




















While it may sound like another language right now, by the end of this simulation you'll know the difference between custodial vs. self-custodial, and hot vs. cold wallets.

Wallets store and manage your crypto. Some are custodial, where an exchange manages your crypto on your behalf. Others are self-custodial, where you’re in control.
If you choose a self-custodial wallet, you’ll get an address and a private key — a secret, alphanumeric code that allows you to access and manage your crypto funds. Private keys are stored in your wallet and used to securely approve transactions when you send or trade crypto. Your wallet can create new addresses and private keys over time for added privacy, but they're all safely managed within the same wallet.
If you’re signed up to a centralized exchange, you will have a custodial wallet. This means they control the private keys that let you access your crypto. They also take care of backups, resets, and fraud checks.
Self-custodial wallets put you in charge of keys and recovery. It’s less convenient than a custodial wallet because you manage security and backups yourself, but you have more control over your crypto.
“Hot” and “cold” describe how a wallet is stored and used. Hot wallets live on devices connected to the internet (e.g. phone/laptop) and are handy for daily use. Cold wallets are offline only (e.g. hardware/paper) — they’re safer and good for long-term holders.
You can mix custody and temperature, like having a self-custodial cold wallet. In a later simulation we’ll walk you through how to set up a self-custodial hot wallet.
Wallets can have multiple addresses, and each one is unique. Even if computers ran for a billion years, the chance of them generating the same one twice is effectively zero. When sending or receiving crypto, it’s vital to always double and triple-check wallet addresses as even a single wrong digit means the funds won’t come through to you.
Because wallet addresses are long and difficult to memorize, scammers make fake addresses with the same first and last four characters that resemble ones you trust.
This is called address poisoning. Always check the middle four characters along with the first and last of any address you want to send to or receive from.
If you receive funds from a scam address, they’re often fake tokens designed to resemble ones you often interact with. The risk is in what happens after: attackers poison your history so that next time you send, you might copy the wrong address from your past transactions. To avoid this, always copy directly from the address source.
Pressure? Slow down.
Ask someone you trust.
Use official channels to verify.
Sending money? Stop.
Experience matters. Share and report it.
Taking a few extra minutes to PAUSE could prevent a permanent loss.
Scammers rely on speed, pressure, and confusion. They want you to react before you have time to think, verify, or speak to someone you trust.
When something feels urgent, unusual, or too good to be true, take a moment and PAUSE.
This simple five-step framework can help you recognize a potential scam, check whether a request is legitimate, and protect yourself and others before any money or information is lost.
If someone is pushing you to act immediately, slow down.
Scammers often create a false sense of urgency. They may tell you that your account is at risk, that you owe money, that an opportunity is about to disappear, or that something bad will happen unless you act now.
A legitimate organization will give you time to understand what is happening, ask questions, and verify the request.
Pause if you are being told to:
Urgency is one of a scammer’s most reliable tools. You do not need to act on someone else’s timeline.
Before you send money, click a link, download an app, share a password, or provide personal information, speak to someone you trust.
This could be a family member, friend, colleague, caregiver, or someone at your bank.
Scammers often try to isolate people. They may tell you that the situation is confidential, that nobody else will understand, or that speaking to someone could cause you to lose an opportunity.
Those are warning signs.
A second person can help you notice something you may have missed, ask useful questions, or confirm that the request does not make sense.
One conversation can be enough to stop a scam.
Never verify a request using the contact details provided by the person who contacted you.
Instead, end the conversation and independently find the organization’s official contact information.
To verify a request:
Do not click links, call phone numbers, or use email addresses sent to you by the person making the request. Scam websites and phone numbers can look convincing.
If the request is legitimate, the organization will be able to confirm it through its official channels.
Stop immediately if someone asks you to make a payment using an unusual, irreversible, or difficult-to-trace method.
No bank, government agency, police department, technology company, or legitimate business will require you to pay through:
Scammers prefer these payment methods because the money is often difficult or impossible to recover.
They may stay on the phone while you make the payment, give you step-by-step instructions, or tell you what to say if a bank employee asks questions.
That behavior is not normal. It is a major warning sign.
Do not send the money. End the conversation and contact your bank or the relevant organization directly.
A scam attempt is worth talking about, even if no money was lost.
Sharing what happened can help protect your friends, family, colleagues, and community. It can also help organizations identify patterns and prevent the same scam from reaching someone else.
If you lost money or shared sensitive information, report it as soon as possible. Contact your bank, the affected platform, and the appropriate fraud-reporting service.
There is no reason to feel embarrassed. Scammers use sophisticated tactics designed to create fear, trust, excitement, and confusion. Anyone can be targeted.
A close call is worth sharing. A loss is worth reporting.
You are not alone, and speaking up may protect the next person.