We highlighted XDRIP Academy lesson O101-01, The first hour, which starts with what to do when something goes wrong rather than how to buy. Its worked example follows someone who typed their recovery words into a fake app: from a phone that never saw those words, they set up a new wallet, move the two tokens that are left, change passwords, re-enroll 2FA and freeze withdrawals in about twenty minutes. Nothing gets recovered, but two tokens and an exchange account are kept, and a report is ready to file that night.