Seed Phrase Phishing Scam

This scam tricks you into entering or sharing your crypto wallet's seed phrase or recovery words, through fake support, 'wallet validation', or migration prompts, giving the scammer full control of your funds.

Quick verdict

Risk level
High risk
Scam type
Credential phishing (wallet seed phrase)
Main red flag
Anyone or any page asking for your wallet seed phrase or recovery words.
What to do first
Never share or enter your seed phrase anywhere. No genuine service needs it.

How this scam works

This scam tricks you into entering or sharing your crypto wallet's seed phrase or recovery words, through fake support, 'wallet validation', or migration prompts, giving the scammer full control of your funds.

Crypto and investment scams promise high or guaranteed returns with little risk, usually through fake platforms that display staged gains. Small test withdrawals build trust before you are pushed to invest more, then blocked from withdrawing behind endless "fees" and "taxes".

In short, the giveaway is usually simple: Anyone or any page asking for your wallet seed phrase or recovery words. Never share or enter your seed phrase anywhere. No genuine service needs it.

Scammers rotate tactics constantly, the same operation may also run the Fake Crypto Wallet Scam and the Crypto Recovery Scam. See the full Crypto & Investment Scams guides hub, or test a suspicious message with the scam checker.

How to spot this scam

  • Any request for your seed phrase or recovery words
  • A fake 'support agent' offering to fix a wallet issue
  • A 'validation', 'migration', or 'sync' prompt asking for your phrase
  • A pop-up or DM after you post about a wallet problem
  • Pressure to act before you 'lose your funds'

What the message looks like

Example pattern, not a real report
Example pattern: 'Wallet support: To resolve your sync error, validate your wallet by entering your 12-word recovery phrase here: [suspicious link]'

This is a fictional, anonymised example used to illustrate the pattern. It is not a verified real message, and any names are used only to show how the scam typically reads.

What gives it away: Anyone or any page asking for your wallet seed phrase or recovery words.

The scale of it

$4.6B
reported lost to investment scams in the US in 2023, the top fraud category by losses
$1B+
in cryptocurrency reported lost to scams between 2021 and mid-2022

How to protect yourself

  • Never type your seed phrase into any website, app, or message
  • Keep your recovery phrase offline and private
  • Get wallet help only from the official wallet provider
  • Ignore and report anyone asking for your phrase

Already responded? Do this now

  • If you entered your seed phrase, move funds to a brand-new wallet immediately if any remain
  • Assume the compromised wallet is no longer safe and stop using it
  • Revoke approvals and secure linked accounts
  • Keep records and report the scam

Mistakes to avoid

  • Do not share your seed phrase with anyone, ever
  • Do not enter your phrase to 'validate' or 'recover' a wallet
  • Do not trust support that appears in your DMs

Related scams to know

Common questions

Should I ever enter my seed phrase online?
No. Your seed phrase controls your entire wallet. No legitimate wallet, exchange, or support service will ever ask you to enter or share it.
A support agent says they need it to fix my wallet. Real?
No. Genuine support never needs your recovery phrase. Anyone asking for it is trying to steal your funds.
I entered my phrase. What now?
If any funds remain, move them to a new wallet immediately, stop using the compromised one, revoke approvals, and report the scam.
How do I store my seed phrase safely?
Keep it offline, never digitally where it can be phished, and never share it. Treat it like the only key to your funds.

Last reviewed June 2026 · Written & reviewed by the

Disclaimer: This page provides educational information only to help you recognise common scam patterns. It is not legal, financial, cybersecurity, or law enforcement advice, and it does not confirm whether any specific message, company, or person is genuine or fraudulent. When in doubt, contact the official organisation directly and report concerns to your local authorities.