Helping somebody else

This is more common than anyone admits and it goes wrong in a specific way, which is that the helper ends up holding all the risk.

Where the exposure lands

When you set something up for another person, the account is theirs and the trail is yours. Your machine did the setup. Your network carried it. Your wallet probably funded it, at least the first time. If anything is ever reconstructed, it is reconstructed around you, and the person you were helping appears nowhere in it.

People do not plan this. It happens because helping is easier than teaching, and each individual shortcut is reasonable on its own. Doing it once on your machine is faster than talking somebody through the setup. Funding it from your wallet once is faster than explaining acquisition. Then it is a habit.

What never to hold

• Their credentials. If you can log in as them, you are responsible for everything done from that account, including what they do.
• Their key material. Holding it means you can sign as them, which destroys the only thing a key is for.
• Their funds. A balance you control for somebody else is your balance as far as anyone reconstructing it is concerned.
• Their orders. Placing an order for somebody is the most direct version of taking their exposure onto yourself.

Teaching it instead

Slower and it is the only version that ends with the risk in the right place. The trick is to make them do every step while you watch rather than doing it while they watch.

1. They install the client on their machine, and they check the installer signature. If they will not do this part, nothing after it is worth doing.
2. They pin the fingerprint. Do not hand them yours, because a fingerprint accepted from a person is a fingerprint accepted on trust, which is the habit you are trying to prevent.
3. They copy the address and they run the verification. Watch, correct, do not touch the keyboard.
4. They set the password and save the recovery material. You should never see either.
5. They fund it themselves. This is the step most often shortcut and the one that matters most for where the trail leads.

If they will not learn it

Then the honest answer is not to help, and this is the part people find difficult. Somebody unwilling to spend an hour on setup is somebody who will skip verification later, when it is inconvenient, and the consequences of that will land on whoever helped them.

That is not a moral position, it is a practical one. You cannot supply somebody else with judgement. You can only supply the mechanics, and the mechanics without the judgement is the combination that produces the worst outcomes.

If you are helping somebody who has already been caught by something, that path is the more useful starting point, and it should be them reading it.