Two Levels of Security

Level 1: Personal-Grade Security

This is what most people have. It's the baseline — better than nothing, but it puts all the risk on you.

Exchange Security (Centralised Platforms)

Your assets are held by the exchange itself (like Coinbase, Binance, or Kraken). The exchange uses encryption and two-factor authentication. But:

• If the exchange is hacked, your assets could be stolen
• If the exchange goes bankrupt, your assets might be part of the company's balance sheet and seized by creditors
• If someone hacks your account, they can withdraw your crypto immediately — and it's gone forever

Self-Custody (Hardware Wallets)

You store your crypto on a physical device (Ledger, Trezor) that you control. Complete control — but also complete responsibility:

• If you lose the device or forget your password, your crypto is gone forever — no customer service
• If you write down your recovery phrase and someone finds it, they have everything
• Human error is the biggest risk — and it happens more than you think

Level 2: Institutional-Grade Security

This is the level of security that banks, superannuation funds, and professional wealth managers demand. It has three pillars.

Pillar 1: Institutional Licensed Custody

Your crypto is held by a licensed custodian — not by the platform itself, and not by you. The custodian is a separate legal entity (like Zodia Custody, owned by Standard Chartered and NAB). Your assets are legally segregated from the platform's assets.

Key Benefit: If the platform goes bankrupt or collapses, your assets are protected because they're held separately by the insured custodian. Your crypto is not part of the platform's balance sheet.

Analogy: Like having your money in a bank account at a major bank. The platform might fail, but your deposits are held separately and protected.

Pillar 2: Zero-Scam Security Architecture

A security architecture that makes it impossible for scammers to steal your funds, even if they hack your account or trick you into giving them access.

• Blocked crypto withdrawals: You cannot withdraw crypto to external wallets. You can only convert to Australian dollars and withdraw fiat to your registered bank account.
• Whitelisted banking: You can only withdraw fiat money to your own registered Australian bank account — no one else's.

Why this matters: In Australia, 40% of scams are facilitated by crypto exchanges that allow users to buy crypto and immediately withdraw it to a scammer's wallet. This architecture eliminates that risk entirely.

Analogy: A bank account where you can only withdraw cash to your verified home address. Even if someone steals your debit card, they can't redirect your money to themselves.

Pillar 3: Regulatory Licensing and Oversight

The platform operates under Australian Financial Services Licence (AFSL) oversight and is registered with AUSTRAC. This means:

• Accountability — the platform operates under legal oversight and can be held accountable
• Transparency — must meet disclosure and reporting requirements
• Legal recourse — you have legal protections if something goes wrong
• Professional standards — operates to the same standards as traditional wealth platforms

The Three Questions to Ask Any Platform