How Do Fake Crypto Support Accounts Steal Wallet Credentials?
Post a public complaint about a wallet issue, and a "support" account often replies fast — then asks to move private. Here's how that scam works.
Posting a genuine question or complaint publicly about a crypto wallet or exchange often attracts a very specific kind of response: a "support representative" replying quickly, sounding helpful, and asking to continue the conversation privately. This pattern is common enough to be worth recognizing on sight.
Why This Specifically Targets Public Complaints
Someone posting publicly about a problem has already signaled two things: they're currently frustrated and likely to trust anyone who appears to offer a solution quickly.
How the Fake Account Is Typically Set Up
A fake support account often uses a name and profile picture closely resembling the real company's official branding, with a plausible-looking history of other "helpful" replies.
The Shift to Private Messaging
The account typically responds quickly, then asks to continue via direct message — framed as needing to discuss account-specific details privately.
What Gets Requested Once the Conversation Moves Private
Once private, the fake account typically asks for a seed phrase, private key, or remote access to a device.
Why the Framing Feels Legitimate in the Moment
The interaction is built around a real problem the person actually has, which lends the exchange a sense of authenticity.
How to Verify Before Responding to Any "Support" Reply
Checking whether the account matches the company's officially verified handle, found by navigating there independently — not through a link in the reply itself.
The One Rule That Applies Regardless of How Convincing It Seems
No legitimate support interaction ever requires a seed phrase or private key.
Check whether a support account matches an official, verified source before sharing any details in a private conversation that started from a public reply.