"Not your keys, not your coins" is one of crypto's oldest sayings, and one of its most practical. Whoever controls the keys to a crypto balance controls the coins — whether that's you, an exchange, or a thief who tricked you into revealing them. Understanding wallets is therefore not an optional extra: it is the difference between owning crypto and merely having a claim on it.
This guide explains what a crypto wallet actually stores, the different kinds of wallet, how seed phrases work, how to send and receive safely, and the scams that target wallet holders.
What a crypto wallet really is
The name is misleading. A crypto wallet doesn't contain coins. Bitcoin, ether and tokens exist as records on their blockchains. What a wallet stores is the private keys that prove ownership of those records and authorise moving them.
A wallet does three jobs:
- Stores private keys — the secrets that sign transactions.
- Generates addresses — derived from public keys, these are what you share to receive funds.
- Builds and signs transactions — and shows you balances by reading the blockchain.
If you lose the keys, the coins remain on the blockchain, but nobody can ever move them. If someone else gets the keys, they can move the coins — and blockchain transactions cannot be reversed. For background on how keys and transactions work, see what is Bitcoin and what is Ethereum.
Custodial vs self-custody
The first and most important distinction is who holds the keys.
Custodial wallets
A custodial wallet is run by a company — usually an exchange or app. You log in with a password, and the company holds the keys and moves coins on your instructions.
- Pros: easy to use, password reset possible, convenient for trading.
- Cons: you depend on the company's security, honesty and solvency. If it is hacked, freezes withdrawals or fails, your funds may be stuck or lost. Historic failures — from Mt. Gox in 2014 to FTX in 2022 — left customers waiting years for partial recoveries, if any.
Self-custody (non-custodial) wallets
In a self-custody wallet, you hold the keys, usually backed up by a seed phrase.
- Pros: no company can freeze or lose your funds; you can transact any time.
- Cons: you are fully responsible. There is no password reset, no support line and no undo.
Hot vs cold wallets
The second distinction is whether the keys touch the internet.
| Type | Examples | Security | Convenience | Typical use |
|---|---|---|---|---|
| Hot — mobile | Phone wallet apps | Moderate | High | Small, everyday amounts |
| Hot — browser | Browser-extension wallets | Moderate to low | High | Using applications on Ethereum and other networks |
| Hot — desktop | Wallet software on a computer | Moderate | Moderate | Regular use |
| Cold — hardware | Dedicated USB or Bluetooth devices | High | Lower | Larger, longer-term holdings |
| Cold — paper/air-gapped | Keys generated and kept fully offline | High if done correctly | Low | Specialist long-term storage |
A hardware wallet keeps keys on a dedicated device that never exposes them to your computer. When you send funds, the transaction is shown on the device's own screen and you confirm it physically. Even if your computer is infected, malware can't extract the keys — though it can still try to trick you into approving the wrong transaction, so always check the details on the device itself.
Many people use both: a hot wallet with a small balance for convenience, and a cold wallet for savings.
Seed phrases: the master key
Most modern wallets generate a seed phrase (or recovery phrase) — typically 12 or 24 words chosen from a standard list of 2,048, defined in a standard called BIP-39. Those words can regenerate every key and address the wallet will ever use, on any compatible wallet.
This makes the seed phrase the single most important secret you own in crypto.
How to protect a seed phrase
- Write it down on paper or metal, offline. Never store it as a photo, in a notes app, in email or in cloud storage.
- Keep it somewhere safe from fire, water and theft — some people keep two copies in separate secure locations.
- Never type it into a website or share it with anyone. No legitimate wallet, exchange or support agent will ever ask for it.
- Consider an optional passphrase, which many wallets support as an extra word only you know. Understand that losing it means losing access.
- Plan for inheritance. If something happens to you, could a trusted person recover the funds? Without a plan, crypto can be lost permanently.
Sending and receiving safely
Check the network
Many tokens exist on several networks. USDT, for example, is issued on multiple blockchains (see what are stablecoins). Ethereum and many other networks use the same address format, so an address can look valid on a network the recipient doesn't support. Sending on the wrong network can make funds difficult or impossible to recover. Always confirm which network the recipient expects.
Check the address — all of it
Malware can replace an address you copy with an attacker's. A scam called address poisoning sends you tiny transactions from addresses that look like ones you use, hoping you'll copy the wrong one from your history. Verify the first and last several characters — ideally the whole address — and use your wallet's saved address book.
Send a test amount
For large transfers, send a small amount first and confirm it arrived before sending the rest. The extra fee is cheap insurance.
Mind the fees
Network fees vary with demand. On Bitcoin, fees depend on transaction size; on Ethereum, on gas used and the current base fee — and you must hold ETH to pay gas even when sending tokens. See Ethereum gas fees explained.
Token approvals: a hidden risk on Ethereum
When you use applications on Ethereum and similar networks, you often grant a smart contract permission to spend your tokens — an approval. Many apps request unlimited approvals for convenience. If that contract is malicious, or is later exploited, the approval can be used to drain those tokens from your wallet without any further action from you.
- Approve only the amount you need where possible.
- Review and revoke old approvals periodically using a reputable approval checker.
- Be wary of any site asking you to "sign" something you don't understand — some signatures authorise transfers.
Common wallet scams
- Fake support. Someone in a chat or social media "helps" with a problem and asks for your seed phrase. Real support never does.
- Phishing sites and apps. Copies of popular wallets or exchanges that capture your login or seed phrase. Bookmark the real sites; download wallets only from official sources.
- Malicious signature requests. A website asks you to sign a transaction or message that transfers your assets.
- Fake airdrops. Unknown tokens appear in your wallet with a link to "claim" more — interacting can trigger a malicious approval.
- Investment schemes. "Send crypto to our wallet and we'll trade it for you" — see crypto scams and risks.
A worked example: a sensible setup
Priya holds crypto worth $6,000 and trades actively with a small part of it.
- Exchange account: $500 for active use, secured with a unique password and authenticator-app two-factor authentication (see secure your trading account with 2FA).
- Hardware wallet: $5,500 in long-term holdings. Its 24-word seed phrase is written on a metal plate kept in a home safe, with a second copy at a relative's house in a sealed envelope.
- Routine: every withdrawal goes to a saved, previously tested address; large transfers start with a test amount; old token approvals are reviewed every few months.
If the exchange fails, Priya loses at most $500. If the laptop is infected, the keys never leave the hardware device. If the house burns down, the second copy of the seed phrase restores the wallet.
Choosing a wallet: a checklist
Whatever type you choose, these questions separate reputable wallets from risky ones:
- Is it widely used and well established? Long track records and large user bases mean more scrutiny.
- Is the code open source or independently audited? Transparency allows experts to check how keys are generated and stored.
- Did you get it from the official source? Fake wallet apps appear in app stores and search ads. Buy hardware wallets directly from the manufacturer or an authorised seller, never second-hand.
- Does it support the networks you need? Check before sending funds to it.
- Does it use a standard seed phrase? A standard backup means you can recover on other compatible wallets if the company disappears.
- Does it show transaction details clearly? You should be able to see exactly what you are signing — amount, recipient and, for contract interactions, what permission is being granted.
- Is it actively maintained? Regular updates matter for security.
Finally, practise recovery before you need it: set up the wallet, write down the seed phrase, then restore it on another device with a small balance to prove your backup works.
Wallets and trading on RumiEX
On RumiEX, crypto instruments such as BTC/USDT and ETH/USDT are OTC instruments: their prices are quoted by RumiEX's own pricing engine, and you trade the price without holding coins on the blockchain. Your trading balance is held in your RumiEX wallets, which you protect with your account security — a strong, unique password and two-factor authentication — rather than a seed phrase. Deposit and withdrawal methods show their own details and any fees before you confirm.
You can follow live crypto prices on the markets page and practise trading on the funded demo wallet included with every account.
Key takeaways
- A crypto wallet stores keys, not coins; whoever holds the keys controls the funds.
- Custodial wallets are convenient but depend on the provider; self-custody puts all responsibility on you.
- Hot wallets suit small, frequent use; cold (hardware) wallets suit larger, long-term holdings.
- Your seed phrase is the master key: write it down offline, never share it, never type it into a website.
- Check networks and full addresses, send test amounts, and revoke unneeded token approvals.
- No legitimate support agent will ever ask for your seed phrase.
Next, learn the scams that target crypto users in crypto scams and risks.
Frequently asked questions
What is a crypto wallet?
A crypto wallet is software or a device that stores the private keys controlling your cryptocurrency. The coins themselves are recorded on the blockchain; the wallet holds the keys that let you sign transactions to send them, and generates addresses so you can receive them.
What is the difference between a hot wallet and a cold wallet?
A hot wallet keeps its keys on a device connected to the internet, such as a phone app or browser extension — convenient for frequent use, but more exposed to malware and phishing. A cold wallet, typically a hardware device, keeps keys offline and signs transactions without exposing them, which is safer for larger or long-term holdings.
What is a seed phrase?
A seed phrase, or recovery phrase, is a list of usually 12 or 24 words generated by your wallet. It can recreate all of the wallet's keys on any compatible device. Anyone who has it can take your funds, so it should be written down offline, stored securely and never typed into a website or shared with anyone.
What happens if I lose my seed phrase?
If you lose both the device and the seed phrase of a self-custody wallet, the funds are almost certainly lost forever — no one can reset it for you. If you still have the device and it works, move the funds to a new wallet and back up its new seed phrase properly straight away.
Should I keep crypto on an exchange?
Keeping crypto on an exchange is convenient for trading, but you rely on the exchange's security and solvency; several large exchanges have failed or been hacked and frozen customer funds. Many people keep only what they actively trade on an exchange and hold long-term savings in a wallet they control.
Sources and further reading
Written and reviewed by the RumiEX Editorial Team. This article is for education only and is not financial, investment or tax advice. Read our editorial standards.