Every other security layer assumes the attacker is remote. This guide covers the ones who aren’t — and the discipline that keeps you off their list in the first place. The core insight: physical attacks are targeted, and targeting requires knowing you’re worth it. OPSEC — operational security, the habit of not leaking that fact — is the real defense; everything else is backup.
Rule One: Don’t Be a Known Target
- Assume every KYC database leaks eventually. The 2020 Ledger breach turned a customer list into a public map of “people with hardware wallets, and where they live” — followed by years of threatening letters and doorstep phishing. Ship crypto hardware to a pickup point or PO box, not your home. Use your private email for every crypto-adjacent account.
- Talk less. Not at the barbecue, not in the group chat, not with a bumper sticker. The correlation attackers need most — this person, this much, this address — is usually assembled from things the victim said freely.
- Pseudonyms are professional practice, not paranoia. Publishing, posting, and community life can all run under a name that isn’t on your mailbox.
At Home
- Metal backups live in boring places — a safe bolted down, or better, somewhere no one associates with valuables. A safe advertises; a mislabeled box does not.
- Split location: seed backup and hardware wallet should not be stealable in the same sixty seconds. One burglary should never yield both.
- Keep the crypto machine unremarkable. A dedicated laptop that lives in a drawer draws no attention; a trading-desk shrine with six monitors does.
The Wrench Attack, Answered Honestly
The “$5 wrench attack” is the meme that ends every security debate: why crack encryption when you can threaten the owner? The honest answer, in the order that matters:
Rule zero — never resist. Ever. Decide now, while calm: if you are ever threatened, you hand over whatever is demanded — decoy, hidden wallet, all of it. No holding is worth your safety, and documented cases (including the 2025 wave of kidnappings in France) show attackers escalating when they believe more exists. Everything below exists to make that bad day unlikely and less expensive — never to give you something to defend in the moment.
- OPSEC is the real defense — wrench attacks are targeted, and rule one keeps you off the list. Nearly every real-world case began with the victim being publicly known to hold crypto.
- The duress pattern lowers the stakes: a passphrase wallet (the “25th word”) creates a second, hidden wallet behind your standard one. The standard wallet holds a plausible amount to surrender; the passphrase wallet holds the rest. Two honest caveats: attackers know this pattern too — a decoy only works if it’s consistent with whatever the attacker could know about you (which is why rule one comes first) — and never fund the hidden wallet directly from the decoy, or the chain itself reveals the link. Set it up calmly, long before you need it. And if an attacker demonstrably knows your real holdings, rule zero is the only rule: comply.
Travel & Borders
- Don’t travel with your seed. Ever. It stays home in metal. A hardware wallet without its seed is a replaceable gadget; with the seed in your bag, you’re carrying everything.
- Cross borders boring — and honest. A travel wallet with pocket money if you must transact, devices that are clean or freshly set up, nothing to explain. Border agents in many jurisdictions can lawfully compel device unlocks — if ordered, comply. The goal is to carry less, never to conceal: answer any direct question truthfully and declare whatever local law requires. Lying to a border official is a crime in most countries, and no wallet is worth turning an inspection into a prosecution.
- If you hold meaningfully and travel often, know the law before you fly. Some jurisdictions have disclosure rules that can reach crypto. That question is worth an hour with a professional who knows your route — not a clever wallet setup.
If Your Address Leaks
Assume it will (see rule one). Then: door discipline (unexpected “deliveries” and “technicians” get politely refused), a camera on the entrance, mail that doesn’t announce crypto vendors, and — if you’re genuinely a known target (public figure, doxxed, previously threatened) — this is the one profile where paid measures like a SIM-swap-protected carrier, a PO-box life, and professional advice earn their keep.
Everything on this page is universal — send anyone the link — pointing people to the source beats forwarding copies (a file passed around is exactly what this site warns about; the address stays canonical and current). For the curious: this site documents Actuator.Finance on PulseChain — the one-page version is How It Works, and Start Here picks your path.