This guide shows you how to buy bitcoin and keep it in a way that protects your privacy and your savings. You will learn what a regulated exchange records about you, how to buy without an identity file, and how to keep the two kinds of coins apart so one never exposes the other.
You will also set up your own storage, run your own node, decide whether home mining is worth it, and write the plan that lets your family recover the bitcoin if something happens to you.
KYC stands for “know your customer”: the identity check a regulated exchange runs before it sells to you, with a government ID, often a selfie and proof of address. The bitcoin is the same either way: on the blockchain, a coin bought on an exchange looks exactly like one bought from a person. What differs is the record the exchange keeps, which ties your name to every address it sends coins to, and that record is where tracing your coins starts.
Buying without KYC is legal in most countries, and it is no way around tax: tax rules apply however you bought, so you keep your own records (the tax question at the end explains how). A bitcoin ETF held in a retirement account is something else again: you own shares in a fund, not coins you can withdraw to your own wallet.
Running your own node and mining a little are ways to take part in the network, not ways to save money. A node lets your wallet check its own balances without asking a stranger’s server; a small miner teaches how blocks are made, and Step 6 shows why it rarely pays for itself. The seven steps below put all of this in order.
Step-by-Step Guide
Step 1: Decide How You Buy, Knowing What Each Route Records. A regulated exchange checks your ID and keeps that record next to every purchase and every address you withdraw to. That record can leak: in May 2025 Coinbase reported that bribed support staff had copied the records of 69,461 customers, some with images of their ID documents. If you buy on an exchange anyway, a small recurring purchase weekly or every two weeks keeps you from timing the market (see dollar-cost averaging), and the coins should leave for your own wallet in batches, for example once your balance reaches a few hundred dollars, rather than in many tiny withdrawals; Your First Withdrawal walks through it. If you want no such record, buy peer to peer instead (Step 2).
Step 2: Set Up a Non-KYC Acquisition Channel. Peer-to-peer markets let you buy from another person without identity verification, though the seller sees how you pay: a bank transfer shows them your name. If you own no bitcoin yet, start with Bisq Easy (in the Bisq 2 app) or HodlHodl, which ask you for no deposit; RoboSats and Bisq 1 ask both sides to lock up some bitcoin as a guarantee, so they come later. HodlHodl is a company: you sign up with an email address, and it logs your IP address and keeps your email, trade details and receiving addresses for at least five years. Expect to pay a few percent above the exchange price: that premium is the cost of privacy, and 5% on a 100-euro buy is 5 euros. Start with small purchases to learn the mechanics. Sellers price reversible payment methods higher because of chargeback fraud, so irreversible methods such as cash in person usually cost less. Our lesson Buying Bitcoin Without KYC walks through a first purchase.
Step 3: Configure Cold Storage for Long-Term Holdings. Buy a hardware wallet, such as a Coldcard, a Trezor or a Blockstream Jade, new from the maker’s own store (see hardware wallets explained). Initialize the device and install the maker’s current firmware before you generate a seed: on a Coldcard, older firmware could make guessable seeds, and a later update does not repair them (see our Coldcard advisory). Then generate a new seed phrase, write it on paper and copy it onto a metal backup plate. Create a single-signature wallet for simplicity, or a 2-of-3 multisig configuration for larger holdings. Move all bitcoin from exchange withdrawals and P2P purchases into cold storage promptly. Keep the hardware wallet unplugged and stored safely when you are not signing a transaction.
Step 4: Separate KYC and Non-KYC UTXOs Into Distinct Wallets. Create two separate wallet accounts — one for KYC-sourced bitcoin and one for non-KYC bitcoin. Never combine UTXOs from these two pools in a single transaction: chain analysis assumes that all the coins spent in one transaction belong to one person (the common-input heuristic), so a no-KYC coin spent next to an exchange coin is tied to your name from then on. The coin control lesson shows how to pick coins by hand. If you use Sparrow Wallet, create separate wallet files for each pool and label every UTXO with its source. This discipline preserves the privacy benefit of your non-KYC purchases and keeps your tax-reportable holdings clearly identified.
Step 5: Run a Full Bitcoin Node. Install Bitcoin Core on a dedicated device, such as a Raspberry Pi, a mini-PC or a repurposed laptop, with a 2 TB SSD: Bitcoin Core 32.1 plans for about 900 GB of disk as of November 2026, and the chain keeps growing. Check the download before you run it (see how to verify a Bitcoin Core download), then let it fully synchronize the blockchain. Connect your wallet software (Sparrow) to this node so that your balance queries go to infrastructure you control. Without Tor, Sparrow also broadcasts your transactions through your node; with Tor on, it sends them over Tor through public servers, which it says is more private. Running a node also lets you verify incoming payments independently, without trusting any third party’s version of the blockchain.
Step 6: Treat Mining as a Way to Learn, Not to Buy. Mined coins carry no exchange record, and some pools, such as OCEAN, need no account: you use your Bitcoin address as the username. But home mining rarely pays. At November 2026 numbers, an Avalon Q at full power on cheap 7-cent electricity earns about $2.99 a day and burns $2.81 of electricity, leaving about $0.18 a day before pool fees, so each $1,000 of hardware would take about fifteen years to earn back. Long before that, the halving expected in early-to-mid 2028 cuts what it earns to about $1.50 a day, less than its electricity. OCEAN pays you inside the block only once your earnings pass its payout threshold (about 0.0105 BTC in November 2026, roughly nine months of an Avalon Q’s output); below it, the pool holds your balance unless you set up its Lightning payouts. Solo mining is a lottery that rarely produces a block. Run a small miner for what it teaches, as our lesson on home mining explains.
Step 7: Implement an Inheritance and Recovery Plan. Split the paperwork so that no single document unlocks your bitcoin. A letter of instructions says what exists, whom to call and how recovery works, in plain language, and contains no secrets; it can sit with your will, your lawyer or your family. A sealed access sheet, kept somewhere else, says where the hardware wallets, backups and wallet descriptors (for multisig) are, and any PINs. The seed words go in neither, and never in a will, which can become public during probate. Keep the three apart, so that no one person and no one place holds both documents and the seed backups. Without such a plan, bitcoin in cold storage can become permanently inaccessible if something happens to the sole keyholder. Our lesson on Bitcoin inheritance planning has templates for both documents, and The Two-Envelope Plan is a printable family kit built on the same split.
Common Mistakes to Avoid
A Bitcoin acquisition strategy can be undermined by operational errors that expose your privacy or put your funds at risk. Watch for these frequent missteps.
1. Leaving Bitcoin on Exchanges. Exchange accounts are custodial — the exchange holds the private keys, and you hold an IOU. Exchange hacks, insolvency events, and regulatory seizures have caused billions of dollars in user losses across the industry. Withdraw to your own hardware wallet regularly, in batches of a few hundred dollars rather than many tiny withdrawals: each withdrawal becomes a separate coin that costs a fee to spend later. The only exception is bitcoin held within a regulated IRA or 401(k) structure, where custodial arrangements are required by law.
2. Buying Non-KYC Bitcoin and Then Depositing It to a KYC Exchange. Sending non-KYC bitcoin to an exchange that holds your identity permanently links those coins to your personal information. The privacy premium you paid is wasted. If you need to sell non-KYC bitcoin, use the same peer-to-peer platforms where you bought them, or accept them as payment for goods and services.
3. Neglecting Tax Documentation. In most jurisdictions, buying bitcoin with ordinary money is not itself a taxable event, but it sets your cost basis; selling, exchanging or spending bitcoin can be taxable. Failing to track your cost basis, acquisition dates, and disposal amounts creates a compliance headache that compounds over years. Use portfolio tracking software that supports CSV imports from exchanges, and manually record P2P purchase details (date, amount, price, counterparty payment method) immediately after each transaction.
4. Using a Single Seed Phrase Without Metal Backup. Paper seed phrase backups degrade, get lost in moves, and are destroyed in fires and floods. A metal backup survives environmental damage that would destroy paper. Design matters: in Jameson Lopp’s stress tests, simple plates you mark with a centre punch (Blockplate, SeedPlate) scored A, while the letter-tile Billfodl scored C. Store it in a location separate from your hardware wallet; our lesson on seed phrase storage compares the options.
5. Over-Concentrating in a Single Custody Method. Keeping 100% of your bitcoin in a single hardware wallet with one seed phrase creates a single point of failure. Consider distributing holdings across a multisig setup (2-of-3 keys in different locations) and a separate self-custodial Lightning wallet for spending. Diversified custody reduces the damage from any single key compromise, device failure, or physical theft.
Frequently Asked Questions
What is the difference between KYC and non-KYC Bitcoin?
KYC Bitcoin was purchased through a platform that verified your identity — government ID, address proof, sometimes a selfie. The platform maintains records linking your identity to your purchase amounts, dates, and withdrawal addresses. Non-KYC Bitcoin was acquired without identity verification, typically through peer-to-peer platforms (Bisq, RoboSats, HodlHodl), the few Bitcoin ATMs that still sell small amounts without ID, mining, or earning bitcoin for goods and services. The bitcoin itself is identical at the protocol level — there is no on-chain difference. The distinction is entirely about the metadata that exists off-chain in exchange databases and government records.
Is dollar-cost averaging better than lump-sum buying?
Dollar-cost averaging (DCA) — buying a fixed dollar amount on a regular schedule regardless of price — reduces the emotional impact of price volatility and removes the need to time the market. Statistically, lump-sum investing outperforms DCA about two-thirds of the time in traditional markets because asset prices tend to rise over long periods. However, DCA provides psychological comfort and reduces the risk of making a single large purchase at a short-term peak. For most people, the discipline of automated DCA leads to better long-term outcomes than waiting for the “perfect” entry point that may never come.
How do I handle taxes on non-KYC Bitcoin?
Tax obligations apply regardless of whether you purchased bitcoin through KYC or non-KYC channels. In the United States, for example, you must report capital gains when you sell or spend bitcoin, calculated as the difference between your sale price and your cost basis (purchase price). For non-KYC purchases, maintain your own records: the date, the amount of bitcoin acquired, the price at the time of acquisition, and the payment method. If you cannot document your cost basis, tax authorities may assume a cost basis of zero, meaning your entire sale proceeds would be treated as gain. Consult a tax professional familiar with cryptocurrency to structure your reporting correctly.
Should I use a Bitcoin ETF or buy bitcoin directly?
Bitcoin ETFs provide exposure to bitcoin’s price within traditional brokerage and retirement accounts (IRA, 401k, Roth IRA), which offers significant tax advantages. However, you do not own actual bitcoin — you own shares in a fund that holds bitcoin on your behalf. This means no self-custody, no privacy benefits, and counterparty risk from the fund’s custodian. Direct bitcoin purchase gives you full sovereignty: you control the keys, you choose your privacy level, and you have no counterparty risk. Many investors use both: ETFs in tax-advantaged retirement accounts for long-term compounding, and direct self-custody for bitcoin they want to actually control and use. Our lesson Bitcoin ETFs Explained weighs the two side by side.
Related Resources
- Hardware Wallet Buying Guide 2026
- The Complete Guide to Bitcoin Seed Phrase Security
- Bitcoin Privacy: Why It Matters and How Chain Analysis Works
- Why Run Your Own Bitcoin Node
- 2-of-3 Multisig Bitcoin Setup Guide
