Custody · Australia
Crypto wallets for Australians
Australian history has been unusually clear about why this matters: every platform failure here has hurt the people who left coins on an exchange, and left the people holding their own keys completely untouched. Here is how to be in the second group.
Trading crypto carries risk. Verify any provider's AUSTRAC registration before you send money.
Last reviewed: August 2026
Why self-custody matters more in Australia than people think
"Not your keys, not your coins" gets repeated so often it has become background noise. In Australia it has a specific, local evidence base, and that is worth spelling out.
ACX, once one of the country's larger exchanges, froze withdrawals and left customers pursuing recovery for years. Digital Surge entered voluntary administration following exposure to the FTX collapse before a recapitalisation returned funds. FTX Australia customers waited a very long time for a resolution that arrived through a bankruptcy process rather than a regulator. In each case, one group of people was completely unaffected: those who had withdrawn their coins to wallets they controlled.
AUSTRAC registration does not prevent this, because it was never designed to — it covers anti-money-laundering obligations, not solvency. Our registration guide explains the gap, and the Australian collapses page covers what actually happened.
The workflow that follows is simple and it is what experienced Australian holders converge on: use an exchange to buy and sell, and hold anything long-term in your own wallet. An exchange is a place you pass through, not a place you live.
The four kinds of wallet
Terminology in this space is unnecessarily confusing, so here is the plain version. A wallet does not "contain" crypto — the coins live on a blockchain. A wallet holds the private keys that authorise moving them. Everything below is a different answer to the question: where do those keys live?
| Type | Keys held by | Best for | Main risk |
|---|---|---|---|
| Exchange account | The platform | Active trading only | Platform failure, freeze, hack |
| Mobile / browser wallet | You, on a connected device | Everyday amounts, spending | Malware, phishing, device loss |
| Hardware wallet | You, on an offline device | Meaningful long-term holdings | Losing the device and the seed |
| Multi-signature setup | Split across several devices or people | Large sums, entities, shared control | Complexity and setup error |
Choosing for your actual situation
Ignore what maximalists on the internet tell you and match the tool to the amount and the behaviour.
If you hold a small amount you are actively trading, leaving it on a reputable exchange with strong two-factor authentication and a withdrawal allow-list is a defensible choice. The friction of moving coins back and forth for every trade has its own costs, including fat-finger errors.
If you hold an amount you would be genuinely upset to lose — and only you can define that number — get a hardware wallet. The device typically costs less than a hundred dollars and eliminates the entire category of remote theft. There is no argument against it that survives contact with the numbers.
If you hold a very large sum, or crypto inside an entity like a company or an SMSF, consider a multi-signature arrangement requiring more than one key to authorise a transaction. It protects against a single device being compromised and against a single person being coerced, and it makes shared control auditable. It is also more complex to set up correctly, so do it deliberately rather than casually.
Most Australians who have been doing this for a while run two: a mobile wallet with everyday amounts, and a hardware wallet holding the bulk. That split works because it matches how people actually behave.
Buy first, then move it Purchase on a licensed platform, then withdraw to your own wallet — starting with a small test amount.
Open an accountSeed phrases: this is the whole ballgame
When you set up a self-custody wallet it generates a recovery phrase — usually twelve or twenty-four words in a specific order. That phrase is your crypto. Anyone who reads it can take everything, instantly and irreversibly, from anywhere on earth. Lose it with no backup and your holdings are gone permanently, with no support line, no reset and no institution that can help.
There is no middle ground and no forgiving failure mode, which is why the storage rules are strict.
Physical only. Write it on paper, or better, stamp it into steel. Do not photograph it. Do not type it into a password manager, a notes app, an email or a cloud document. Every one of those has been the cause of real losses, and a phone backup silently syncing a photo of a seed phrase to a cloud account is a specific, common failure.
Survive a house fire. Paper in a drawer next to the hardware wallet fails to a single domestic disaster. A metal backup in a different physical location — a safe, a family member's house, a bank deposit box — survives both fire and theft. If you split the phrase across locations, document your own scheme somewhere your executor can find, or you have engineered a puzzle nobody can solve.
Nobody ever needs it. No wallet manufacturer, no exchange, no support agent, no "verification process" and no government agency will ever legitimately ask for your recovery phrase. Anyone asking is stealing from you. This is the most common single method of crypto theft in Australia and it works because it is delivered in a helpful tone.
Never type your seed phrase into anything except the wallet device itself during a genuine recovery you initiated. Not a website, not an app, not a support chat, not a form, not a "wallet validation" page. If a website is asking for it, that website exists to steal from you, no matter how convincing it looks.
Buying a hardware wallet safely in Australia
Hardware wallets are one of the few products where the purchase channel genuinely matters, because a tampered device is a complete loss and you will not detect it until your funds vanish.
Buy from the manufacturer directly, or from an authorised Australian reseller listed on the manufacturer's own website. Check that reseller list on the manufacturer's site, not on the reseller's. Never buy a used device, never buy from an online marketplace listing, and never accept a device as a gift from someone you do not entirely trust.
The attack is straightforward: a tampered device arrives with a pre-generated seed phrase, sometimes with a card in the box already showing "your" recovery words. You load funds. The person who generated that phrase empties it whenever they choose. A genuine device always generates its seed phrase itself, on the device, during your setup — if a phrase arrives with the product, the product is compromised and should be destroyed rather than used.
Once set up, always verify receiving addresses on the device screen rather than trusting what your computer displays. Address-swapping malware exists, and the device screen is the one display an infected computer cannot alter.
SMSF and entity custody
Sydney's large self-managed super fund population makes this a live question locally. An SMSF can hold crypto, but custody arrangements will be examined at audit and casual approaches fail.
Assets must be held in the fund's name and kept entirely separate from the trustee's personal holdings. That is not a formality — buying on a personal exchange account and intending to allocate it to the fund later does not work and will fail an audit. The fund needs its own account, its own bank account and its own wallet, with a documented paper trail from the fund's money to the fund's assets.
Your auditor will want to know who controls the private keys, how the fund's ownership is evidenced, where recovery material is stored, and what happens if the trustee is unavailable. A multi-signature arrangement, or a specialist custody provider, answers those questions more comfortably than a single hardware wallet in a drawer. Document the arrangement in the fund's investment strategy, and get advice from an SMSF specialist before you set it up rather than after. Our OTC page covers the trading side for funds.
- Fund name only
- Never buy personally and reallocate. It fails audit.
- Document custody
- Who holds keys, where recovery material lives, who can access it
- Consider multi-sig
- Shared control is easier to evidence than a single device
- Get advice first
- An SMSF specialist, before any money moves
The most avoidable loss we hear about
It is not hacking, and it is not a market crash. It is a seed phrase that existed in exactly one place — usually a piece of paper in the same drawer as the device, or a note in a phone that was reset — and then did not exist at all.
The other version is the inverse: a seed phrase stored so cleverly, split across locations with a scheme held entirely in one person's head, that when that person was unavailable nobody could reconstruct it. Both failures come from the same place, which is treating backup as a one-off task rather than a system.
A workable standard: two physical copies, in two different buildings, at least one of them fireproof, and a written note somewhere your executor will find that says crypto exists and where to start looking — without the note itself containing the phrase.
What happens to your crypto if you die
Australians hold a meaningful amount of crypto that will simply vanish, because nobody else knows it exists. This is solvable, and it takes an afternoon.
Your executor must know it exists
Not the phrase — just that crypto is part of the estate, roughly where, and who to ask for help. An executor cannot recover what they never knew about.
Separate the knowledge from the keys
Instructions in your will become part of a public probate record. Keep the location of recovery material in a sealed document your solicitor holds, not in the will text itself.
Get proper advice
A solicitor who has handled digital assets can structure this so the estate can access holdings without creating a theft risk while you are alive.
Your first withdrawal, done properly
Moving coins off an exchange for the first time is the moment most people feel nervous, and the nerves are appropriate — there is no undo. Do it in this order and it is entirely routine.
Set up the wallet and record the seed phrase physically before you move anything. Generate a receiving address in the wallet and check the first and last several characters carefully. In the exchange, add that address to your withdrawal allow-list if the platform supports one. Send a small test amount — twenty dollars is plenty — and confirm it arrives and is visible in your wallet. Only then move the rest.
Two specific traps. First, network selection: sending an asset on the wrong network is one of the most common ways Australians lose funds permanently. Match the network in the exchange withdrawal screen to the network your wallet address belongs to. Second, address-swapping malware, which alters a copied address in your clipboard. Always verify the pasted address against what you intended, character by character at both ends, and on a hardware wallet verify it on the device screen.
Record the transaction for tax purposes as a transfer between your own wallets — not a disposal. Label your own addresses as you create them, because tax software that does not know an address is yours will treat the transfer as a sale and inflate your apparent gains. Our tax guide covers why that matters.
- Record the seed phrase physically, in two locations, before funding the wallet.
- Buy hardware only from the manufacturer or an authorised Australian reseller.
- Always send a small test transaction to a new address first.
- Label your own wallet addresses so transfers are not misread as taxable disposals.
Frequently asked questions
Do I need a hardware wallet in Australia?
If you are holding an amount you would be genuinely upset to lose, yes. A hardware wallet keeps your private keys on a device that never connects them to the internet, which removes the entire category of malware and remote-theft risk. For small amounts you are actively trading, a reputable software wallet or a well-secured exchange account is a reasonable trade-off.
Where should I store my seed phrase?
On something physical, in a place a fire or a burglary would not reach along with your device. Paper in a safe works; stamped steel plates work better. Never store it as a photo, a note in a password manager, a cloud document or an email to yourself. Anyone with the phrase has your crypto, permanently and irreversibly.
Can I buy a hardware wallet in Australia?
Yes — buy from the manufacturer directly or from an authorised Australian reseller listed on the manufacturer's own site. Never buy a used device, and never buy from a marketplace listing. Tampered devices with pre-generated seed phrases are a real attack, and the resulting theft is unrecoverable.
What happens to my crypto if I die?
Without a plan, it is very likely lost forever — your executor cannot access a wallet they know nothing about, and no institution can reset it. You need your executor to know that crypto exists, where the recovery material is physically located, and how to access it, without that information itself becoming a theft risk. Talk to a solicitor about structuring this properly in your will.
Is a wallet app on my phone safe enough?
For everyday amounts, a reputable non-custodial mobile wallet with a strong device passcode is reasonable. It is not appropriate for significant holdings, because a phone is an internet-connected device that can be compromised, lost or stolen. Many Australians run both: a mobile wallet for spending, a hardware wallet for savings.
Should an SMSF hold crypto in a hardware wallet?
It can, and many do, but the auditor will ask how the fund's ownership of the assets is evidenced and who controls the keys. The device and recovery material must be held on behalf of the fund, not mixed with the trustee's personal holdings, and the arrangement should be documented in the fund's investment strategy. Get advice from an SMSF specialist before setting it up.