The Digital Wealth Trap

Capstone Metals is a wealth-protection firm. We help families hold physical gold and silver, and we help people move assets — entire brokerage accounts, digital assets like cryptocurrency, real estate and more — into self-directed IRAs and more secure custody when that is the direction they choose to go. The custodians we work with, Preferred Trust Company and GoldStar Trust Company, are built for exactly that kind of flexibility.

Our standard of care is a matter of licensing, not marketing. Mark Bugli, our senior advisory partner, has been a licensed financial advisor since 1970 and is a fiduciary, which is a legal and moral obligation to put your interest ahead of ours in every recommendation, price and disclosure. In practice that means we tell people not to move money far more often than the industry average, and we say so in this guide wherever it applies.

Whether or not you ever do business with us, the goal of this guide is that you finish it better educated and better protected. It is education, not investment, tax or legal advice — general information written for a general audience, and it cannot account for your circumstances.

Financial writing gets dangerous when verifiable facts, interpretation and speculation are printed in the same typeface. Throughout this guide, every load-bearing claim carries one of four labels.

If a page has no label, treat it as background or definition. If a claim matters to a decision you are making, check the source note at the end of the section and verify it yourself. We would rather you trust the primary document than trust us.

Strip away the acronyms and every chapter here reduces to the same question: when the system is under stress, what do you actually control?

Control is not the same as ownership on paper. A brokerage balance, a stablecoin, a tokenized fund share and a bar in a vault are all forms of ownership, but they fail differently and they fail at different times. Understanding the failure mode is the entire exercise.

Most of your wealth should probably stay in the digital, custodied, regulated system, because that is where growth, liquidity and legal protection live. This guide is about the remainder — the portion that exists so that a bad week in the plumbing is not a bad decade for your family.

US federal debt held by the public plus intragovernmental holdings stands past $40 trillion, according to the Treasury's own Debt to the Penny series. Net interest is now one of the largest single line items in the federal budget, competing directly with defense and Medicare for room.

The mechanically important number is not the total. It is interest as a share of revenue, because that is what crowds out everything else. When a growing slice of every tax dollar services past borrowing before it funds anything current, the political menu narrows.

History is not a forecast, but it is a catalogue. Sovereign debt burdens have generally been reduced through some combination of growth, taxation, and currency debasement — with outright default the rare and catastrophic fourth option.

Growing out of it is the good outcome and it has happened: strong productivity growth shrinks debt as a share of output without anyone feeling a policy. Taxing out of it is the visible outcome, and it is politically expensive. Inflating out of it is the quiet outcome, because it transfers value from savers to borrowers without a vote.

Debasement rarely announces itself. There is no morning where the currency is declared worth less. There is a decade where wages rise, prices rise faster, and the savings account that felt responsible quietly buys less each year.

This is why the purchasing-power question matters more than the price question. A savings balance that grew four percent in a year when prices rose five percent did not grow. It shrank politely.

Gold is not an income asset. It pays no dividend, no coupon, no rent. If your problem is that you need cash flow in retirement, metal does not solve it and anyone telling you otherwise is selling.

Gold is also not reliably a short-term inflation hedge. Over months and quarters it has frequently moved against inflation expectations, real yields and the dollar in ways that frustrate anyone who bought it as an inflation ticket. Its historical case is long-horizon purchasing-power preservation and crisis behaviour, not next quarter's CPI print.

If you have high-interest debt, no emergency fund, or an unfunded near-term obligation, buying bullion is very likely the wrong move. We will tell you that on the phone.

A payment stablecoin is a token, issued on a blockchain, that a private company promises to redeem for one dollar. The promise is the product. The blockchain is only the rails.

That makes a stablecoin closer to a money market fund share or a prepaid balance than to a bank deposit. You are holding a claim on an issuer's reserve portfolio, and the value of your token depends on the quality of those reserves and the issuer's willingness and ability to honour redemptions on demand.

The GENIUS Act, signed into law in July 2025, created the first federal framework for payment stablecoins in the United States. It requires permitted issuers, full reserve backing in high-quality liquid assets, monthly reserve disclosures, and it prohibits permitted payment stablecoin issuers from paying interest or yield to holders.

It also puts holders ahead of other creditors in an issuer insolvency. That is a meaningful protection and a real improvement on the pre-2025 status quo. It is not deposit insurance, and the law is explicit that these instruments are not federally insured.

Here is the part we find genuinely interesting. Stablecoin issuers park reserves in short-dated Treasury bills. As stablecoin supply grows, so does a new, price-insensitive, permanent-seeming buyer of US government short-term debt.

That is convenient for a Treasury with a large refinancing calendar. It also means the demand for bills is now partly a function of demand for crypto-adjacent payments — a linkage that did not exist a decade ago and that runs in both directions.

Run the loop backwards and you get the uncomfortable version: a large, fast redemption wave at a major issuer becomes forced selling into the bill market at exactly the moment markets are stressed.

In March 2023, a major fully-reserved stablecoin briefly traded near $0.88 because a portion of its cash reserves sat at a bank that failed over a weekend. The reserves were real. The redemption window was closed because the banking system was closed.

That episode is the clearest teaching case available. The token did not break because the backing was fake. It broke because backing and access are two different things, and access ran through a counterparty that had its own bad week.

We are not against stablecoins. For cross-border settlement, weekend transfers, and business payments into countries with unreliable banking, they solve real problems that legacy rails have not solved in forty years of trying.

The mistake we see is category confusion: treating a payment instrument as a savings vehicle. A stablecoin is a very good way to move dollars and a mediocre way to store them, because it earns you nothing by law and exposes you to issuer and rail risk that a bank deposit does not.

Tokenization means representing a claim on a real asset as a transferable token on a ledger. Settlement gets faster, fractional ownership gets easier, and transfers can run outside market hours. Those are real improvements and they are why serious institutions are building here.

What tokenization does not change is the legal chain underneath. A tokenized Treasury fund is still a fund, holding still-custodied securities, governed by still-conventional law. The token is a claim on a claim.

Tokenized gold products can be excellent tools. They are liquid, divisible to fractions of a gram, cheap to hold and easy to trade at 3am. For a trader expressing a view on the gold price, they are frequently the better instrument, and we say so.

But a gold token is a claim against an issuer, redeemable under the issuer's terms, from the issuer's vault, subject to the issuer's minimum redemption size, in the issuer's jurisdiction. If the reason you want gold is that you distrust intermediated claims, buying an intermediated claim on gold has answered a different question than the one you asked.

A tokenized asset lives inside a smart contract. That contract may be upgradeable by its issuer, pausable by an administrator, and dependent on external price oracles. Each of those is a control someone else holds over your holding.

Billions of dollars have been lost to smart-contract exploits, bridge compromises and oracle manipulation since 2020. Most of it was not fraud. It was software, deployed to production, holding real money.

Investment fraud involving digital assets has become one of the highest-dollar complaint categories the FBI's Internet Crime Complaint Center tracks, with losses reported in the billions annually and older Americans absorbing a disproportionate share.

The dominant pattern is not a hacked wallet. It is a long-form relationship scam: weeks of ordinary conversation, a plausible trading platform that shows fabricated gains, small successful withdrawals to build trust, then escalating deposits and a wall of fees when the victim tries to exit.

Every one of these can be checked in under ten minutes, before any money moves. The strongest defence is not sophistication; it is a rule that nothing gets funded on the day it is proposed.

We would be dishonest to catalogue crypto fraud and skip our own industry. Metals fraud is well documented and typically takes one of three forms: grossly overpriced 'exclusive' or proof coins sold at multiples of melt value, fake or misrepresented IRA arrangements, and home-storage IRA schemes that create tax problems the buyer discovers years later.

The CFTC and multiple state regulators have brought cases against metals dealers for exactly this. The defence is the same as in crypto: verifiable pricing against spot, written disclosures, a named custodian you can call independently, and no urgency.

Account takeover, SIM swapping, credential stuffing and business email compromise cause vastly more household loss than any cryptographic weakness. These are unglamorous attacks against people, not mathematics.

The countermeasures are equally unglamorous and genuinely effective: hardware security keys or app-based authenticators instead of SMS codes, a separate email address used only for financial accounts, a carrier port-out PIN, and a written verification protocol with anyone who can move your money.

The honest state of play: no publicly known quantum computer can break the elliptic-curve cryptography securing today's blockchains or the RSA securing much of the internet. Estimates for when a cryptographically relevant machine might exist range from roughly a decade to never, and serious researchers disagree loudly.

What is not speculative is the institutional response. NIST finalized its first post-quantum cryptography standards in August 2024, and migration planning is underway across governments, banks and payment networks. That is a real, funded, multi-year engineering programme, which is itself the strongest evidence that the risk is taken seriously and being addressed.

The most credible near-term quantum concern is not stolen coins; it is stored ciphertext. An adversary can capture encrypted traffic today and decrypt it years later once capable hardware exists. That threatens long-lived secrets — identity documents, medical records, legal files — more than it threatens a balance.

For blockchains, the exposure is uneven and technical: addresses whose public keys have been exposed on-chain are more vulnerable than those that have not, and networks can and likely will hard-fork to post-quantum signatures. It is a hard coordination problem, not an unsolvable one.

Physical bullion held in your name has no issuer, no smart contract, no redemption window, no cryptographic key and no platform outage. Those are genuine structural advantages and they are the entire case.

Against that: it earns nothing, it costs money to store and insure, it carries a premium over spot when you buy and a spread when you sell, it is illiquid at 2am, it is physically stealable, and its price can fall substantially and stay down for years. Gold fell for most of 2012 through 2015. Anyone who bought at the 2011 peak waited nine years to break even in nominal terms.

Because the case is insurance, the sizing question is an insurance question: how much of a bad monetary decade can this position offset, and what is the annual cost of carrying it?

Commonly discussed allocations for a diversified household fall in a modest single-digit to low-double-digit percentage range. We are deliberately not printing a number here, because the right figure depends on your income stability, time horizon, existing holdings and obligations — and because a dealer who publishes a target allocation is publishing a sales quota.

The failure mode we see most often is not owning too little. It is a family who liquidated productive assets to buy a large metals position after a frightening headline, then needed cash eighteen months later.

There are three sane custody options and they trade off differently. Home storage gives maximum control and maximum theft and insurance exposure. A segregated depository gives audited, insured storage with your specific bars allocated to you. An IRA arrangement gives tax treatment but requires an approved custodian and an approved depository — home storage of IRA metal is not permitted and the schemes advertising it create real tax exposure.

The question to ask of any storage arrangement is the same one from the tokenization chapter: allocated or unallocated, and whose name is on the bars.

None of the four steps below require buying anything from us, and three of them cost nothing. If you do only the security items, this guide has paid for itself.