So, a company I used to do contract work for that paid in crypto sent me an extra full months payment despite me not having sent an invoice or the like. If I can, I would keep it, but I am trying to figure my move here. For all I am concerned, its a donation to me by an anonymous crypto wallet.

They are headquartered in southeast asia, I am in Canada, I am sure they'll be bankrupt in about a year. I don't want to be sued or threatened with a suit if and when they realize their mistake.

My strategy so far is make no moves on the wallet and if contacted, just act surprised and then be like 'oh god I lost my wallet password I am so sorry, I cannot do anything for you here.' However, I would appreciate some extra tips here.