Protecting private wallet recovery information is essential when a device is lost or a transaction causes stress. Scammers exploit urgency by posing as support and asking for a seed phrase, private key, remote access or an advance fee.

The non-negotiable rule

A recovery phrase and private key must never be shared. Anyone who has them can control the funds; no genuine support process needs them to verify a user or repair an app. This remains true when a message uses a familiar logo, an apparently helpful video, a phone number or a claim that funds are at immediate risk.

Message	Safe response	Why it is suspicious
“Enter your phrase to sync”	Close it and open the official application independently.	Recovery secrets transfer control, not just access.
“Pay a fee to unlock funds”	Pause and verify through documented support.	Urgent advance payments are a common pressure pattern.
“Allow remote access for recovery”	Do not grant it; use the recovery plan instead.	Remote access can expose passwords and approvals.
“Your wallet is compromised”	Do not click the alert; investigate from a trusted device.	Fear discourages independent verification.

Use an incident routine

1. Stop interacting with the message, pop-up or caller.
2. Preserve only public details that may be useful, such as a transaction ID or screenshot.
3. Open the wallet project’s verified official site or application independently.
4. Check the known recovery process without entering a secret into a browser form.
5. Seek appropriate qualified help for a significant or uncertain situation, without revealing the secret.

Why stress changes judgement

Recovery scams work because a lost phone or a confusing transfer creates a desire for immediate certainty. A genuine support interaction can explain public documentation or visible errors, but it does not need the phrase, private key, device passcode or control of the screen. Make the pause rule part of the plan: any unexpected request for a secret ends the interaction.

Recognise lookalike channels

Fraudulent pages can appear in search advertising, social-media replies, community chats and email. A verified channel begins from the project’s own official documentation, not from a link supplied by the person requesting action. Small differences in a domain, an unsolicited direct message and a promise of immediate recovery are enough reason to stop and find the official route independently.

Conclusion

Recovery is a private process performed from a trusted environment. Urgency, secrecy and requests for recovery material are warning signs, not support steps.