Protect the clients most likely to be targeted. VEIL looks like an ordinary crypto wallet, but a second PIN silently puts your control room on the case, with location, in under a second.
72verified physical attacks on crypto holders in 2025 alone
$40.9Min confirmed losses; the real figure is probably far higher
Sources: CertiK’s report on physical attacks and TRM Labs’ analysis, both published early 2026.
When the threat is physical, the victim opens the wallet themselves. Every existing way to ask for help is visible, audible or too slow.
A panic button is visibleThe attacker sees it, and the situation can escalate.
A phone call is impossibleNot with someone standing over you.
Security finds out too lateNobody knows anything is happening until it’s over.
Unless asking for help looked exactly like giving in.
2580 is the normal PIN. 1397 is the duress PIN. Both open the same wallet.
Attacker sees
An ordinary wallet
Same screen, same balance, same speed. No sound, no vibration.
Enter your PIN
Control room sees
Nothing yet
Standing byTwo men force their way into his apartment and tell him to send the Bitcoin. He types his second PIN. Ninety seconds, with sound.
A dramatisation, generated with Veo; captions on by default. VEIL alerts the security company you choose; how and when it responds depends on its procedure and coverage.
Every alert arrives with location, context and a clear owner, plus automatic escalation and a full audit trail. It fits the way your control room already works. Typed the duress PIN above? This incident carries your time.
±18 m · 2 s old · inside coverage
Incident INC-0398 has been open for 90 seconds without an owner. Desk 2 has been offline since 21:15:58.
Take ownership from any signed-in console or the on-call app. The protected person’s phone is never contacted automatically.
Five guarantees engineered in from day one, so the one alert that matters is never lost, duplicated or delayed.
The alert leaves before location, camera or anything else is ready.
The phone gets its receipt only after the incident is durably stored.
Retries after a dropped connection merge, with every attempt in its history.
No owner within 90 seconds and the incident goes to the shift manager and a backup on-call, even if the desk has gone offline.
Practice runs are separated on the server. They never send a team and never count as real incidents.
VEIL carries a signal, not your assets. It is designed to know as little as possible until the moment it matters.
Location only during an incidentNever collected in routine use.
Encrypted in transit and at restPINs are never stored in plain text.
Multi-factor sign-in for operatorsCompanies are kept fully apart.
Everything is auditedEvery view, export, handover and closure; retention set in advance.
A new premium service on the control room you already run: recurring revenue for every client you protect, no new control room, and one more reason your highest-value clients stay.
Quiet protection for principals and their families, connected to the security partner you already trust. Nothing visible, nothing to explain.
If your wealth is public, so is your risk. One code, practised in advance, for the moment you can’t ask out loud.
No. VEIL never blocks, fakes or delays a transaction, because a wallet that misbehaves under threat can put the person in more danger. Its job is to get help moving while the person does what they must.
The pilot is scoped with you. After it, VEIL is an annual subscription per protected person, priced by market and region, and you can resell personal plans to your own clients. Schedule a meeting and we’ll give you figures for your area.
No. It holds no funds and never touches seed phrases. The duress PIN never signs anything or cuts the network.
The app shows the same wallet for both PINs. The phone’s own system indicators, such as location in use, stay visible, so we don’t promise complete concealment. We test this with people in the pilot.
The server escalates it to the shift manager and a backup on-call. Who takes ownership, when and where is agreed before the pilot starts.
The alert is saved on the phone and retried, and retries merge into one incident. We can’t promise delivery from a phone that is switched off or has no signal, and we say so plainly.
We test distribution in the first phase and state the app’s purpose openly in its store listing.
We’ll walk your team through the console, the procedure and the pilot plan. Nothing is installed until a procedure is agreed.
