Pay with Bitcoin: read the QR, pick the layer, avoid the traps

Paying with Bitcoin in 2026 mostly means using Lightning : a mobile wallet×WalletSoftware or device that manages your Bitcoin keys and lets you sign transactions. A wallet does not really « hold » your bitcoins, it holds the keys that prove you own them.See in the lexicon →, a QR code×QR codeTwo-dimensional barcode, ubiquitous in Bitcoin: addresses, Lightning invoices, payment URIs. Always check the decoded amount and address before confirming.See in the lexicon →, two seconds, fees of one sat. The experience beats contactless cards in most cases. What remains is learning to read QR codes, picking the right wallet, and anticipating the rare pitfalls.

Four QR formats coexist on the Bitcoin side : on-chain address (starts with bc1 or 3), Lightning invoice (lnbc...), LNURL×LNURLFamily of standards that simplifies Lightning usage: reusable QR codes, withdrawals, authentication. Complemented by readable Lightning Addresses (user@domain).See in the lexicon →-pay (recurring payments), and unified BIP21 (offering both options in a single QR). A good wallet detects the format automatically. In-store payments almost always go through Lightning ; large transfers or online payments can stay on-chain depending on the amount and the urgency.

This article details the four QR formats, compares wallets suited to daily payments (Phoenix, Muun, Aqua, Wallet of Satoshi×Satoshi (sat)The smallest unit of bitcoin. 1 BTC = 100 million satoshis. Named after the creator. In 2026, talking in sats becomes common as the price of one BTC rises.See in the lexicon →), walks through the typical procedure of an in-store and online payment, handles edge cases (refund, partial payment, routing failure), and lists the countries and platforms where acceptance is now significant.

The 4 QR formats to recognise

A "Bitcoin" QR is not one single thing. Four distinct standards coexist in 2026, each designed for a different use. A good wallet×WalletSoftware or device that manages your Bitcoin keys and lets you sign transactions. A wallet does not really « hold » your bitcoins, it holds the keys that prove you own them.See in the lexicon → detects all of them and switches automatically, but recognising the displayed format helps you understand what happens and pick the right wallet when yours is limited.

Four practical clarifications on each format.

• BIP21 (on-chain). Old, universal format, supported by all wallets. The QR encodes a bitcoin: URI with address, optional amount, optional label. Fees and delay depend on the mempool×MempoolWaiting area where Bitcoin transactions sit before being included in a block. The fuller the mempool, the higher the fees required.See in the lexicon → (cf. fees article). The merchant must wait for confirmations per their threshold. Avoid for daily payments, perfect for large transfers.
• BOLT11 (Lightning). Lightning "invoice" format. The QR encodes a lnbc... string containing amount, recipient and a secret hash×HashFunction that turns data of any size into a fixed-size fingerprint. The same input always yields the same output, but you cannot go back from output to input.See in the lexicon →. Limited validity (typically 15 min to 24 h), single use. Near-zero fees (0.001 to 0.01 EUR), 1 to 5 second delay. De facto standard for daily merchant payments in 2026.
• LNURL-pay (static Lightning). Evolved LNURL format, solving the "single-use QR" problem of BOLT11. The payer scans an LNURL QR pointing to an HTTPS URL. The wallet calls that URL, asks the server for a fresh BOLT11 with the desired amount, then pays. Advantage: a tip jar can display the same QR for months. Drawback: requires the LNURL server to be online at payment time, and exposes an HTTPS URL (privacy).
• Lightning Address and BIP353. Text form of LNURL-pay. A Lightning Address looks like an email (alice@strike.me) and resolves to an LNURL via a .well-known convention. BIP353 (2024) proposes a ₿alice@cap.bitcoin syntax resolved via DNSSEC, more secure. Ideal for email signature, Twitter bio, or anywhere a readable, persistent Bitcoin identifier is needed. All modern Lightning wallets (Phoenix, Muun, Strike, Wallet of Satoshi×Satoshi (sat)The smallest unit of bitcoin. 1 BTC = 100 million satoshis. Named after the creator. In 2026, talking in sats becomes common as the price of one BTC rises.See in the lexicon →, BlueWallet) support at least Lightning Address.

Payer tip: if you scan and do not immediately see the amount and the format detected by the wallet, do not confirm. A serious wallet always displays the amount in BTC/sats and local currency equivalent, the detected format, the fees, and the address or invoice. If any single one of these is missing, suspect the wallet or the QR.

Picking on-chain or Lightning at payment time

When a merchant or recipient offers both options, or when you initiate the payment yourself, three criteria settle it: amount, urgency, wallet×WalletSoftware or device that manages your Bitcoin keys and lets you sign transactions. A wallet does not really « hold » your bitcoins, it holds the keys that prove you own them.See in the lexicon → capability.

• Amount. Below 500 EUR, Lightning almost always wins: 1,000 times lower fees, 600 times shorter delay. Between 500 and 5,000 EUR, Lightning remains possible but may hit payer or recipient channel capacity. Above 5,000 EUR, on-chain takes over: no cap, fees that stay negligible as a percentage of amount.
• Urgency. If the recipient needs the money within a second (merchant payment, Bitcoin ATM×Bitcoin ATM (BTM)Automated teller machine where you can buy (and sometimes sell) bitcoin against cash. Often subject to KYC from 1,000 EUR upwards.See in the lexicon → withdrawal), only Lightning can hold. If the recipient is patient (transfer to cold storage×Cold storageStoring bitcoins on an offline wallet that is not connected to the Internet. Maximum security for amounts you are not spending.See in the lexicon →, non-urgent exchange×ExchangeService that lets you buy, sell and swap cryptocurrencies against fiat money. Examples : Kraken, Coinbase, Bitstamp, Bitvavo. Most are custodial.See in the lexicon → deposit, invoice payment at 30 days), on-chain is perfect with low fees.
• Wallet capability. Not every wallet does everything. Phoenix handles on-chain and Lightning transparently, picking the layer based on the QR. Sparrow is on-chain only. Wallet of Satoshi×Satoshi (sat)The smallest unit of bitcoin. 1 BTC = 100 million satoshis. Named after the creator. In 2026, talking in sats becomes common as the price of one BTC rises.See in the lexicon → is custodial×CustodialModel in which a third party (exchange, broker, neobank) holds your private keys for you. You have a claim, not a bitcoin. « Not your keys, not your coins ».See in the lexicon → Lightning only. Before paying, know what your wallet can do.

Four concrete scenarios to fix ideas.

• 4.50 EUR coffee in Lugano×Lugano (Plan ₿)Swiss city that launched a Bitcoin adoption programme in 2022 (tax payments, shops, events). The annual Plan B Forum has become a European fixture.See in the lexicon →. Lightning obviously. Recommended wallet: Phoenix or Muun. Payment delay: 2 seconds. Fees: 0.001 EUR. Refusing Lightning coffee to insist on on-chain would be absurd, the merchant would wait 30 min and lose margin to fees.
• 800 EUR refurbished laptop on a P2P×P2P (peer-to-peer)Direct exchange between two people, with no centralised platform in between. Bisq, HodlHodl and AgoraDesk are P2P platforms.See in the lexicon → marketplace. Lightning or on-chain. Lightning if the seller has a wallet with channel capacity > 800 EUR (rare in 2026, average ~500 EUR). On-chain more likely, with 30 min wait and 0.50 to 2 EUR fees. The seller may require 3 confirmations before shipping.
• 25,000 EUR deposit on Kraken to seize a trading opportunity. On-chain required (Lightning impossible at that amount). Pick "next block" fee to confirm within 10 minutes. Kraken credits after its 3 internal confirmations, about 30 min after sending. To be planned outside mempool×MempoolWaiting area where Bitcoin transactions sit before being included in a block. The fuller the mempool, the higher the fees required.See in the lexicon → saturation periods to limit fees.
• 50 EUR donation to an open-source project whose address is in a Twitter bio. If the project exposes a Lightning Address×Lightning AddressEmail-style address (alice@strike.me) that lets you receive Lightning payments without generating an invoice each time.See in the lexicon → (₿project@domain.com), Lightning and done in 2 seconds for 0.001 EUR. If only an on-chain bc1q... address, on-chain at 1 EUR fees. The project has every interest in exposing a Lightning Address to not lose small donations.

Practical note: the on-chain/Lightning hybrid via "submarine swap×Submarine swapAtomic exchange between on-chain funds and Lightning funds (and back), trustless, via a provider like Boltz or Lightning Loop. Used to refill or drain channels.See in the lexicon →" (used by Phoenix and Muun) elegantly solves the send-side dilemma. When you receive a BOLT11×BOLT11Standard format for a Lightning invoice, as a character string or QR code. An invoice is single-use, with an amount and an expiry date.See in the lexicon → in Phoenix but your Lightning balance is insufficient, Phoenix can perform an on-chain transaction in the background that funds a Lightning channel×Lightning channel2-of-2 multisig between two participants that lets them exchange sats off-chain as many times as they like, until they close the channel and publish the final balance on Bitcoin.See in the lexicon → before paying. You only see "payment successful", without worrying about the mechanics. Inversely, you can pay an on-chain bc1q... address from your Lightning balance: Phoenix automatically swaps Lightning to on-chain through a partner. Handy but with a few thousand sats overhead for the liquidity.

Paying at a physical merchant

In 2026, paying in Bitcoin at a physical merchant has become a mundane experience in some zones and nonexistent in others. Geography matters as much as technique.

The central resource is BTC Map (btcmap.org), a collaborative open-source map listing merchants accepting Bitcoin. In H1 2026, ~85,000 places listed worldwide, including ~12,000 in DACH/French-speaking Switzerland, ~3,500 in France, ~28,000 in Latin America, ~6,500 in Africa. Data verified by users themselves, like OpenStreetMap. Near real-time updates.

Five notable density zones to know:

• Lugano×Lugano (Plan ₿)Swiss city that launched a Bitcoin adoption programme in 2022 (tax payments, shops, events). The annual Plan B Forum has become a European fixture.See in the lexicon → (Ticino, Switzerland): city "Plan ₿" project since 2022. ~400 active merchants in 2026, from cafés to mechanics to supermarkets. Restaurants, taxis, private schools, some municipal services. Lightning near exclusive.
• El Salvador×El SalvadorFirst country to adopt Bitcoin as legal tender, in September 2021 under Nayib Bukele. Its status was amended in 2025 under IMF pressure.See in the lexicon → and notably El Zonte: Bitcoin is legal tender since 2021. ~2,500 active merchants in 2026. Massive usage via Chivo Wallet×WalletSoftware or device that manages your Bitcoin keys and lets you sign transactions. A wallet does not really « hold » your bitcoins, it holds the keys that prove you own them.See in the lexicon → (national) or Blink (orange-pill). Lightning only in practice.
• Some Swiss cantons (Central Valais, St Gallen, Zug): ~800 merchants. Coexistence of Lightning and Bitrefill gift cards. Many Bitcoin tourists in summer.
• New York Bedford-Stuyvesant / Brooklyn: ~600 merchants, very active African-American Bitcoin community. Local conferences, normalised daily payments.
• Argentina and Buenos Aires: Bitcoin as reserve money against peso. Massive P2P×P2P (peer-to-peer)Direct exchange between two people, with no centralised platform in between. Bisq, HodlHodl and AgoraDesk are P2P platforms.See in the lexicon → use, ~4,000 merchants accepting directly (often Lightning via Strike or Belo).

Typical merchant payment workflow in 7 steps:

1. Pick "Bitcoin" or "Lightning" on the cashier / POS screen.
2. The merchant enters the amount in local currency (EUR, USD, CHF), the system converts to BTC or sats at the instant rate.
3. A QR appears (BOLT11×BOLT11Standard format for a Lightning invoice, as a character string or QR code. An invoice is single-use, with an amount and an expiry date.See in the lexicon → if Lightning, BIP21 if on-chain).
4. You open your wallet, tap "scan", aim at the QR.
5. The wallet shows the expected amount, you verify×Don't trust, verifyBitcoiner mantra. Trust no one (bank, government, exchange, influencer), verify on your own through your own node.See in the lexicon → it (compare cashier display and wallet).
6. You confirm. The wallet broadcasts the transaction. Delay 1 to 5 seconds (Lightning) or 10 to 60 min (on-chain).
7. The merchant hears a confirmation sound on the cashier, or sees the screen switch to "paid". You show your confirmation screen as proof. Have a good day.

Three points of attention. Always verify the amount displayed by the wallet before confirming (conversion or merchant-entry errors are possible). Have good network coverage so the wallet can broadcast the transaction (in restaurant basements, sometimes tricky). Keep a backup of local currency in case of technical failure (merchant BTCPay system down, insufficient Lightning channel×Lightning channel2-of-2 multisig between two participants that lets them exchange sats off-chain as many times as they like, until they close the channel and publish the final balance on Bitcoin.See in the lexicon → capacity).

Paying online: BTCPay vs processor

On an e-commerce site or online shop, the payer experience is almost identical whatever system the merchant chose: at checkout end, a Bitcoin QR appears, you scan it, you pay. But behind, two families of solutions coexist and one is markedly better for the sovereignty of the whole ecosystem.

• BTCPay Server (self-hosted). Open-source software the merchant installs on their own server or Bitcoin node×NodeComputer that runs the Bitcoin software and takes part in the network by validating blocks and transactions. A « full node » keeps a complete copy of the blockchain.See in the lexicon → (cf. node article). It generates invoices itself, with no intermediary. Bitcoins arrive directly in the merchant's wallet×WalletSoftware or device that manages your Bitcoin keys and lets you sign transactions. A wallet does not really « hold » your bitcoins, it holds the keys that prove you own them.See in the lexicon →. Advantages: no KYC×KYC (Know Your Customer)Mandatory identification procedure that regulated platforms apply to their users : ID document, proof of address, and so on.See in the lexicon →, no fees to a third party, no possible censorship, the merchant keeps sovereignty. Drawback: installation and maintenance demand minimum tech (~2 h initial install, ~30 min/month maintenance via a script like Umbrel×UmbrelEquivalent distribution for mini-PCs or Raspberry Pi, with a polished web interface and an app store (BTCPay, mempool.space, Sparrow Server, and so on).See in the lexicon → or Start9×Start9 (StartOS)Umbrel alternative focused on sovereignty and privacy. More technically demanding, more rigorous on privacy.See in the lexicon →).
• Centralised processors (Strike, OpenNode, Coinbase Commerce, IBEX, NowPayments). SaaS offering plug-and-play integration: the merchant adds a few lines of code to their site, the processor handles everything (invoice generation, bitcoin reception, automatic fiat×Fiat (fiat currency)State currency with legal tender status (euro, Swiss franc, dollar), issued by a central bank and not backed by a physical asset. By contrast, Bitcoin has an issuance capped at 21 million units, with no central issuer.See in the lexicon → conversion to EUR/USD if requested, reporting). Advantages: zero tech, automatic fiat conversion, customer support. Drawbacks: merchant KYC, fees 0.5 % to 1 %, dependence on a platform that may default or be seized. And some (Coinbase Commerce) have dropped native Bitcoin support in favour of tokens, to check case by case.

For the payer, the difference shows in one place: the invoice destination address.

• With BTCPay, the address is the merchant's own wallet. Put the address into mempool.space and you will see their other past receipts. Average privacy for the merchant, excellent sovereignty.
• With a processor, the address belongs to the processor. The merchant only gets the bitcoins (or the fiat conversion) after processor handling. If the processor is seized by a regulator, in-transit funds can be blocked (happened to BitPay in 2020 on a few transactions).

The payer does not really have a choice: takes what the merchant offers. But as a payer sensitive to decentralisation, you can prefer merchants who display "powered by BTCPay". It is a visible marker on more and more Bitcoin e-commerce sites in 2026 (Bitrefill, some hardware wallet×Hardware walletSmall dedicated device (Ledger, Trezor, Coldcard, BitBox, etc.) that keeps the private key away from a potentially compromised computer. Signs transactions inside the device itself.See in the lexicon → resellers, Bitcoin-only marketplaces). For the merchant, it is also a signal of seriousness and sovereignty that attracts informed Bitcoin clientele.

Special case: P2P×P2P (peer-to-peer)Direct exchange between two people, with no centralised platform in between. Bisq, HodlHodl and AgoraDesk are P2P platforms.See in the lexicon → marketplaces (Robosats, Hodl×HODLHolding bitcoins without selling, despite the volatility. The word comes from a typo, « I AM HODLING », posted on a forum in 2013 that turned into a joke and then a mantra.See in the lexicon → Hodl, Bisq×Bisq, HodlHodl, AgoraDeskNo-KYC P2P platforms where you buy bitcoin directly from another individual via multisig escrow.See in the lexicon →) are not Bitcoin payments in the commercial sense, but Bitcoin exchanges against EUR/USD/CHF between individuals. The "Bitcoin payment" is released from a 2-of-3 multisig×Multisig (multi-signature)Configuration where a transaction must be signed by several independent keys to be valid (for example 2 of 3). Reduces the risk that a single key theft causes loss of funds.See in the lexicon → escrow after confirmation of the fiat send by the seller. More complex workflow, to be treated in a dedicated P2P-buying article. For today, we are really talking about paying a merchant, not buying Bitcoin.

Paying in a hostile zone: inflation and currency controls

For most European readers, paying in Bitcoin remains a demo or a comfort. For hundreds of millions of people worldwide, it has become practical necessity: Argentina (inflation ~80 % yearly in 2024-2025), Turkey (~60 %), Venezuela, Lebanon, Nigeria, Zimbabwe. In those zones, Bitcoin (and especially Lightning) acts as daily backup money against a local currency that melts.

The typical scenario in Argentina: Maria gets her salary in pesos. Same day, she converts 70 % to USDT (dollar stablecoin×StablecoinCrypto pegged to a fiat currency (USDT, USDC, EURI) or to a basket of assets, designed to stay stable around 1 USD or 1 EUR.See in the lexicon →) via Belo or Lemon. Next month, she pays groceries in supermarkets accepting Lightning (via a POS that converts Lightning → USDT on the merchant side). Her parents in France send her 200 EUR via Lightning: 2 seconds, 0.01 EUR fees. She spends those 200 EUR in pesos via an automatic Lightning → ARS swap on a local service. Without Bitcoin, those transfers would take 3 days via Western Union at 15 % fees.

Four key points for the payer in hostile zone.

• Non-custodial×Non-custodialCommon synonym for self-custody in marketing communications.See in the lexicon → wallet×WalletSoftware or device that manages your Bitcoin keys and lets you sign transactions. A wallet does not really « hold » your bitcoins, it holds the keys that prove you own them.See in the lexicon → mandatory. In case of device seizure or account block by a centralised exchange×ExchangeService that lets you buy, sell and swap cryptocurrencies against fiat money. Examples : Kraken, Coinbase, Bitstamp, Bitvavo. Most are custodial.See in the lexicon →, you lose your bitcoins. Phoenix, Muun, Aqua, Blink are self-hosted and resist. Strike, Cash App, Wallet of Satoshi×Satoshi (sat)The smallest unit of bitcoin. 1 BTC = 100 million satoshis. Named after the creator. In 2026, talking in sats becomes common as the price of one BTC rises.See in the lexicon → are custodial×CustodialModel in which a third party (exchange, broker, neobank) holds your private keys for you. You have a claim, not a bitcoin. « Not your keys, not your coins ».See in the lexicon → and vulnerable.
• Seed phrase×Seed phraseSequence of 12 or 24 words (usually in English) that encodes your master key. Universal wallet backup : with these words, you can restore your funds on any compatible software.See in the lexicon → backup outside the country. If you may have to flee, your 12 or 24 seed words are your monetary passport. Word memorisation (BIP39×BIP39Standard defining the list of 2,048 words used for seed phrases. Lets every wallet brand generate seeds that are compatible with each other.See in the lexicon → techniques), backup at a relative abroad, or multisig×Multisig (multi-signature)Configuration where a transaction must be signed by several independent keys to be valid (for example 2 of 3). Reduces the risk that a single key theft causes loss of funds.See in the lexicon → backup with a key off-territory. Details in the seed phrase article.
• Privacy via Lightning and coinjoins. Hostile zones often surveil financial flows. Lightning leaves no public on-chain trace, it is intrinsically private. For large on-chain amounts, tools like Whirlpool or Joinmarket (coinjoins) anonymise UTXOs. To use with caution per local legal framework.
• Lightning to local currency closed-loop swap. Services like Bull Bitcoin (El Salvador×El SalvadorFirst country to adopt Bitcoin as legal tender, in September 2021 under Nayib Bukele. Its status was amended in 2025 under IMF pressure.See in the lexicon →), Lemon (Argentina), Bipa (Brazil), Strike (USA/Argentina), Stitch (Africa), Yellow Card (Africa) let you enter/exit Lightning ↔ local currency in seconds via local bank wire. Fees 0.5 % to 2 % above market. Without these bridges, Bitcoin remains an abstract digital asset.

Extreme case: targeted humanitarian aid. Several NGOs (Bitcoin Beach×Bitcoin BeachNickname for El Zonte in El Salvador, the first 100 percent Bitcoin monetary community (2019). Inspired the 2021 Bitcoin law.See in the lexicon → in El Salvador, Built With Bitcoin Foundation in Africa, Ukraine via Kuna in 2022) directly paid Lightning to isolated populations, bypassing slow or corrupt banking systems. The payer (European donor) sends Lightning, the recipient (family in Lubumbashi, disaster victim) receives in 2 seconds and can convert to local currency via Yellow Card within 5 min. No intermediary, end-to-end traceability for the NGO if it wants to audit.

Payer-side risks and fit wallets

Paying in Bitcoin is technically simple, but five classic traps exist. Knowing them lets you avoid them without falling into paranoia that would make the gesture impossible.

• Wrong on-chain address via copy-paste. "Clipboard hijack" is a mobile/desktop malware detecting a Bitcoin address×Bitcoin addressString of characters that identifies a destination for receiving bitcoins. Four main formats, starting with 1..., 3..., bc1q... or bc1p... (Taproot, the recommended format in 2026).See in the lexicon → in the clipboard and replacing it with the attacker's. You copy bc1q...abc, paste, your wallet×WalletSoftware or device that manages your Bitcoin keys and lets you sign transactions. A wallet does not really « hold » your bitcoins, it holds the keys that prove you own them.See in the lexicon → shows bc1q...xyz, you do not check, you send. Money lost. Defence: always verify×Don't trust, verifyBitcoiner mantra. Trust no one (bank, government, exchange, influencer), verify on your own through your own node.See in the lexicon → the first AND last characters of the pasted address. Ideal: use a QR code×QR codeTwo-dimensional barcode, ubiquitous in Bitcoin: addresses, Lightning invoices, payment URIs. Always check the decoded amount and address before confirming.See in the lexicon → rather than copy-paste.
• Fake physical QR code. In a parking lot or coffee shop, someone sticks their QR sticker over the merchant's legitimate one. You scan, you pay, the money goes to the attacker. Rare in 2026 but documented. Defence: check the QR really comes from a cashier screen (not an isolated sticker), and that the amount shown by your wallet matches the bill.
• Misinterpreted BTC vs sats vs EUR amount. 0.001 BTC = 100,000 sats = ~50 EUR at 2026 rate. A beginner might send 0.1 BTC (~5,000 EUR) thinking they sent 100 sats. Fatal and irreversible mistake. Defence: always look at the local currency equivalent displayed by the wallet before confirming. An amount that shocks must trigger cancellation.
• Mis-estimated on-chain fees during rush. During an Ordinals×Ordinals (inscriptions)Protocol (2023) that numbers each satoshi and allows inscribing data (images, text) directly on-chain via Tapscript. At the origin of the debate on block space usage.See in the lexicon → rush, fees can reach 500 sat/vbyte. A simple transaction then costs ~20 EUR. If you leave the wallet on default "next block", you pay those 20 EUR without realising. Defence: check the fees shown in EUR equivalent before each on-chain send, manually adjust if delay non-urgent (cf. fees article).
• Custodial×CustodialModel in which a third party (exchange, broker, neobank) holds your private keys for you. You have a claim, not a bitcoin. « Not your keys, not your coins ».See in the lexicon → wallet that crashes or blocks. Wallet of Satoshi×Satoshi (sat)The smallest unit of bitcoin. 1 BTC = 100 million satoshis. Named after the creator. In 2026, talking in sats becomes common as the price of one BTC rises.See in the lexicon →, Strike, Cash App hold your keys. If the service falls (Wallet of Satoshi closed its US service in 2024 for KYC×KYC (Know Your Customer)Mandatory identification procedure that regulated platforms apply to their users : ID document, proof of address, and so on.See in the lexicon → reasons), your funds remain inaccessible for weeks. Defence: never keep more than you accept to lose on a custodial wallet, switch to non-custodial×Non-custodialCommon synonym for self-custody in marketing communications.See in the lexicon → for the bulk.

On the side of wallets fit for the daily payer in 2026, four dominant profiles without redoing the full inventory (cf. dedicated mobile wallet and Lightning wallet articles):

Simple rule: Phoenix or Muun for daily, Sparrow for occasional large on-chain moves. BlueWallet if you like managing several separate wallets (one per context: family, travel, business). Avoid custodial wallets except for very limited use (Wallet of Satoshi for ephemeral micro-payments under 50 EUR at a time, without accumulation).