Free printable kit
Bitcoin scam protection kit
If you hold bitcoin, scammers want your seed words, your hardware wallet or your trust. Here are the scams that hit holders right now, how to spot each one, and what to do, each backed by a real source.
The scams that hit bitcoin holders
- 1
Fake wallet updates
A post, email or pop-up says you must update your wallet or "migrate" your funds through a link. On Oct 11, 2026 a phishing link even appeared on COLDCARD's official X account. Update only in the maker's own app or site, typed by hand.
Source: Cointelegraph: phishing link on COLDCARD's X account (Oct 11, 2026)
- 2
Tampered hardware
A device that arrives set up, with a seed card already filled in, or bought from a reseller. In Oct 2026, criminals fitted implants into genuine Ledger devices sold through a reseller that Ledger's site listed as authorized. Buy only from the maker's own store.
Source: Galaxy Research: Ledger devices sold through CryptoBilis (Oct 16, 2026)
- 3
Fake support
Someone from "support" at your wallet maker or exchange contacts you first, by phone, email or direct message. In 2025, criminals bribed Coinbase support contractors to copy customer data, which makes these calls convincing. Real support never needs your seed words and never asks you to move funds.
Source: Coinbase: customer data taken through bribed support contractors (May 2025)
- 4
Phishing links
An email or post warns of a security problem and links to a site that asks for your recovery words. In Sep 2026, attackers used BitBox's newsletter provider to send exactly this kind of email. Never type your seed words into a website.
Source: BitBox: email address exposure at newsletter provider Brevo (Sep 24, 2026)
- 5
Investment scams
A stranger or new online friend pitches a crypto investment, an app shows big gains, then asks you to pay "taxes" or "fees" before you can withdraw. The FBI counted $7.228 billion in crypto investment fraud losses in 2025.
- 6
Recovery scams
After a loss, someone offers to get your money back if you pay first, sometimes posing as a law firm or a government agency. The FBI warns about these.
- 7
Pay at a crypto ATM
Anyone who tells you to take out cash and put it into a crypto ATM, sends you a QR code to scan there, or stays on the phone to coach you while you pay.
Source: FBI IC3 public service announcement on crypto ATMs and QR codes
- 8
Your money must be moved
A "bank", "agency" or "police officer" says your accounts are at risk and tells you to move funds or pay in crypto.
Source: FBI IC3 public service announcement on crypto ATMs and QR codes
Wallet-specific events, with dates, are on the wallet security alerts page.
Free printable kit
Get the Bitcoin scam protection kit
Three printable pages: the red flags, a fill-in security plan for your wallets and accounts, and what to do if something happens. Free with the weekly Bitcoin brief, which flags new scams, phishing campaigns and wallet advisories every week, backed by real sources.
Free · Unsubscribe anytime · Ghost privacy policy
One issue a week from Cold Hard Sats, backed by real sources.
What to do
- Stop. Don't click, don't pay, and don't move funds while someone is rushing you.
- Contact the company yourself, using its official website or app typed by hand, or the number on your card or statement, never a number or link someone sent you. (source)
- Update firmware only in the maker's official app or website. COLDCARD, for example, says its only official website is coldcard.com. (source)
- Buy hardware wallets only from the maker's own store, not a reseller, even an authorized one. (source)
- If it already happened, report it at ic3.gov, and be wary of anyone who then offers to recover your funds for a fee. (source)
The one rule: Never share your seed words (the backup words for a wallet's keys) with anyone, for any reason. No real company, agency or support line will ever need them.
The numbers
$11.366 billion
lost in 181,565 complaints involving crypto filed with the FBI in 2025 (p. 52)
$7.228 billion
of crypto losses came from fake crypto investments (61,559 complaints) (p. 53)
$1.4 billion
was reported lost to recovery scams that promise to get stolen funds back (10,516 complaints) (p. 53)
$4.43 billion
of crypto losses were reported by people 60 and older, more than any other age group (p. 52)
Source: FBI IC3, 2025 Internet Crime Report (PDF), pages 52 and 53. These count only complaints reported to the FBI.
Extra: a printable card to share with family
A one-page red-flags card with a space for someone to call before sending money. No signup needed.
Free printable kit
Get the Bitcoin scam protection kit
Three printable pages: the red flags, a fill-in security plan for your wallets and accounts, and what to do if something happens. Free with the weekly Bitcoin brief, which flags new scams, phishing campaigns and wallet advisories every week, backed by real sources.
Free · Unsubscribe anytime · Ghost privacy policy
One issue a week from Cold Hard Sats, backed by real sources.
Sources
- Cointelegraph: phishing link on COLDCARD's X account (Oct 11, 2026): the phishing post on COLDCARD's official X account, and COLDCARD's official website.
- Galaxy Research: Ledger devices sold through CryptoBilis (Oct 16, 2026) and Ledger: response to the hardware implant attack (Oct 15, 2026): the implanted Ledger devices sold through a listed reseller.
- Coinbase: customer data taken through bribed support contractors (May 2025): support contractors bribed to copy customer data.
- BitBox: email address exposure at newsletter provider Brevo (Sep 24, 2026): phishing emails sent through BitBox's newsletter provider.
- FBI IC3, 2025 Internet Crime Report (PDF): crypto complaints and losses (p. 52), crypto investment fraud, crypto ATM and recovery scams (p. 53).
- FBI IC3, fraud alert questions (PDF) and FBI IC3 public service announcement on crypto ATMs and QR codes: the FBI's red flags, crypto ATM and QR code schemes, and its tips.
Last checked Oct 21, 2026. General education only, not legal or financial advice.