Bitcoin in Practice

Scams & red flags

Bitcoin is self-custody money: there is no fraud department, no chargebacks, and no one who can reverse a payment once it’s sent. That finality is a feature — no one can reverse your payments either — but it makes you your own security guard. The good news is that almost every scam runs on one of a handful of tricks. Once you can name them, they stop working on you.

The classics, and the tell that gives each away

  • “Send 1, get 2 back.” — any offer where sending bitcoin returns more is a scam, without exception. Fake celebrity or “Elon” livestreams, an exchange “giving away” coins, a doubling event: all the same lie. Free money does not exist.
  • Seed-phrase phishing — the single most important rule you will ever learn: your seed phrase is never needed by anyone but you. No exchange, no wallet “support”, no engineer, no giveaway will ever have a legitimate reason to ask for it. Anyone who does is trying to empty your wallet. Never type it into a website, never store it in a photo, cloud drive or password manager — only ever into your own wallet device.
  • Fake wallets and apps — malicious apps that look like real wallets but steal your seed or quietly swap the address you’re paying. Download only from the wallet maker’s official site, and check reviews and download counts.
  • Fake support and impersonators — “support” that messages you first, phishing emails that mimic your exchange, fake admins in Telegram or Discord. Real support never direct-messages you first. Reach websites by typing the address yourself, never through a link someone sends.
  • Address-swapping malware — malware that silently replaces a bitcoin address you’ve copied with the attacker’s. Always check the first and last few characters of an address after pasting, before you send.
  • “Investment” platforms and pig-butchering — a friendly stranger (often through a dating app or a “wrong number” chat) walks you onto a slick trading platform showing fat, fake profits. You can deposit, but you can never withdraw. Guaranteed returns are always a scam; if a small test withdrawal won’t come out, run.
  • “Recovery services” — after a loss, scammers appear promising to recover your stolen coins for an up-front fee. They cannot. It is simply a second scam that preys on victims of the first.

The one habit that defeats most of them

Nearly every scam runs on manufactured urgency — “act now, limited time, the offer ends tonight.” Real Bitcoin has no deadline and no salesperson. The simple act of slowing down, closing the app, and checking with a trusted source breaks the spell almost every time. Pressure to hurry is itself the red flag.

Two rules stop the large majority of losses. (1) Never share, type, or photograph your seed phrase anywhere except your own wallet device. (2) No one legitimate will ever message you first, rush you, or promise returns. Internalise those two and you’ve closed the doors most thefts walk through. Keeping your devices and habits clean — the opsec side — is covered later in Digital hygiene & security.

Everything here protects one secret above all others: the handful of words that are the master key to your entire wallet. What that seed phrase is, and how to guard it, is next.

Key takeaways

  • Bitcoin payments are final — no chargebacks, no fraud department — so you are your own security. Almost every scam pairs manufactured urgency with one of a few tricks: doublers (‘send 1, get 2’), seed-phrase phishing, fake support/apps, address-swap malware, fake ‘investment’ platforms, and ‘recovery’ services.
  • Two rules stop most losses: never share, type or photograph your seed phrase anywhere but your own wallet device; and no one legitimate will ever message you first, rush you, or promise returns.

Check yourself

Who legitimately needs your seed phrase?

A stranger shows you a trading platform with big guaranteed profits, but you can’t withdraw a small test amount. What is it?

Spotted an error or have feedback on this lesson? Suggest a correction ↗

Comments

Powered by Nostr — reply from any Nostr client, and zap the lesson over Lightning.