Bitcoin’s Newcomers Keep Getting Robbed at the Door

The most dangerous mile in bitcoin is the first one. Not the volatility, not the regulators — the on-ramp. The moment a newcomer turns cash into bitcoin and tries to learn how to keep it is when they are most likely to be robbed. This summer offered a grim triptych of how.

In Minnesota, scammers used cash-to-crypto kiosks to talk residents — most of them seniors — into feeding nearly a million dollars into machines controlled by strangers on the phone; the state banned the kiosks outright. In the same window, a firmware flaw in a popular hardware wallet bled more than $100 million out of self-custody users who had done exactly what the maximalists told them to do. Behind both sits the longer graveyard: Celsius, FTX, BlockFi, Voyager — custodial platforms that took beginners’ first bitcoin and never gave it back.

Three different failure modes — custodial kiosk, self-custodial device, custodial exchange — and one common victim: the person who just arrived.

“Not your keys” is not a consumer-protection policy

The reflexive answer to all of this is “not your keys, not your coins” — take self-custody and no intermediary can hurt you. It’s good advice and a bad policy, because it assumes the hardest problem is already solved. Self-custody is a skill, and the wallet hack is a reminder that the skill has sharp edges: a weak random-number generator, a mistyped seed, a lost backup, and the sovereignty everyone celebrates becomes an irreversible loss with no helpline to call. Telling a 70-year-old to “just self-custody” isn’t protection; it’s a shrug dressed as principle.

A first-time buyer cannot evaluate a kiosk’s fees, a wallet’s entropy source, or an exchange’s balance sheet. They are trusting someone. The only question that matters is whether that someone is designed to catch them when they stumble.

Guardrails, not just warnings

So what would actually help? Boring things, mostly. On-ramps with real fraud detection that flags the classic pattern — a first-time user sending everything to a brand-new address while on a phone call. Cooling-off delays and low limits on a beginner’s opening transactions, the way banks throttle a new account. Plain-language education at the point of purchase, not buried in a whitepaper. Support that treats a confused newcomer the way a bank treats a first-time depositor. None of it is glamorous; all of it is the difference between onboarding people and feeding them to wolves.

The emerging-market lens sharpens the point. Purists like to say self-custody or nothing, but in Lagos or Buenos Aires a custodial app on a cheap phone is often the only realistic on-ramp — the alternative isn’t a hardware wallet, it’s staying in a collapsing currency. A movement that lectures those users about keys while offering them no safe first step has its priorities backwards.

The steelman, and the answer to it

The honest counterargument runs the other way: every guardrail is an intermediary, every intermediary is a honeypot and a chokepoint, and bitcoin exists precisely to route around them. Identity-heavy on-ramps recreate the surveillance the system was built to escape; the real fix is better self-custody, not more middlemen. That case isn’t wrong — it’s the reason self-custody education (our own Custody Corner included) has to be part of any answer, not an afterthought.

But “better self-custody” and “safer on-ramps” aren’t enemies; they are the two ends of the same bridge. Minnesota’s ban treats a symptom. The cure is an industry that decides the newcomer’s first mile is its responsibility, not an externality — that the people selling sovereignty owe beginners guardrails on the way in, and the patience to teach them when to let go of the railing.

Bitcoin will keep winning the argument about what money should be. It will keep losing newcomers at the door until it treats that door as seriously as it treats the vault.

The Take is the opinion of The Bitcoin Beacon’s editorial desk; reasonable readers will disagree, and the strongest counterargument is aired above. Scam and loss figures are as reported by state authorities and security researchers. This is a sensitive area — if you have lost funds to a scam, contact your state consumer-protection office and local law enforcement. Nothing here is financial advice.