Physical Attack Preparedness
Physical coercion is not the everyday risk for most Bitcoin holders, but it is real enough to plan for.
Recent attacks in France and elsewhere have reminded many Bitcoin holders that digital wealth can create offline security risks when identity, location, routines, or perceived holdings become visible.
This guide is not intended to create fear. It exists so you can prepare calmly, reduce your target profile, and make sure meaningful Bitcoin cannot be moved by one person under pressure.
Collaborative custody changes the threat model. If your main Bitcoin requires multiple independent approvals, a phone, seed phrase, or single device cannot drain the vault.
The safest Bitcoin is Bitcoin you cannot be forced to move alone.
Still rare for ordinary holders, but real enough that serious Bitcoin holders should plan for it calmly. The purpose of this guide is preparation, not fear. Know the plan, then live normally.
For concerned clients: the right response is not panic. The right response is to review privacy, make sure your family understands that funds cannot move by one person, and confirm that your collaborative custody setup and signing policy are current.
Why This Matters Now
Wrench attacks are not theoretical. France has recently seen a visible cluster of crypto-related kidnappings, extortion attempts, and attacks on families connected to digital-asset wealth. These incidents have understandably increased concern among Bitcoin holders.
The lesson is not that Bitcoin self-custody is too dangerous. The lesson is that serious Bitcoin custody must include offline security: privacy, discretion, separated signers, clear signing policy, and a structure that cannot be moved by one person under pressure.
Physical coercion is not the everyday risk for most Bitcoin holders. But recent attacks in France and elsewhere show why meaningful Bitcoin should not depend on one person, one device, one home, or one moment of pressure.
The most important protection is structural. Do not make meaningful Bitcoin dependent on one device, one person, one home, one cloud account, or one moment of stress.
The Three Highest-Impact Principles
These three principles keep your risk very low and form the foundation of physical attack protection:
1. Reduce Who Knows, And What They Know
Privacy is the first layer of physical security. Most physical attacks begin because someone believes a target holds meaningful Bitcoin and knows where to find them.
- Do not discuss balances publicly.
- Do not post screenshots, wallet interfaces, vault names, or transaction activity.
- Limit who knows your setup, locations, devices, and routines.
- Use need-to-know disclosure with family, advisers, accountants, and legal professionals.
This is about discretion, not paranoia. Serious wealth has always required privacy.
2. Your Safety Always Comes First
If you ever found yourself in a threatening situation:
- Do not resist
- Do not escalate
- Prioritise yourself and your family, not your Bitcoin
Collaborative custody exists so you can comply calmly while remaining safe.
3. Your Single Key Cannot Move Your Vault
Your main Bitcoin is secured in a 2-of-3 multisig vault:
- You hold one key
- The Bitcoin Adviser holds one key
- Our custody partner holds one key
Two keys are required to move funds. Your individual seed or device cannot move your Bitcoin on its own. This is why collaborative custody materially reduces the risk that physical coercion can move meaningful Bitcoin.
How Collaborative Custody Reduces Coercion Risk
Collaborative custody materially reduces coercion risk through multiple layers of protection:
Why Collaborative Custody Materially Reduces Coercion Risk
Attackers want fast access. Your setup provides the opposite:
- Spending requires multiple independent approvals. No single person can move funds alone.
- Unusual or urgent requests trigger checks. We verify all transaction requests.
- Any sign of distress causes delays or refusal. We are trained to recognize coercion.
- No phone call, email, or plea can override security controls. The system is designed to resist pressure.
Pressure does not unlock Bitcoin. It stops Bitcoin. This dramatically reduces the value of coercion as an attack method.
Additional Protection: The Duress & Capacity Clause
Our Terms of Service strengthen this protection even further. TBA will disregard instructions that appear coerced or involuntary.
This means:
- Even if someone forces you to request a signature
- Even if you attempt to act "willingly" under pressure
- We will not process the request
This policy exists to protect you, much like a bank rejecting a suspicious transfer. We're trained to recognize signs of coercion and will refuse to process any transaction that appears to be made under duress.
During a Coercion Attempt
This remains uncommon for most holders, but preparation matters. If you ever need simple, calm language, here is your script:
What to Say
Use this simple, calm language:
"My Bitcoin is stored in a security system with The Bitcoin Adviser. I only control one key. They and a custody partner must approve before anything can move. Without them, nothing can be spent."
Reinforce that:
- You do not have full control
- The process cannot be rushed
- The system freezes when anything looks suspicious
This is true, and attackers generally stop escalating once they realise force is ineffective.
Emotional coercion parallels: The same mindset that protects you from physical coercion also helps against social engineering scams. Scammers use pressure tactics similar to physical threats: creating urgency, isolation, and fear. The duress clause mindset applies here too: pressure should stop Bitcoin, not unlock it. If someone is pressuring you to send Bitcoin quickly, that is a red flag. See our Bitcoin Scam Protection Guide for more on recognizing and resisting emotional manipulation tactics.
How to Act
A. Stay calm and comply if necessary
This is about personal safety, not protecting Bitcoin. Collaborative custody has already done that job.
B. Clearly explain your limitations
Short, simple statements work best:
- "I cannot move the main Bitcoin myself."
- "They won't sign if anything looks unusual."
C. If they demand your device or seed
If giving it over reduces danger, you may do so safely. Your key alone cannot move the vault. Afterward, TBA will treat the key as compromised and assist with recovery.
What Not to Promise: Do not say you can send everything immediately. You cannot, and this protects you. Instead, rely on the truth: "The whole point of using this system is that I cannot move it myself." This discourages escalation and reinforces reality.
After an Incident
If anything ever occurs, follow these steps once you are safe:
Immediate Actions
- Contact The Bitcoin Adviser via your secure channel. We will freeze activity, reject suspicious requests, and begin rebuilding your vault.
- Treat exposed devices as compromised. We will help you reset everything safely.
- File a police report if appropriate. Standard procedure in any security event.
Knowing these steps in advance brings peace of mind, even though most holders will never need them.
For detailed recovery procedures: See our Bitcoin Emergency Kit for comprehensive guidance on what to do after security incidents, including lost keys, compromised devices, and recovery procedures.
Decoy Wallets: Useful In Narrow Cases, Dangerous If Misunderstood
Some holders keep a small, separate wallet with limited funds as a personal-safety measure under extreme duress. This is optional, advanced, and not part of most clients' core security model.
Decoy strategies can backfire. Attackers may escalate when they believe more funds exist, or when a decoy amount is too small to satisfy them. Deception is unreliable and must never replace structural controls.
Decoys are least reliable against targeted criminals who believe they already know the victim has more meaningful holdings. In that scenario, the better protection is not deception; it is making the main vault impossible to move alone.
The safest Bitcoin is Bitcoin you cannot be forced to move alone. Collaborative custody, multisig, and clear signing policy are the primary defences against physical coercion.
How TBA Thinks About Decoy Wallets
- Do not become a target: privacy, discretion, and avoiding public displays of wealth reduce risk before any wallet strategy matters.
- Do not be able to move meaningful Bitcoin alone: collaborative custody, multisig, and co-signing policy mean one person under pressure cannot drain the vault.
- Process controls: TBA will not co-sign if coercion is suspected, under the Duress & Capacity clause.
- Optional decoy wallet: a personal-safety pressure valve only, not a vault strategy or inheritance plan.
- Avoid inheritance-breaking complexity: passphrases, hidden wallets, and duress PINs can create recovery failures for heirs.
A decoy wallet may be one small part of a personal-safety plan, but it is unreliable. The more robust strategy is making meaningful Bitcoin impossible to move by one person under pressure.
A Better Physical Security Model
- Spending wallet: keep day-to-day amounts separate from core vault holdings.
- Collaborative custody: meaningful Bitcoin requires multiple independent approvals to move.
- Separated signers: no single device, seed, or person holds enough authority alone.
- Signing policy: unusual urgency, distress, or coercion triggers verification and refusal.
- Family message: heirs and trusted contacts know the vault cannot be moved by one person under pressure.
Passphrases and hidden wallets are advanced. They can protect against some threats but often break inheritance and recovery workflows. If heirs cannot reconstruct access after an incident, the security model has failed. Document any advanced setup with your adviser and estate plan.
Some hardware wallets support duress PINs or device-specific duress features. Treat these as narrow, optional tools. They do not replace collaborative custody, and they add operational complexity. Discuss any duress feature with your adviser before enabling it.
Data Exposure Changes The Risk
Physical attacks usually do not begin with cryptography. They begin with information: names, addresses, routines, public posts, leaked customer records, exchange data, tax records, or social signals that suggest someone may hold meaningful Bitcoin.
You cannot control every database that has ever stored your information. But you can reduce what is visible, avoid broadcasting wealth, separate your home life from your Bitcoin setup, and make sure no single device or seed phrase can move meaningful funds.
What This Means In Practice
- Reduce public signals: avoid posting holdings, balances, screenshots, wallets, vault names, or travel routines.
- Assume old data may exist: past exchange, tax, mailing, conference, or vendor records may have created exposure.
- Use collaborative custody: meaningful Bitcoin should require multiple independent approvals.
- Separate locations: do not keep all devices, backups, and instructions in one place.
- Prepare your family message: everyone should understand that the main vault cannot be moved by one person.
Home & Privacy Hygiene
No need for extreme measures. Just sensible discretion:
Physical Security
- Don't label anything "Bitcoin"
- Don't leave hardware wallets lying around
- Keep backups stored discreetly
Digital Privacy
- Avoid telling people about your holdings or setup
- Don't discuss Bitcoin publicly
- Don't post about it on social media
Think of this like protecting jewellery, a safe, or important documents. Basic discretion goes a long way.
Client Summary: Calm, Prepared, Protected
The safest Bitcoin is Bitcoin you cannot be forced to move alone.
This remains uncommon for ordinary holders, but the France cases show why serious Bitcoin holders should calmly prepare. Review privacy, signing policy, and your family message regularly.
Quick Reference Checklist
- Review privacy and public signals. Reduce who knows, and what they know, about your holdings and setup.
- Confirm signing policy is current. Unusual urgency or distress should trigger verification and refusal.
- Make sure your family understands the main vault cannot be moved by one person.
- Do not resist; prioritise safety. Your personal safety comes first.
- Explain that your Bitcoin cannot be moved with one key. Collaborative custody materially reduces coercion risk.
- Make clear that TBA and the custody partner must approve every spend. This is the truth and discourages escalation.
- You may hand over your seed or device if it keeps you safe. It cannot move the vault.
- You may have a small spending wallet separate from vault funds. Optional only; it does not protect core holdings and must not replace collaborative custody.
- TBA will block coerced requests under the Duress & Capacity clause. We are trained to recognize coercion.
- Once safe, contact TBA to rebuild your vault. We will help you recover and secure everything.
Collaborative custody is designed for this scenario. It protects you when you are not in control. Prepare once, then live normally and confidently.
Want to Learn More About Collaborative Security?
Collaborative custody is the foundation of physical attack protection. Learn how 2-of-3 multisig eliminates single points of failure and protects your Bitcoin in all scenarios.
Related Resources
- Security Centre — All security guides and resources in one place
- Bitcoin Emergency Kit — Comprehensive emergency procedures and recovery guidance
- Collaborative Security — Learn how 2-of-3 multisig protects your Bitcoin
- Hardware Wallet Guide — Securing your signing devices
- YubiKey Security Guide — Protecting your digital perimeter
Educational only — no financial, tax, or legal advice. Seek appropriate licensed professionals where required. This guide is for informational purposes and does not guarantee protection against all threats.