Message signing is the way to go — it proves ownership without moving funds or exposing yourself to unnecessary risk. Moving funds just to prove you hold them has a cost and creates unnecessary on-chain activity.
The good news is message signing can be done in a way that's audit-ready and privacy-preserving, so you satisfy the regulators without giving up more than you need to.
