Device red flags
- A recovery phrase arrives already written, printed, filled in, or hidden behind a scratch panel.
- Packaging looks opened, resealed, or meaningfully different from the manufacturer's own photos.
- The device asks you to restore or import a wallet you did not create.