📱 Secure Your Phone (3 minutes)
Your wallet is on your phone. If your phone is compromised, your bitcoin is at risk.
1. Strong Lock Screen
- Use 6+ digit PIN or strong password (not 1234 or your birthday)
- Enable biometric lock (Face ID / fingerprint) as backup
- Set auto-lock to 1 minute or less
2. Operating System Updates
- Keep iOS/Android updated (security patches are critical)
- Enable automatic updates
- Don't use outdated phones (no security support)
3. App Permissions
- Review wallet app permissions (doesn't need microphone, contacts, etc.)
- Disable cloud backup for wallet apps (can expose seed phrase)
- Only download wallets from official app stores
Phone Security Checklist
- Strong lock screen password (6+ digits)
- Auto-lock set to 1 minute
- OS fully updated
- Wallet app downloaded from official store only
Enable 2FA Everywhere (2 minutes)
Two-Factor Authentication (2FA) adds a second layer of security. Enable it on:
- Exchange accounts (Cash App, Coinbase, etc.)
- Email account (used for account recovery)
- Phone carrier (prevents SIM swap attacks)
Best 2FA Methods (Ranked):
- Hardware key (YubiKey) - Most secure, but costs money
- Authenticator app (Authy, Google Authenticator) - Good balance
- SMS - Better than nothing, but can be intercepted
⚠️ NEVER Use SMS-Only for Large Amounts
- SMS can be intercepted via SIM swap attacks
- Attackers port your phone number to their SIM
- They receive your 2FA codes and drain accounts
- Use authenticator apps (Authy) instead
🎣 Recognize Common Scams (1 minute)
Scam 1: Fake Support
"I'm from [Wallet Name] support. Send us your seed phrase to fix your issue."
✓ Defense: REAL support NEVER asks for your seed phrase. Block and report.
Scam 2: Giveaway Scams
"Send 0.1 BTC to this address and we'll send back 0.2 BTC!"
✓ Defense: If it sounds too good to be true, it's a scam. No one gives away free bitcoin.
Scam 3: Phishing Websites
Fake websites that look like real exchanges or wallets. Steal your login or seed phrase.
✓ Defense: Bookmark real URLs. Check domain spelling carefully. Never click links in emails.
Scam 4: Romance / Investment Scams
Someone you meet online asks you to "invest" in bitcoin through their special platform.
✓ Defense: NEVER send bitcoin to someone you've only met online. Platforms are fake.
📞 Emergency Contacts
If something goes wrong, you need to act FAST. Save these resources:
If Your Phone Is Stolen:
- Call your phone carrier IMMEDIATELY to freeze your number
- Use your seed phrase to recover wallet on a new device
- Move funds to a new wallet (attacker may have seen seed phrase)
If You Think You've Been Scammed:
- Do NOT send any more bitcoin
- Screenshot everything (messages, addresses, websites)
- Report to: ic3.gov (FBI) or local authorities
- Post warning on /r/Bitcoin (prevent others from same scam)
Save These Numbers Now
- Phone carrier customer service
- Bank fraud department
- Local police non-emergency line
- Trusted friend who understands bitcoin
Stage 2 Complete!
🏁 What You've Achieved:
- ✅ Learned how to send and receive bitcoin (Module 4)
- ✅ Mastered transaction safety checklist (Module 5)
- ✅ Locked down your security (Module 6)
- ✅ You can now use bitcoin safely and confidently
Next up: Stage 3 covers Lightning Network for instant, low-fee transactions,
plus your roadmap for continued learning.