Safeguarding Your Crypto

The Golden Rule: Not Your Keys, Not Your Coins

🔑 THE MOST IMPORTANT CONCEPT IN CRYPTO SECURITY

When you buy Bitcoin on Coinbase, do you actually own Bitcoin?

Technically: Coinbase owns Bitcoin. You own a claim against Coinbase.

This distinction matters enormously. In 2022, crypto lender Celsius filed for bankruptcy. Customers who had deposited crypto with Celsius lost access to their funds — in many cases permanently. FTX, once the second-largest crypto exchange, collapsed in November 2022. Over $8 billion in customer funds went missing. Customers who held crypto on FTX lost everything.

💡 KEYS DETERMINE CONTROL
An exchange manages keys for you; self-custody puts access and recovery responsibility on you. Loss or disclosure of a private key or seed phrase can cause permanent loss. <a href="/modules/crypto-keys-explained?lens=crypto&lesson=pk-1">Review keys and seed phrases</a>. Here, focus on choosing and operating a custody arrangement.

🏦 EXCHANGE CUSTODY vs. SELF-CUSTODY
Exchange custody:
✅ Convenient — easy interface, customer support, password recovery
❌ Risk — exchange can be hacked, go bankrupt, freeze withdrawals, or be shut down

Self-custody:
✅ Full control — no third party between you and your crypto
❌ Full responsibility — lose your private key or seed phrase = permanent loss

The standard rule: Keep what you're actively trading on exchanges. Move significant long-term holdings to self-custody.

Tip: If you hold more than $1,000 in crypto, spending an afternoon learning about self-custody can be worthwhile. Understanding how to use a hardware wallet matters because the alternative is relying on exchanges to never fail, freeze, or get hacked — and history shows that's not always reliable.

Open this lesson

Hardware Wallets & Seed Phrases

🔐 THE SAFEST WAY TO HOLD CRYPTO

A hardware wallet is a physical device — about the size of a USB drive — that stores private keys completely offline. Even if a computer is hacked, a virus cannot access keys stored on a hardware wallet.

📱 SOFTWARE vs. HARDWARE WALLETS
Software wallet (MetaMask, Trust Wallet, Exodus):
- Runs on a phone or computer
- Connected to the internet — "hot wallet"
- Free to use, convenient for daily transactions
- Vulnerable to malware, phishing, and device compromise
- Common for: small amounts, active DeFi use

Hardware wallet (Ledger, Trezor, Coldcard):
- Physical device, offline storage — "cold wallet"
- Cost: $70–$200
- Private keys never leave the device
- Even if a computer is infected, crypto remains safe
- Transactions require physical confirmation on the device
- Common for: significant long-term holdings

🌱 SEED PHRASES: THE MASTER KEY
When setting up any wallet, the user receives a seed phrase — usually 12 or 24 random words:
"apple chair museum tower river pencil bridge ocean flame guitar sunset voyage"

This seed phrase IS the wallet. Anyone with these words can access all crypto — forever, from any device.

✅ How to protect a seed phrase:
- Writing it on paper (never digital) immediately upon setup is important
- Storing it in multiple secure physical locations (home safe, safety deposit box) is recommended
- Avoiding photographing it, typing it online, or storing it in cloud storage is best practice
- Never giving it to anyone is essential — customer support staff, wallet companies, and exchanges never ask for it
- Considering a metal seed phrase backup (fireproof and waterproof) is an option

❌ THINGS TO AVOID:
- Storing it in Google Docs, Notes, or email
- Taking a photo with a phone
- Entering it on any website (legitimate or not)
- Giving it to a "support agent" who contacts someone online

Tip: When considering a hardware wallet purchase, a reliable approach is to buy only from the manufacturer's official website (ledger.com or trezor.io) rather than third-party retailers. Pre-compromised hardware wallets sold through unauthorized channels are a documented scam. The small extra cost is worth the protection.

Open this lesson

Crypto Scams, Red Flags & Recovery Planning

🚨 CRYPTO CRIME BY THE NUMBERS

In 2023, the FBI's IC3 received complaints involving cryptocurrency reporting over $5.6 billion in losses. This is reported loss data, not a worldwide total. Crypto is irreversible — unlike credit card fraud, there is no dispute process. Once crypto is sent to a scammer's address, it's gone permanently.

Understanding scams is important for anyone holding crypto.

🚫 THE MAJOR CRYPTO SCAMS (2026)
1. Pig Butchering (Romance Scams): Fake romantic relationships built over weeks or months on dating apps or social media. Scammer gains trust, then introduces a "great crypto investment opportunity." Victims have lost millions in individual cases.

2. Fake Support Impersonation: Someone posts a question about MetaMask on Reddit. Minutes later, "support staff" DM them. They ask for the seed phrase to "verify the wallet." This is considered a scam — legitimate companies do not ask for seed phrases.

3. "Send 1, Get 2 Back" Giveaway Scams: AI-generated videos of Elon Musk, Michael Saylor, or other figures promising to double crypto. These have stolen hundreds of millions. No one doubles crypto. Ever.

4. Rug Pulls: New crypto projects launch with exciting promises. Developers sell tokens, generate hype, then disappear with investor funds overnight.

5. Phishing Websites: Fake versions of Coinbase, MetaMask, or Uniswap that steal login credentials or seed phrases. Verifying URLs carefully is important.

6. Address Poisoning: Scammers send tiny amounts of crypto from an address that looks similar to one someone regularly uses. If they copy-paste from history, they send to the scammer by mistake.

📋 RECOVERY PLANNING
What happens to crypto if something happens to someone? Unlike a bank account, crypto with no recovery plan is unrecoverable.

- Documenting holdings, exchange accounts, and wallet addresses (without seed phrases) in a secure location is one approach
- Establishing a process for a trusted person to access hardware wallets and seed phrases (stored separately and securely) is common
- Considering a crypto-aware estate attorney for significant holdings is worth exploring
- Using a password manager for exchange logins, with emergency access for family, is one option

⚠️ EDUCATIONAL DISCLAIMER: Crypto security is a rapidly evolving area. Consulting a qualified professional for guidance specific to individual situations is recommended.

📚 SOURCE CONTEXT
Reviewed 2026-10-11. U.S. federal rules unless another jurisdiction is named; year-specific limits are not timeless. Sources:
- https://www.fbi.gov/news/stories/2023-cryptocurrency-fraud-report-released

Tip: A helpful learning exercise: searching Google for the name of any crypto project or exchange followed by 'scam Reddit' is one way to research. Reading real accounts of crypto fraud is more effective than abstract warnings — it makes the risk vivid and concrete in a way that shapes understanding.

Open this lesson