Casa, the Bitcoin self-custody platform, deployed four new security features to counter social engineering attacks that drove the majority of crypto theft in 2025. The rollout arrives as FBI data shows crypto fraud losses jumped 22% year over year, signaling an acceleration in targeted attacks against hodlers.
Social engineering remains the weakest link in Bitcoin security infrastructure. Attackers exploit psychological manipulation rather than technical exploits, targeting both individual holders and institutional players through phishing, pretexting, and impersonation schemes. Casa's new defenses address this behavioral vulnerability head-on.
The four features focus on authentication hardening and attack surface reduction. Casa implemented multi-step verification protocols that require multiple confirmations before sensitive actions execute. The platform added detection systems flagged suspicious login patterns and geographic inconsistencies. Casa also introduced activity logging with real-time alerts, enabling users to spot unauthorized access attempts immediately. A fourth feature restricts high-value withdrawal requests with mandatory delays, creating friction that prevents instant drains if credentials fall to attackers.
Casa operates as a multisig custody solution, requiring multiple signatures to authorize transactions. This architectural advantage creates natural resistance to single-point compromises. But the firm recognized that credential theft, SIM swap attacks, and phishing still pose existential risks to users who fail to secure their backup codes and recovery phrases.
The 22% year-over-year spike in crypto fraud losses underscores why Casa moved. Total losses hit record levels in 2025 as organized crime operations professionalized their targeting tactics. High-net-worth Bitcoin holders became priority targets, with attackers conducting extensive reconnaissance before strikes. Impersonating exchange support staff, tax professionals, or security auditors proved devastatingly effective.
Casa's approach treats social engineering as an operational security problem rather than a purely technical one. The firm shifted focus from preventing theft to detecting and stopping it mid-exploitation. Real-time alerts and withdrawal delays create windows for human intervention that earlier solutions lacked.
The deployment reflects a broader industry pivot. As Bitcoin secures institutional inflows and larger individual holdings, attack sophistication rises. Platform security now demands behavioral monitoring alongside