Bitcoin Emergency Kit
Do not panic. Do not share seed phrases, private keys, PINs or 2FA codes. Use this page to classify the situation and choose the safest next step.
If you are a TBA client: contact your adviser or support before high-risk action in suspected compromise, scams, coercion, or time-critical inheritance.
If you are not a TBA client: use this page as general education only. For active theft, coercion, legal, tax or estate matters, contact appropriate professionals and authorities.
Never share your seed phrase, private key, signing-device PIN, cloud backup, 2FA code, exchange password or wallet recovery details with anyone.
If someone asks for those details, assume it is a scam. The Bitcoin Adviser will never ask for seed phrases or private keys.
Before taking action: preserve evidence, verify the situation using trusted sources, and avoid entering recovery words or passwords into any new site, app or form.
Immediate: stop and contact support
Scams, seed exposure, coercion, active theft, time-critical inheritance
Possible Scam / Compromised Security
Stop contact. Preserve evidence. Do not send more funds. If seed words were shared, escalate immediately.
- Do first: disconnect, document, classify what was exposed.
- Do not: share seed words, install remote access tools, or respond to DMs.
Lost Device / Lost Key / Seed Exposure
Lost phone or signer is usually continuity. Shared seed or private key is a security emergency.
- Do first: classify device loss vs seed exposure; contact support if you are a TBA client.
- Do not: test random recovery tools or accept help from strangers in DMs.
Physical Coercion / Duress
Personal safety comes first. In a collaborative vault, one person should not be able to move funds alone.
- Do first: de-escalate if possible; get to safety; contact support after the threat ends.
- Do not: promise immediate sends or reveal how funds could be moved.
Inheritance Emergency
Slow down. Gather authority documents. Contact the adviser if the deceased was a TBA client.
- Do first: secure documents; one point of contact for the family.
- Do not: guess PINs, reset devices, or experiment with wallets.
Urgent: act today, but do not rush
Lost device, exchange outage, locked account, inheritance uncertainty
Exchange or Service Down
Check official status channels before assuming theft or insolvency.
- Do first: verify outage via official site or social; avoid phishing “status” pages.
- Do not: share login credentials with anyone offering to “restore access.”
Access Problem / Locked Out
Locked app, forgotten PIN, or unavailable signer. Different from seed phrase exposure.
- Do first: use documented recovery paths; contact support if you are a TBA client.
- Do not: type seed words into a connected computer unless you know exactly what you are doing.
Troubleshooting: usually not dangerous
Delayed transaction, low fee, wrong address
Transaction Delayed or Fee Too Low
Most delayed transactions are not emergencies. Check the TXID before taking action.
- Do first: look up TXID on mempool.space.
- Do not: pay random accelerators or share keys with “fix” services.
Sent to Wrong Address
Confirmed sends are usually irreversible. Unconfirmed sends may still need fast expert help.
- Do first: confirm whether the transaction is confirmed on a block explorer.
- Do not: send more Bitcoin trying to “reverse” a confirmed payment.
Detailed checklists
All panels are collapsed by default. Open only what you need, or use the cards above.
Possible Scam / Compromised Security
What this usually means
Someone may have tricked you into sharing information, sending Bitcoin, or installing software. Transition periods from exchange to self-custody are a common target.
What to do first
- Stop all contact with the other party. Block numbers, emails and accounts.
- Classify what was exposed: seed phrase, private key, login only, or funds sent.
- Preserve evidence: screenshots, TXIDs, addresses, URLs, messages.
- If seed or private key was shared, treat as highest priority and contact support if you are a TBA client.
Do not: send more Bitcoin; continue the conversation; install remote access software; enter seed words into any website.
Reporting
Reporting pathways vary by jurisdiction. Use official government, law-enforcement, exchange or platform channels for your country. See the Bitcoin Scam Protection Guide for detail.
For TBA clients
With a correctly maintained 2-of-3 setup, a compromised client-held key does not necessarily mean loss of access, but you should not act alone. Contact support so we can coordinate next steps with your vault provider where appropriate.
Relevant guide: Bitcoin Scam Protection Guide
Lost Device / Lost Key / Seed Exposure
What this usually means
Not every access problem is the same. The response depends on whether you lost a device, lost one signer in multisig, or exposed a seed phrase.
| Situation | Risk |
|---|---|
| Lost device / unavailable signer | Usually a continuity problem |
| Seed phrase or private key exposed | Security emergency |
| Single-sig key lost with no backup | Potential permanent loss |
| TBA collaborative setup | Coordinated recovery may be possible depending on facts |
What to do first
- Decide which row in the table matches your situation.
- Lost phone only: see Lost iPhone Emergency Guide and Mobile Key Guide.
- Seed exposure: stop using the compromised wallet path; contact support if you are a TBA client before moving funds.
Do not: test random recovery tools; type seed words into a connected computer unless you know exactly what you are doing; accept help from strangers in DMs.
For TBA clients: do not act alone
With a correctly maintained 2-of-3 collaborative security setup, losing one client-held key does not necessarily mean losing access to the Bitcoin. We may help coordinate key refresh and vault moves with your provider where appropriate. Contact support promptly.
Relevant guides: Lost iPhone Guide · Mobile Key Guide · Collaborative Security
Inheritance Emergency
What this usually means
A beneficiary or executor needs to locate and access Bitcoin after someone has died. The path depends on how it was stored and whether there is a documented estate plan.
What to do first
- Slow down. Gather death certificate, will or probate documents, and proof of authority.
- Locate any Estate Plan Protocol or Bitcoin-related documents (do not guess PINs).
- If the deceased was a TBA client, contact support so we can assess authority and coordinate with the executor.
Do not: guess PINs; reset devices; move seed phrases into cloud storage; let multiple family members experiment with wallets.
For TBA clients
If the deceased was a TBA client, there should be a documented pathway to assess authority, coordinate with the executor, and determine the correct next step. Recovery is not automatic in every case, but structured support is available.
Relevant guides: Inherited Bitcoin? Start Here · Bitcoin Executor Support · Estate Planning & Inheritance
Physical Coercion / Duress Attack
What this usually means
Someone is using threats to make you access or move Bitcoin. With 2-of-3 collaborative security, your key alone cannot move vault funds.
What to do first
- Prioritise personal safety. Comply with physical threats to reduce harm; you are not expected to fight.
- After you are safe, contact support and authorities where appropriate.
- Do not explain workarounds that could help an attacker.
Do not: promise you can send everything immediately; reveal recovery shortcuts; sign or approve under pressure.
For TBA clients
We are trained to recognise signs of coercion and may refuse suspicious signing requests. Contact us after the incident so we can help secure accounts and rebuild structure where needed.
Some holders use small decoy wallets as a personal-safety measure. Treat this as optional and advanced. A decoy wallet is not your core security model. Meaningful Bitcoin should be protected by collaborative custody so you cannot move it alone under pressure.
Relevant guide: Physical Attack Preparedness Guide
Exchange or Service Down
What this usually means
The platform may be in maintenance, under stress, or in a serious incident. Panic withdrawals and phishing spike during outages.
What to do first
- Check the exchange official website, app status page, or verified social account.
- Avoid clicking links from DMs or email; type the URL yourself.
- If insolvency is announced, document balances and expect a long process.
Long-term posture
Collaborative security removes exchange custody risk for Bitcoin held in your own vault, but it does not remove every operational, legal, tax, market or user-error risk. Only keep on exchanges what you are actively trading.
Relevant guide: Collaborative Security
Transaction Delayed, Stuck or Fee Too Low
What this usually means
Your transaction is waiting in the mempool. Most delayed transactions are not an emergency. Your Bitcoin is usually still controlled by you; it is waiting to confirm.
What to do first
- Check the TXID on mempool.space.
- If not time-critical, waiting is often reasonable.
- If timing matters, fee bumping may be possible depending on your wallet and transaction (see the tracking guide).
Do not: pay random “accelerator” services or share keys with anyone claiming they can unstuck a transaction.
For TBA clients
If the transaction relates to a vault or meaningful value, contact support. We can help you verify broadcast status and next steps.
Relevant guide: Bitcoin Transaction Tracking Guide (RBF, CPFP and fee detail live there, not on this page).
Sent to Wrong Address
What this usually means
Bitcoin transactions cannot be reversed by the network. Recovery depends on whether the payment is still unconfirmed and who controls the destination.
What to do first
- Check confirmation status on a block explorer.
- If unconfirmed, get expert help quickly; options are limited and not guaranteed.
- If confirmed to an address you do not control, funds are usually not recoverable unless the recipient cooperates.
Prevention: verify addresses character by character; use collaborative security and documented processes for large sends.
Common questions
Is a stuck Bitcoin transaction an emergency?
Usually no. Most delayed transactions confirm later. Check the TXID, avoid scam accelerators, and use the transaction tracking guide if you need fee options.
What should I do if I shared my seed phrase?
Treat it as a security emergency. Do not act alone. See scam / compromise checklist and scam protection guide. TBA clients should contact support promptly.
Can TBA move my Bitcoin for me?
We do not take unilateral control of client Bitcoin. In collaborative security, moves require quorum per your setup. We may coordinate recovery steps with you and your vault provider where appropriate.
What if the deceased was a TBA client?
Contact support with authority documents. See Inherited Bitcoin? Start Here and inheritance checklist.
Should I use a Bitcoin recovery service?
Be extremely cautious. Many are scams. Legitimate help is rare and expensive. Never share seed phrases. For lost single-sig with no backup, recovery may be impossible.
Resources & support
- Security Centre
- Bitcoin Scam Protection Guide
- Inherited Bitcoin? Start Here
- Bitcoin Executor Support
- Physical Attack Preparedness
- Collaborative Security
- Estate Planning & Inheritance
- Transaction Tracking Guide
- Contact · Find your adviser
Reminder: The Bitcoin Adviser will never ask for your seed phrase, private key, signing-device PIN or 2FA code.
If you are unsure, do not act alone.