Fake Crypto Wallet Apps and Seed Phrase Theft
Your seed phrase is the master key to your crypto wallet. How fake wallet apps, fake support and 'validation' sites steal it, and how to store it safely.
A crypto wallet's seed phrase, also called a recovery phrase, is a set of words that can rebuild your wallet anywhere. It is more powerful than a password: whoever has it can move everything, and nobody can reverse it.
How seed phrases are stolen
- Fake wallet apps in app stores or from links, which send your phrase to scammers. See fake financial apps.
- Fake support in chat groups or social media: "share your phrase so we can fix your wallet".
- "Wallet validation" sites claiming you must verify your wallet.
- Airdrop and giveaway pages that ask for your phrase to claim tokens. See giveaway scams.
- Malware that searches photos and notes for phrases.
Never type your seed phrase anywhere except when restoring your own wallet in a wallet app you installed from an official source.
Storing it safely
- Write it down on paper and store it somewhere secure and private.
- Avoid photos, screenshots, emails and cloud notes.
- Consider a second copy in another safe place.
- Never share it with anyone, including family members who do not need it.
Related: crypto exchange and wallet phishing. For more, see investment and crypto scams.
Frequently asked questions
What is a seed phrase?
A list of words, usually 12 or 24, that can restore your crypto wallet on any device. Whoever has it controls the funds.
Will a wallet company ever ask for my seed phrase?
No. Genuine wallet providers, exchanges and support staff never need it.
Is it safe to store my seed phrase in a photo or cloud note?
It is risky. Many people prefer writing it down and storing it offline somewhere safe.
Sources
- What To Know About Cryptocurrency and Scams, US Federal Trade Commission
- Malware: How To Protect Against, Detect, and Remove It, US Federal Trade Commission
- Learn & Protect, US Commodity Futures Trading Commission
