I do not know your situation exactly. However, it is usually that user loses coin due to non compliance with security rules.
Downloading strange applications, entering a private key into browser, keeping files with keys on connected device. This should never be done.
