"Hello, this is official support. Our system has flagged unusual activity on your wallet. To protect your assets, please complete wallet verification within 30 minutes or your account will be frozen."
What's your first reaction? For most people, it's a jolt of panic, followed by doing exactly what the message says. By the time they realize what happened, the wallet is empty.
You might think only beginners fall for this. In reality, plenty of experienced crypto holders have lost serious money to fake support agents. Scammers aren't attacking your technical knowledge. They're attacking your judgment in a moment of panic.
Key takeaways
- No legitimate exchange, wallet or project will ever ask for your seed phrase, for any reason.
- Fake support usually reaches you through DMs, search ads, cloned websites, phone calls and texts.
- "Verify your wallet," "sync your wallet" and "unfreeze your account" are classic scam scripts.
- Urgency is the scammer's main weapon. The more rushed you feel, the more you should slow down.
- If your seed phrase is exposed, move your funds to a brand-new wallet immediately.
How fake support finds you
Fake support agents rarely appear out of nowhere. They wait wherever you're most likely to need help:
| Entry point | Typical situation | What they say |
|---|---|---|
| Group DMs | You asked a question in Telegram or Discord | "I'm from the official support team, DM me and I'll fix it" |
| Search ads | You searched "[wallet] support" or "withdrawal stuck" | A top-ranked "official help center" link |
| Cloned websites | You clicked an unfamiliar link | A "live chat" pop-up in the corner |
| Phone calls and texts | Your personal data was leaked somewhere | "Your account has suspicious activity; we need to verify it" |
| Social media | You complained about a platform on X | A reply from an account with a nearly identical name and logo |
Asking for help in a public group is especially risky, because your question reveals your situation: "I can't withdraw," "my wallet shows an error." Within minutes, several "support agents" may slide into your DMs.
How "seed phrase verification" steals your crypto
Fake support scams come in many flavors, but they all want the same thing: your seed phrase or private key, or your signature on a malicious approval.
Trick 1: the "verification form." They send a link to a slick page titled "Wallet Security Verification," "Asset Sync" or "Remove Account Restriction," asking you to enter your 12 or 24 words in order. The moment you click "Submit," your seed phrase lands on the scammer's server.
Trick 2: "remote assistance" via screen sharing. They ask you to install screen-sharing software so they can "troubleshoot." Then they guide you to your wallet's "show recovery phrase" screen, or simply watch you type your password.
Trick 3: scan to "verify your identity." They ask you to scan a QR code with your wallet to "authenticate." It's actually an approval or transfer request, and signing it hands over your funds.
Trick 4: freeze threats and a "safe account." They claim your account is under investigation for money laundering and you must move your funds to a "secure account" for review, to be returned afterward. That secure account is the scammer's wallet.
Why experienced holders fall for it
Fake support works so well because it exploits psychological weak spots everyone has:
- Urgency: "Act within 30 minutes or lose access" leaves no time to think.
- Authority: professional language, ticket numbers and official-looking profile pictures trigger automatic trust.
- Fear: worry about frozen or stolen funds makes you more willing to accept a "rescue."
- Leaked data: when scammers know your name, email or even your holdings, it feels like they must be legitimate.
Real-world events show how effective this can be. In 2020, hardware wallet maker Ledger suffered a customer data breach that exposed the names, phone numbers and home addresses of roughly 270,000 customers. Many of them went on to receive phishing emails and texts impersonating Ledger, and some even received physical letters and tampered devices in the mail asking them to enter their seed phrase to "upgrade security."
Real support vs. fake support
| Real support | Fake support | |
|---|---|---|
| Who starts the conversation | You, through the official website or app | They message or call you first |
| Asks for your seed phrase | Never | Always finds a reason |
| Asks you to transfer funds | Never to a "safe account" | Wants funds moved for "review" or "unfreezing" |
| Pace | Normal handling, no countdowns | Manufactured urgency |
| Links and software | Only official websites and apps | Unfamiliar links and remote-access apps |
Remember this: if you didn't contact support, but "support" contacted you, assume it's a scam.
If you've already shared your seed phrase
- Move your funds now. Create a brand-new wallet with a new seed phrase (don't import the old one) and transfer everything that's left. Speed matters; the scammer could act at any moment.
- Revoke approvals. If you signed anything suspicious, revoke it with your block explorer's approval checker or Revoke.cash.
- Clean your device. Uninstall any remote-access or screen-sharing apps and run a security scan.
- Save evidence and report it. Keep chat logs, links, wallet addresses and transaction hashes. In the US, file reports at ic3.gov and ReportFraud.ftc.gov; elsewhere, contact your local police.
- Watch for recovery scams. Soon after a loss, someone will offer to "get your money back." It's almost always a second scam.
FAQ
Will real support really never DM me first?
Nearly every legitimate platform states clearly that staff will never DM you first and never ask for your seed phrase, private key or password. If "support" reaches out to you, verify through the official website or in-app help instead.
I typed my seed phrase into a website but didn't send anything. Am I at risk?
Yes. Once you enter your seed phrase on a website, it may already be recorded. With it, a scammer can restore your wallet on any device and drain it whenever they like. Follow the steps above right away.
They knew my name and transaction history. Doesn't that prove they're legitimate?
No. Personal details often come from data breaches, and on-chain transactions are public. Knowing things about you proves nothing about who they are.
Does a hardware wallet protect me from fake support?
A hardware wallet keeps your private key safe from online theft. But if you hand your seed phrase to a scammer yourself, it can't help. A hardware wallet protects the key inside the device, not a seed phrase you give away.
Summary
Fake support can drain even experienced holders, not through clever hacking but by exploiting urgency, authority and fear. Spotting it comes down to one rule: anyone who asks for your seed phrase, for any reason, is a scammer.
When you need help, go through the official website or app only. Don't click unfamiliar links, don't install remote-access software and never share your seed phrase. For more common scams, read our scam prevention guide. This article is for education only and isn't investment advice.
Covers security and beginner guides: wallet safety, key management, phishing and approval risks, helping readers avoid the most common ways to lose funds.
Our editorial principles →
David Mitchell
Sarah Collins