Crypto Wallet Support Scams: How to Spot the Fake Help Desk

What is a crypto wallet support scam?

It's impersonation aimed at people who already have a problem. Your swap failed, your balance shows zero, your app won't open. You go looking for help, and the scammer is waiting where you look: in the replies to your post on X, in your Telegram and Discord DMs, in the sponsored results at the top of Google, or behind a "support line" that no real wallet company published.

Self-custody wallets are the favorite target, because the recovery phrase is the whole wallet. Whoever types those words into any wallet app on any device controls the funds. There's no password reset and no chargeback. So the impostors don't ask for money first. They ask for the words.

Impersonation is the fastest-growing crypto scam there is. Chainalysis, the blockchain research firm, said in its 2026 Crypto Crime Report (January 2026) that impersonation scams grew more than 1,400% in 2025 compared with 2024, and the average payment to these scams rose more than 600%. It traced at least $14 billion sent to scams on-chain in 2025 and expects that total to pass $17 billion as more scam wallets are identified.

The FBI tracks the phone side. Its 2025 Internet Crime Report put losses to tech and customer support scams at $2.1 billion, the third-costliest category of the year. The FTC counted $3.5 billion lost to impostor scams of all kinds in 2025, in data released in June 2026.

How fake wallet support finds you

Researchers at Germany's CISPA Helmholtz Center measured how fast it happens. In their paper "Conning the Crypto Conman", published in 2024, a pilot found scam accounts typically replied to a fake "help" post within 10 to 15 minutes. They then posted 25,000 fake wallet-help tweets and drew in more than 9,000 scammers. The pattern they found: contact starts on X, then moves to email, Instagram or Telegram, and ends with either a request for your secret phrase or a request to send crypto.

The five versions you'll actually meet

1. The reply bot. You post "MetaMask help" or "Trust Wallet not showing my tokens," and accounts with wallet logos and names like "Support Desk" reply with a link or "DM us." BleepingComputer documented this in 2021: the links led to Google Docs and forms.app pages styled as support tickets that asked for your name, your email, your problem, and then your 12 recovery words.

2. The DM from a "moderator." In Discord servers and Telegram groups, someone with an admin-looking name messages you privately right after you ask a question in public. The private message is the tell.

3. The sponsored search result. You search for your wallet's help center and click the top result. The FBI warned in a December 2022 public service announcement that criminals buy search ads that look almost identical to real results and lead to copies of real sites, including crypto platforms, built to collect logins. Some copies push you to "import" your existing wallet, which means typing your phrase into their page.

4. The fake support phone number. The FBI's IC3 tech support page says numbers in "sponsored" search results are often boosted by paid advertising, and it has described fake virtual currency support lines where the "agent" asks for access to your wallet and moves the funds to one the criminal controls. Many self-custody wallets don't offer phone support at all, which makes any number you find a red flag in itself.

5. The "validate your wallet" form. An email, pop-up or DM says your wallet must be validated, synced, rectified, upgraded or verified for new regulations, or it will be locked. The FTC flagged exactly this in a May 2023 alert about fake emails using MetaMask's name, which claimed the wallet was blocked and urged people to click a link. There is no such thing as validating a self-custody wallet with your recovery phrase. The words don't expire and nothing needs syncing.

Real wallet support vs fake wallet support

Judge the request, not the logo. Anyone can copy a logo, a username or an email signature. What they can't fake is what real support is allowed to ask for.

How to check if wallet support is real: exact words to use

You need a few lines real support can answer and fake support can't.

1. Type the address yourself. Close the link. Open the wallet app you already have, or type the company's web address from memory, and find its Help or Support link from there. The FBI's August 2024 warning on crypto platform impostors says the same: hang up and use contact details you find yourself.
2. Reply with this: "I'll open a ticket through the app myself. Send me nothing else." Real support says fine. Fake support pushes, gets friendlier, or suddenly finds your problem urgent.
3. Ask this: "Will this process need my recovery phrase at any point?" If the answer is anything other than a flat no, you're done talking.
4. Search with the word "scam" after the exact username or phone number, in quotes. Fake numbers and handles get reused, and other victims post them.
5. Never post your wallet address and problem in public again. That post is what the bots watch for. Use the in-app help instead.

Not sure about a message you got? Run it through our is this a scam? quiz, or browse every guide in the Scams hub.

Prefer to watch? How fake wallet support finds you, in under a minute.

Read the video transcript

Crypto wallet support scams find you in minutes. Researchers posted fake wallet-help messages and drew in more than nine thousand scammers, who usually replied within fifteen minutes. Here's how the fake help desk works. One: you post that your wallet has a problem, or you search for a support number. Two: support replies, slides into your DMs, or shows up as a sponsored ad. Three: they move you to Telegram, email, or a phone call. Four: they send a form to validate or sync your wallet. Five: the form wants your twelve recovery words. Type them, and your wallet is theirs. Real wallet support never asks for your recovery phrase. Ever. So ask them one question. Will this need my recovery phrase? Then close the chat and open a ticket from inside the app yourself. What did your fake support message say? Comment below, and hit like and subscribe.

I typed my seed phrase into a support form: the first hour

Assume the wallet is gone and race the clock. Scammers often run automated "sweeper" scripts that move funds the moment they arrive, so speed matters more than anything else on this list.

1. Minutes 0 to 10: make a new wallet on a device you trust. New app install, new recovery phrase, written on paper. Don't reuse or import the old phrase anywhere. If "support" had you install remote-access software, use a different device until that one is wiped.
2. Minutes 10 to 30: move what's left, biggest first. Send the most valuable assets from the old wallet to the new one. If tokens need a network fee and the scammer's bot keeps stealing the fee, stop feeding it and focus on what you can still move.
3. Minutes 30 to 45: lock down the rest. Change your email password and your exchange passwords, and turn on app-based two-factor codes. If you used a hardware wallet, the device is fine but its old phrase isn't; set it up again with a new phrase. Our hot wallet vs cold wallet guide explains the difference, and our hardware wallet tamper check covers the device itself.
4. Minutes 45 to 60: save evidence and report. Screenshot the chat, the profile, the form or site address, and every transaction ID. File at ic3.gov and at ReportFraud.ftc.gov, and report the account on the platform where it found you. If you bought the crypto on an exchange, tell it the addresses your funds went to.

Then expect the second wave. People who got robbed are quickly contacted by "recovery experts" and fake investigators. The FBI warned in July 2026 that impostors posing as the FBI and IC3 are contacting past victims over Facebook Messenger and Telegram. IC3 has no social media presence and doesn't recover funds through those apps. Anyone who wants an upfront fee to get your crypto back is running the same scam with a new costume.

Crypto wallet support scam FAQ

Will real wallet support ever ask for my seed phrase?

No. No legitimate wallet company, exchange or support agent needs your recovery phrase or private key to help you. Whoever has those words controls the wallet. Treat any request for them as proof you're talking to a thief.

Is there a phone number for MetaMask or Trust Wallet support?

Only use contact details published inside the official app or on the website you typed in yourself. The FBI says support numbers in sponsored search results are often paid placements by criminals. A number you found in a search ad, a reply or a random help page should be treated as a scam line.

Why did support accounts reply seconds after I posted about my wallet?

Bots watch for posts that mention a wallet name with words like help or support. In one study, scam accounts typically replied to a fake wallet-help post within 10 to 15 minutes. Real support teams don't hunt for you in the replies.

What is wallet validation or wallet sync?

It's a made-up step used to get your recovery phrase. A self-custody wallet doesn't need to be validated, synced or upgraded by typing your words into a form. Any page asking you to do that is a phishing page.

I typed my seed phrase into a fake support form. What do I do?

Create a new wallet with a new recovery phrase on a device you trust, and move any remaining funds to it right away, most valuable first. Don't reuse the old phrase. Then save screenshots and transaction IDs and report it at ic3.gov.

Can someone get my crypto back after a fake support scam?

Rarely, and only through law enforcement or an exchange freezing funds after you report. Anyone who contacts you offering recovery for a fee is running a second scam. The FBI says IC3 doesn't recover funds through social media or messaging apps.

Where do I report a fake wallet support scam?

File a complaint with the FBI at ic3.gov and with the FTC at ReportFraud.ftc.gov. Report the fake account or ad on the platform where you saw it. Forward phishing emails to reportphishing@apwg.org.