Kraken Wallet Seed-Phrase Phishing Scams
Scammers fake Kraken communications to extract wallet seed phrases by conflating the custodial exchange with self-custody wallets. The Kraken exchange itself does not use seed phrases — and no process ever legitimately requires sharing one.
Part of: Seed Phrase Phishing
Last reviewed: 7 June 2026
Kraken is a custodial exchange — it holds assets on behalf of users and does not involve seed phrases in its core operation. However, Kraken has expanded its offerings over time, and some users also use separate self-custody wallets alongside their exchange account. Scammers exploit this landscape by creating fake Kraken messages that blur the line between custodial exchange credentials and self-custody wallet seed phrases.
The phishing approach typically involves framing a seed phrase as a type of 'wallet verification credential' required for a new Kraken security policy or KYC update. Victims who use external wallets alongside Kraken may believe their seed phrase is a legitimate piece of information that Kraken would need.
No financial platform — custodial or otherwise — legitimately needs a user's self-custody wallet seed phrase. Kraken manages account access through email, password, and 2FA only. A request for any seed phrase in the context of Kraken communications is definitively fraudulent.
How this scam works on the Kraken brand
A phishing email states that Kraken's new AML compliance framework requires customers to 'verify all associated wallet addresses,' including external self-custody wallets, by entering the wallet's recovery phrase in a secure verification form. The form is hosted on a domain that closely resembles kraken.com.
A fake Kraken support agent on Telegram or Discord tells a user that their Kraken account is linked to an external wallet that must be 'delinked by verifying ownership,' which requires submitting the external wallet's seed phrase through a form.
Kraken's actual compliance and KYC processes involve identity documentation and, in some cases, on-chain address verification — but address verification is done by the user sending a small test transaction from their wallet, not by submitting a seed phrase. No Kraken process involves seed phrase collection.
Common red flags
- A Kraken email or message claiming a new policy requires submitting your wallet's seed phrase
- A 'wallet delinking' or 'AML compliance' process requiring recovery phrase entry on any form
- A Kraken support agent requesting the seed phrase to 'verify wallet ownership'
- A compliance form hosted on any domain other than kraken.com
- Language conflating the Kraken exchange account with a self-custody wallet's seed phrase
How to protect yourself
- Recognize that Kraken, as a custodial exchange, has no legitimate use for a self-custody wallet seed phrase
- Treat any seed phrase request in a Kraken context as an automatic red flag
- Verify any unusual Kraken compliance request by logging into kraken.com directly and checking account notifications
- Keep your self-custody wallet entirely separate from your Kraken account — there is no genuine 'linking' process involving seed phrases
- Report the phishing attempt to [email protected]
How to report it
- Forward phishing emails to [email protected]
- Report fake social media support accounts to the relevant platform
- Report to IC3.gov (US) or Action Fraud (UK)
- Submit the phishing URL to Google Safe Browsing
Frequently asked questions
Does Kraken ever ask for a seed phrase as part of KYC or compliance?
No. Kraken's KYC and AML processes involve identity documents and, for address verification, a small on-chain test transaction. No seed phrase is ever collected or required.
Why would a scammer combine Kraken's name with a seed phrase request?
Kraken's regulatory reputation makes compliance-related requests feel plausible. Users who trust Kraken's security culture may lower their guard when a request appears to come from Kraken's compliance team, even if the underlying request would be obviously suspicious from an unknown source.
If I use an external wallet with my Kraken account, can Kraken see it?
Kraken can see blockchain addresses you use to deposit funds, as these are public on-chain records. But Kraken has no access to and no need for the seed phrase of your external self-custody wallet.