How not to get rugged

Sep 26, 2026 6 min read

A wallet clasped shut inside a holder, the question of who keeps custody of your coins.

Crypto's biggest risk isn't the technology. It's the guy in your DMs. A field guide to custody, seed phrases and the seven scams you'll definitely meet.


Custody: who's holding the keys

Every crypto wallet has a private key. Whoever holds the key holds the money. There are two models:

  • Self-custody. You hold the key, usually as a 12- or 24-word seed phrase. Total control, total responsibility. Lose the phrase, lose everything. No reset button exists anywhere in the universe.
  • Custodial. A regulated provider holds the key in secured hardware and you log in like a normal app. If you lose your phone, you recover the account, not the money. This is what most people should use, and it's how Kairo works.

"Not your keys, not your coins" is a real principle. So is "not your backup, not your coins." Pick the model you'll actually manage well.

A wallet held in a secure clasp as a hand reaches for it, the question of who holds the keys to your coins.

Seed phrases, if you do go self-custody

Write it on paper. Twice. Store the copies in two places. Never type it into a website, never screenshot it, never put it in your notes app, never tell anyone, and if an app "needs it to verify your wallet", that app is a robbery in progress.


The seven scams you will meet

The moveHow it goesThe tell
Fake support"Hi, I'm from the app, send your code to fix the issue."Real support never asks for codes or phrases.
Pig butcheringMonths of friendly chat, then an "investment opportunity".Romance plus returns equals run.
Address poisoningA scammer sends you dust from an address that looks like a friend's.Send to handles, not copied addresses.
Fake airdrop"Claim your free tokens, just connect your wallet."Free tokens that need your signature aren't free.
Guaranteed yield"Stable 2% a day."Nothing legal pays 2% a day.
Urgency"Your account will be locked in 10 minutes."Panic is the product.
Wrong-chain "help""I'll recover your stuck funds for a small fee."Recovery scams target people who just got scammed.

The boring habits that actually work

  1. Turn on biometrics and a PIN that isn't your birthday.
  2. Never share a one-time code. Not with your bank, not with your mum, not with "the app".
  3. Send to a handle, not an address, whenever you can.
  4. Do a small test transfer before a big one.
  5. If something feels urgent, slow down. Scammers can't survive a 10-minute pause.

TL;DR Custodial for most people, seed phrase on paper if you go solo, never share a code, never rush. The tech is fine. The DMs are the danger.

All articles

See more

One account. More ways to move.

Get started with Kairo.