Scammers rarely break into wallets. They persuade you to open the door. This guide is part of our section on crypto threats and scams.
The scams you are most likely to meet
| Scam | How it looks | What really happens |
|---|---|---|
| Fake support | A helpful agent on Telegram, Discord or X | They ask for your words |
| Fake wallet app | A copy in an app store or ad | It sends your phrase to the attacker |
| Search ad | A fake site above the real one | Phishing page |
| Airdrop | "Claim free tokens" | It takes your words or wallet approval |
| Fake update | "Critical firmware update" | Fake app asks for your phrase. See firmware |
| Validation | "Validate your wallet" or "sync your wallet" | Form with boxes for your words |
| Physical letter | A printed notice about a security issue | QR code leads to a fake site |
| Gifted device | A free hardware wallet | Pre-generated phrase |
| Recovery service | "We can get your funds back" | Second scam |
| Investment group | A friendly mentor who suggests a new app | Fake wallet or fake exchange |
How these scams feel
They all use the same tools:
- Urgency. "Your wallet will be locked in 24 hours."
- Authority. Logos, staff titles and verified-looking badges.
- Helpfulness. They reply seconds after you ask a question in public.
- Reward. Free tokens, or a chance to recover lost funds.
- Fear. "Your funds have been compromised."
Since AI tools are cheap, fake sites, fake videos and fake voices are all improving.
One rule stops most of them
Your words go in one place only: your own wallet, on a device you trust, during a restore you started yourself. Nobody legitimate will ever ask.
Build safe habits
- Bookmark your wallet maker's site, and use only that link.
- Install apps from the official site's link.
- Do not ask for wallet help in public. Scammers are watching.
- Treat every direct message as a scam.
- Use a separate wallet with a small balance for trying new things.
- Check your hardware wallet's screen every time.
If you have fallen for one
Go straight to what to do in the next hour. Minutes matter. Report it to your country's fraud agency, such as the FBI's IC3 in the US.