Buying Bitcoin Is Easy - Owning It Correctly Is Where Advisors Add Value

The Crypto Advisor is your trusted resource for navigating the world of cryptocurrency. Each week, we deliver a clear and concise update on the latest developments in crypto, straight to your inbox. This is more than just a newsletter; it’s an essential resource for forward-thinking advisors focused on maintaining a competitive edge. We’re excited to support your journey in adapting to and thriving in the new age of financial services. Once a client decides they want crypto exposure, the next question is usually the harder one: how should I actually own it? That’s where the conversation gets real. Buying Bitcoin is easy. Choosing between an ETF, an exchange account, a third-party custodian, or self-custody - and understanding what protections, tradeoffs, and operational risks come with each - is where advisors actually earn their keep. And unlike traditional markets, this isn’t just a question of preference or platform. In crypto, how you hold the asset directly impacts what you actually own, what risks you’re taking on, and what recourse you have if something goes wrong. Two clients can both say they “own Bitcoin,” but one may hold shares in an ETF with institutional safeguards, while another is fully responsible for securing private keys with no safety net whatsoever. If there’s one thing we’ve learned over the years, it’s this: most investors don’t fully appreciate that difference - at least not until something goes wrong. Over the past few weeks, we’ve had multiple conversations with clients who were less concerned with whether they should own crypto and more focused on how to do it the right way. That’s the right question to be asking. Because while crypto has matured significantly from an access standpoint, the range of custody options has only expanded - and with it, the potential for confusion. Because in practice, that “confusion” doesn’t show up as theory - it shows up in how portfolios actually get built. A client might hold a Bitcoin ETF like ARK 21Shares Bitcoin ETF (ARKB) in one account, then look to add an Ethereum or staking-focused product through BlackRock in another, keep some assets on Coinbase for ease of use, and maintain a separate account on OKX for trading or access to more niche assets. Others may layer in a qualified custodian for larger balances, while still experimenting with self-custody - whether that’s using a hardware wallet from Ledger or taking it a step further with a multi-signature setup through providers like Casa. Most of the time, these methods work exactly as expected - but sometimes it only takes one mistake to lose everything. We saw a pretty clear example of that play out recently. A long-time, everyday Bitcoin holder we know - someone who had been in the space for years and responsibly relied on self-custody - lost his entire BTC balance in a matter of minutes. Not because of a protocol failure or a network-level hack, but because of a single interaction during what appeared to be a normal setup process. He downloaded what looked like the official Ledger app - a widely used hardware wallet for self-custody - from the Apple App Store and was prompted to enter his recovery phrase. On its own, that didn’t feel unusual. It’s exactly what users are told to do when restoring a wallet, and coming from the App Store, it carried an added sense of legitimacy. For many users, entering a seed phrase is part of the normal process. The problem was that this wasn’t a legitimate interface - it was designed to capture that information. Once the seed phrase - the 12–24 word recovery key that controls access to the wallet - was entered, the funds were effectively gone. There was no additional confirmation, no secondary approval, and no reversal process. The wallet was recreated elsewhere, and the assets were moved almost immediately. There are a few uncomfortable takeaways here, and none of them are as simple as “don’t make that mistake.” The tools themselves worked exactly as designed (setting aside the Apple App Store issue). The failure wasn’t cryptographic - it was operational. What stands out more is how easy it was to let his guard down. The process looked familiar, the steps made sense, and nothing about the interaction felt obviously wrong in the moment. That’s what makes this so dangerous. The gap between a secure setup and a compromised one isn’t always obvious - especially for someone who isn’t thinking like a security expert every time they open an app. And that leads to the bigger point. In a self-custody setup, there isn’t a safety net. There’s no fraud department to call, no escalation path, and no way to unwind a mistake once it’s made. Once that line is crossed, control is gone. But this piece isn’t just about self-custody. It’s only one option among many, each with its own set of tradeoffs. What we would say about self-custody is that it demands the highest level of responsibility - and while it can offer the greatest level of protection, it also comes with the most immediate risk. The middle ground between full self-custody - using cold wallets and managing your own keys - and relying on institutions is keeping assets on exchanges. For many investors, this is the most convenient option. It offers easy access, liquidity, and a familiar user experience that feels closer to traditional brokerage accounts. But convenience has always come with tradeoffs in this space. If you’ve been around crypto long enough, you almost certainly know someone who has lost assets on an exchange - whether it was FTX, Celsius Network, or Voyager Digital. Go back even further, and many early participants were caught up in Mt. Gox. Different platforms, different circumstances, but the same underlying issue: when you leave assets on an exchange, you are trusting a third party to hold and manage them on your behalf. While some exchanges are better than others, we generally recommend sticking with the larger, more established platforms like Coinbase, Binance, and OKX, which tend to have more robust security practices, deeper liquidity, and greater operational transparency than smaller or lesser-known venues. That said, the platform itself is only part of the equation. Security ultimately comes down to how the account is set up and managed. For example, enabling two-factor authentication (2FA) using an authenticator app is meaningfully stronger than relying on SMS-based verification, which can be vulnerable to SIM swap attacks. Similarly, using features like withdrawal whitelists or vault accounts - which introduce delays and additional approval steps for transfers - offers a higher level of protection than leaving assets in a standard, instantly withdrawable account. Still, the convenience an exchange offers doesn’t necessarily mean its users are never going to run into issues. Whether it’s platform failures, frozen withdrawals, regulatory actions, or account-level security breaches, the risks haven’t disappeared - they’ve just evolved. The core tradeoff remains the same: you’re relying on a third party to safeguard your assets, and when something goes wrong, your control is limited. The third and final option - and the one most RIAs are recommending today - is accessing crypto through ETF wrappers. For many clients, this is the most familiar path, offering exposure through traditional brokerage accounts without the operational burden of managing private keys or navigating exchanges. Products like iShares Bitcoin Trust (IBIT) or Fidelity Wise Origin Bitcoin Fund (FBTC) allow clients to gain exposure to Bitcoin in the same place they hold the rest of their portfolio. That means consolidated reporting, easier rebalancing, and a structure that fits cleanly within existing compliance and custody frameworks. From a risk standpoint, this setup removes many of the operational challenges we’ve discussed. There’s no seed phrase to manage, no risk of sending funds to the wrong address, and no need to evaluate exchange security. Assets are hel…