Bitcoin security firm targets attack vector behind $11B in 2025 crypto fraud losses
Casa, a Bitcoin security firm, released four features on May 27, 2026, designed to prevent social engineering attacks on cryptocurrency holders. The suite includes Guardian Mode, Whitelisting, Suspicious Account Activity monitoring, and Phone Call Detection.
Social engineering accounted for the bulk of crypto theft in 2025. According to FBI data cited by Casa, crypto fraud losses climbed 22% year over year, reaching $11 billion total. For every physical attack on a crypto holder filed with the FBI in 2025, there were 2,000 phishing attacks. An estimated 20% of social engineering attacks begin with unexpected phone calls.
“Social engineering is the lowest of the low,” said Nick Neuman, Casa CEO. “People are trying to trick others into losing their life savings. We will not stand for it.”
Guardian Mode is opt-in and available to Premium and Private Client members only. The feature leverages video verification calls conducted by Casa Advisors to confirm user identity during sensitive transactions.
Whitelisting restricts vault withdrawals to pre-approved addresses. New addresses require a 48-hour waiting period before funds can be moved, creating a buffer against unauthorized transfers initiated through compromised credentials or social manipulation.
Suspicious Account Activity monitors login locations at the city level without storing IP addresses. Location data is deleted after 48 hours. Phone Call Detection checks call state only and does not access audio, caller ID, or call content, preserving user privacy while flagging potential attack vectors.
Casa stated the features are part of a broader five-week campaign with industry experts to raise awareness about social engineering. AI tools and data breaches have made social engineering attacks more targeted and convincing in recent years, the firm noted.
Casa did not specify which membership tiers have access to Whitelisting, Suspicious Account Activity, or Phone Call Detection beyond Guardian Mode’s Premium and Private Client restriction. The firm also did not disclose whether these features are available globally or only in specific jurisdictions.
