When a hardware wallet company gets hacked, the thing you should worry about most often isn’t your crypto.

Keystone’s Shopify store was breached, exposing buyers’ names, addresses, and orders—but not their seed phrases or private keys. Ledger, Trezor, and SafePal have all had similar incidents this year, exposing nearly 120,000 buyers’ addresses in total. That list basically says: this person owns crypto and cares a lot about it.

Three common scams follow: fake support reps offering refunds, sending you a “new and upgraded” device, or showing up for a follow-up visit. Legitimate manufacturers will never ask you to import your old seed phrase into a new device. If you hear that, hang up.

I always have my deliveries sent to the front desk at work. The receptionist thinks I’m shopping for underwear.