"Passive income" is the most oversold phrase in crypto. Every yield on offer is payment for taking a risk, and the size of the yield is usually a decent indicator of the size of the risk. Understanding where the money actually comes from is the difference between earning a return and funding somebody else's exit.
Here is how each of the main methods works, and what you are actually being paid for.
The question that explains everything
Before any yield opportunity, ask one thing: where does this money come from?
There are only a few honest answers. Someone is paying to borrow. Someone is paying a fee for a service. The protocol is issuing new tokens. Or — the dishonest answer — it is coming from new depositors, which is a Ponzi structure regardless of what it is called.
If you cannot identify the payer in one sentence, you are the payer.
Staking
On proof-of-stake networks like Ethereum, validators lock up tokens as a bond and are paid for securing the network.
Where the money comes from: new token issuance plus transaction fees. This is a genuine, identifiable source.
What you are paid for: performing a job and accepting the risk of losing part of your stake if you fail at it. Dishonest or faulty validation triggers slashing, which destroys a portion of the bond.
The risks: slashing, lock-up periods during which you cannot exit, and — the one people forget — the price of the asset itself. A 5% yield on something that falls 40% is a 37% loss. Yields are denominated in the token, not in your currency.
Running a validator on Ethereum independently requires 32 ETH and real operational responsibility including uptime. Pooled and liquid staking lower that barrier, at the cost of adding smart contract risk and dependence on an operator.
Lending
You deposit assets, borrowers pay interest, you receive most of it.
Where the money comes from: borrowers. Usually traders borrowing against collateral to take leveraged positions. This is a real source, and it explains why lending yields rise in speculative periods and collapse in quiet ones.
The critical distinction: centralised lenders versus decentralised protocols.
With a centralised platform, you hand over your assets and receive a promise. That promise is only as good as the company's solvency and its lending standards, and the history here is genuinely bad — several large platforms failed and depositors became unsecured creditors.
With a decentralised protocol, loans are overcollateralised and liquidated automatically. You keep custody through the contract rather than trusting a company. The risk shifts from counterparty to code: a bug in the contract can lose everything.
A live example of the risk: in September 2026, a proposal at Aave would raise Bitcoin borrowing limits while narrowing the maximum-leverage price cushion from 6.4% to 4.7%. That means a smaller price move triggers liquidations at the aggressive end of the range. Lending markets change their parameters, and those changes affect the safety of your deposit.
Liquidity provision
You deposit two assets into a pool that traders swap against, and earn a share of trading fees.
Where the money comes from: traders paying fees. Real, and the higher the trading volume, the higher the return.
The risk nobody explains properly — impermanent loss. When the two assets' prices diverge, the pool automatically rebalances, leaving you with more of the falling asset and less of the rising one. The result can be worth less than simply holding both assets separately.
"Impermanent" is a misleading name. The loss only reverses if prices return to their original ratio. If they never do, it is entirely permanent, and it is frequently larger than the fees earned.
The honest version: liquidity provision is a bet that fee income exceeds divergence loss. Sometimes it does. It is a trade, not a savings account.
Yield farming and token incentives
Protocols pay extra rewards in their own token to attract deposits.
Where the money comes from: new token issuance. The protocol is printing.
This is where the headline percentages get extraordinary, and where the arithmetic matters most. A 200% yield paid in a token that loses 80% of its value is not a 200% return. The high number attracts deposits, deposits require more issuance, issuance dilutes the token, and the token falls. That cycle is the mechanism, not an accident.
Some incentive programmes are legitimate marketing spend for a real product. Many are a transfer from late depositors to early ones. Distinguishing them requires asking whether the protocol would have users if the rewards stopped tomorrow.
Things that are not passive income
Anything guaranteeing a fixed high return. No legitimate product guarantees returns. Not a risky investment — a lie.
Anything paying for recruitment. Referral-based returns are the defining feature of a pyramid structure.
Anything you cannot explain the source of. Covered above, and worth repeating because it filters out most of what will be pitched to you.
Trading bots promising consistent profits. If an automated strategy reliably produced returns, renting it out for a subscription would be a strange business decision compared with simply running it.
The risks that apply to all of it
Smart contract risk. Any protocol holding your funds can be exploited. September 2026 alone saw a $351.6 million exchange breach and a $292 million bridge exploit that is now the subject of litigation. Audits reduce this risk; they do not eliminate it.
Denomination risk. Yields are paid in tokens. A good yield on a falling asset is still a loss.
Liquidity risk. Lock-ups, unbonding periods and withdrawal queues all mean the exit may not be available when you want it.
Tax complexity. This one is consistently underestimated. In the US, staking rewards are generally income on receipt and their treatment has been contested; disposals are separately reportable. In the UK, HMRC generally treats rewards as income and disposals as capital gains. In the EU, treatment is national. In India, gains are taxed at 30% with 1% TDS on transfers. Frequent yield-bearing activity can generate a very large number of taxable events, and platforms rarely produce records adequate for your jurisdiction.
A sensible way to think about it
Rank by how clearly you can identify the source of the money. Staking rewards come from issuance and fees — clear. Lending interest comes from borrowers — clear. Trading fees come from traders — clear. Token incentives come from printing — clear, and the implication is unflattering. Anything you cannot trace — walk away.
Then size the position by what you can afford to lose entirely, not by the yield on offer. The single most reliable pattern in this industry is that the highest advertised yields have the shortest lifespans.
This article is educational and is not investment advice. Yield-generating crypto activities carry substantial risk including total loss. Do your own research and speak to a regulated adviser in your jurisdiction.