterparties is the single most avoidable confusion in this class.
Not the app name - the arrangement. Do you hold the key, does a trading venue hold it, or does a custodian hold it under a stated legal structure? Most people discover on doing this that they believed they were in one row and are in another, and that a single company holds everything.
The terms will say whether client assets are held separately from the company's own assets, what happens in an insolvency, and what protection scheme if any applies. This is a document question with a document answer, and it takes half an hour once rather than becoming a research project during a failure.
Do the whole thing: write the phrase, wipe the device or use another, restore from the phrase, confirm the balance appears. Until that has been done once, the backup is a belief. Doing it with a trivial amount costs nothing and is the only way the belief becomes a fact.
Ask what share of the holding would be unreachable if any single company or any single device failed, and make sure the answer is a number you could live with. This is the one risk here that administration fixes outright, and it is fixed in an afternoon.
Before the first purchase, when moving a holding between a venue and a device, when a holding on one venue has quietly grown into most of the position, and whenever somebody describes an exchange balance and an owned asset as the same thing.
Do not use this lesson to decide whether to hold any of this at all - that is lesson six - and do not read the custody discussion as an argument that self-custody is the correct answer. It is a different arrangement with a different failure, and which one suits depends on amounts, competence and how often the holding is traded.
Holders very commonly write a recovery phrase down at setup, store it somewhere they consider safe, and never use it again. The arrangement is only discovered to be broken at the moment it is needed - a phrase copied with two words transposed, a photograph of it lost with the device it was taken on, a sheet of paper that was tidied away during a house move by somebody who did not know what it was. None of these are exotic failures and none of them announce themselves in advance, because a backup that is never exercised produces no signal either way. The distinguishing feature of this asset class is that the failure is silent until it is total, and that the test which would have caught it is available at any time, costs nothing, and takes under half an hour.
A backup you have never restored from is a belief, not a backup. Restore one onto a second device with a trivial amount on it, once, and then it is a fact.
Create a free account to read the rest and apply it to your own investing.