Your keys are safe. What about you?
Hardware wallets, MPC and custody all defend against digital attacks. None of them protects the person holding the keys. That is what TROCOZY is for.
iOS app in development — no release date announced
The problem
Holding crypto has become a physical risk
crypto-related kidnappings recorded in France between January and mid-April 2026.
Source: French National Judicial Police Directorate (DNPJ). The figure stops at mid-April 2026 and does not cover the months since.
France is where it concentrates
The country accounts for most of the world's physical attacks on crypto holders: someone comes to your home, threatens you, and has you sign the transfer yourself.
Against that, a recovery phrase locked in a safe is worth nothing. The thief does not need to find it — he asks you to use it.
How it works
Three steps, and nothing to hand over
You add your public addresses
Watch-only, the same way any block explorer reads them. TROCOZY never asks for your private keys or your recovery phrase, and would have no use for them: the app cannot sign anything.
You write your own rules
An amount leaving, an unknown destination address, an unusual rhythm, a long silence from you — you decide what matters and what it sets off. Nothing is imposed.
Your trusted circle is warned
When a rule fires, the people you chose get a text message and then a phone call, one after another, until someone answers. People you picked yourself, not a call centre.
The case that matters
When someone forces you to unlock your phone
This is the moment everything turns on, and the one the app was built for. Three ways to raise the alarm without it showing.
-
The duress codeType it instead of your usual code. The app opens normally, and a silent alert goes out. It is the most reliable of the three: it asks nothing extra of you at the moment you are under pressure.
-
The system buttonA button you place yourself on your Lock Screen, in Control Centre or on your Action button. It fires the alert without unlocking the phone, and without a sound.
-
The Siri phraseAn innocuous phrase of your choosing. It fires the alert without touching the phone — but you have to say it out loud, which makes it the least discreet of the three.
Code-Verify — MAX plan
A trap for whoever forces you to cancel
After a critical alert, the app asks you to confirm. Enter your cancellation code and your contacts learn it was a false alarm. Enter anything else, or fail to answer within twenty minutes, and the alert is escalated rather than cancelled.
An attacker forcing you to "call it all off" therefore cannot win: both available outcomes work against him.
Three principles
What will not be traded away
Zero-knowledge
Your addresses, contacts, rules and codes are encrypted on your phone. Our servers hold no readable copy of any of it. If the company is breached, there is nothing there to take.
Visible deterrence
The app stays visible on your home screen. No icon disguised as a calculator: its presence is part of the protection, and an attacker who sees it knows someone else will be told.
Modular
Every feature switches on and off on its own. You assemble your protection around your situation, your holdings and what you are willing to share. It is a toolbox, not a script.
Three plans
They differ by quotas, and by the hidden gestures
Pricing will be published when sign-ups open. Custom rules are unlimited in all three.
See it coming
- Real-time transfer monitoring
- Alerts on an amount threshold
- Detection of new destination addresses
- Visible panic button
- Locked-phone triggering, one Siri phrase
- Duress code and daily check-in
- Cascading text-message alerts
For those starting to hold amounts that matter.
React without being seen
- Hidden panic button — a gesture only you know
- Three Siri phrases, customisable gestures
- Pattern detection: rapid draining, unusual hours
- Thresholds learned from the wallet's own habits
- Automatic watch when you go quiet for too long
- Decoy mode: a fake balance shows while the alert goes out
- Encrypted audio recording, phone calls to your contacts
For those publicly known to hold crypto.
Everything, plus verification
- Code-Verify — the check that traps the attacker
- Human call-back on request
- Every chain, major and secondary
- Multi-wallet labels: personal, business, cold, family
- Deep escalation tree
For large holdings, or several entities.
The chains being watched
In all three plans: Bitcoin, Ethereum, Solana, Base, Arbitrum, Optimism, Polygon, BNB Chain.
Avalanche, Linea, Scroll and Cosmos come with MAX, and as an option for PRO.
The limits, stated upfront
What TROCOZY will not do
Every line below is a decision, not a gap to be filled in later.
- Never touches your wallets. No custody, no signing, no private key ever transits or is stored.
- Blocks no transaction. No timelock, no MPC, no freeze — those are custody mechanisms, and custody is ruled out.
- Does not call the police automatically. Any escalation goes through a human you named.
- Sends nobody to your door. TROCOZY raises the alarm; it does not intervene physically.
- Stores nothing sensitive in the cloud. Your backup, if you make one, is an encrypted file you export yourself.
- Passes nothing to third parties without your explicit, time-stamped consent.
One limit remains, and it cannot be engineered away: a court can compel our text-message provider to disclose the numbers you alerted. We cannot prevent that — only tell you about it.
Frequently asked
The four that come up most
Can TROCOZY see my wallets or my transactions?
No. We only read the public addresses you give us, the same way any block explorer user does. We never touch your private keys. And everything you enter in the app — addresses, contacts, codes — is encrypted on your phone with a key only you hold. Even we cannot read it.
What happens if TROCOZY is breached?
An attacker compromising our servers would find nothing useful: not your addresses, not your contacts, not your codes. Everything is encrypted on your phone. At worst the service would be down for a while — your data would stay intact.
If I lose my phone, do I lose everything?
No, provided you wrote down the twelve-word recovery phrase created when you signed up. With it, you restore your data on a new phone.
Lose the phrase and the phone, and it is final. That is the price of zero-knowledge: nobody, ourselves included, can reopen access for you. If we could, an attacker could too.
Does it work without a connection?
Partly. Opening the app, reviewing your wallets, contacts and rules, changing any setting: all of that works offline.
On-chain detection and sending text messages need the network. If you fire a manual alert while offline, the phone queues it and sends it the moment the connection returns.