Real Seed-Phrase Backup vs Seed-Phrase Phishing
How to tell the genuine process of backing up your seed phrase from a phishing attempt that tricks you into revealing it.
Last reviewed: 1 June 2026
A seed phrase is the master key to a wallet, and using one is a rare event. You write it down when the wallet is created, and you type it again only when restoring that wallet on a new device or after reinstalling the app. Everything else is a scam, and the scam is persuasive because it arrives at a bad moment. A transaction has failed, a balance looks wrong, or a pop-up says your wallet must be resynced, and a helpful person answers your question in a public channel within seconds. They sound like support, and they may be patient and technical. The distinction that matters is who is asking. Real support asks for a transaction hash or a public address. Nobody legitimate ever needs your twelve or twenty-four words.
Side-by-side comparison
| Genuine seed-phrase backup | Seed-phrase phishing | |
|---|---|---|
| When it is needed | Only when restoring your wallet to a new device or after resetting the app | Any other claimed reason: support, verification, airdrop, or prize claim |
| Who sees it | Only you — never entered into any website, app, or chat | Phishing page, support chat, or 'wallet verification' form |
| Storage | Written on paper and stored securely offline; never in a photo or cloud document | Entered into a form, uploaded to a site, or shared with a 'support agent' |
| Wallet prompts | Legitimate wallet apps never ask for your seed phrase while already connected | 'Verify your wallet' pop-up or DM asks for seed phrase to 'sync' or 'unlock' |
| Support interaction | Wallet support asks for transaction IDs or public addresses — never your seed phrase | Support agent requests your seed phrase to 'investigate' or 'restore' your balance |
Common red flags
- Any website, form, or chat asking you to enter your seed phrase
- DM from 'wallet support' requesting your recovery phrase
- Pop-up inside a dApp claiming your wallet needs to be 'resynced' with your seed phrase
- Airdrop, prize, or migration requiring seed phrase entry
- Email from a wallet provider asking you to verify your phrase online
Verification steps
- Treat your seed phrase like a private key: never share it under any circumstances
- Store it on paper or a metal backup offline — never digitally
- If your wallet provider asks for a seed phrase for 'support', it is a scam
- Enable hardware wallet or passphrase protection for additional security
What not to do
- Don't type your seed phrase into any website or chat window
- Don't store it in a photo, note app, email, or cloud service
- Don't share it with support agents, friends, or family
A safe response
If anything other than a fresh wallet restore asks for your recovery phrase, close it. Do not type the words into a website, a chat window, a form or a search box, and do not photograph them. Leaving a conversation without replying is a complete answer. If you have already entered them, treat every account derived from that phrase as compromised: create a new wallet on a clean device, move any remaining assets there straight away, and stop using the old phrase entirely. Keep a record of what happened, ignore anyone who then offers to recover the funds for a fee, and store the new phrase offline on paper or metal.
Frequently asked questions
Is it safe to keep my seed phrase in a password manager or the cloud?
It is much riskier than offline storage. Anything stored digitally can be reached by malware on your device, by anyone who gains access to that account, or through a breach of the service, and unlike a password a seed phrase cannot be reset once exposed. Paper or a metal backup, kept somewhere secure and ideally split across two locations, is the usual advice. Never photograph it, since photos often sync to the cloud automatically.
My wallet app is asking for my recovery phrase. Is that always a scam?
Not always, but check carefully. A genuine app asks for it in exactly one situation: when you are setting up or restoring a wallet on a device where it is not yet loaded, such as after reinstalling. It should never ask while your wallet is already open and connected, and never as verification, resyncing or unlocking. If in doubt, close the app, reopen it from your own device rather than a link, and see whether the prompt returns.
What should I do if I accidentally shared my seed phrase?
Act immediately. Create a new wallet with a brand new seed phrase and transfer all assets from the compromised wallet as fast as possible. Anyone who has your seed phrase has full control of every account derived from it.