Seed Phrase Scam
A seed phrase scam is a scam designed to trick a crypto user into revealing or entering their secret recovery phrase, allowing the attacker to take control of the user's self-custody wallet. A seed phrase may also be called a secret recovery phrase, recovery phrase, or mnemonic phrase.
✦ Key Insight
A recovery phrase can provide access to all wallet accounts derived from it. Unlike a password, it is not simply an account-login credential that can be reset by customer support. If a scammer obtains the phrase, they can often restore the wallet on another device and transfer the crypto without needing access to the victim's phone or computer. This makes recovery phrases one of the most valuable targets for crypto scammers.
✕ Common Misconceptions
Giving the phrase to customer support
Entering it into websites
Saving screenshots in cloud storage
Responding to urgent wallet-security messages
Trusting sponsored search results
Assuming 2FA protects an exposed seed phrase
Keeping large balances in a compromised wallet after exposure
Detailed Explanation
How It Works
Common seed-phrase scams include:
Fake wallet-support messages
Fake wallet-recovery websites
Fraudulent airdrop claim pages
Fake security alerts
Search-engine advertisements impersonating wallets
Malicious browser extensions
Fake hardware-wallet setup pages
Direct messages from supposed support agents
The scam normally creates urgency and instructs the victim to “verify,” “synchronise,” “restore,” or “secure” the wallet by entering the recovery phrase.
Once entered, the words are transmitted to the attacker.
FAQs
Will legitimate wallet support ask for my seed phrase?
No legitimate support process should require you to disclose your recovery phrase to another person.
What should I do if I entered my seed phrase into a suspicious website?
Treat the wallet as compromised. Move remaining assets to a newly generated wallet using a clean, trusted environment as soon as safely possible.
Can changing my wallet password protect an exposed seed phrase?
No. The attacker can recreate the wallet independently using the recovery phrase.
Does 2FA protect a self-custody wallet after the seed phrase is stolen?
Generally no. The phrase itself can recreate access to the underlying keys.
In Practice
Dig Deeper
Private Key
A private key is a secret cryptographic code that proves ownership of crypto assets and allows the holder to authorize transactions.
Phishing
Phishing is a scam where attackers trick users into revealing private information or signing harmful transactions.
Secret Recovery Phrase
A secret recovery phrase (also called seed phrase or mnemonic) is a human-readable sequence of 12 or 24 words generated by a wallet that encodes the master seed from which all private keys and addresses are deterministically derived.