Crypto phishing and fake support: recognise the script
How urgency, authority, rewards, QR codes, and recovery promises are used to move you toward one dangerous action.
Key takeaway
The scam story changes; the objective is usually the same: make you reveal a secret, sign a permission, install software, or send irreversible value.
The four levers
Pressure says act now. Authority says trust this support agent, company, regulator, or influencer. Reward says claim a token, refund, job, or guaranteed return. Secrecy says do not ask anyone else because the opportunity or investigation is confidential.
A convincing scam may use accurate personal information, professional design, a real employee's name, and a domain differing by one character. Poor spelling is no longer a reliable filter.
Break the communication channel
Do not use the link, phone number, QR code, or account provided in the suspicious message. Stop the conversation and reach the organisation through a bookmark, official app, statement, or independently verified contact route.
Direct messages claiming to be wallet or protocol support deserve particular caution. Public blockchain networks do not have a central support team capable of reversing a transaction or resetting a self-custody wallet.
Watch for the requested action
A scam may ask for a recovery phrase, remote screen access, software installation, a wallet connection, a signature, a crypto ATM payment, or a transfer to a supposedly safe address.
Legitimate organisations do not need your recovery phrase. Government agencies and businesses do not protect your money by ordering you to move it into cryptocurrency or send it to a new wallet.
Recovery offers can be a second scam
After a public loss, fake investigators and recovery services may contact the victim, claim they traced the funds, and request a fee or wallet access. The existing transaction history makes the story sound credible.
Document the incident and use official reporting channels. Do not pay an unsolicited person who promises guaranteed recovery or asks for more secrets.
Practical checklist
Before you move on
- ✓Stop contact when a message creates urgency
- ✓Verify the organisation through an independent route
- ✓Never scan an unexpected QR code to protect money
- ✓Never share a recovery phrase or allow remote access
- ✓Talk to a trusted person before moving funds
- ✓Report the message through official channels
Check the source
Authoritative material used to verify the safety guidance in this article.