




















While there are many wallet types, this simulation takes you through the steps of creating a self-custodial hot wallet — a crypto wallet connected to the internet and fully in your control — and keeping your recovery phrase secure.

First, pick a trusted wallet app and install it from the official store. Check the developer name, reviews, and download count. Avoid lookalike apps and links from messages. Bookmark the official help site for later so you can verify steps if needed.
Open the app and choose “Create new wallet”. Creating a new wallet will generate fresh keys unique to you. We’ll help you set a strong app passcode and enable biometric unlock for quick, secure access later.
Set an app passcode you won’t forget, then enable biometrics if offered. This protects the wallet on your device. If someone knows your device PIN, they might open apps, so keep phone security and screen-lock tight.
When you create a self-custodial wallet, you are fully in charge of keeping it secure. To help with this, you’ll be given a recovery phrase. This is a unique set of 12 or 24 words that can recreate your wallet on any compatible device.
Store copies of your recovery phrase in two separate, safe locations. Do not take screenshots or store it in your notes app or email. If you lose the phrase, no one can recover it. If others see it, they can take your funds.
Some people create multiple copies of their recovery phrase on paper and store them in different locations, others engrave it into metal. Just don’t leave it stuck to your fridge with a magnet, or scribbled on a Post-it next to your Wi-Fi passcode. Store it somewhere secure — like in a fireproof or waterproof container, or in a safe or safety deposit box.
If you lose this phrase, no one can recover your wallet — not even you. And if anyone else gets it, they control your funds. So, keep your recovery phrase secure and your funds will be too.
To add an additional layer of security, enable auto-lock in your wallet after short inactivity, set your wallet to require a passcode every time you send crypto, and turn on phishing warnings if offered. These options can be found in your wallet’s security or privacy settings. Enable additional security settings.
Pressure? Slow down.
Ask someone you trust.
Use official channels to verify.
Sending money? Stop.
Experience matters. Share and report it.
Taking a few extra minutes to PAUSE could prevent a permanent loss.
Scammers rely on speed, pressure, and confusion. They want you to react before you have time to think, verify, or speak to someone you trust.
When something feels urgent, unusual, or too good to be true, take a moment and PAUSE.
This simple five-step framework can help you recognize a potential scam, check whether a request is legitimate, and protect yourself and others before any money or information is lost.
If someone is pushing you to act immediately, slow down.
Scammers often create a false sense of urgency. They may tell you that your account is at risk, that you owe money, that an opportunity is about to disappear, or that something bad will happen unless you act now.
A legitimate organization will give you time to understand what is happening, ask questions, and verify the request.
Pause if you are being told to:
Urgency is one of a scammer’s most reliable tools. You do not need to act on someone else’s timeline.
Before you send money, click a link, download an app, share a password, or provide personal information, speak to someone you trust.
This could be a family member, friend, colleague, caregiver, or someone at your bank.
Scammers often try to isolate people. They may tell you that the situation is confidential, that nobody else will understand, or that speaking to someone could cause you to lose an opportunity.
Those are warning signs.
A second person can help you notice something you may have missed, ask useful questions, or confirm that the request does not make sense.
One conversation can be enough to stop a scam.
Never verify a request using the contact details provided by the person who contacted you.
Instead, end the conversation and independently find the organization’s official contact information.
To verify a request:
Do not click links, call phone numbers, or use email addresses sent to you by the person making the request. Scam websites and phone numbers can look convincing.
If the request is legitimate, the organization will be able to confirm it through its official channels.
Stop immediately if someone asks you to make a payment using an unusual, irreversible, or difficult-to-trace method.
No bank, government agency, police department, technology company, or legitimate business will require you to pay through:
Scammers prefer these payment methods because the money is often difficult or impossible to recover.
They may stay on the phone while you make the payment, give you step-by-step instructions, or tell you what to say if a bank employee asks questions.
That behavior is not normal. It is a major warning sign.
Do not send the money. End the conversation and contact your bank or the relevant organization directly.
A scam attempt is worth talking about, even if no money was lost.
Sharing what happened can help protect your friends, family, colleagues, and community. It can also help organizations identify patterns and prevent the same scam from reaching someone else.
If you lost money or shared sensitive information, report it as soon as possible. Contact your bank, the affected platform, and the appropriate fraud-reporting service.
There is no reason to feel embarrassed. Scammers use sophisticated tactics designed to create fear, trust, excitement, and confusion. Anyone can be targeted.
A close call is worth sharing. A loss is worth reporting.
You are not alone, and speaking up may protect the next person.