Ask a new Bitcoin owner what they’re afraid of and you’ll hear the word “hackers” inside ten seconds. Hooded figure, green text scrolling down a screen, the works. Then look at how people actually lose their coins and the hooded figure barely shows up. Nobody cracks the cryptography. Nobody needs to. Beginners hand their Bitcoin over in five perfectly ordinary ways, and I can say that with some confidence because I was one of those who lost my bitcoin due to my own mistake …
Here they are, roughly in order of how much money they destroy.
1. You let someone else hold it
This is the big one, and it’s the one that got me. In November 2022 I had Bitcoin on FTX, at the time the second-largest exchange in the world, run by a man who was on the cover of every magazine. On a Sunday it was fine. By Friday withdrawals were frozen and about a million customers, me included, had become a line in a bankruptcy filing.
Here’s the part nobody explains up front: an exchange balance is not Bitcoin. It’s a promise from a company to give you Bitcoin later. The coins sit in the exchange’s own wallets, and the number on your screen is a row in their database. While the company is solvent, the difference is invisible. When it isn’t, you discover you were an unsecured creditor all along. Mt. Gox customers learned this in 2014, and some of them waited a decade for partial repayment. Celsius, Voyager, BlockFi and FTX customers all learned it within the same twelve months.
The fix is unglamorous: move it to a wallet where you hold the keys. You must take Crypto Self Custody of your Bitcoin, Which brings us to the other four, because holding your own keys is where the next mistakes live.
2. You took a photo of the words
When you set up your own wallet, it hands you twelve or twenty-four words. Those words are the wallet. Anyone who has them has your Bitcoin, from anywhere on earth, no further questions asked.
So what does a sensible beginner do? Writes them down, worries about losing the paper, and takes a photo “just as a backup.” The photo syncs to iCloud or Google Photos. The account gets phished, or shared with a partner who later becomes an ex, or inherited by whoever ends up with the laptop. Same story with typing the words into a notes app, a password manager, or an email to yourself. The moment the words touch anything with an internet connection, you’ve built a copy of your wallet in a place you don’t control.
Paper only. Two copies, two locations, never inside a device. If that sounds paranoid, consider that paper can only be stolen by someone who physically comes to your house. A screenshot can be stolen by someone in a different hemisphere who has never heard of you.
3. You talked to a friendly stranger
The FBI’s Internet Crime Complaint Center logged more than 11 billion dollars in cryptocurrency-related losses in 2025, up 22 percent on the year before. Very little of that was hacking. Most of it was people being talked out of their money by someone pleasant.
The cast is small. There’s the fake support agent who appears in a forum, or in your DMs, right after you ask a question, and needs your seed phrase “to verify the wallet.” There’s the giveaway: send 0.1 BTC to this address and a famous person will send 0.2 back. There’s the investment platform introduced by a new online friend, showing lovely gains on a dashboard right up until you try to withdraw. And there’s the cloned login page sitting in a search ad, one line above the real exchange.
One rule covers all of them. No legitimate person or company will ever ask for your seed phrase, and nobody on the internet is giving away Bitcoin. Not Elon, not Saylor, not the charming stranger who messaged you about golf. If it sounds too good to be true in Bitcoin, it isn’t true, and somebody is about to have a very quiet evening staring at a wallet balance of zero.
4. You locked yourself out
Nobody stole it. It’s still there. You just can’t get in.
Somewhere between 3 and 4 million Bitcoin are thought to be lost this way, which works out to roughly one in six of all the coins that will ever exist. The famous case is Stefan Thomas, a programmer who was paid 7,002 BTC in 2011 for making an animated video explaining how Bitcoin works. He stored the keys on an encrypted USB drive that allows ten password attempts, lost the password, and has two attempts left. He says he has made peace with it. I’m not sure I would have.
The beginner version is less cinematic: a single paper copy lost in a house move, a wallet PIN never written down, a phone factory-reset before anyone checked whether the words were saved. And the advanced version, if you’ve added a passphrase on top of your seed words, is forgetting that passphrase, which no seed phrase on earth can recover.
The fix is a fire drill. Once a year, install your wallet on a spare phone, restore it from your paper, confirm the balance shows up, then wipe the phone. The first time you test your backup should not be during an actual emergency.
5. You sent it to the wrong place
Bitcoin transactions do not have an undo button. No chargeback, no support ticket, no “I meant the other one.” A Bitcoin address is a long string of letters and numbers, and a wrong address, an old address, or a swapped address all look about the same at a glance.
Two flavors of this catch people. The first is clipboard malware, which quietly replaces the address you copied with the attacker’s. The second is address poisoning: a scammer sends you a tiny amount from an address that matches the first and last few characters of one you actually use, so it shows up in your history looking familiar. In December 2025 a trader copied the wrong entry from their own transaction history and sent almost 50 million dollars in stablecoins to a stranger, then offered a million-dollar bounty to get it back. That is not a sentence anyone wants to be the subject of.
Three habits fix it. Copy addresses from your wallet’s receive screen, never from your transaction history. Compare more than the first and last four characters, because poisoners are counting on you checking only those. And always send a small test amount first. Yes, you pay the network fee twice. It’s the cheapest insurance in finance.
The boring path
Notice that none of the five involve anyone breaking Bitcoin. They all involve a person, usually in a hurry, trusting the wrong thing: a company, a cloud account, a stranger, their own memory, or a copied address. Which is good news, because all five are fixable with habits rather than genius.
Buy from a reputable exchange. Move it to a wallet you control. Put the words on paper and nowhere else. Talk to nobody who asks for them. Test your backup once a year. Slow down before every send. After FTX I learned all of this the expensive way, then put the whole process into a short plain-English course at getbitcoin.guide so that nobody else has to learn it from a bankruptcy notice.
Bitcoin is one of the few things you can own that nobody can take from you. It’s also one of the few things you can lose with a single screenshot. Those are the same feature. Handle accordingly.
About the author
Mufy lost Bitcoin in the FTX collapse, taught himself self-custody the slow way, and now teaches beginners how to move Bitcoin off exchanges into wallets they actually control at getbitcoin.guide.
