全部文章

Kamla 学院

BYOB: why you should never hand your funds to a bot

3 分钟阅读

There is a red line separating legitimate automation services from schemes on a countdown: where your money lives.

The two models

Custodial model: you deposit money ON the service's platform. They trade "for you" inside their house. You see a number on their dashboard.

BYOB model (bring your own broker): the money stays in YOUR account, at a regulated broker you chose and opened yourself. The service only receives trading permissions through API keys that YOU create and can revoke at any moment.

The difference sounds technical. It is existential.

Why custody is the red line

  1. Their dashboard shows whatever they want it to show. Without your own account at a regulated broker, the "balance" is a promise.
  2. Withdrawals depend on their goodwill. The history of trading schemes is a history of withdrawals "temporarily suspended".
  3. Regulation. Holding client funds requires heavyweight licenses. Anyone doing it without them has already told you who they are.

How BYOB works in practice

  1. You open an account at a regulated broker (in Kamla's case: Alpaca, in the US).
  2. You create trading API keys, with no withdrawal permission. This is critical: the right keys allow buying and selling, never pulling funds out.
  3. The service uses those keys to execute the strategy in your account.
  4. You can see everything directly at the broker, and revoke the keys in seconds.

Power never changes hands: you can fire the system at any moment; the system can never take your money.

The safety checklist

  • Does the money stay at a regulated broker, in an account that is MINE?
  • Do the API keys exclude withdrawals?
  • Can I revoke access on my own, without asking anyone?
  • Is there a kill switch to stop the automation immediately?
  • Does the service store the keys encrypted?

Five yeses are the minimum for a serious conversation. Any single no is the complete answer.

Kamla is BYOB on principle: you connect your own Alpaca paper trading account with your own keys, encrypted at rest, with a one-tap kill switch. We never hold funds. How it works: kamla.ai.