Security
There is no phone number that reverses anything. That changes the question: it is not how to avoid scams, it is where your key lives and how far one mistake reaches from there.
Renato UlianovOpening · 19 s · in Portuguese
Blurred on purpose. Five words, and the third is the one almost nobody expects.
Nobody undoes it for you
At a bank, almost every mistake has somewhere to call. A wrong charge is disputed, a mistaken transfer sometimes comes back, a password is recovered with ID. There is a company in the middle, and it can undo things.
On an open network there is no middle. A transaction signed with the right key is valid by definition — the network has no way to know whether the signer was you, whether you understood what you signed, or whether you were tricked. It only checks the signature.
So security here is not suspicion, it is architecture. Promising yourself you will pay attention does not help: the useful question is where the key is and, when you slip — and eventually you will — how far that slip reaches.
It is not a password. It is the key
When you create a wallet it shows you a handful of words in order and tells you to write them down. Almost everyone reads that as a “recovery password”. It is not.
Those words are the key, written in a form you can copy by hand. From them any compatible program rebuilds the entire wallet, on any device, without asking anyone's permission and without anything needing to be transferred.
It is an enormous convenience: lose the phone, type the words into another one, everything is there. And that is exactly what makes it dangerous. Tap the button and see what “restore” means.
The four rules of the phrase
- It is never typed into anything that is not your own wallet. No website, no form, no support app.
- It never becomes a photo, a phone note, a cloud file or a message — not even to yourself.
- No legitimate party ever asks. Never, under any circumstance, through any channel. Being asked is proof of the scam, not a step in support.
- Paper, two copies, two different places. In practice the risk of forgetting where you put it is larger than the risk of someone finding it.
No arrangement protects against everything
There are three common arrangements, and the conversation tends to treat them as a ladder — exchange worst, cold wallet best. It is more useful to think in terms of surface: each arrangement removes one risk and leaves another standing.
Pick an incident and see what it reaches in each one. Notice that no column comes out entirely green — and that is the point of the figure.
It does not rob you. It gets you to sign
Everyone pictures a scam as someone discovering your password. Today it is the reverse: the most effective scam takes nothing of yours. It gets you to authorise it.
It works like this. To use a token in a service you give it a spending approval: permission to move that token out of your balance later, in a separate transaction. This is normal and necessary. Except the permission can be unlimited and permanent, and the screen almost always just says “connect” or “confirm”.
You signed it, with your key, of your own free will — from the network's point of view everything is perfect. It is lesson 04 again: the network guarantees the contract runs the same for everyone. It does not guarantee the contract is honest. And a hardware wallet signs this identically, because it protects the key, not your judgement.
Now read the sentence
It's the same one from the top, unblurred. Tap each highlighted part.
Five words
Two are what you keep, two are what you do, and one is who never asks. Tap one.
Five taps and the sentence is done.
If this landed, the lesson did what it promised
- The recovery phrase is the key, not a password — whoever reads it, has it.
- No custody arrangement protects against every incident.
- A cold wallet protects the key, not what you confirm on it.
- The effective scam does not steal: it obtains your signature.
Renato UlianovClosing · 43 s · in Portuguese
Educational material. No real wallet, brand, contract or scam is named, and this page shows no recovery phrase, not even an invented one. The figure's cells describe typical consequences, not guarantees: any concrete case depends on details a page cannot know.