Crypto Wallets: Exchanges, Hot and Cold Storage
Where you keep your crypto matters as much as where you deposit it. Most people start with an account at an exchange — Coinbase, Binance, Kraken, Crypto.com — because that is where you buy the coins in the first place. Then they leave them there, because it is convenient. That is the single most common mistake in this space, and it has nothing to do with hacking.
The short version: an exchange balance is not your money in the way a wallet balance is. Coins held on an exchange are held in the exchange’s name, under its terms, subject to its compliance decisions. A wallet you control is different — the keys are yours and nobody can freeze them. This page sets out the three places people keep crypto, what each one actually gives you, and how to move between them.
This page is about storage, not investment. Nothing here is advice on what to buy or whether to hold crypto at all. It is about the practical question every crypto casino player faces: once you have coins, where do you keep them between deposits, and what are the risks of each place.
The three places you can keep crypto
| Where | Who holds the keys | Can it be frozen? |
|---|---|---|
| Exchange (Coinbase, Binance, Kraken…) | The exchange | Yes — by the exchange, under its own compliance process |
| Software wallet (app on phone/PC) | You, but the keys sit on a device connected to the internet | No — nobody else has the keys |
| Hardware wallet (physical device) | You, with the keys held offline on the device | No — nobody else has the keys |
The line that matters is the third column. With an exchange, someone else can decide that your funds are not available to you. With a wallet you control — software or hardware — nobody can, because nobody else has the keys. That is the whole distinction, and everything below follows from it.
Why not to leave coins on an exchange
Exchanges are regulated financial businesses. In the UK and the EU they are supervised for anti-money-laundering purposes, which means they are legally required to know who you are, to monitor what you do, and to act if something looks wrong. That obligation does not stop at the point you want to withdraw.
In practice, an exchange can restrict or freeze an account, or hold up a withdrawal, for reasons that have nothing to do with you doing anything illegal. The common triggers are these:
- A request for source of funds. The exchange asks you to prove where the money came from. If some of it came from gambling, that is a flag, because gambling is a higher-risk category under anti-money-laundering rules.
- Deposits from, or withdrawals to, a casino. A transfer between your exchange account and a gambling site can be picked up by automated monitoring and trigger a review.
- Large or unusual movements. An amount that does not match your usual pattern can prompt a check, regardless of whether it is legitimate.
- Third-party transfers. Receiving coins from an unknown address can link your account to something the exchange considers risky.
- Regulatory or legal action. An exchange under investigation can have accounts frozen at the instruction of an authority, and getting funds released can take months.
This is the practical reason to use a wallet rather than an exchange. It is not that exchanges are dishonest — it is that they are required to act on flags, and gambling is a flag. A casino player who keeps coins on an exchange and moves them in and out is, without meaning to, running a pattern that exchange compliance systems are built to notice. Moving coins to your own wallet breaks that pattern and puts the funds beyond anyone else’s decision.
There is a second, blunter risk too. An exchange balance is a claim on the exchange, not coins in your pocket. If the exchange fails, is hacked, or suspends withdrawals, your balance is caught up in it. That has happened to large exchanges before, and the customers who recovered their funds were the ones who had already moved them out.
The rule people use is blunt and worth repeating: not your keys, not your coins. An exchange is a good place to buy and sell. It is a bad place to store.
Software (hot) wallets
A software wallet is an app or program that holds your keys on a device that is connected to the internet — your phone or your computer. “Hot” means exactly that: the keys exist on a networked device, which makes the wallet convenient and, for larger amounts, less safe than a hardware wallet.
For small balances and for moving coins around, a software wallet is fine and free. The main ones:
| Wallet | What it is |
|---|---|
| Exodus | A desktop and mobile wallet with a built-in exchange. Easy to set up, supports many coins. Closed-source, which some people dislike. |
| BlueWallet | A mobile Bitcoin wallet, open-source and straightforward. Bitcoin only. |
| Electrum | A long-established desktop Bitcoin wallet. Open-source and widely used, though more technical than the others. |
| Sparrow | A desktop Bitcoin wallet for people who want more control, and a common companion to a hardware wallet. |
The honest caveat: a hot wallet on a phone or a PC is exposed to malware, to a compromised app store, and to someone simply getting hold of the device. That is acceptable for small amounts. For anything you would be upset to lose, the next section is the answer.
Hardware (cold) wallets
A hardware wallet is a small physical device that holds your private keys offline. To send coins you plug it in (or connect it by Bluetooth) and confirm the transaction on the device itself. The keys never touch the internet, so malware on your computer cannot reach them — even if the computer is fully compromised, the device still requires your physical confirmation.
This is the standard way to hold any significant amount, and for a casino player it is also the cleanest way to keep coins away from an exchange. The main options:
| Device | Maker | Notes |
|---|---|---|
| Trezor | SatoshiLabs (Czech Republic) | The original hardware wallet. Fully open-source firmware, which many people consider the strongest security argument. Models from the entry-level Safe to the touchscreen Safe 5. |
| Ledger | Ledger SAS (France) | The most widely sold. Broad coin support and a polished app. Firmware is not fully open-source, which is its main criticism. |
| BitBox02 | Shift Crypto (Switzerland) | Swiss-made, open-source, with a focus on simplicity and on reproducible builds. Less well known than the other two. |
| Coldcard | Coinkite (Canada) | Bitcoin-only, air-gapped, and aimed at users who want maximum control. More technical than the rest. |
All four do the same core job. The differences are in coin support, how much of the firmware is open-source, and how technical they are to use. For a first hardware wallet, Trezor or Ledger are the usual starting points; BitBox02 is the pick if open-source and Swiss manufacture matter to you; Coldcard is for people who already know they want Bitcoin-only and air-gapped.
Buying a hardware wallet safely
This is the part people get wrong, and it is the part that matters most. A hardware wallet is only as trustworthy as the chain it travelled through to reach you.
Buy only from the maker’s own store. Order directly from trezor.io, ledger.com, bitbox.swiss or coldcard.com — not from a marketplace, not from a third-party reseller, and never from an auction site or a private seller. A tampered device, or one that arrives with a pre-written recovery phrase, is the classic way people lose everything: the phrase is not random, the attacker knows it, and your coins are gone the moment you fund the wallet.
Three habits make the difference, and none of them is difficult:
- Order from the official store Go to the maker’s own site and buy there. The extra few pounds over a marketplace listing is the cheapest insurance you will ever buy.
- Set it up yourself, and generate your own recovery phrase The device generates the phrase on first use, on the device. If a wallet arrives with a phrase already written down, or with a card in the box containing one, do not use it — it has been tampered with. That is the single clearest sign of a scam.
- Keep the recovery phrase offline Write it on paper or metal and store it somewhere safe. Never photograph it, never type it into a website, and never enter it anywhere except the device itself. Anyone who asks for your recovery phrase is stealing from you, without exception.
A note on the recovery phrase: it is the wallet. Whoever has those words has the coins, regardless of whether they have the device. That is why it is written down offline and never shared, and why losing it means losing the funds if the device ever fails.
Which one to use
The honest answer depends on how much you are holding and how often you move it.
- Buying coins to deposit at a casino soon: keep the amount you are about to use in a software wallet or, if it is small, leave it on the exchange for the day. Do not build up a balance there.
- Holding anything you would be upset to lose: a hardware wallet. This is the default answer for any meaningful amount.
- Moving between casino and exchange regularly: route through your own wallet rather than transferring directly. It keeps the exchange from seeing a direct casino link, and it puts the funds under your control in between.
- Wanting one device for everything: a hardware wallet does that too — most connect to the software wallets above for everyday use, so you get convenience and offline keys at once.
None of this makes crypto risk-free, and it does not remove the risks set out on the crypto casinos page — the price moves, the transfers are irreversible, and the tax rules still apply. What it does remove is the one risk you can eliminate completely: leaving your coins somewhere that someone else can decide they are not yours.
Related pages
Frequently Asked Questions
Is it safe to keep crypto on an exchange?
For a short time and a small amount, it is convenient and no more risky than anything else. For anything you would be upset to lose, no. Coins on an exchange are held in the exchange’s name and are subject to its compliance decisions — it can restrict an account or hold a withdrawal while it reviews a flag, and gambling activity is one of the things that triggers those reviews. The rule is blunt: not your keys, not your coins.
Can an exchange freeze my account because of gambling?
It can restrict or freeze an account, or hold up a withdrawal, for reasons that have nothing to do with you breaking a law. Requests for proof of source of funds, transfers to and from gambling sites, and unusual movements are all things that compliance systems are built to flag. Using your own wallet between the exchange and the casino breaks that direct link and keeps the funds under your control.
What is the difference between a hot and a cold wallet?
A hot wallet keeps your keys on a device connected to the internet — your phone or computer — which makes it convenient but exposed to malware. A cold wallet keeps the keys offline on a physical device, so they never touch the internet and cannot be reached remotely. For small amounts a hot wallet is fine; for anything significant, a cold wallet is the standard.
Which hardware wallet should I buy?
All the main ones — Trezor, Ledger, BitBox02 and Coldcard — do the same core job. Trezor and Ledger are the usual first choices; BitBox02 is the pick if open-source firmware and Swiss manufacture matter to you; Coldcard is for people who want Bitcoin-only and air-gapped. The bigger decision is not which one, but where you buy it — see the next question.
Where should I buy a hardware wallet?
Only from the maker’s own store: trezor.io, ledger.com, bitbox.swiss or coldcard.com. Not a marketplace, not a reseller, and never an auction site or a private seller. A tampered device is the classic way people lose everything, and the extra cost of buying direct is the cheapest insurance there is.
What if my hardware wallet arrives with a recovery phrase already written down?
Do not use it. A genuine device generates the recovery phrase itself on first use, on the device screen. If a phrase is already written on a card in the box, the device has been tampered with and the phrase is known to whoever tampered with it — funding that wallet means handing them your coins. Return it and buy from the official store instead.