Crypto Wallets and Self-Custody in Pennsylvania

Why self-custody matters

Cryptocurrency held on an exchange is a claim against that exchange, not an asset you hold. It is not FDIC-insured the way a bank deposit is, and it is not SIPC-protected the way a brokerage position is. If the platform fails, you are generally an unsecured creditor in a bankruptcy proceeding — which historically has meant years of delay and partial recovery at best.

This is true regardless of how many licences a platform holds. A Pennsylvania Money Transmitter Licence is a supervisory instrument, not insurance. Licensing tells you the operator has satisfied the Department of Banking and Securities on defined requirements and is subject to examination. It does not guarantee your balance.

The reasonable position is not paranoia. It is proportionality: keep on a platform what you are actively trading and what you could lose without it changing your circumstances. Move the rest somewhere you control the keys. For most Pennsylvania households that threshold arrives somewhere in the low thousands of dollars.

Wallet types compared

Most Pennsylvania readers need exactly two of these: an exchange account for buying, and a hardware wallet for holding. The other three solve specific problems — spending, large or shared positions, and fiduciary obligations — and adopting them without one of those problems adds complexity for no benefit.

Setting up a hardware wallet properly

A hardware wallet is a small device that stores private keys in a chip that never exposes them to your computer or phone. Transactions are signed on the device; the connected machine only sees the signed result. That means even a compromised laptop cannot extract your keys.

1. Buy directly from the manufacturer

   Never from a marketplace reseller, an auction site or an individual. Tampered devices pre-loaded with an attacker's recovery phrase are a documented attack. Order from the manufacturer's own website and check the packaging seals.

2. Generate the recovery phrase on the device itself

   The device produces a sequence of words during setup. If a device arrives with a phrase already printed on a card, it is compromised. Legitimate devices never ship with a pre-set phrase.

3. Write the phrase down physically

   On the card supplied, and then transfer it to a steel backup plate. Paper survives neither fire nor flood, and Pennsylvania has plenty of both — the Wyoming Valley and the Schuylkill corridor in particular.

4. Set a PIN, and consider a passphrase

   The PIN protects the physical device. An optional passphrase creates a hidden wallet that the recovery phrase alone cannot open — powerful, but if you forget it the funds are gone. Only use one if you have a genuine plan for remembering it.

5. Test the recovery before funding it

   Send a small amount, wipe the device, and restore it from your written phrase. If the funds reappear, your backup works. Doing this with $20 is enormously better than discovering a transcription error with $20,000.

6. Then move your holdings across

   Send a small test transaction first, confirm it arrives, then move the rest.

The seed phrase is the whole security model

Everything else on this page is secondary to this section. Your recovery phrase — usually twelve or twenty-four words — is your cryptocurrency. Anyone who obtains it can take your funds from anywhere in the world, immediately and irreversibly. Anyone who loses it, including you, loses the funds permanently.

Rules with no exceptions

• Never type it into anything connected to the internet. Not a website, not a form, not a support chat, not a "wallet validation" tool. No legitimate service ever asks for an existing recovery phrase.
• Never photograph it. Photos sync to cloud services automatically, and cloud accounts get compromised.
• Never store it in a password manager or a note app. This defeats the entire purpose of keeping keys offline.
• Never email it to yourself. Email is not secure storage and mailbox compromise is common.
• Never read it aloud to anyone. Including someone claiming to be support for the wallet manufacturer.

Physical backup that survives Pennsylvania

Paper burns and dissolves. A steel backup plate — a stamped or engraved metal card designed for this purpose — survives fire, flood and time, and costs a fraction of what it protects. Store it in a fireproof safe, a safe deposit box, or split across two secure locations.

Splitting deserves care. Some people write half the phrase in one place and half in another, which protects against a single location being compromised but means losing either half loses everything. Formal schemes exist that let any two of three shares reconstruct the phrase, which is a better structure if you are going to split at all.

Multi-signature for larger positions

A multi-signature wallet requires several private keys to authorise a transaction — commonly two of three. Keys sit in different places, or with different people, so no single event loses the assets.

This solves several problems at once. A thief who obtains one key gets nothing. A house fire that destroys one backup does not destroy access. And in a family or business context, no single person can move funds unilaterally.

The cost is complexity. You now have several devices and several backups to manage, and recovering from a lost key requires a documented process. Multi-signature is the right answer above a certain position size and the wrong answer below it — for a $2,000 holding it adds risk through complexity rather than removing it.

Roughly where the line sits: if losing the position would materially change your financial situation, or if more than one person has a legitimate claim on it, multi-signature is worth the setup. Our King of Prussia and Doylestown guides cover this in the context of Pennsylvania households with meaningful holdings.

The attacks that actually work against Pennsylvania holders

Losses rarely involve sophisticated cryptography. They involve five mundane things.

SIM swap. An attacker ports your phone number to a device they control, then uses SMS password resets to take over accounts. Fixed by an authenticator app plus a carrier port-out PIN. This is the leading cause of student and young-professional losses in Pennsylvania university towns — see our State College guide.

Fake wallet apps. A "wallet" installed from a link rather than an official app store, which requests a recovery phrase during setup. Only install from official sources, and treat any request for an existing phrase as proof of fraud.

Phishing sites. A search result or an advertisement leading to a convincing clone of an exchange or wallet site. Type addresses manually or use a bookmark; never reach a financial site through a search advertisement.

Address poisoning. An attacker sends a dust transaction from an address visually similar to one you use, hoping you copy it from your transaction history next time. Verify the full address, or use a wallet address book.

Malicious signature requests. Connecting a wallet to a decentralised application and approving a request that grants unlimited spending permission over your tokens. Read what you are signing, revoke old approvals periodically, and use a separate wallet with limited funds for anything experimental.

Our Pennsylvania scam guide covers the social-engineering side, including the kiosk-directed fraud that dominates the Commonwealth's loss statistics.

Estate planning and Pennsylvania inheritance tax

This is the step that careful people skip, and the consequences are absolute.

If you die holding a hardware wallet whose recovery phrase nobody can find, the assets are permanently unrecoverable. No court order produces them. No attorney can compel access. No exchange can help, because no exchange is involved. And Pennsylvania inheritance tax may still be assessed on a reported value the family cannot reach.

Pennsylvania inheritance tax applies to digital assets exactly as to other property: 0% to a surviving spouse, 4.5% to children and other lineal descendants, 12% to siblings, and 15% to most other heirs.

What actually works

• A written access plan held with your attorney and referenced in your will — describing what exists, where the backup is, and how to reach it, without putting the phrase itself in a document that becomes public through probate.
• A multi-signature arrangement where a trustee or attorney holds one key, so the estate can act without any single person having unilateral control while you are alive.
• A qualified custodian with named beneficiaries and a documented transfer-on-death process — the simplest option where a trust or entity is involved.

What does not work is a device in a drawer and an assumption that someone will figure it out. Tell at least one trusted person that digital assets exist and where the instructions are. An increasing number of Pennsylvania estate attorneys have handled digital assets in practice rather than in theory — ask that question directly when you engage one.

A one-afternoon security checklist

1. Authenticator app on every financial account

   Replace SMS two-factor authentication everywhere. Save the backup codes offline.

2. Port-out PIN with your mobile carrier

   A thirty-second phone call that closes the SIM-swap path.

3. Unique passwords in a password manager

   The manager stores passwords, never recovery phrases.

4. Hardware wallet, bought direct, phrase generated on-device

   Steel backup, stored where fire and flood cannot reach.

5. Test the recovery with a small amount

   Wipe and restore before you trust it with real value.

6. Write the access plan

   What exists, where the backup is, who to contact. Held with your attorney or in a safe deposit box referenced in your will.

7. Export your transaction history

   From every platform, annually. Pennsylvania's missing loss carryforward makes accurate records matter — see our tax guide.

That is the whole thing. It takes an afternoon, it costs less than the fees on a single mid-sized kiosk purchase, and it addresses essentially every way people lose crypto that is not a market decision.