Almost everyone who has spent any time with cryptocurrencies knows this phrase. Behind four words lies a whole philosophy: whoever holds the private keys truly owns the asset. But this freedom has a flip side that gets discussed less often — along with the keys, you also take on full responsibility for what you accept into your wallet. In this lesson we'll examine why the principle of self-custody is directly tied to AML checks, and why, for a non-custodial holder, verifying the origin of coins stops being someone else's concern.
The formula "not your keys, not your coins" was popularised by one of the best-known Bitcoin educators.
"Not your keys, not your coins"
— Andreas Antonopoulos. On the importance of holding your keys yourself.
The meaning is direct. When your coins sit on an exchange or with a third-party service, you don't actually own the cryptocurrency itself — you own an entry in someone else's database and that service's promise to hand over the assets on demand. The private keys to the real coins are held by the exchange. As long as all is calm, the difference is invisible. But the moment the exchange goes bankrupt, gets hacked, or freezes withdrawals, you discover that "your" coins are not under your control. The industry's history is full of such examples: the collapse of Mt.Gox in 2014, when around 850,000 BTC went missing, remains a textbook lesson in what happens when someone else holds the keys.
Self-custody is when the private key or seed phrase is held by you alone: on a hardware wallet, in a non-custodial app, on paper in a safe. No one can freeze your balance, deduct from it, or demand that you "explain a transaction". This is genuine ownership of a digital asset. It's precisely for this property that cryptocurrency was created in the first place.
Here we come to the non-obvious part. On an exchange, compliance is the exchange's job: it checks incoming deposits through KYT, freezes funds when it sees something suspicious, and requests the source of origin. In this arrangement the user is the object of the check. In the non-custodial world it's different: there is no reviewer above you. No one filters out a "dirty" transfer before it lands on your address. Which means responsibility for the cleanliness of the coins you accept falls on you personally.
The result is a paradox: the freedom of self-custody doesn't cancel the AML rules — it shifts their observance onto the holder. An exchange will block the entry point in one click; the blockchain blocks nothing, but it also forgets nothing. That's why a competent non-custodial user acts as their own compliance officer: they check a counterparty's address before accepting a transfer from them, not after.
Let's work through a typical situation. You're offered a chance to sell cryptocurrency at an attractive rate via P2P or an acquaintance. The money comes straight to your wallet — fast, convenient, no exchange. But if the sender paid with coins that trace back to a darknet market or to funds stolen from someone else's account, you receive "poisoned" assets. There's no undoing it: the transaction is irreversible. A month later, when you take these coins to an exchange, the whole chain surfaces, and it's you who has to sort it out.
Despite the weight of responsibility, self-custody delivers exactly what cryptocurrency exists for in the first place.
Freedom isn't free. Self-custody has its own dangers, and AML risk is only one of them.
The short takeaway for the reviewer
The principle "not your keys, not your coins" works both ways. By holding the keys, you gain sovereignty over the asset — and at the same time take on the role of your own AML filter. In the custodial model the exchange checks you; in the non-custodial model you check yourself — otherwise someone else's KYT system will do it for you later, and not in your favour. Checking the origin of coins before accepting them is not bureaucracy but a direct continuation of the idea of holding your assets yourself.
In the next lesson we'll move from the topic of ownership to the topic of privacy — one of the most contentious in the industry. We'll examine the debate around Tornado Cash: where the lawful right to anonymity ends and a laundering instrument begins, and what this conflict means for someone carrying out an AML check.
This material is for educational purposes and does not constitute legal advice.