Last updated: October 26, 2026
Crypto phishing emails and SMS pretend to come from your wallet, exchange or a "security team" and push you to act fast — "verify your wallet", "your account is locked", "claim your refund" — by clicking a link that leads to a fake site asking for your seed phrase, login or a wallet signature. The rule that stops almost all of them: never enter a seed phrase anywhere except when restoring your own wallet, never click links in unexpected messages, and open services only from your own bookmarks. If you use no-KYC swaps like BTC → XMR, there's no account to "verify" at all.
- 0 legitimate reasons to share a seed phrase
- 1 click can lead to a drained wallet
- Urgency is the main trick
- Bookmarks beat links
Common crypto phishing messages at a glance
| Message | What they want | Reality |
|---|---|---|
| "Your wallet must be verified / synchronized" | Your seed phrase | Wallets never need "verification" |
| "Account locked — log in to restore" | Your exchange login and 2FA code | Fake login page |
| "You received a refund / airdrop, claim here" | A wallet connection and signature | Wallet drainer |
| "Firmware update required" for a hardware wallet | Your recovery phrase or a fake app | Updates only come from the official app |
| "Support" replying to your public complaint | Seed, remote access or payment | Real support never DMs first |
How to spot a phishing message
- Urgency or threats: "within 24 hours", "funds will be lost".
- Lookalike sender or domain: one letter off, extra words, odd endings.
- Requests for secrets: seed phrase, private key, 2FA codes.
- Unexpected money: refunds, airdrops, rewards you never applied for.
- Links that don't match the service's real domain when you hover.
More patterns in how to spot a fake exchange and scam tokens.
How to protect yourself (step by step)
- Bookmark the services you use and only open them from bookmarks.
- Never type your seed into a website, form or chat — seed safety.
- Use app-based or hardware 2FA, not SMS — 2FA for crypto.
- Use a separate email for crypto that isn't public.
- Read every wallet signature; reject anything unclear.
- Prefer services that don't need accounts — fewer logins to phish (no-registration exchanges).
If you clicked or entered something
- Entered your seed? Move funds to a new wallet immediately — seed compromised.
- Signed something? Revoke approvals and move assets.
- Entered a password? Change it and your 2FA right away.
- Report the message and site — how to report.
Frequently asked questions
Will a crypto wallet ever email me to verify my seed phrase?
No. No legitimate wallet or exchange will ever ask for your seed phrase. Any message that does is phishing.
How do scammers get my email or phone number?
From data leaks, public posts and purchased lists — including leaked customer databases from crypto companies.
Is it safe to click links in exchange emails?
It's safer to open the service from your bookmark and check notifications there, even if the email looks real.
What should I do with a phishing SMS?
Don't reply or click. Report it to your carrier's spam number if available and delete it.
Do no-KYC swaps reduce phishing risk?
They remove the account login that phishers target. You still need to protect your wallet's seed and check addresses.
Swap without accounts to phish: BTC → XMR, USDT → BTC or most trusted exchanges. No account, no ID, no logs.