Seed phrase scams
A story
Karim, 29, is comfortable with crypto and keeps his assets in a personal wallet. One evening he asks a question on a forum. Minutes later a private message arrives: “Hello, this is the wallet support team. We saw your issue. To fix it, validate your wallet here.”
The site looks credible. It asks for the 12 words of the recovery phrase “to synchronize”. Karim hesitates, then types the words. Forty seconds later, his wallet is empty. The recovery phrase is the master key: whoever has it controls everything.
A fictional story inspired by real cases. Names and details are invented.
How it works
Fake support
After you post a question on a forum, Discord, Telegram or X, a fake “support” account contacts you privately.
Fake site
You're sent to a site that imitates a known wallet or service and asks for your 12- or 24-word recovery phrase to “validate” or “synchronize” the wallet.
Full access
The recovery phrase gives full control of the wallet. Once someone has it, they can move the funds within seconds.
Authorization signature
Variant: a site offers an “airdrop” or bonus and asks you to connect your wallet and sign an authorization that later allows your tokens to be withdrawn.
Lookalike address
Variant: small transactions are sent from an address that looks like one of yours, so you copy it by mistake on a later transfer.
The warning signs
- An unsolicited private message from “support”
- A site asking for your recovery phrase
- An “airdrop”, bonus or reward that asks you to connect your wallet
- A message saying your wallet will be disabled
- A destination address copied from your history without checking it in full
If it happens to you
- Never type your recovery phrase into a site, a form or a chat.
- If you did: move the remaining funds to a new wallet created on a clean device.
- Revoke suspicious authorizations and consider a hardware wallet for larger amounts.
- Check the full destination address before every transfer.
- Report to the Canadian Anti-Fraud Centre and keep the transaction IDs.
Official contacts → · Your platform's help page →
Have you already sent money?
Don't send anything else, even to “unlock” your funds. Here's how to protect what's left and report the fraud.
Start my action plan →