Fake customer support asked for my seed phrase — should I assume I'm done?
I entered my seed into a 'support form' from someone who messaged me on Discord. Realized minutes later.
1 Answer
Move everything out of every wallet derived from that seed phrase immediately, across every chain. Once a seed is exposed it controls all derived addresses forever. Bots scrape compromised seeds within seconds of submission — you have minutes if you're lucky.
Generate a new seed on a fresh device (ideally a hardware wallet), and write the seed on paper or steel — never digitally. Do not use the old seed as a 'backup' anywhere. It is permanently compromised.
Legitimate customer support — for any wallet, exchange, or service — will never ask for your seed phrase. The rule is absolute. Anyone who asks is, by definition, an attacker.
Sign in to comment.
