Fake support
An unsolicited “agent” offers help, asks you to move funds, install remote-access software, or share a code or recovery phrase.
Support contacted you firstStop • Verify • ProtectReviewed 30 July 2026
Practical checks to help you spot common crypto scams, protect your accounts and wallets, and take calm next steps when something goes wrong.
01 / Before every transfer
Crypto transfers are usually difficult or impossible to reverse. Complete the checks yourself—especially when someone is creating urgency.
Contact them through a trusted channel you already know. Do not rely on the message, number, or link that started the request.
Confirm the asset, receiving platform, and blockchain network all support the same transfer route.
Compare more than the first and last characters. Clipboard malware can replace an address after you copy it.
When the platform permits it, wait for the test deposit to arrive before sending the remaining amount.
Urgency, secrecy, guaranteed returns, and instructions to move funds for “safe keeping” are serious warning signs.
No legitimate support agent needs your seed phrase, private key, password, one-time code, or remote access to your device.
Use a saved bookmark or type the known domain. Avoid sign-in links from ads, replies, direct messages, or sponsored search results.
Reject wallet requests you do not recognize or cannot explain. A signature or token approval can authorize asset movement.
02 / Recognize the pattern
A professional-looking profile, application, website, or dashboard is not proof. Verify the identity, destination, and request through a separate trusted channel.
An unsolicited “agent” offers help, asks you to move funds, install remote-access software, or share a code or recovery phrase.
Support contacted you firstA website, form, application, or person claims your wallet must be verified, synchronized, upgraded, or recovered.
Any request for recovery wordsA lookalike Telegram, WhatsApp, YouTube, social account, or domain copies a trusted creator, exchange, friend, or official.
Identity is assumed, not verifiedA dashboard shows profits but requires another deposit, tax, unlock payment, or verification fee before withdrawal.
Guaranteed or unusually steady returnsA fake mint, airdrop, claim, presale, or account alert asks you to connect a wallet and approve an unfamiliar request.
Pressure to sign immediatelyA fake wallet, exchange app, browser extension, update, or screen-sharing tool captures credentials or changes transactions.
Installation from an unverified linkA counterparty uses a third-party account, edited receipt, chargeback story, or pressure to release crypto before funds are final.
Payment name or status does not matchAfter a loss, someone promises guaranteed recovery, claims special access to investigators, or demands an upfront fee.
Pay first to recover funds03 / If something happened
These steps cannot guarantee recovery. They can help you limit further exposure, preserve useful evidence, and reach legitimate support.
Do not send another payment, reveal another code, or follow the person’s recovery instructions.
Save transaction IDs, wallet addresses, account names, URLs, phone numbers, emails, receipts, and screenshots. Do not alter the originals.
Use the exchange, wallet provider, bank, or payment service’s independently verified support channel and report the transaction immediately.
From a trusted device, change affected passwords, review active sessions, protect the associated email, and enable strong two-step verification.
If a seed phrase or private key was exposed, follow the wallet provider’s official compromised-wallet guidance. Never enter the phrase into a recovery website sent by a stranger.
For online financial fraud in India, contact the National Cyber Crime Reporting Portal or helpline as quickly as possible.
Victims are often targeted again. Do not pay anyone who contacts you unexpectedly and guarantees fund recovery.
CryptooChai coverage
A short CryptooChai reminder about slowing down, checking the payment, and protecting yourself during P2P transactions.
04 / Verify the guidance
Links and guidance were reviewed on 30 July 2026. Instructions can change, so confirm the current steps at the destination before acting.
Official Indian reporting portal for cybercrime and online financial fraud.
Report at cybercrime.gov.inWallet-provider guidance for protecting a Secret Recovery Phrase and private keys.
Read wallet security guidanceOfficial guidance for adding a stronger second step to an important email account.
Review two-step verificationPlain-language information about crypto, impersonation, investment, and recovery scams.
Review common scam patterns