Every advertisement for a crypto product says the same thing in small print: your capital is at risk. It is true, it is required, and it is close to useless, because it does not say which risks or how. Most people picture one: the price goes down. That is real, and it is the least interesting of the four.
This guide names all four, with what has actually happened rather than what might.
1. Custody: the money is held by someone else, and they can fail
If your crypto sits on an exchange or in an app, it is held by a company, on its terms, in its systems. You have a claim on the company, not the coins.
What has happened: several large exchanges, including some of the biggest in the world at the time, have collapsed. In the worst cases, customer money was found to have been used for the company’s own purposes, and customers became unsecured creditors in a bankruptcy, recovering a fraction of their balances years later. Smaller exchanges have simply vanished. Some have been hacked and the coins taken.
Why it is different from a bank failing: a bank deposit is protected by a guarantee scheme up to a fixed amount. An exchange balance, in most places, is not. The EU’s dedicated regime for crypto-asset businesses has brought rules and some protections; it is not a deposit guarantee, and what it covers is worth reading rather than assuming.
The mitigation the industry itself uses: holding the keys yourself, which removes the company but puts the full weight of security and backup on you. There is no option that removes the risk; there are only choices about who carries it.
2. Volatility, at the moment you need to sell
Prices of crypto-assets move far more than shares or funds: falls of half or more within months are not unusual, and individual tokens routinely go to zero.
The risk and return guide makes a distinction that matters here: volatility only becomes a permanent loss when you are forced to sell at the wrong moment. With a diversified fund held for decades, that is manageable. With a single crypto-asset, three things make it worse. The swings are larger. Many assets never recover; there is no “the market always comes back” for a token whose only value was the belief of other holders. And people tend to hold crypto with money they will need, precisely because it was pitched as a quick gain.
What has happened: every crypto cycle so far has included a fall of well over half from its peak. Each time, a large number of people who bought near the top sold near the bottom, because they needed the money or could not stomach the ride. The people who “held through” are the ones who could afford to and did not need to sell.
3. Irreversibility, and no one to call
A bank transfer can, in some circumstances, be recalled. A card payment can be disputed. A cheque can be stopped. A crypto transaction, once confirmed, is final. Sent to the wrong address, sent to a fraudster, sent from a compromised wallet: gone, with no chargeback, no ombudsman, no fraud department.
This is not a flaw in the design; it is the design. It is also why crypto is where the majority of investment fraud now happens. A scammer who is paid by bank transfer has a problem: the money can be traced and sometimes recovered. A scammer paid in crypto has none.
What has happened: the largest category of reported investment fraud in many countries is now crypto-related, and recovery rates are close to zero. The scams guide covers the shapes they take.
4. The product itself may not be what it says
The last risk is the one that surprises even experienced people: the thing you bought may not be what it claimed to be.
Stablecoins are tokens designed to hold a fixed value, usually one dollar or one euro, backed by reserves. Some are backed as claimed. At least one major stablecoin has lost its peg entirely and gone to nearly zero within days, taking tens of billions with it, because the mechanism holding it at one dollar turned out to be circular. “Stable” was the name, not the property.
DeFi protocols, the automated lending and trading software, are code with no one in charge. A bug in that code, or a design flaw someone finds a way to exploit, means the money in it can be taken with no recourse, and this has happened repeatedly, sometimes for hundreds of millions at a time.
Yield products, offering a fixed interest rate on crypto deposits, have repeatedly turned out to be lending customer deposits to risky borrowers, or to the company’s own affiliates. When the borrowers failed, the “interest” stopped and the deposits were gone.
The pattern: a product that promises a return with the risk removed has not removed the risk. It has hidden it somewhere you have not looked. That is true of every asset class, and crypto has produced the most spectacular recent examples.
What this guide is not
It is not an argument that crypto is worthless, or a prediction of anything. Some of the technology is genuine and some of the businesses are honest. It is an argument that the phrase “your capital is at risk” describes four different things, that each has happened at scale, and that anyone considering it should be able to name all four before they start.
Where this fits
This is the core of Module 13 of our Financial Literacy Course, which covers decentralised finance and these four risks with real case studies. It builds on how blockchain and crypto actually work, and leads to spotting the scams, because risk three is the door most of them walk through. For how ordinary investments are protected differently, see is your money safe abroad.
Educational guidance, not regulated financial advice, and not a recommendation to buy, hold or sell any crypto-asset. Crypto-assets are high-risk, largely unprotected, and you may lose everything you put in. Nothing here replaces advice from a regulated adviser who knows your full circumstances.