Social Enginnering

Social engineering is the manipulation of people, rather than software or hardware, to gain access to funds, credentials, or sensitive information. Attackers impersonate exchange support staff, wallet providers, or trusted contacts to trick victims into revealing seed phrases or approving transfers. The FBI Internet Crime Complaint Center logged more than 12 billion dollars in reported losses in 2023, much of it involving these techniques.

Why it matters

The strongest cryptography in the world cannot protect a user who is persuaded to hand over the keys. Because bitcoin transactions are irreversible and settle in about an hour, a successful social engineering attack is usually final: there is no chargeback, no fraud department, and no court order that can claw the coins back from a competent thief. This makes human judgment, not software, the weakest link in most self-custody setups, and it is why no legitimate service will ever ask for a seed phrase.

In the gold vs bitcoin debate

Stealing physical gold generally requires physical presence, which limits the pool of attackers to those who can reach the vault or the home safe. Bitcoin can be stolen remotely by anyone on earth with an internet connection, which globalizes the threat. Gold holders worry about burglars and dishonest custodians; bitcoin holders must also defend against a persuasive voice on the phone. Self-custody grants sovereignty, but it moves the entire security burden onto the individual.