Skip to content
COLD HARDCUSTODY
← All guides

Guide 06

Common bitcoin scams

7 min read

The patterns to memorize

  1. Seed requests. Anyone who asks for your seed words is a thief, whatever they claim to be.
  2. Fake firmware and "migrations". Emails, DMs and pop-ups urging an urgent update or wallet migration. On October 11, 2026 a phishing link even appeared on COLDCARD's official X account before it was deleted (Cointelegraph). Confirm advisories on the vendor's own website, typed by hand.
  3. Tampered devices. Pre-filled seed cards, pre-initialized devices, unauthorized resellers. The October 2026 Ledger implant attack used genuine devices sold through unofficial channels (Ledger).
  4. Address poisoning. Scammers send dust from look-alike addresses hoping you will copy one from your history. Always copy from a fresh receive screen or a verified contact.
  5. Clipboard malware. Swaps a pasted address. Verify the full address on the device every time.
  6. Fake support and impersonators on social media, giveaways, "double your bitcoin", romance and investment scams, and letters claiming to be from your wallet vendor.

Habits that defeat most scams

  • Type URLs yourself; do not click ads.
  • Verify address, amount and fee on the device before signing.
  • Slow down when a message feels urgent.
  • Keep your holdings private.

Cold Hard Custody will never contact you about your wallet, ask for seed words, offer calls, or send firmware.

Sources

  1. Cointelegraph: phishing link on COLDCARD's X account (Oct 11, 2026)
  2. Ledger: response to hardware implant attack

Educational content only, not financial advice. See our disclosure.