Risks, Scams & Staying Safe
The traps newcomers fall into — and the habits that keep you safe.
⏱ About 10 min
By the end of this module you’ll be able to:
- Understand the two big risks: volatility and losing control of your coins
- Recognize the scam patterns of 2025–2026 by their red flags
- Lock in the golden rules that stop most losses before they happen
Here's the uncomfortable truth: Bitcoin itself is extremely secure, but the people using it get tricked every day. Almost every loss comes from fooling a human, not from breaking the code. This module is the one that protects your money.
The two risks you can't ignore
Volatility risk. Bitcoin's price swings hard and can fall 50–80% in a downturn. That's a market risk — covered more in the previous module — and the reason you never put in money you'll need soon.
Custody risk. This is the one this module is about. Bitcoin transactions are irreversible — once you send, there's no bank to call, no chargeback, no undo button. And whoever holds your secret key holds your coins. Lose control of that key, or get tricked into sending, and the money is simply gone.
A one-way tube
Sending Bitcoin is like dropping cash into a one-way tube: once it goes in, you can't reach back and grab it. So all the safety happens before you press send — not after.
- Seed phrase (recovery phrase)
- A list of 12 or 24 ordinary-looking words that is the master key to your wallet. Anyone who sees it can take all your coins from anywhere in the world. It is the single most important secret to protect.
The one rule that stops most theft
No legitimate party — no wallet maker, exchange, support agent, government, or tech company — will EVER ask for your seed phrase. Any request for it, by any channel, is 100% a scam. No exceptions.
The scams of 2025–2026
Scammers follow the money, and they've gotten slick — AI now writes their messages and even fakes celebrity videos. Here are the patterns hitting beginners right now.
- Fake giveaways — 'send 1 BTC, get 2 back.' No one doubles your money for free; your coins just vanish.
- Pig-butchering / romance scams — a stranger (a 'wrong number' text, a dating app, a friendly DM) spends weeks building trust, then steers you to a slick fake investment site. The growing balance is fake; when you try to withdraw, they demand 'fees' and disappear.
- Fake 'support' — a friendly 'agent' contacts you after you post a problem. Real support never needs your secret words; the scammer's whole goal is to get them.
- Phishing — fake emails, texts, or pop-ups that mimic a real exchange or wallet and lure you to a lookalike site to steal your login or seed phrase.
- Fake exchanges & wallet apps — counterfeit apps slip past the official app stores (dozens were found on both Apple's and Google's stores in 2026) built to harvest your 12 words via fake 'recovery' screens.
- Deepfake celebrity endorsements — AI-made videos of famous people (often Elon Musk) 'promising' to double your Bitcoin. The video looks real; the money disappears.
- Address-poisoning — scammers plant a fake address in your history that starts and ends with the same characters as one you've used, hoping you copy theirs by mistake.
Pig-butchering, explained
The name comes from fattening a pig before slaughter. The scammer 'fattens' your trust over weeks with romance or friendship, shows you fake profits growing on a polished website, then — when you try to cash out — demands 'taxes' or 'fees' and vanishes with everything.
Deepfakes are a red flag, not proof
In 2026, fake celebrity videos and cloned voices are cheap and convincing. A realistic-looking endorsement is a sign of a scam, not a sign it's real. No celebrity actually doubles your Bitcoin.
Red flags & the golden rules
You don't have to memorize every scam — they nearly all share the same fingerprints. Learn the red flags and you'll catch new ones you've never seen.
Red flags 🚩
- Anyone asking for your seed phrase or private keys
- Pressure to act fast, in secret, or 'before it's too late'
- Guaranteed or fixed daily/weekly returns
- 'Send a fee first to unlock your bigger withdrawal'
- A celebrity or 'verified' account offering to double your coins
- A new online friend who quickly steers you to an investment
Safe habits ✅
- Keep your seed phrase offline; never type or photograph it
- Slow down — real opportunities survive a night's sleep
- Verify apps and links from the maker's official website
- Check the WHOLE address, or send a tiny test amount first
- Turn on 2FA with an authenticator app, not SMS
- Ask someone you trust before sending to anyone new
The two golden rules
1) No legitimate party ever asks for your seed phrase or pressures you to act fast. 2) If it sounds too good to be true, it is. Almost every scam breaks at least one of these.
- Two-factor authentication (2FA)
- A second lock on your account: even if someone learns your password, they still need a code from your phone. Use an authenticator app rather than text-message codes, since phone numbers can be hijacked.
Spot the scam
Read each situation and decide: scam or legit? Watch for the red flags you just learned.
A livestream shows a famous CEO saying: 'Send any amount of Bitcoin to this address and I'll send back double — for the next 30 minutes only.'
Quick check
Question 1 of 3
An 'exchange support agent' messages you and asks for your seed phrase to 'restore' your account. What do you do?
Question 2 of 3
Why are Bitcoin scams so costly compared to card fraud?
Question 3 of 3
Which is the clearest red flag of fraud?
Key takeaways
- Bitcoin is secure; people get tricked — almost every loss comes from fooling a human.
- Transactions are irreversible, so all the safety happens before you press send.
- No legitimate party ever asks for your seed phrase — any request is a scam, 100% of the time.
- Watch for the 2025–2026 patterns: fake giveaways, pig-butchering, fake support, phishing, fake apps, deepfakes, and address-poisoning.
- Golden rules: nobody legit pressures you to rush, and if it sounds too good to be true, it is.
Tip: finish the interactive activities above to get the most out of this module.