A paper wallet is an old cold-storage habit: you generate a Bitcoin address and its matching private key, then print or write both — often as text and QR codes — and keep the paper offline. The coins still sit on the blockchain; the paper only holds the secret that can spend them. Anyone who photographs, photocopies or reads that key can empty the address. Bitcoin Wiki and long-running security guides now treat classic single-key paper wallets as obsolete for new savings, not as a gold standard.
The failure modes are mostly human and physical. Online generators can be malicious or compromised. Printers and cloud print queues can retain jobs. Ink fades; paper burns, soaks or gets lost. Spending is awkward: importing the key into software exposes it, and partial spends can leave change on an address you never wrote down — people have “put the paper back in the safe” while the remaining balance lived elsewhere.
Scam overlays are straightforward. A stranger who emails you a “pre-loaded paper wallet”, a Telegram bot that “prints” keys for you, or a page that asks you to paste a seed so it can “format a PDF backup” is fishing for control of the funds. Generate nothing on a machine you do not trust; never type a private key into a random website to “check the balance” (use the public address only on a reputable explorer). For meaningful sums, modern practice favours a hardware wallet and a carefully stored seed backup — not a souvenir QR from 2014.
If you still hold coins on an old paper wallet, plan a full sweep to a wallet you control, then retire the paper. If someone is already pitching a paid “recovery” of a lost printout, treat that as a second risk, not a rescue.
For reporting routes and victim help, start at Get help. If recovery sellers appear after a loss, read Fake recovery first.
This article is for general information only. It is not legal or financial advice. Details change. If you have lost money, contact your bank or card issuer and use the routes on the help pages.